last executing test programs: 4m21.208783206s ago: executing program 32 (id=228): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681) fadvise64(r0, 0x8, 0x2, 0x0) 3m44.043438334s ago: executing program 33 (id=679): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 3m43.373856731s ago: executing program 34 (id=688): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x5, 0x1, 0xfff, 0x2, 0x6, 0x1, 0x7, 0x2, 0x7, 0x7, 0x5, 0x4cd, 0x1, 0x100000001}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 2m5.908143858s ago: executing program 2 (id=1765): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 2m5.848914639s ago: executing program 2 (id=1766): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000000)=0x5) 2m5.727186612s ago: executing program 2 (id=1768): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x54, r3, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4) 2m5.476376329s ago: executing program 2 (id=1774): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0xfffffe70) 2m5.351580812s ago: executing program 2 (id=1779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="4784085bb19aaf7712e6b2d7fb7e956fe81917d944a7a053a31a00ba4ab4e1f5b34e841c9c97c924adb0e952ffc047322fd7952da028ce4542ef2da8e400a320397b16bd80c1f1708745c013af071590af3a318e1b0c68c03ed00d3317eab557612408fdbf8605d268137768496d2c07c87dde0cfa76851b6ca74733e5a0327685a1d79ef1e92858490be1afca0a33672fbc0ffd073f5974f4f1e2a2e67f6e34d6a7ebae238d72a291656c2250d1c9e89c70f4e58d91", 0xb6}, {&(0x7f0000000600)='C', 0x1}], 0x2, 0x0, 0x0, 0x85}}], 0x1, 0x408b0) 2m5.02525732s ago: executing program 2 (id=1783): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@usrquota}, {@nodiscard}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000080), 0xfd9c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m4.797231866s ago: executing program 35 (id=1783): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@usrquota}, {@nodiscard}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000080), 0xfd9c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 1m32.49417353s ago: executing program 8 (id=2199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251300000008000300", @ANYRES32=r2, @ANYBLOB="040013000a000600080211000000000006001200830000000600b500670600000500c200e90000000600ed00a00500000600ab0021"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 1m32.290688056s ago: executing program 8 (id=2202): syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f", 0x37, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1m32.11345671s ago: executing program 8 (id=2204): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000440)=""/4086, 0xff6, 0x80) 1m31.935605105s ago: executing program 8 (id=2206): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@init_itable}, {@jqfmt_vfsv1}, {@nolazytime}, {@grpjquota}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlink(&(0x7f00000002c0)='./file0/file2\x00') 1m31.089592016s ago: executing program 8 (id=2218): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000580)={0x0, 0x2710}, 0x10) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="ef", 0x1}], 0x1}, 0x80) 1m27.984951805s ago: executing program 8 (id=2246): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x200008, &(0x7f0000000480)=ANY=[], 0x5, 0x18e, &(0x7f0000002780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m27.81834371s ago: executing program 36 (id=2246): syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x200008, &(0x7f0000000480)=ANY=[], 0x5, 0x18e, &(0x7f0000002780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m17.813324375s ago: executing program 9 (id=2247): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1641f, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000180)=""/60, 0x3c) 1m17.467724963s ago: executing program 9 (id=2303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 1m16.43633366s ago: executing program 9 (id=2307): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0xe3000acd) 1m16.161646327s ago: executing program 9 (id=2308): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)={[{@nodiscard}, {@jqfmt_vfsv0}, {@usrjquota}, {@background_gc_off}, {@noflush_merge}, {@nodiscard}, {@acl}, {@nocheckpoint_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x551a, &(0x7f0000007600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m15.26341697s ago: executing program 4 (id=2318): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe12, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) 1m15.076177615s ago: executing program 4 (id=2319): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x1, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) 1m14.901251459s ago: executing program 4 (id=2322): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) 1m14.823719061s ago: executing program 4 (id=2323): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@init_itable}, {@jqfmt_vfsv1}, {@nolazytime}, {@grpjquota}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlink(&(0x7f00000002c0)='./file0/file2\x00') 1m14.169465558s ago: executing program 4 (id=2328): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)='U', 0x1, 0x0) 1m13.854739415s ago: executing program 9 (id=2330): r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1m12.185775219s ago: executing program 9 (id=2337): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) listen(r0, 0x7ff) 1m12.074373431s ago: executing program 37 (id=2337): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) listen(r0, 0x7ff) 1m11.973350304s ago: executing program 4 (id=2340): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f00000000c0)=0x5) 1m11.791837349s ago: executing program 38 (id=2340): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f00000000c0)=0x5) 1m6.21731065s ago: executing program 6 (id=2374): gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r0) 1m6.217123641s ago: executing program 6 (id=2375): mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='file devio.* +', 0xe) 1m5.974790197s ago: executing program 6 (id=2377): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1m5.671606095s ago: executing program 6 (id=2381): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000140)={[{@nodiscard}, {@jqfmt_vfsv0}, {@usrjquota}, {@background_gc_off}, {@noflush_merge}, {@nodiscard}, {@acl}, {@nocheckpoint_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x551a, &(0x7f0000007600)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzt3kLA2EcQB/WlrBr0iMe6/iDo7hEVy6NBzAS3AAF3gFL8AZcOcRDBg6w5dBN53SaH6/pO+80wx/nhJYzEwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKTv7Wb59dPbz31z9od+yjwNAAAAcM+u3Sy7f+ap/zzff5lvvc79KiLqiLg3d5/Ek5vMSc5pL+O/XI9vf6vhW0SXcHyPab6eRcS7fP18NfSnAAAAAP+v7Wq9SLP19Gc+dkE8Ulq0qV+8L5RXRUQ7/1EorT7mvSkU1n2/m/hYKK1bwJoVCktLbk3uFEv9q+7nfl61m101VWrquy87FfmgKgEAgLImN00zai0AAAAM6cPYBTCOKk5bmeetwGlq8vbe05seAAAA8A+qxi4AAAAAGFw3/y9+/l9zyWn/MN75fwAAAPA46fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhrRrN8vtar3om7M/9FPmaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgF/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/bxtVHADwd3c+hxYQJiAPQQgkBlio65aWbogBFDHwJyCi1C2hLj/aDLSqEFnYUOYuCEaEkEBh6//QuZW6lC2DhyAxB935zr78kGJ+3Znk85Heva9Pp3vf9yxZ/d67BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0ujtaZxkh844jotzD3burGb9w3195t7mo6WsZXFUZ9L/Dy9WP0TdSbjTRDIAAACcDElZ34cQHqdby1kfd/L6Py2vyWr+754ex2U9v7/uL/uy9s/ar79sPz8ZqDMeJ7vplbXh4OzBVFr/3Szn2zNHXtHKVz5/9pLkX0j83sZzozRfz+ib+/ffaefhQh3ZAgB/x5myL4Ly30NZ328yMQBOjFal8C7r/6TTbE4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdRhthCfLOAohLLWmcebhzp3Vw/p7m4+Wynbx7t3N8NX0ntkt0hDClbXh4Gyts5lvN2/dvrYyHA5u1B+8FEJoavS3iulf+2CGi0NoZH0E/06wu1B82XOSzxwEH0ZHr8b+X4q43h8mAACOnbRoWV3/ON1azs5FiyHsfr+3/n+1EocZ6//tjy4+qI5Vrf/7tc1w/vXWr3/Wu3nr9utr11euDq4OPnnjXP/N/vlLFy5c6uXPSnqemAAAAPDPtItWrf/jxYP7/6crcZix/v/82/6X1bES9f+hppt+TWcCAABwsj378h+/R4ecj9rt8MXK+vqN/vg4+XxufGwg1b9soWjV+j9ZbDorAAAAoA6jjWjP/v/lShxm3P9/6ocXfqreMwkhnCr2/8+sfjq8XN905lod/+W46TkCAADQrFNFq+7/p/n7//HklYc4hPDaK+O4+DOAM9X/ybtf/1gdq/r+//n6pjiX4u54PfK+G0Kr23RGAAAAHGdPFDV9Vuz/lm4tf/zz6ffb3v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNufAQAA//+VpD6i") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m3.710527945s ago: executing program 6 (id=2392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) 1m1.93348609s ago: executing program 6 (id=2405): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000000)={@hyper, 0x2}) 1m1.599718048s ago: executing program 39 (id=2405): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000000)={@hyper, 0x2}) 4.944892114s ago: executing program 0 (id=2970): r0 = syz_open_dev$media(&(0x7f0000000000), 0xfff, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000002c0)={0x0, 0x0, @ioapic={0x4000, 0x3, 0x12, 0x80000000, 0x0, [{0xff, 0x80, 0x6, '\x00', 0xd8}, {0x2, 0x8, 0xff, '\x00', 0x40}, {0x7, 0x10, 0x1, '\x00', 0x8}, {0x7, 0x8, 0x8, '\x00', 0x6}, {0x1, 0x9, 0x2, '\x00', 0x6}, {0xc, 0x4, 0x0, '\x00', 0x6}, {0xa8, 0x9a, 0xa2, '\x00', 0x9}, {0xa9, 0x43, 0x39, '\x00', 0x19}, {0x2, 0x28, 0x7, '\x00', 0x9}, {0x58, 0x6, 0x8d, '\x00', 0x2}, {0xb6, 0x6, 0x4, '\x00', 0x6}, {0x1a, 0xf, 0x6, '\x00', 0x8}, {0x9, 0x0, 0x5, '\x00', 0xf4}, {0x0, 0x0, 0xdf, '\x00', 0x2}, {0x1, 0x5, 0x8}, {0x8, 0x4, 0xe, '\x00', 0xfe}, {0x37, 0x5, 0x8, '\x00', 0x1}, {0x6, 0x40, 0x2, '\x00', 0x31}, {0x2c, 0xdb, 0xa, '\x00', 0x9}, {0x1, 0x4, 0xc, '\x00', 0x4}, {0x5, 0x5, 0x80, '\x00', 0x81}, {0x3, 0xcc, 0x2, '\x00', 0xf}, {0x6, 0xb, 0xc1, '\x00', 0xf2}, {0x6, 0x6, 0x60, '\x00', 0x6}]}}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000002c0)={{0x80000000, 0x0, 0xb, [0x0, 0x1]}, {0x80000000, r1, 0x6, [0x4, 0xff]}, 0x2, [0x8b7, 0x8]}) 4.848379667s ago: executing program 0 (id=2971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x820, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x9e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x68, 0x6, 0xff, @local, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x1a, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0xfffffffd}, @window={0x3, 0x3, 0x3}, @generic={0x8, 0x7, "d38a1904a9"}, @md5sig={0x13, 0x12, "7abe8364016a238227c2aea61b6b4b93"}, @fastopen={0x22, 0xc, "8b3d643ae8f349936bdb"}, @window={0x3, 0x3, 0x2b}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @multicast2, 0x8}, @md5sig={0x13, 0x12, "1d583d5cb1ce947b3f2f181bfa37e9f1"}]}}}}}}}}, 0x0) 4.809807948s ago: executing program 0 (id=2972): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.98627901s ago: executing program 1 (id=3004): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b80)=""/4100, 0x1004}], 0x1}}], 0x1, 0x400122a2, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.721353686s ago: executing program 0 (id=3010): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000580)={0x2, 0xfc}, 0x2) 1.369138895s ago: executing program 0 (id=3018): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xfff2}, {0x5, 0x2}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) 1.258222548s ago: executing program 0 (id=3021): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0xa, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.085309723s ago: executing program 1 (id=3024): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) 1.084351043s ago: executing program 7 (id=3025): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r1 = fcntl$dupfd(r0, 0x406, r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4}) write$tun(r1, 0x0, 0xa2) 983.701225ms ago: executing program 1 (id=3028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="050029bd708b000000002100000008000300", @ANYRES32=r2, @ANYBLOB="18017d80040002"], 0x134}}, 0x0) 940.072606ms ago: executing program 7 (id=3029): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x3, @local}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @empty}}, 0x1e) 885.283078ms ago: executing program 1 (id=3030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 884.631948ms ago: executing program 3 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 821.319019ms ago: executing program 7 (id=3032): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x4, 0x3, 0x80, 0xdf9, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 783.03532ms ago: executing program 3 (id=3033): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 770.81522ms ago: executing program 5 (id=3034): r0 = io_uring_setup(0x758a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x213}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x8}], 0x55, 0x40012020, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 558.523406ms ago: executing program 1 (id=3035): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a"], 0xa4}}, 0x40810) r0 = socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000001e002102000000000000000007"], 0x6c}}, 0x4000090) 441.320039ms ago: executing program 7 (id=3036): mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) unshare(0x28000600) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 440.892189ms ago: executing program 5 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xb}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3ad}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4814) 399.60944ms ago: executing program 3 (id=3038): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 367.529241ms ago: executing program 1 (id=3039): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x8, 0x4800, 0x0, 0x0}, {0x5, 0x2000, 0x0, 0x0}], 0x2}) 317.379322ms ago: executing program 5 (id=3040): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r2, 0x6, 0x6, 0x4, 0x8, 0x1}, 0x14) 309.900232ms ago: executing program 7 (id=3041): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xca}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 280.073863ms ago: executing program 3 (id=3042): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x3, 0x20000000, 0x3, 0x7, 0x0, 0x7, 0x1, 0x404, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20007, 0x8]}) ioctl$COMEDI_DEVINFO(r0, 0x80b06401, &(0x7f0000000500)) 217.325285ms ago: executing program 5 (id=3043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r1, 0x11, 0x70bd2b, 0x25dfdbfc, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c895}, 0x1000c810) 191.870065ms ago: executing program 7 (id=3044): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x100, 0xf, 0x9, 0x9}, 'syz1\x00', 0x49}) ioctl$UI_DEV_CREATE(r0, 0x5501) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000080)="d7bb56f1ec040ea58acf1ca7358663b95caaffa8cd6562a8", 0x18}, {&(0x7f00000002c0)="c277c8f73dcaec1d9180c5b0b1ca5d5f8302747308a2492c9e", 0x19}], 0x3) 185.671086ms ago: executing program 5 (id=3045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1, 0x0, 0x0) 61.342589ms ago: executing program 5 (id=3046): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5c, 0x20, 0xe9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xd, 0x3, 0xf9, {0xa, 0x25, 0x25, 0xad, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x2, 0xe, {0xa, 0x25, 0x25, 0x211, 0x8, 0x4}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0xfd, 0x8, 0x80, 0x40, 0x6}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0xd, 0x3d, {0x3d, 0x5, "a64b317b19e9485d7fade1370828f30109a8dddb0944e97e19366095d7609299534536726f86867d160d45e71e735d1772587c5e91d3937f677e00"}}, 0x0}, 0x0) 61.181769ms ago: executing program 3 (id=3047): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x4}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x400}) 0s ago: executing program 3 (id=3048): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) kernel console output (not intermixed with test programs): : syz [ 269.287966][ T4195] EXT4-fs (loop4): Remounting filesystem read-only [ 269.330232][ T5143] usb 8-1: config 0 descriptor?? [ 269.427006][ T4274] attempt to access beyond end of device [ 269.427006][ T4274] loop9: rw=2049, want=40984, limit=40427 [ 269.444875][ T4195] EXT4-fs error (device loop4): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 269.474241][T11278] loop6: detected capacity change from 0 to 1024 [ 269.525558][ T4195] EXT4-fs (loop4): Remounting filesystem read-only [ 269.550801][T11278] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.2333: lblock 2 mapped to illegal pblock 2 (length 1) [ 269.574196][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.574843][T11278] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 269.600280][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.647251][T11278] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.2333: lblock 0 mapped to illegal pblock 48 (length 1) [ 269.675989][T11278] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 269.689290][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.692158][T11278] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2333: Failed to acquire dquot type 0 [ 269.718635][T11278] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 269.729033][T11278] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.2333: mark_inode_dirty error [ 269.740095][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.745874][T11278] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 269.769418][T11278] EXT4-fs (loop6): 1 orphan inode deleted [ 269.775185][T11278] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 269.790564][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.823300][ T4274] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.853479][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.871897][ T4274] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 269.875459][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.900707][ T4195] EXT4-fs warning (device loop4): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 269.932067][T11278] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm syz.6.2333: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.970101][ T5143] usb 8-1: USB disconnect, device number 14 [ 269.981816][ T4274] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 269.998551][T11278] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1 [ 270.007577][T11278] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 60928 [ 270.074519][ T4244] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.100778][T11278] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.2333: Failed to acquire dquot type 0 [ 270.195299][ T4244] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.224184][ T6553] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 270.244693][ T6553] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 270.253990][ T6553] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 270.282932][ T6212] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 270.321482][ T4228] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 270.329332][ T4244] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.336323][ T6212] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 270.382312][ T6212] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 270.521329][T11291] loop6: detected capacity change from 0 to 64 [ 270.552837][ T4244] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.655821][ T26] audit: type=1800 audit(1785801073.777:51): pid=11291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2336" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 270.733856][ T4228] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.777244][ T4228] usb 6-1: config 0 has no interface number 0 [ 270.797525][ T4228] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.820729][ T4228] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.862552][ T4228] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.884546][ T4228] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 270.895811][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.919244][ T4228] usb 6-1: config 0 descriptor?? [ 271.071456][ T264] block nbd0: Possible stuck request ffff888020c78000: control (read@0,4096B). Runtime 90 seconds [ 271.205787][T11306] lo speed is unknown, defaulting to 1000 [ 271.269513][T11308] lo speed is unknown, defaulting to 1000 [ 271.398678][ T4228] hid (null): global environment stack underflow [ 271.622157][ T4228] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.001D/input/input28 [ 271.723985][ T4228] uclogic 0003:28BD:0042.001D: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 271.769649][T11306] chnl_net:caif_netlink_parms(): no params data found [ 271.857610][T11173] usb 6-1: USB disconnect, device number 13 [ 271.896445][T11308] chnl_net:caif_netlink_parms(): no params data found [ 271.944642][T11328] fido_id[11328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 272.085783][T11313] loop6: detected capacity change from 0 to 32768 [ 272.157393][T11318] loop7: detected capacity change from 0 to 40427 [ 272.198094][T11318] F2FS-fs (loop7): invalid crc value [ 272.278287][T11318] F2FS-fs (loop7): Found nat_bits in checkpoint [ 272.332035][T11306] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.348813][T11306] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.351671][T11318] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 272.389618][T11306] device bridge_slave_0 entered promiscuous mode [ 272.468031][T11350] loop5: detected capacity change from 0 to 1024 [ 272.507367][ T6223] attempt to access beyond end of device [ 272.507367][ T6223] loop7: rw=2049, want=45104, limit=40427 [ 272.511582][T11306] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.565310][T11306] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.586056][T11306] device bridge_slave_1 entered promiscuous mode [ 272.607261][T11350] MPI: mpi too large (187712 bits) [ 272.630655][T11308] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.645534][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.675632][T11308] device bridge_slave_0 entered promiscuous mode [ 272.698060][ T144] hfsplus: b-tree write err: -5, ino 25 [ 272.703886][ T144] hfsplus: b-tree write err: -5, ino 4 [ 272.758304][ T144] hfsplus: b-tree write err: -5, ino 2 [ 272.777444][T11308] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.799435][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.807626][T11308] device bridge_slave_1 entered promiscuous mode [ 272.920861][T11306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.980461][T11308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.007071][T11306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.034653][T11357] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input29 [ 273.079310][ T4940] Bluetooth: hci3: command 0x0409 tx timeout [ 273.120423][T11308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.264122][ T4935] Bluetooth: hci4: command 0x0409 tx timeout [ 273.308008][ T4244] device hsr_slave_0 left promiscuous mode [ 273.319743][ T4244] device hsr_slave_1 left promiscuous mode [ 273.324307][T11366] loop6: detected capacity change from 0 to 256 [ 273.334134][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.342184][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.350339][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.358278][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.366331][ T4244] device bridge_slave_1 left promiscuous mode [ 273.372983][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.381456][T11366] exfat: Deprecated parameter 'utf8' [ 273.404148][ T4244] device bridge_slave_0 left promiscuous mode [ 273.412662][T11366] exfat: Deprecated parameter 'utf8' [ 273.413729][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.454384][ T4244] device veth1_macvtap left promiscuous mode [ 273.460660][T11366] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 273.460943][ T4244] device veth0_macvtap left promiscuous mode [ 273.480058][ T4244] device veth1_vlan left promiscuous mode [ 273.486081][ T4244] device veth0_vlan left promiscuous mode [ 273.733374][ T4244] team0 (unregistering): Port device team_slave_1 removed [ 273.747268][ T4244] team0 (unregistering): Port device team_slave_0 removed [ 273.767396][ T4244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.784638][ T4244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.863810][ T4244] bond0 (unregistering): Released all slaves [ 273.915083][T11306] team0: Port device team_slave_0 added [ 273.957146][T11306] team0: Port device team_slave_1 added [ 273.995171][T11306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.018234][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.085243][T11306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.132170][T11308] team0: Port device team_slave_0 added [ 274.256195][T11306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.290653][T11306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.316920][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.380490][T11306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.403322][T11308] team0: Port device team_slave_1 added [ 274.506175][T11308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.530520][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.556531][T11383] loop7: detected capacity change from 0 to 2048 [ 274.575022][T11308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.629328][T11306] device hsr_slave_0 entered promiscuous mode [ 274.648193][T11306] device hsr_slave_1 entered promiscuous mode [ 274.666093][T11383] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.682331][T11306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.698942][T11383] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.715264][T11306] Cannot create hsr debugfs directory [ 274.771858][T11308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.787069][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.858080][T11308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.880694][T11400] loop6: detected capacity change from 0 to 2048 [ 274.963256][ T4177] loop6: p2 < > p3 p4 [ 275.027052][ T4177] loop6: p3 start 65535 is beyond EOD, truncated [ 275.037018][ T4177] loop6: p4 size 8192 extends beyond EOD, truncated [ 275.090839][T11173] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 275.119879][T11308] device hsr_slave_0 entered promiscuous mode [ 275.148296][ T5143] Bluetooth: hci3: command 0x041b tx timeout [ 275.159738][T11308] device hsr_slave_1 entered promiscuous mode [ 275.183402][T11308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.197543][T11308] Cannot create hsr debugfs directory [ 275.208784][T11400] loop6: p2 < > p3 p4 [ 275.225581][T11400] loop6: p3 start 65535 is beyond EOD, truncated [ 275.236510][T11400] loop6: p4 size 8192 extends beyond EOD, truncated [ 275.308441][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 275.423988][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 275.460885][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 275.501484][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 275.511474][T11173] usb 8-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 275.543249][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 275.669868][T11173] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 275.702311][T11173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.734873][T11173] usb 8-1: Product: syz [ 275.748124][T11173] usb 8-1: Manufacturer: syz [ 275.753469][T11173] usb 8-1: SerialNumber: syz [ 276.148307][T11173] usb 8-1: unit 1 not found! [ 276.153048][T11173] usb 8-1: unit 108 not found! [ 276.203443][T11173] usb 8-1: USB disconnect, device number 15 [ 276.394403][T11445] loop5: detected capacity change from 0 to 1024 [ 276.480185][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.228186][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 277.373051][T11306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.388390][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 277.403083][T11306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.441009][T11480] loop7: detected capacity change from 0 to 512 [ 277.452551][T11306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.532114][T11480] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 277.619283][T11480] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.2383: bad orphan inode 131083 [ 277.664064][T11480] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 277.698020][T11306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.925294][T11489] loop5: detected capacity change from 0 to 512 [ 278.054513][T11489] EXT4-fs (loop5): 1 truncate cleaned up [ 278.126863][T11489] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: none. [ 278.179972][T11472] loop6: detected capacity change from 0 to 40427 [ 278.195221][T11489] EXT4-fs (loop5): shut down requested (2) [ 278.218294][T11472] F2FS-fs (loop6): invalid crc value [ 278.236656][T11472] F2FS-fs (loop6): Found nat_bits in checkpoint [ 278.267916][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 278.521183][T11472] F2FS-fs (loop6): Start checkpoint disabled! [ 278.535697][T11306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.599013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.615020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.669738][T11472] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 278.700293][T11306] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.736591][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.760204][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.788853][ T9784] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.796083][ T9784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.855962][T11308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.903020][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.912747][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.941978][T11510] netlink: 'syz.5.2390': attribute type 11 has an invalid length. [ 278.962768][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.971741][T11510] netlink: 'syz.5.2390': attribute type 11 has an invalid length. [ 278.987766][T11510] netlink: 2704 bytes leftover after parsing attributes in process `syz.5.2390'. [ 279.010770][ T6212] F2FS-fs (loop6): access invalid blkaddr:4043309056 [ 279.034003][ T6212] CPU: 1 PID: 6212 Comm: syz-executor Not tainted syzkaller #0 [ 279.041189][ T9784] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.041592][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.041605][ T6212] Call Trace: [ 279.048702][ T9784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.058650][ T6212] [ 279.058663][ T6212] dump_stack_lvl+0x188/0x250 [ 279.058693][ T6212] ? show_regs_print_info+0x20/0x20 [ 279.058712][ T6212] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 279.088052][ T6212] ? unlock_page+0x17c/0x1f0 [ 279.092694][ T6212] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 279.098110][ T6212] f2fs_map_blocks+0xc34/0x3630 [ 279.103027][ T6212] ? f2fs_force_buffered_io+0x680/0x680 [ 279.108607][ T6212] ? xa_load+0x276/0x2a0 [ 279.112893][ T6212] f2fs_mpage_readpages+0xcaf/0x22a0 [ 279.118219][ T6212] ? dquot_release_reservation_block+0xa0/0xa0 [ 279.124413][ T6212] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 279.130594][ T6212] ? f2fs_readahead+0x163/0x2f0 [ 279.135467][ T6212] ? f2fs_set_data_page_dirty+0xae0/0xae0 [ 279.139143][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.141227][ T6212] read_pages+0x172/0x920 [ 279.153459][ T6212] ? page_cache_ra_unbounded+0x8f0/0x8f0 [ 279.159165][ T6212] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 279.164642][ T6212] page_cache_ra_unbounded+0x7f4/0x8f0 [ 279.170130][ T6212] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 279.176640][ T6212] ? blk_cgroup_congested+0x30b/0x390 [ 279.182036][ T6212] f2fs_readdir+0x496/0xd90 [ 279.186590][ T6212] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 279.191821][ T6212] ? end_current_label_crit_section+0x14b/0x170 [ 279.198100][ T6212] ? iterate_dir+0x10d/0x550 [ 279.202703][ T6212] ? down_read_killable+0x1ce/0x340 [ 279.207924][ T6212] ? fsnotify_perm+0x254/0x560 [ 279.212706][ T6212] iterate_dir+0x213/0x550 [ 279.217772][ T6212] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 279.223427][ T6212] __se_sys_getdents64+0xf2/0x270 [ 279.228466][ T6212] ? __x64_sys_getdents64+0x80/0x80 [ 279.233661][ T6212] ? filldir+0x700/0x700 [ 279.237936][ T6212] ? lockdep_hardirqs_on+0x94/0x140 [ 279.243481][ T6212] do_syscall_64+0x4c/0xa0 [ 279.247892][ T6212] ? clear_bhb_loop+0x30/0x80 [ 279.252579][ T6212] ? clear_bhb_loop+0x30/0x80 [ 279.257263][ T6212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.263153][ T6212] RIP: 0033:0x7feac2df89b3 [ 279.267565][ T6212] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 279.287430][ T6212] RSP: 002b:00007fff6152ed78 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 279.295844][ T6212] RAX: ffffffffffffffda RBX: 000055558967ea40 RCX: 00007feac2df89b3 [ 279.303807][ T6212] RDX: 0000000000008000 RSI: 000055558967ea70 RDI: 0000000000000005 [ 279.311789][ T6212] RBP: 000055558967ea70 R08: 00007feac3024e20 R09: 0000000000000001 [ 279.320148][ T6212] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558967ea44 [ 279.328134][ T6212] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff61531020 [ 279.336118][ T6212] [ 279.344896][ T4239] Bluetooth: hci3: command 0x0419 tx timeout [ 279.358483][T11308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.422085][T11308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.462868][T11308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.470481][ T4239] Bluetooth: hci4: command 0x0419 tx timeout [ 279.497312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.533999][ T6212] attempt to access beyond end of device [ 279.533999][ T6212] loop6: rw=524288, want=45072, limit=40427 [ 279.574041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.582310][ T6212] attempt to access beyond end of device [ 279.582310][ T6212] loop6: rw=0, want=45072, limit=40427 [ 279.658032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.666520][ T155] attempt to access beyond end of device [ 279.666520][ T155] loop6: rw=2049, want=40984, limit=40427 [ 279.678237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.679097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.736244][T11306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.753214][T11529] loop5: detected capacity change from 0 to 256 [ 279.786419][T11306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.821991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.839364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.858875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.892983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.903571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.983685][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.157623][T11308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.231767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.257450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.295483][T11308] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.345646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.359999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.436115][T11306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.472806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.483444][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.538474][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.547492][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.591994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.628654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.642321][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.649859][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.703672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.743138][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.790495][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.838951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.862432][T11569] loop5: detected capacity change from 0 to 512 [ 280.878600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.901878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.917290][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.955518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.960793][T11569] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=continue,acl,,errors=continue. Quota mode: none. [ 280.984563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.011064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.067236][T11308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.111030][T11569] EXT4-fs (loop5): shut down requested (0) [ 281.128467][T11569] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.2407: error -117 reading directory block [ 281.151530][T11308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.198546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 281.207312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 281.277376][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 281.358662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.447300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 281.489897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.524571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.547194][T11306] device veth0_vlan entered promiscuous mode [ 281.636401][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.645373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.670704][T11306] device veth1_vlan entered promiscuous mode [ 281.685408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.698727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.706334][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.737535][T11586] lo speed is unknown, defaulting to 1000 [ 281.741294][T11308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.762925][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.786317][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.808098][ T4227] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 281.829899][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.854948][T11306] device veth0_macvtap entered promiscuous mode [ 281.918841][T11306] device veth1_macvtap entered promiscuous mode [ 281.952274][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.981064][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.990200][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 282.001858][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.090105][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.107477][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.118649][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.137452][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.168049][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.168259][ T4227] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.184892][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.199843][ T4227] usb 6-1: config 0 has no interface number 0 [ 282.220389][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.246604][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.267568][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.284107][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.295805][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.308480][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.320595][T11306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.335622][T11308] device veth0_vlan entered promiscuous mode [ 282.360467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.368329][ T4227] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 282.386680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.388217][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.398028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.438857][ T4227] usb 6-1: Product: syz [ 282.443064][ T4227] usb 6-1: Manufacturer: syz [ 282.452881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.458508][ T4227] usb 6-1: SerialNumber: syz [ 282.469891][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.506923][ T4227] usb 6-1: config 0 descriptor?? [ 282.513126][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.548050][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.577259][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.596651][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.608613][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.621885][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.650763][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.678547][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.692833][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.717618][T11306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.742277][T11306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.768257][ T4227] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 282.781260][ T4227] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.793373][T11306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.807278][T11308] device veth1_vlan entered promiscuous mode [ 282.814787][ T4227] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 282.828237][ T4227] usb 6-1: media controller created [ 282.844330][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.872081][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.888451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.904419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 282.936428][T11640] loop7: detected capacity change from 0 to 512 [ 282.938625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.955208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.018568][T11306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.036434][T11306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.047031][T11640] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.2423: iget: bad i_size value: 38620345925642 [ 283.068925][T11640] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.2423: couldn't read orphan inode 15 (err -117) [ 283.081333][T11306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.100318][T11640] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 283.113899][T11306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.205022][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 283.284695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.313699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.389167][T11308] device veth0_macvtap entered promiscuous mode [ 283.414198][T11586] chnl_net:caif_netlink_parms(): no params data found [ 283.453803][T11308] device veth1_macvtap entered promiscuous mode [ 283.586030][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.610396][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.628140][ T4239] Bluetooth: hci0: command 0x0409 tx timeout [ 283.629258][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.676758][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.721613][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.788124][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.818534][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.835618][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.847618][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.866279][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.887489][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.901220][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.913398][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.924240][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.936137][T11308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.958166][ T4227] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 283.971033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.971591][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.991798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.042621][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.052942][ T4227] usb 6-1: USB disconnect, device number 14 [ 284.089008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.142910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.206038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.221829][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.244955][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.260323][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.280760][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.291008][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.302146][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.323234][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.352738][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.364326][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.374871][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.384883][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.402160][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.412435][T11308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.423408][T11308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.436085][T11308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.473853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.501393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.547405][T11308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.570221][T11308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.593898][T11308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.638098][T11308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.684444][T11586] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.717801][T11586] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.751647][T11586] device bridge_slave_0 entered promiscuous mode [ 284.770978][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.796240][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.796272][T11696] loop7: detected capacity change from 0 to 256 [ 284.817615][T11586] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.825351][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.849612][T11586] device bridge_slave_1 entered promiscuous mode [ 284.882290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 284.895936][T11693] loop5: detected capacity change from 0 to 8192 [ 284.917057][T11696] FAT-fs (loop7): Unrecognized mount option "i0²sj#PêäJTÊ /—™s4êI‚¨’" or missing value [ 284.957164][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.046918][T11696] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2436'. [ 285.110080][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.182306][T11708] loop7: detected capacity change from 0 to 512 [ 285.251732][T11586] team0: Port device team_slave_0 added [ 285.291002][T11708] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.2438: iget: bad i_size value: 38620345925642 [ 285.362424][T11586] team0: Port device team_slave_1 added [ 285.398135][T11708] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.2438: couldn't read orphan inode 15 (err -117) [ 285.443450][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.468052][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.483933][T11708] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 285.504350][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.551587][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.567351][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.611830][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.636731][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.647280][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.676212][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.718662][ T4935] Bluetooth: hci0: command 0x041b tx timeout [ 285.729482][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.757848][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.790785][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.832792][T11586] device hsr_slave_0 entered promiscuous mode [ 285.867398][T11586] device hsr_slave_1 entered promiscuous mode [ 285.930860][T11726] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.2442'. [ 285.932617][T11586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.984682][T11586] Cannot create hsr debugfs directory [ 286.001250][T11730] loop0: detected capacity change from 0 to 64 [ 286.135044][T11730] hfs: walked past end of dir [ 286.355547][ T9784] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm kworker/u4:9: bg 0: block 5: invalid block bitmap [ 286.438164][ T9784] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 286.456372][ T9784] EXT4-fs (loop7): This should not happen!! Data will be lost [ 286.456372][ T9784] [ 286.468062][ T9784] EXT4-fs (loop7): Total free blocks count 0 [ 286.477785][ T9784] EXT4-fs (loop7): Free/Dirty block details [ 286.483774][ T9784] EXT4-fs (loop7): free_blocks=0 [ 286.489226][ T9784] EXT4-fs (loop7): dirty_blocks=3380 [ 286.503021][ T9784] EXT4-fs (loop7): Block reservation details [ 286.516751][ T9784] EXT4-fs (loop7): i_reserved_data_blocks=3380 [ 286.634688][ T6553] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1328 with error 28 [ 286.673087][ T6553] EXT4-fs (loop7): This should not happen!! Data will be lost [ 286.673087][ T6553] [ 286.722298][T11752] loop5: detected capacity change from 0 to 4096 [ 286.878782][T11752] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 287.081041][T11771] loop7: detected capacity change from 0 to 4096 [ 287.134177][T11771] EXT4-fs (loop7): Test dummy encryption mode enabled [ 287.207580][T11771] EXT4-fs (loop7): Ignoring removed oldalloc option [ 287.255856][T11771] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 287.287872][T11771] System zones: 0-5 [ 287.293576][T11771] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 287.621048][T11586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.678280][T11586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.711843][T11586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.775813][T11800] loop7: detected capacity change from 0 to 256 [ 287.781181][T11586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 287.805486][ T4939] Bluetooth: hci0: command 0x040f tx timeout [ 288.009120][T11809] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2466'. [ 288.090978][T11809] netlink: zone id is out of range [ 288.151758][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.176973][T11809] netlink: zone id is out of range [ 288.219324][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.237976][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.262274][T11809] netlink: zone id is out of range [ 288.274044][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.291446][T11809] netlink: zone id is out of range [ 288.320758][T11809] netlink: zone id is out of range [ 288.337267][T11809] netlink: zone id is out of range [ 288.347602][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.361476][T11809] netlink: zone id is out of range [ 288.367143][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.411576][T11809] netlink: zone id is out of range [ 288.417284][T11809] netlink: zone id is out of range [ 288.421055][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.427889][T11809] netlink: zone id is out of range [ 288.429585][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.476352][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.540731][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.580186][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.624918][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.632076][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.697229][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.711058][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.750266][T11836] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2475'. [ 288.776002][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.811460][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.884643][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2477'. [ 288.894667][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.918897][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.945983][T11844] loop7: detected capacity change from 0 to 764 [ 288.954855][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.979088][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.000078][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.065968][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.085411][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.118932][T11586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.364654][T11864] loop7: detected capacity change from 0 to 256 [ 289.415967][T11864] exfat: Deprecated parameter 'utf8' [ 289.432837][T11867] loop0: detected capacity change from 0 to 512 [ 289.439852][T11864] exfat: Deprecated parameter 'utf8' [ 289.532863][T11864] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 289.586328][T11867] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2486: iget: bad i_size value: 38620345925642 [ 289.615852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.638570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.652426][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.659893][T11867] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2486: couldn't read orphan inode 15 (err -117) [ 289.679547][T11824] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 289.688548][T11824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.720629][T11586] device veth0_vlan entered promiscuous mode [ 289.728438][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.737276][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.755365][T11867] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 289.795477][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.833815][T11824] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.862327][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.878268][ T4940] Bluetooth: hci0: command 0x0419 tx timeout [ 289.955557][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.984131][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.997189][T11888] serio: Serial port ptm0 [ 290.043425][T11586] device veth1_vlan entered promiscuous mode [ 290.105094][T11824] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 290.135028][T11824] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 290.148510][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 290.161440][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 290.185959][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.222197][ T6553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.266082][T11586] device veth0_macvtap entered promiscuous mode [ 290.295849][T11586] device veth1_macvtap entered promiscuous mode [ 290.353958][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.433278][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.450051][T11898] set_capacity_and_notify: 1 callbacks suppressed [ 290.450067][T11898] loop5: detected capacity change from 0 to 4096 [ 290.483813][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.537948][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.565858][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.577487][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.594321][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.606853][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.618596][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.629745][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.639902][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.650453][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.660487][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.671412][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.681525][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.692299][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.705139][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.707015][ T4274] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:6: bg 0: block 5: invalid block bitmap [ 290.722291][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.737299][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.748746][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.760631][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.770670][ T4274] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 290.783612][ T4274] EXT4-fs (loop0): This should not happen!! Data will be lost [ 290.783612][ T4274] [ 290.793383][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.805493][ T4274] EXT4-fs (loop0): Total free blocks count 0 [ 290.812491][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.823628][ T4274] EXT4-fs (loop0): Free/Dirty block details [ 290.830297][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.840464][ T4274] EXT4-fs (loop0): free_blocks=0 [ 290.841447][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.850588][ T4274] EXT4-fs (loop0): dirty_blocks=3260 [ 290.855773][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.871771][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.873127][ T4274] EXT4-fs (loop0): Block reservation details [ 290.881648][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.881668][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.881695][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.881709][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.881720][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.881733][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.883226][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.985864][T11898] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 291.023426][ T4274] EXT4-fs (loop0): i_reserved_data_blocks=3260 [ 291.123485][T11907] loop1: detected capacity change from 0 to 512 [ 291.145181][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 291.155190][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 291.164360][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 291.174384][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.175412][ T4274] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1208 with error 28 [ 291.184458][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.206715][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.229175][ T4274] EXT4-fs (loop0): This should not happen!! Data will be lost [ 291.229175][ T4274] [ 291.242288][T11907] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.285024][T11909] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2497'. [ 291.318204][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2497'. [ 291.347402][T11586] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.366275][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2497'. [ 291.377010][T11586] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.392084][T11909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2497'. [ 291.401910][T11586] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.412264][T11907] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 291.420910][T11586] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.465899][T11907] Quota error (device loop1): write_blk: dquota write failed [ 291.486358][T11907] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 291.587803][T11907] Quota error (device loop1): write_blk: dquota write failed [ 291.628591][T11907] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 291.754559][T11907] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2494: Failed to acquire dquot type 1 [ 291.812832][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.833106][T11907] EXT4-fs (loop1): 1 truncate cleaned up [ 291.843150][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.877416][T11907] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000,norecovery,abort,auto_da_alloc,nouid32,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 291.906510][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.946752][ T6553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.956060][ T5214] Bluetooth: hci0: command 0x0411 tx timeout [ 291.974685][ T6553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.976987][T11934] netlink: 200 bytes leftover after parsing attributes in process `syz.5.2504'. [ 291.989587][T11926] loop0: detected capacity change from 0 to 4096 [ 292.042428][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 292.059454][T11907] EXT4-fs (loop1): shut down requested (2) [ 292.091670][T11926] EXT4-fs (loop0): Test dummy encryption mode enabled [ 292.103641][T11907] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 292.168745][T11926] EXT4-fs (loop0): Ignoring removed oldalloc option [ 292.196882][T11926] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 292.241952][T11926] System zones: 0-5 [ 292.247482][T11926] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 292.324065][T11943] loop3: detected capacity change from 0 to 2048 [ 292.501221][T11943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.986908][T11929] loop7: detected capacity change from 0 to 32768 [ 293.048646][T11964] loop3: detected capacity change from 0 to 2048 [ 293.097466][T11969] loop5: detected capacity change from 0 to 1024 [ 293.157403][T11964] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 293.210494][T11964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.256345][T11929] XFS (loop7): Mounting V5 Filesystem [ 293.382264][T11986] trusted_key: encrypted_key: key user:syz not found [ 293.478434][T11929] XFS (loop7): Ending clean mount [ 293.556182][T11929] XFS (loop7): Quotacheck needed: Please wait. [ 293.706207][T11929] XFS (loop7): Quotacheck: Done. [ 293.866374][ T6223] XFS (loop7): Unmounting Filesystem [ 294.500769][T12002] loop5: detected capacity change from 0 to 32768 [ 294.653109][T12047] lo speed is unknown, defaulting to 1000 [ 294.764602][T12002] XFS (loop5): Mounting V5 Filesystem [ 294.878592][T12002] XFS (loop5): Ending clean mount [ 294.919369][T12002] XFS (loop5): Quotacheck needed: Please wait. [ 295.039892][ T5214] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.067115][T12002] XFS (loop5): Quotacheck: Done. [ 295.158377][T12064] loop7: detected capacity change from 0 to 4096 [ 295.279686][T12039] loop3: detected capacity change from 0 to 32768 [ 295.291847][ T9282] XFS (loop5): Unmounting Filesystem [ 295.302593][T12073] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.327989][ T5214] usb 2-1: Using ep0 maxpacket: 32 [ 295.474453][T12039] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 295.615251][T12039] JBD2: Ignoring recovery information on journal [ 295.658600][ T5214] usb 2-1: unable to get BOS descriptor or descriptor too short [ 295.666362][ T5214] usb 2-1: no configurations [ 295.703395][ T5214] usb 2-1: can't read configurations, error -22 [ 295.730034][ T26] audit: type=1800 audit(2000000022.509:52): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2539" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 295.825811][T12039] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 296.320341][T11586] ocfs2: Unmounting device (7,3) on (node local) [ 296.493013][T12101] loop7: detected capacity change from 0 to 2048 [ 296.634042][T12101] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 296.649893][T12108] loop5: detected capacity change from 0 to 256 [ 296.688871][ T5214] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 296.728324][T12101] EXT4-fs (loop7): shut down requested (2) [ 296.877936][ T4935] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 296.978041][ T5214] usb 2-1: Using ep0 maxpacket: 8 [ 297.258068][ T4935] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.258096][ T4935] usb 4-1: config 0 has no interface number 0 [ 297.314015][ T5214] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 297.314048][ T5214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.314069][ T5214] usb 2-1: Product: syz [ 297.314085][ T5214] usb 2-1: Manufacturer: syz [ 297.314100][ T5214] usb 2-1: SerialNumber: syz [ 297.316554][ T5214] usb 2-1: config 0 descriptor?? [ 297.350282][ T5214] gspca_main: se401-2.14.0 probing 047d:5003 [ 297.444065][ T4935] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 297.444098][ T4935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.444119][ T4935] usb 4-1: Product: syz [ 297.444133][ T4935] usb 4-1: Manufacturer: syz [ 297.444148][ T4935] usb 4-1: SerialNumber: syz [ 297.445934][ T4935] usb 4-1: config 0 descriptor?? [ 297.490100][ T4935] usb 4-1: selecting invalid altsetting 1 [ 297.491519][ T4935] dvb_ttusb_budget: ttusb_init_controller: error [ 297.491537][ T4935] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 297.613728][ T4935] DVB: Unable to find symbol stv0299_attach() [ 297.683626][ T4935] DVB: Unable to find symbol tda8083_attach() [ 297.683643][ T4935] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 297.735973][ T4228] usb 4-1: USB disconnect, device number 4 [ 297.784554][T12137] loop7: detected capacity change from 0 to 16 [ 297.811963][T12137] erofs: (device loop7): mounted with root inode @ nid 36. [ 297.873885][T12118] erofs: (device loop7): z_erofs_fill_inode_lazy: unknown compression format 15 for nid 36, please upgrade kernel [ 297.999159][ T5214] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 298.057503][T12140] loop0: detected capacity change from 0 to 4096 [ 298.205072][ T4227] usb 2-1: USB disconnect, device number 9 [ 298.327923][T12140] ntfs3: loop0: failed to convert "0000" to iso8859-6 [ 298.379638][T12140] ntfs3: loop0: failed to convert "0030" to iso8859-6 [ 298.425581][T12140] ntfs3: loop0: failed to convert name for inode 1e. [ 298.444627][T12140] ntfs3: loop0: failed to convert "0032" to iso8859-6 [ 298.496097][T12140] ntfs3: loop0: failed to convert "0033" to iso8859-6 [ 298.545088][T12156] loop3: detected capacity change from 0 to 512 [ 298.756981][T12161] loop7: detected capacity change from 0 to 2048 [ 298.800982][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2571'. [ 298.986821][T12161] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,max_dir_size_kb=0x000000000000f2a5,user_xattr,sb=0x0000000000000001,,errors=continue. Quota mode: none. [ 299.046644][T12181] loop0: detected capacity change from 0 to 128 [ 299.095450][T12161] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 299.252779][T12161] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 299.295281][T12192] attempt to access beyond end of device [ 299.295281][T12192] loop0: rw=2049, want=250, limit=128 [ 299.341632][T12161] EXT4-fs (loop7): This should not happen!! Data will be lost [ 299.341632][T12161] [ 299.408330][ T4239] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 299.448007][T12161] EXT4-fs (loop7): Total free blocks count 0 [ 299.537578][T12161] EXT4-fs (loop7): Free/Dirty block details [ 299.594770][T12161] EXT4-fs (loop7): free_blocks=2415919104 [ 299.615047][T12161] EXT4-fs (loop7): dirty_blocks=16 [ 299.633407][T12161] EXT4-fs (loop7): Block reservation details [ 299.660147][T12161] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 299.768135][ T4239] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.788443][ T4239] usb 4-1: config 0 has no interface number 0 [ 299.907042][T12203] loop0: detected capacity change from 0 to 1024 [ 299.948796][ T4239] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 299.968107][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.016830][ T4239] usb 4-1: Product: syz [ 300.035061][ T4239] usb 4-1: Manufacturer: syz [ 300.045182][ T4239] usb 4-1: SerialNumber: syz [ 300.090693][ T4239] usb 4-1: config 0 descriptor?? [ 300.137347][T12175] loop1: detected capacity change from 0 to 32768 [ 300.192270][T12205] loop7: detected capacity change from 0 to 4096 [ 300.244406][ T26] audit: type=1800 audit(2000000027.019:53): pid=12175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2574" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 300.378297][ T4239] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 300.405809][ T4239] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 300.447606][ T4239] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 300.491860][ T4239] usb 4-1: media controller created [ 300.555771][ T4239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.668431][ T4239] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 300.840114][ T4239] usb 4-1: USB disconnect, device number 5 [ 300.859271][T12205] ntfs3: loop7: failed to convert "0000" to iso8859-6 [ 300.866355][T12196] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 300.918875][T12196] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 300.927380][T12196] F2FS-fs (loop5): build fault injection attr: rate: 27487, type: 0x1ffff [ 300.938486][T12205] ntfs3: loop7: failed to convert "0030" to iso8859-6 [ 300.977931][T12205] ntfs3: loop7: failed to convert name for inode 1e. [ 300.984673][T12205] ntfs3: loop7: failed to convert "0032" to iso8859-6 [ 301.018125][T12196] F2FS-fs (loop5): invalid crc value [ 301.054016][T12196] F2FS-fs (loop5): Found nat_bits in checkpoint [ 301.095069][T12223] FAT-fs (loop0): Directory bread(block 1048) failed [ 301.129451][T12223] FAT-fs (loop0): Directory bread(block 1049) failed [ 301.136199][T12223] FAT-fs (loop0): Directory bread(block 1050) failed [ 301.148098][ T264] block nbd0: Possible stuck request ffff888020c78000: control (read@0,4096B). Runtime 120 seconds [ 301.215894][T12223] FAT-fs (loop0): Directory bread(block 1051) failed [ 301.227977][T12223] FAT-fs (loop0): Directory bread(block 1052) failed [ 301.276224][T12223] FAT-fs (loop0): Directory bread(block 1053) failed [ 301.306616][T12223] FAT-fs (loop0): Directory bread(block 1054) failed [ 301.319893][T12196] F2FS-fs (loop5): recover fsync data on readonly fs [ 301.326878][T12196] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 301.334278][T12223] FAT-fs (loop0): Directory bread(block 1055) failed [ 301.385487][T12196] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30 [ 301.414989][T12223] FAT-fs (loop0): Directory bread(block 1048) failed [ 301.430610][T12196] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 301.448649][T12223] FAT-fs (loop0): Directory bread(block 1049) failed [ 301.490455][T12239] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 301.626652][T12196] CacheFiles: Failed to register: -30 [ 301.671802][T12237] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nombcache,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 301.723438][T12237] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.298002][ T4940] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 302.504248][T12273] set_capacity_and_notify: 3 callbacks suppressed [ 302.504266][T12273] loop5: detected capacity change from 0 to 512 [ 302.565585][ T4940] usb 8-1: Using ep0 maxpacket: 8 [ 302.708096][ T4940] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 302.721654][ T4940] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 302.743588][T12273] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.826230][ T4940] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 302.887862][ T4940] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 302.936696][T12270] loop3: detected capacity change from 0 to 40427 [ 302.950800][ T4940] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 302.985824][T12270] F2FS-fs (loop3): invalid crc value [ 303.012810][ T4940] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.027553][T12256] loop0: detected capacity change from 0 to 32768 [ 303.044053][ T4940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.096883][T12270] F2FS-fs (loop3): Found nat_bits in checkpoint [ 303.211930][T12256] XFS (loop0): Mounting V5 Filesystem [ 303.304843][T12270] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.361289][T12276] loop1: detected capacity change from 0 to 32768 [ 303.389635][ T4940] usb 8-1: GET_CAPABILITIES returned 0 [ 303.395190][ T4940] usbtmc 8-1:16.0: can't read capabilities [ 303.446569][T12256] XFS (loop0): Ending clean mount [ 303.488383][T12276] JBD2: Ignoring recovery information on journal [ 303.489951][T12256] XFS (loop0): Quotacheck needed: Please wait. [ 303.546414][T11586] attempt to access beyond end of device [ 303.546414][T11586] loop3: rw=2049, want=45104, limit=40427 [ 303.597841][ T4935] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 303.633310][ T4940] usb 8-1: USB disconnect, device number 16 [ 303.663493][T12276] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 303.681666][T12256] XFS (loop0): Quotacheck: Done. [ 303.748429][T12276] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 303.748461][T12276] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 303.799119][ T26] audit: type=1800 audit(2000000030.579:54): pid=12256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2594" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 303.878366][T12276] OCFS2: Returning error to the calling process. [ 303.884849][T12276] (syz.1.2600,12276,0):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 303.948281][T12276] (syz.1.2600,12276,0):ocfs2_mknod:334 ERROR: status = -117 [ 303.955970][T12276] (syz.1.2600,12276,0):ocfs2_mknod:502 ERROR: status = -117 [ 304.001949][T12276] (syz.1.2600,12276,0):ocfs2_mkdir:659 ERROR: status = -117 [ 304.018611][ T4935] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 304.033973][T11306] XFS (loop0): Unmounting Filesystem [ 304.036894][ T4935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.050864][ T4935] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.064186][ T4935] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 304.088013][ T4935] usb 6-1: config 0 interface 0 has no altsetting 0 [ 304.094677][ T4935] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 304.123814][T12276] OCFS2: ERROR (device loop1): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 304.123908][T12276] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 304.196481][ T4935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.258692][ T4935] usb 6-1: config 0 descriptor?? [ 304.281685][T12276] OCFS2: Returning error to the calling process. [ 304.288891][T12276] (syz.1.2600,12276,0):ocfs2_setattr:1302 ERROR: status = -117 [ 304.434687][T11308] ocfs2: Unmounting device (7,1) on (node local) [ 304.516736][T12326] loop3: detected capacity change from 0 to 1024 [ 304.575389][T12326] EXT4-fs (loop3): Ignoring removed orlov option [ 304.685003][T12326] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 304.762632][ T4935] ryos 0003:1E7D:3138.001E: unknown main item tag 0x5 [ 304.818081][ T26] audit: type=1800 audit(2000000031.599:55): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2603" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 304.836068][ T4935] ryos 0003:1E7D:3138.001E: item fetching failed at offset 2/5 [ 304.846716][ T4935] ryos 0003:1E7D:3138.001E: parse failed [ 304.893098][ T4935] ryos: probe of 0003:1E7D:3138.001E failed with error -22 [ 304.969693][ T13] usb 6-1: USB disconnect, device number 15 [ 305.293240][T12351] loop3: detected capacity change from 0 to 4096 [ 305.547329][T12351] ntfs3: loop3: MFT: r=1b, expect seq=1 instead of 0! [ 305.914814][ T26] audit: type=1800 audit(2000000032.689:56): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2624" name="dbroot" dev="configfs" ino=87771 res=0 errno=0 [ 305.969716][T12383] loop5: detected capacity change from 0 to 4096 [ 306.042617][T12383] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.118185][ T4228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 306.644814][ T4228] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 306.676019][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.719744][ T4228] usb 4-1: Product: syz [ 306.724750][ T4228] usb 4-1: Manufacturer: syz [ 306.750145][ T4228] usb 4-1: SerialNumber: syz [ 306.790244][ T4228] usb 4-1: config 0 descriptor?? [ 306.802666][T12406] loop5: detected capacity change from 0 to 32768 [ 306.831430][T12419] lo speed is unknown, defaulting to 1000 [ 306.833768][T12425] program syz.1.2631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.942308][T12427] loop1: detected capacity change from 0 to 4096 [ 306.995671][T12406] XFS (loop5): Mounting V5 Filesystem [ 307.017276][T12427] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 307.058423][ T4228] int51x1: probe of 4-1:0.0 failed with error -71 [ 307.081346][ T4228] usb 4-1: USB disconnect, device number 6 [ 307.098184][ T4939] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 307.120366][T12406] XFS (loop5): Ending clean mount [ 307.390517][ T4939] usb 8-1: Using ep0 maxpacket: 32 [ 307.432922][ T9282] XFS (loop5): Unmounting Filesystem [ 307.694645][T11308] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 307.708101][T11308] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 307.728932][ T4939] usb 8-1: unable to get BOS descriptor or descriptor too short [ 307.757525][ T4939] usb 8-1: no configurations [ 307.784158][ T4939] usb 8-1: can't read configurations, error -22 [ 307.918657][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 307.943065][T12460] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2634'. [ 308.141793][T12463] loop1: detected capacity change from 0 to 8192 [ 308.236213][T12463] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 308.247987][T12463] REISERFS (device loop1): using ordered data mode [ 308.254928][T12463] reiserfs: using flush barriers [ 308.308829][T12463] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 308.427007][T12463] REISERFS (device loop1): checking transaction log (loop1) [ 308.450492][T12463] REISERFS (device loop1): Using r5 hash to sort names [ 308.459764][T12463] REISERFS (device loop1): using 3.5.x disk format [ 308.473548][T12463] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 308.924764][T12499] loop1: detected capacity change from 0 to 512 [ 309.121505][T12499] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2639: iget: bad i_size value: 38620345925642 [ 309.238204][T12499] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2639: couldn't read orphan inode 15 (err -117) [ 309.317623][T12499] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 309.484229][ T5214] Process accounting resumed [ 309.616806][T12486] loop7: detected capacity change from 0 to 32768 [ 309.752362][T12486] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 309.879760][ T144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 309.923989][ T6223] ocfs2: Unmounting device (7,7) on (node local) [ 309.939440][ T144] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 309.998152][ T144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 309.998152][ T144] [ 310.062362][ T144] EXT4-fs (loop1): Total free blocks count 0 [ 310.084398][ T144] EXT4-fs (loop1): Free/Dirty block details [ 310.107187][T12537] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2656'. [ 310.118240][ T144] EXT4-fs (loop1): free_blocks=0 [ 310.123224][ T144] EXT4-fs (loop1): dirty_blocks=2440 [ 310.167717][ T144] EXT4-fs (loop1): Block reservation details [ 310.173845][ T144] EXT4-fs (loop1): i_reserved_data_blocks=2440 [ 310.209513][T12540] input: syz0 as /devices/virtual/input/input31 [ 310.331097][ T155] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 388 with error 28 [ 310.394772][ T155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 310.394772][ T155] [ 311.254481][T11173] kernel read not supported for file /dsp (pid: 11173 comm: kworker/0:22) [ 311.543693][T12591] netlink: 'syz.3.2667': attribute type 2 has an invalid length. [ 311.585331][T12593] loop5: detected capacity change from 0 to 764 [ 312.195988][T12627] loop5: detected capacity change from 0 to 512 [ 312.289320][T12627] EXT4-fs (loop5): Ignoring removed orlov option [ 312.389699][T12627] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 312.717707][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.725393][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.768417][T12645] device bridge0 entered promiscuous mode [ 312.830627][T12651] loop3: detected capacity change from 0 to 512 [ 312.901230][T12651] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.2687: iget: bad i_size value: 38620345925642 [ 312.967758][T12651] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.2687: couldn't read orphan inode 15 (err -117) [ 312.976813][T12658] WARNING! power/level is deprecated; use power/control instead [ 313.020629][T12651] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 313.077606][T12619] loop0: detected capacity change from 0 to 40427 [ 313.214470][T12619] F2FS-fs (loop0): invalid crc value [ 313.302616][T12619] F2FS-fs (loop0): Found nat_bits in checkpoint [ 313.536807][T12619] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 313.659832][T12684] loop1: detected capacity change from 0 to 512 [ 313.853925][T12684] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 313.858821][T12689] device team0 entered promiscuous mode [ 313.888018][T12684] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.927581][T12689] device team_slave_0 entered promiscuous mode [ 313.935417][T12689] device team_slave_1 entered promiscuous mode [ 314.002670][T12689] device team0 left promiscuous mode [ 314.014517][T12689] device team_slave_0 left promiscuous mode [ 314.039019][T12692] loop7: detected capacity change from 0 to 256 [ 314.045938][T12689] device team_slave_1 left promiscuous mode [ 314.065368][T12684] EXT4-fs error (device loop1): ext4_get_first_dir_block:3608: inode #12: comm syz.1.2695: directory missing '.' [ 314.083031][ T5016] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:7: bg 0: block 5: invalid block bitmap [ 314.103846][T12684] EXT4-fs (loop1): Remounting filesystem read-only [ 314.125839][T12692] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 314.153165][ T5016] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 314.233419][ T5016] EXT4-fs (loop3): This should not happen!! Data will be lost [ 314.233419][ T5016] [ 314.284140][ T5016] EXT4-fs (loop3): Total free blocks count 0 [ 314.300698][ T5016] EXT4-fs (loop3): Free/Dirty block details [ 314.320782][ T5016] EXT4-fs (loop3): free_blocks=0 [ 314.325775][ T5016] EXT4-fs (loop3): dirty_blocks=3400 [ 314.418275][T12701] netlink: 'syz.1.2700': attribute type 2 has an invalid length. [ 314.443175][ T5016] EXT4-fs (loop3): Block reservation details [ 314.488292][ T5016] EXT4-fs (loop3): i_reserved_data_blocks=3400 [ 314.501606][T12703] loop5: detected capacity change from 0 to 8 [ 314.607590][ T5016] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1348 with error 28 [ 314.636379][ T5016] EXT4-fs (loop3): This should not happen!! Data will be lost [ 314.636379][ T5016] [ 314.838504][T12716] loop1: detected capacity change from 0 to 2048 [ 314.885781][T12716] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.941250][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2707'. [ 315.261778][T12747] loop1: detected capacity change from 0 to 512 [ 315.341398][T12747] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2710: iget: bad i_size value: 38620345925642 [ 315.368240][T12747] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2710: couldn't read orphan inode 15 (err -117) [ 315.383121][T12747] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 315.447859][T12766] x_tables: duplicate underflow at hook 2 [ 315.490137][T12771] loop3: detected capacity change from 0 to 512 [ 315.529104][T12771] EXT4-fs (loop3): unable to read superblock [ 315.535004][T12776] loop5: detected capacity change from 0 to 512 [ 315.598254][T12783] loop7: detected capacity change from 0 to 128 [ 315.663820][T12776] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2716: bg 0: block 5: invalid block bitmap [ 315.702295][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2720'. [ 315.702957][T12783] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 315.766050][T12792] lo speed is unknown, defaulting to 1000 [ 315.776807][T12776] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 315.786535][T12776] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2716: invalid indirect mapped block 3 (level 2) [ 315.805139][T12776] EXT4-fs (loop5): 1 orphan inode deleted [ 315.812732][T12776] EXT4-fs (loop5): 1 truncate cleaned up [ 315.819235][T12776] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: writeback. [ 315.905801][T12783] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 316.493602][ T155] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 316.559330][ T155] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 316.614856][ T155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 316.614856][ T155] [ 316.638101][ T155] EXT4-fs (loop1): Total free blocks count 0 [ 316.648290][ T155] EXT4-fs (loop1): Free/Dirty block details [ 316.654231][ T155] EXT4-fs (loop1): free_blocks=0 [ 316.681739][ T155] EXT4-fs (loop1): dirty_blocks=3516 [ 316.695456][ T155] EXT4-fs (loop1): Block reservation details [ 316.705479][ T155] EXT4-fs (loop1): i_reserved_data_blocks=3516 [ 316.798825][ T155] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1464 with error 28 [ 316.852752][ T155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 316.852752][ T155] [ 316.883343][T12857] loop3: detected capacity change from 0 to 256 [ 317.078964][T12857] exfat: Deprecated parameter 'utf8' [ 317.153614][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.160342][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.178317][T12857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 317.348089][ T4940] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 317.506983][T12887] tipc: Started in network mode [ 317.512207][T12887] tipc: Node identity 1001001, cluster identity 4711 [ 317.520392][T12887] tipc: Node number set to 16781313 [ 317.527009][T12887] tipc: Cannot configure node identity twice [ 317.758271][ T4940] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.773793][ T4940] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.878207][ T4940] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.891677][ T4940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.925752][ T4940] usb 8-1: SerialNumber: syz [ 317.970355][T11173] kernel read not supported for file /dsp1 (pid: 11173 comm: kworker/0:22) [ 317.995519][T12898] loop3: detected capacity change from 0 to 256 [ 318.118630][T12898] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 318.270920][ T4940] usb 8-1: 0:2 : does not exist [ 318.354601][ T4940] usb 8-1: USB disconnect, device number 19 [ 318.699109][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.818030][ T4935] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 318.839294][T12928] set_capacity_and_notify: 1 callbacks suppressed [ 318.839310][T12928] loop3: detected capacity change from 0 to 4096 [ 318.974586][T12928] EXT4-fs (loop3): Test dummy encryption mode enabled [ 319.015535][T12928] EXT4-fs (loop3): Ignoring removed oldalloc option [ 319.115483][T12928] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 319.137822][T12928] System zones: 0-5 [ 319.186149][T12928] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 319.217840][ T4935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.229285][ T4935] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.242807][ T4935] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.253880][ T4935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.309242][ T4935] hub 2-1:4.0: USB hub found [ 319.533846][T12920] loop1: detected capacity change from 0 to 128 [ 319.541540][T12934] loop7: detected capacity change from 0 to 32768 [ 319.587958][ T4935] hub 2-1:4.0: 2 ports detected [ 319.592958][ T4935] usb 2-1: selecting invalid altsetting 1 [ 319.612733][ T4935] hub 2-1:4.0: Using single TT (err -22) [ 319.689227][T12934] [ 319.689227][T12934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.689227][T12934] [ 319.730681][T12934] ERROR: (device loop7): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 319.730681][T12934] [ 319.777876][T12934] ERROR: (device loop7): jfs_unlink: [ 319.777876][T12934] [ 319.846200][T12942] ERROR: (device loop7): diWrite: ixpxd invalid [ 319.846200][T12942] [ 319.868547][T12942] ERROR: (device loop7): txCommit: [ 319.868547][T12942] [ 319.905869][T12934] ERROR: (device loop7): xtTruncate: XT_GETPAGE: xtree page corrupt [ 319.905869][T12934] [ 319.954798][T12934] [ 319.954798][T12934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 319.954798][T12934] [ 320.002682][T12934] [ 320.002682][T12934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 320.002682][T12934] [ 320.044076][ T4935] usb 2-1: USB disconnect, device number 10 [ 320.060926][T12949] loop5: detected capacity change from 0 to 512 [ 320.157617][T12949] EXT4-fs (loop5): 1 truncate cleaned up [ 320.163541][T12949] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 320.342866][ T26] audit: type=1800 audit(2000000047.119:57): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2766" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 320.960970][T12965] loop7: detected capacity change from 0 to 8192 [ 320.988435][T12963] loop1: detected capacity change from 0 to 16384 [ 321.058862][T12965] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 321.161690][T12965] REISERFS (device loop7): using ordered data mode [ 321.220472][T12965] reiserfs: using flush barriers [ 321.258367][T12965] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 321.319951][T12975] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.368044][T12965] REISERFS (device loop7): checking transaction log (loop7) [ 321.399362][T12965] REISERFS (device loop7): Using r5 hash to sort names [ 321.407233][T12965] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 322.213382][T13002] loop5: detected capacity change from 0 to 4096 [ 322.323075][T12958] loop3: detected capacity change from 0 to 40427 [ 322.347478][T13002] EXT4-fs (loop5): Test dummy encryption mode enabled [ 322.374695][T13002] EXT4-fs (loop5): Ignoring removed oldalloc option [ 322.426784][T13002] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 322.494150][T12958] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 322.552829][T12958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 322.562232][T13002] System zones: 0-5 [ 322.597950][T12958] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 322.626782][T13002] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 322.642209][T12958] F2FS-fs (loop3): invalid crc value [ 322.756950][T12958] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 322.901455][ T26] audit: type=1326 audit(2000000049.679:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13030 comm="syz.7.2795" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f276bb019 code=0x0 [ 323.023246][T13033] loop1: detected capacity change from 0 to 512 [ 323.128597][T12958] F2FS-fs (loop3): Start checkpoint disabled! [ 323.175110][T13033] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 323.221200][T13033] UDF-fs: error (device loop1): udf_read_inode: (ino 19) failed ident=264 [ 323.320460][T12958] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 323.343506][T12958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 323.480512][T12958] attempt to access beyond end of device [ 323.480512][T12958] loop3: rw=10241, want=45104, limit=40427 [ 323.703935][ T4274] attempt to access beyond end of device [ 323.703935][ T4274] loop3: rw=2049, want=45112, limit=40427 [ 323.949400][T13061] netlink: 'syz.1.2808': attribute type 1 has an invalid length. [ 323.988343][T13061] netlink: 'syz.1.2808': attribute type 2 has an invalid length. [ 324.278585][T13067] loop1: detected capacity change from 0 to 4096 [ 324.424473][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2805'. [ 324.437292][T13067] EXT4-fs (loop1): Test dummy encryption mode enabled [ 324.460645][T13067] EXT4-fs (loop1): Ignoring removed oldalloc option [ 324.514754][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 324.550863][T13067] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 324.602040][T13048] loop0: detected capacity change from 0 to 40427 [ 324.605049][T13067] System zones: [ 324.666568][T13048] F2FS-fs (loop0): invalid crc value [ 324.708113][T13067] 0-5 [ 324.712425][T13067] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 324.759848][T13048] F2FS-fs (loop0): Found nat_bits in checkpoint [ 325.069517][T13048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 325.182074][T13098] loop3: detected capacity change from 0 to 256 [ 325.415988][T11306] attempt to access beyond end of device [ 325.415988][T11306] loop0: rw=2049, want=45104, limit=40427 [ 325.571599][T13108] vxcan0: tx address claim with dest, not broadcast [ 325.645959][T13072] loop7: detected capacity change from 0 to 32768 [ 325.863691][T13124] loop3: detected capacity change from 0 to 2048 [ 325.886320][T13072] XFS (loop7): Mounting V5 Filesystem [ 325.973816][ T4179] loop3: p3 p4 < > [ 325.978311][ T4179] loop3: p3 start 4284289 is beyond EOD, truncated [ 326.025633][T13072] XFS (loop7): Ending clean mount [ 326.066192][T13124] loop3: p3 p4 < > [ 326.068932][T13135] input: syz0 as /devices/virtual/input/input32 [ 326.076118][T13124] loop3: p3 start 4284289 is beyond EOD, truncated [ 326.220417][T13136] loop5: detected capacity change from 0 to 4096 [ 326.237598][ T6223] XFS (loop7): Unmounting Filesystem [ 326.270706][T13136] EXT4-fs (loop5): Test dummy encryption mode enabled [ 326.340126][T13136] EXT4-fs (loop5): Ignoring removed oldalloc option [ 326.401661][T13136] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 326.422766][T13136] System zones: 0-5 [ 326.526653][T13136] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 326.794543][T13157] loop1: detected capacity change from 0 to 512 [ 326.899456][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 326.917907][T13157] EXT4-fs (loop1): Ignoring removed oldalloc option [ 326.930843][T13159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.939221][T13159] IPv6: NLM_F_CREATE should be set when creating new route [ 326.946653][T13159] IPv6: NLM_F_CREATE should be set when creating new route [ 326.954033][T13159] IPv6: NLM_F_CREATE should be set when creating new route [ 327.054812][T13157] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2843: inode #1: comm syz.1.2843: iget: illegal inode # [ 327.208070][T13157] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2843: error while reading EA inode 1 err=-117 [ 327.245705][T13157] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2843: inode #1: comm syz.1.2843: iget: illegal inode # [ 327.284776][T13151] loop3: detected capacity change from 0 to 40427 [ 327.300803][T13157] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2843: error while reading EA inode 1 err=-117 [ 327.322722][T13157] EXT4-fs (loop1): 1 orphan inode deleted [ 327.334477][T13157] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,bsdgroups,oldalloc,,errors=continue. Quota mode: writeback. [ 327.375605][T13151] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 327.441286][T13151] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 327.486998][T13151] F2FS-fs (loop3): invalid crc value [ 327.531545][T13151] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 327.544978][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2848'. [ 327.597791][T13179] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2848'. [ 327.779777][T13151] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 327.800412][T13151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 328.001165][T11586] attempt to access beyond end of device [ 328.001165][T11586] loop3: rw=2049, want=45104, limit=40427 [ 328.301799][T13168] loop0: detected capacity change from 0 to 32768 [ 328.387622][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2860'. [ 328.453812][T13168] (syz.0.2846,13168,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 328.465684][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2860'. [ 328.490666][T13168] (syz.0.2846,13168,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 3, possibly corrupt fs? [ 328.490710][T13168] (syz.0.2846,13168,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 328.639162][T13168] (syz.0.2846,13168,0):ocfs2_initialize_super:2279 ERROR: status = -22 [ 328.647511][T13168] (syz.0.2846,13168,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 328.894785][T13217] loop3: detected capacity change from 0 to 1024 [ 329.046163][T13217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.319634][T13195] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 329.327415][T13195] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 329.409415][T13230] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2871'. [ 329.417831][ T4239] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 329.448434][T13195] F2FS-fs (loop5): invalid crc value [ 329.468670][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 329.522611][T13195] F2FS-fs (loop5): Found nat_bits in checkpoint [ 329.689572][T13195] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 329.696659][T13195] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 329.818577][ T4239] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 329.832504][ T4239] usb 2-1: config 127 has no interface number 0 [ 329.850683][ T4239] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 330.041690][ T4239] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 330.061623][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.081853][ T4239] usb 2-1: Product: syz [ 330.087163][ T4239] usb 2-1: Manufacturer: syz [ 330.097217][ T4239] usb 2-1: SerialNumber: syz [ 330.122024][T13247] set_capacity_and_notify: 1 callbacks suppressed [ 330.122041][T13247] loop0: detected capacity change from 0 to 32768 [ 330.138691][T13225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 330.217965][T13247] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 330.254422][ T4939] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 330.276789][T13247] JBD2: Ignoring recovery information on journal [ 330.385552][T13261] loop5: detected capacity change from 0 to 1024 [ 330.491312][T13247] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 330.582419][T13225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 330.678083][ T4939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 330.705226][ T4939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.729489][ T4939] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 330.764583][ T4939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.794585][T11306] ocfs2: Unmounting device (7,0) on (node local) [ 330.824713][ T4939] usb 4-1: config 0 descriptor?? [ 330.838201][ T4239] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 330.874753][T13256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 331.058352][ T4239] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 331.078146][ T4239] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 331.090256][ T4239] asix: probe of 2-1:127.57 failed with error -71 [ 331.100507][ T4239] usb 2-1: USB disconnect, device number 11 [ 331.107212][T13256] udc-core: couldn't find an available UDC or it's busy [ 331.128923][T13256] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 331.157883][ T5214] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 331.182555][T13264] loop7: detected capacity change from 0 to 40427 [ 331.227915][ T264] block nbd0: Possible stuck request ffff888020c78000: control (read@0,4096B). Runtime 150 seconds [ 331.231133][T13264] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 331.263282][T13264] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 331.277519][T13276] loop0: detected capacity change from 0 to 4096 [ 331.295960][T13264] F2FS-fs (loop7): invalid crc value [ 331.301792][T13276] EXT4-fs (loop0): Test dummy encryption mode enabled [ 331.318847][T13264] F2FS-fs (loop7): Found nat_bits in checkpoint [ 331.333191][T13276] EXT4-fs (loop0): Ignoring removed oldalloc option [ 331.381151][ T4939] wacom 0003:056A:00EC.001F: unknown main item tag 0xd [ 331.389893][T13276] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b802c018, mo2=0003] [ 331.408474][T13276] System zones: 0-5 [ 331.414855][ T4939] wacom 0003:056A:00EC.001F: unknown main item tag 0x4 [ 331.417168][T13264] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 331.437007][T13276] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,nodioread_nolock,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 331.437402][ T4939] wacom 0003:056A:00EC.001F: hidraw0: USB HID v0.09 Device [HID 056a:00ec] on usb-dummy_hcd.3-1/input0 [ 331.487412][T13264] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 331.526522][T13277] attempt to access beyond end of device [ 331.526522][T13277] loop7: rw=2049, want=45104, limit=40427 [ 331.546467][T13264] F2FS-fs (loop7): access invalid blkaddr:4043309056 [ 331.556121][T13284] udevd[13284]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 331.576944][ T5214] usb 6-1: config 6 has an invalid interface number: 156 but max is 0 [ 331.588082][ T5214] usb 6-1: config 6 has no interface number 0 [ 331.594613][ T5214] usb 6-1: config 6 interface 156 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 331.617798][T13264] CPU: 1 PID: 13264 Comm: syz.7.2882 Not tainted syzkaller #0 [ 331.621824][T11173] usb 4-1: USB disconnect, device number 7 [ 331.625311][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.625333][T13264] Call Trace: [ 331.625342][T13264] [ 331.625353][T13264] dump_stack_lvl+0x188/0x250 [ 331.652312][T13264] ? show_regs_print_info+0x20/0x20 [ 331.657542][T13264] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 331.663401][T13264] ? unlock_page+0x17c/0x1f0 [ 331.668025][T13264] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 331.673435][T13264] f2fs_map_blocks+0xc34/0x3630 [ 331.678458][T13264] ? f2fs_force_buffered_io+0x680/0x680 [ 331.684040][T13264] ? xa_load+0x276/0x2a0 [ 331.688318][T13264] f2fs_mpage_readpages+0xcaf/0x22a0 [ 331.693667][T13264] ? dquot_release_reservation_block+0xa0/0xa0 [ 331.700227][T13264] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 331.706416][T13264] ? f2fs_readahead+0x163/0x2f0 [ 331.711305][T13264] ? f2fs_set_data_page_dirty+0xae0/0xae0 [ 331.717152][T13264] read_pages+0x172/0x920 [ 331.721631][T13264] ? page_cache_ra_unbounded+0x8f0/0x8f0 [ 331.727590][T13264] ? add_to_page_cache_lru+0x2ad/0x4a0 [ 331.733545][T13264] page_cache_ra_unbounded+0x7f4/0x8f0 [ 331.739060][T13264] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 331.745616][T13264] ? blk_cgroup_congested+0x30b/0x390 [ 331.751056][T13264] f2fs_readdir+0x496/0xd90 [ 331.755623][T13264] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 331.760957][T13264] ? end_current_label_crit_section+0x14b/0x170 [ 331.767234][T13264] ? iterate_dir+0x10d/0x550 [ 331.771878][T13264] ? down_read_killable+0x1ce/0x340 [ 331.777111][T13264] ? fsnotify_perm+0x254/0x560 [ 331.781977][T13264] iterate_dir+0x213/0x550 [ 331.786419][T13264] ? f2fs_fill_dentries+0xcc0/0xcc0 [ 331.791743][T13264] __se_sys_getdents64+0xf2/0x270 [ 331.796921][T13264] ? __x64_sys_getdents64+0x80/0x80 [ 331.802297][T13264] ? filldir+0x700/0x700 [ 331.806579][T13264] ? lockdep_hardirqs_on+0x94/0x140 [ 331.811969][T13264] do_syscall_64+0x4c/0xa0 [ 331.816417][T13264] ? clear_bhb_loop+0x30/0x80 [ 331.821397][T13264] ? clear_bhb_loop+0x30/0x80 [ 331.826105][T13264] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.832047][T13264] RIP: 0033:0x7f8f276bb019 [ 331.836488][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.856117][T13264] RSP: 002b:00007f8f25913028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 331.864552][T13264] RAX: ffffffffffffffda RBX: 00007f8f27942fa0 RCX: 00007f8f276bb019 [ 331.872578][T13264] RDX: 000000000000005e RSI: 0000200000000280 RDI: 0000000000000005 [ 331.880569][T13264] RBP: 00007f8f2775200c R08: 0000000000000000 R09: 0000000000000000 [ 331.888680][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.896697][T13264] R13: 00007f8f27943038 R14: 00007f8f27942fa0 R15: 00007ffef1f33d48 [ 331.904795][T13264] [ 331.927307][ T5214] usb 6-1: config 6 interface 156 has no altsetting 0 [ 331.944989][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'. [ 332.052247][T13264] attempt to access beyond end of device [ 332.052247][T13264] loop7: rw=524288, want=45072, limit=40427 [ 332.065028][T13264] attempt to access beyond end of device [ 332.065028][T13264] loop7: rw=0, want=45072, limit=40427 [ 332.098117][ T5214] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=65.2c [ 332.118083][ T5214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.126180][ T5214] usb 6-1: Product: syz [ 332.136137][ T5214] usb 6-1: Manufacturer: syz [ 332.140931][ T5214] usb 6-1: SerialNumber: syz [ 332.217544][T13297] loop3: detected capacity change from 0 to 512 [ 332.259013][T13297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 332.322618][T13297] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2894: invalid indirect mapped block 9 (level 0) [ 332.344248][T13297] EXT4-fs (loop3): 1 truncate cleaned up [ 332.352547][T13297] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 332.417317][T13270] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2886'. [ 332.543539][ T5214] port100 6-1:6.156: NFC: Could not find bulk-in or bulk-out endpoint [ 332.564272][ T5214] usb 6-1: USB disconnect, device number 16 [ 332.677035][T13302] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input36 [ 332.915046][T13318] loop7: detected capacity change from 0 to 24 [ 332.947066][T13318] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 332.985270][T13318] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 333.514127][T13345] loop3: detected capacity change from 0 to 16 [ 333.528113][T13343] loop5: detected capacity change from 0 to 512 [ 333.566884][T13343] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 333.603303][T13347] loop7: detected capacity change from 0 to 512 [ 333.628307][T13345] erofs: (device loop3): mounted with root inode @ nid 36. [ 333.651664][T13345] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 333.699502][T13345] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 333.702861][T13343] EXT4-fs (loop5): mounted filesystem without journal. Opts: nomblk_io_submit,quota,quota,stripe=0x0000000000000003,i_version,,errors=continue. Quota mode: writeback. [ 333.710145][T13345] attempt to access beyond end of device [ 333.710145][T13345] loop3: rw=524288, want=34359738368, limit=16 [ 333.756301][T13345] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 333.756365][T13347] EXT4-fs (loop7): Test dummy encryption mode enabled [ 333.808711][T13345] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 333.828613][T13343] ext4 filesystem being mounted at /288/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.899110][T13347] EXT4-fs (loop7): 1 truncate cleaned up [ 333.904845][T13347] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 333.928010][ T26] audit: type=1800 audit(2000000060.709:59): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2915" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 334.108416][T13347] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2917: bg 0: block 465: padding at end of block bitmap is not set [ 334.508055][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 334.518849][T13369] loop7: detected capacity change from 0 to 256 [ 334.778166][ T4935] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 334.918257][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.921984][T13381] size and base must be multiples of 4 kiB [ 334.938869][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.964635][T13381] CPU: 0 PID: 13381 Comm: syz.7.2929 Not tainted syzkaller #0 [ 334.965663][ T23] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 334.972140][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.972159][T13381] Call Trace: [ 334.972168][T13381] [ 334.972177][T13381] dump_stack_lvl+0x188/0x250 [ 334.972207][T13381] ? __might_fault+0xb7/0x110 [ 334.972227][T13381] ? show_regs_print_info+0x20/0x20 [ 334.972249][T13381] ? load_image+0x410/0x410 [ 334.997719][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.002397][T13381] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 335.029183][ T23] usb 4-1: config 0 descriptor?? [ 335.030358][T13381] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 335.040739][T13381] ? __might_fault+0xb3/0x110 [ 335.045446][T13381] mtrr_add+0x8e/0xc0 [ 335.049454][T13381] mtrr_ioctl+0x9bf/0x1140 [ 335.053932][T13381] ? mtrr_close+0x1f0/0x1f0 [ 335.058483][T13381] ? mtrr_close+0x1f0/0x1f0 [ 335.063005][T13381] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 335.068587][T13381] ? proc_reg_poll+0x280/0x280 [ 335.073382][T13381] __se_sys_ioctl+0xfa/0x170 [ 335.077996][T13381] do_syscall_64+0x4c/0xa0 [ 335.082423][T13381] ? clear_bhb_loop+0x30/0x80 [ 335.087216][T13381] ? clear_bhb_loop+0x30/0x80 [ 335.091913][T13381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.097842][T13381] RIP: 0033:0x7f8f276bb019 [ 335.102282][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.121911][T13381] RSP: 002b:00007f8f25913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.130034][ T4935] usb 2-1: Using ep0 maxpacket: 32 [ 335.130414][T13381] RAX: ffffffffffffffda RBX: 00007f8f27942fa0 RCX: 00007f8f276bb019 [ 335.143581][T13381] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003 [ 335.151573][T13381] RBP: 00007f8f2775200c R08: 0000000000000000 R09: 0000000000000000 [ 335.159733][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.167848][T13381] R13: 00007f8f27943038 R14: 00007f8f27942fa0 R15: 00007ffef1f33d48 [ 335.175861][T13381] [ 335.318183][ T4935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 335.417928][ T4935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.463326][ T4935] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 335.571013][ T23] playstation 0003:054C:0DF2.0020: unknown main item tag 0x4 [ 335.595517][ T23] playstation 0003:054C:0DF2.0020: unknown main item tag 0x0 [ 335.630750][ T23] playstation 0003:054C:0DF2.0020: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 335.697887][ T4935] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 335.728497][ T4935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.754980][T13400] loop7: detected capacity change from 0 to 256 [ 335.762412][ T4935] usb 2-1: Product: syz [ 335.771305][ T4935] usb 2-1: Manufacturer: syz [ 335.785130][ T4935] usb 2-1: SerialNumber: syz [ 335.788335][T13402] loop5: detected capacity change from 0 to 1024 [ 335.790676][ T23] playstation 0003:054C:0DF2.0020: Failed to retrieve feature with reportID 9: -71 [ 335.815592][ T23] playstation 0003:054C:0DF2.0020: Failed to retrieve DualSense pairing info: -71 [ 335.825352][ T23] playstation 0003:054C:0DF2.0020: Failed to get MAC address from DualSense [ 335.854062][T13402] EXT4-fs (loop5): Ignoring removed oldalloc option [ 335.875935][ T23] playstation 0003:054C:0DF2.0020: Failed to create dualsense. [ 335.892308][T13402] EXT4-fs (loop5): Ignoring removed bh option [ 335.909339][ T23] playstation: probe of 0003:054C:0DF2.0020 failed with error -71 [ 335.940201][ T23] usb 4-1: USB disconnect, device number 8 [ 335.980153][T13402] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,oldalloc,stripe=0x0000000000000010,bh,inode_readahead_blks=0x0000000000000800,,errors=continue. Quota mode: none. [ 336.007248][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.114185][T13405] udevd[13405]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 336.304014][ T4935] usb 2-1: USB disconnect, device number 12 [ 336.312920][T13411] loop7: detected capacity change from 0 to 512 [ 336.457504][T13411] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 336.502819][T13418] loop0: detected capacity change from 0 to 136 [ 336.545411][T13411] EXT4-fs (loop7): 1 truncate cleaned up [ 336.565594][T13411] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 336.586582][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.650804][T13418] Attempt to read inode for relocated directory [ 336.684004][ T8883] udevd[8883]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.921369][T13438] loop0: detected capacity change from 0 to 64 [ 337.438326][ T4227] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 337.688202][ T4227] usb 6-1: Using ep0 maxpacket: 8 [ 337.757131][T13446] loop7: detected capacity change from 0 to 32768 [ 337.801960][T13446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2955 (13446) [ 337.839742][T13471] loop3: detected capacity change from 0 to 4096 [ 337.853870][ T4227] usb 6-1: unable to get BOS descriptor or descriptor too short [ 337.858272][T13451] loop1: detected capacity change from 0 to 32768 [ 337.900243][T13446] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 337.930944][T13446] BTRFS info (device loop7): enabling auto defrag [ 337.937415][T13446] BTRFS info (device loop7): force clearing of disk cache [ 337.938621][T13478] udevd[13478]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 337.945830][T13446] BTRFS info (device loop7): turning on sync discard [ 337.967912][ T4227] usb 6-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 338.008468][T13446] BTRFS info (device loop7): enabling disk space caching [ 338.012502][T13451] JBD2: Ignoring recovery information on journal [ 338.016272][T13446] BTRFS info (device loop7): setting nodatacow, compression disabled [ 338.031513][ T4227] usb 6-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 338.057410][T13446] BTRFS info (device loop7): disk space caching is enabled [ 338.065715][T13446] BTRFS info (device loop7): has skinny extents [ 338.136786][T13471] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 338.137422][T13451] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 338.202684][ T26] audit: type=1800 audit(2000000064.979:60): pid=13451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2959" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 338.209353][ T4227] usb 6-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 338.248242][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.268982][ T4227] usb 6-1: Product: syz [ 338.273194][ T4227] usb 6-1: Manufacturer: syz [ 338.288792][ T4227] usb 6-1: SerialNumber: syz [ 338.321438][T13446] BTRFS info (device loop7): enabling ssd optimizations [ 338.329827][T13446] BTRFS info (device loop7): clearing free space tree [ 338.331617][T11308] ocfs2: Unmounting device (7,1) on (node local) [ 338.336892][T13446] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 338.356065][T13446] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 338.452930][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.572436][ T26] audit: type=1804 audit(2000000065.339:61): pid=13501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2955" name="/newroot/476/file1/bus" dev="loop7" ino=263 res=1 errno=0 [ 338.596595][ T4227] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 338.605264][T13503] loop1: detected capacity change from 0 to 1024 [ 338.679634][T13504] udevd[13504]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 338.694027][ T26] audit: type=1800 audit(2000000065.459:62): pid=13503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2974" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 338.701829][T13503] hfsplus: extend alloc file! (16384,256,150995124) [ 338.743568][T13503] hfsplus: failed to extend attributes file [ 338.786856][T13505] hfsplus: extend alloc file! (16384,256,150995124) [ 338.789543][ T13] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 338.809241][T13505] hfsplus: failed to extend attributes file [ 338.853420][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.098119][ T4227] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 339.208444][ T13] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 339.228972][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 339.252248][ T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 339.271423][T13510] comedi comedi1: board detection failed [ 339.288076][ T13] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 339.307540][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.345056][ T13] usb 4-1: config 0 descriptor?? [ 339.352492][T13512] loop1: detected capacity change from 0 to 4096 [ 339.371356][T13500] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 339.447324][T13512] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.510559][ T4227] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.588200][ T4227] usb 6-1: device firmware changed [ 339.624575][ T4227] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 339.639666][ T4227] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 339.675818][ T4227] usb 6-1: USB disconnect, device number 17 [ 339.759464][ T4239] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 339.808282][ T4239] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 339.862463][ T13] wacom 0003:056A:00E5.0021: ignoring exceeding usage max [ 339.881556][ T13] wacom 0003:056A:00E5.0021: unknown main item tag 0x0 [ 339.898156][ T13] wacom 0003:056A:00E5.0021: unknown main item tag 0x2 [ 339.922023][ T13] wacom 0003:056A:00E5.0021: hidraw0: USB HID v0.05 Device [HID 056a:00e5] on usb-dummy_hcd.3-1/input0 [ 340.022483][T13540] udevd[13540]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 340.067250][ T5144] usb 4-1: USB disconnect, device number 9 [ 340.590625][T13562] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3000'. [ 341.156371][T13590] loop3: detected capacity change from 0 to 2048 [ 341.230174][T13599] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.663348][T13607] loop5: detected capacity change from 0 to 4096 [ 341.678561][T13615] sg_write: process 1079 (syz.7.3025) changed security contexts after opening file descriptor, this is not allowed. [ 341.747999][T13607] NILFS (loop5): invalid segment: Checksum error in segment payload [ 341.756068][T13607] NILFS (loop5): trying rollback from an earlier position [ 341.878439][T13607] NILFS (loop5): recovery complete [ 341.898802][T13628] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.914660][T13625] tap0: tun_chr_ioctl cmd 1074025677 [ 341.944592][T13630] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 341.959406][T13625] tap0: linktype set to 270 [ 342.258875][T13638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3035'. [ 342.593316][T13659] input: syz1 as /devices/virtual/input/input41 [ 342.678136][ T23] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 342.967815][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 343.098094][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 343.107321][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.172161][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 343.179423][ T23] pvrusb2: ********** [ 343.183442][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 343.193610][ T23] pvrusb2: Important functionality might not be entirely working. [ 343.201552][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 343.212990][ T23] pvrusb2: ********** [ 343.388960][ T27] INFO: task udevd:4301 blocked for more than 143 seconds. [ 343.393709][ T2426] pvrusb2: Invalid write control endpoint [ 343.398195][ T27] Not tainted syzkaller #0 [ 343.408491][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.424625][ T27] task:udevd state:D stack:23344 pid: 4301 ppid: 3559 flags:0x00004002 [ 343.445957][ T27] Call Trace: [ 343.453539][ T27] [ 343.461315][ T2426] pvrusb2: Invalid write control endpoint [ 343.468379][ T27] __schedule+0x11c3/0x4350 [ 343.472049][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 343.472930][ T27] ? release_firmware_map_entry+0x190/0x190 [ 343.472973][ T27] ? preempt_schedule+0xbc/0xd0 [ 343.472992][ T27] ? preempt_schedule_common+0xa5/0xd0 [ 343.473009][ T27] ? release_firmware_map_entry+0x190/0x190 [ 343.483857][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 343.499698][ T27] ? preempt_schedule+0xbc/0xd0 [ 343.502098][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 343.505829][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 343.513861][ T2426] pvrusb2: Device being rendered inoperable [ 343.519981][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 343.543915][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.564525][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 343.566910][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 343.573500][ T27] ? lock_chain_count+0x20/0x20 [ 343.582850][ T27] schedule+0x11b/0x1e0 [ 343.587038][ T27] io_schedule+0x7c/0xd0 [ 343.591744][ T27] wait_on_page_bit_common+0x8bf/0xeb0 [ 343.605839][ T2426] pvrusb2: Attached sub-driver cx25840 [ 343.609922][ T5144] usb 2-1: USB disconnect, device number 13 [ 343.615661][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 343.619031][ T27] ? wait_on_page_bit+0x50/0x50 [ 343.640904][ T27] ? blkdev_fallocate+0x4a0/0x4a0 [ 343.646233][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 343.647439][ T27] ? rcu_lock_release+0x20/0x20 [ 343.662601][ T27] do_read_cache_page+0xae6/0x1010 [ 343.677890][ T27] read_part_sector+0xd7/0x4c0 [ 343.682844][ T27] ? vsnprintf+0x14e/0x1c20 [ 343.687514][ T27] adfspart_check_ICS+0xc3/0xe90 [ 343.699976][ T27] ? vsnprintf+0x1b22/0x1c20 [ 343.710243][ T27] ? adfspart_check_ADFS+0x840/0x840 [ 343.716044][ T27] ? snprintf+0xe5/0x140 [ 343.721633][ T27] ? vscnprintf+0x80/0x80 [ 343.726349][ T27] bdev_disk_changed+0x936/0x1690 [ 343.733338][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 343.738747][ T27] ? iput+0x345/0x880 [ 343.742765][ T27] blkdev_get_whole+0x2f9/0x390 [ 343.749263][ T27] blkdev_get_by_dev+0x2da/0xa50 [ 343.754333][ T27] blkdev_open+0x128/0x2c0 [ 343.758932][ T27] ? block_ioctl+0xf0/0xf0 [ 343.763372][ T27] do_dentry_open+0x7f7/0xf90 [ 343.768830][ T27] path_openat+0x2718/0x2fb0 [ 343.773460][ T27] ? __kasan_slab_alloc+0xa9/0xc0 [ 343.779304][ T27] ? do_filp_open+0x400/0x400 [ 343.784115][ T27] do_filp_open+0x1df/0x400 [ 343.789483][ T27] ? vfs_tmpfile+0x300/0x300 [ 343.794130][ T27] ? _raw_spin_unlock+0x24/0x40 [ 343.799101][ T27] ? alloc_fd+0x59e/0x650 [ 343.803504][ T27] do_sys_openat2+0x14b/0x500 [ 343.808258][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 343.813302][ T27] ? do_sys_open+0xe0/0xe0 [ 343.817827][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.823874][ T27] ? lock_chain_count+0x20/0x20 [ 343.830231][ T27] __x64_sys_openat+0x135/0x160 [ 343.835273][ T27] do_syscall_64+0x4c/0xa0 [ 343.839809][ T27] ? clear_bhb_loop+0x30/0x80 [ 343.844506][ T27] ? clear_bhb_loop+0x30/0x80 [ 343.850355][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.856310][ T27] RIP: 0033:0x7fccbc6b8407 [ 343.860821][ T27] RSP: 002b:00007ffe654020a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 343.869404][ T27] RAX: ffffffffffffffda RBX: 00007fccbc5ca880 RCX: 00007fccbc6b8407 [ 343.877788][ T27] RDX: 00000000000a0800 RSI: 0000559510f0b550 RDI: ffffffffffffff9c [ 343.885976][ T27] RBP: 0000559510eea910 R08: 0000000000000000 R09: 0000000000000000 [ 343.894716][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559510f04320 [ 343.903606][ T27] R13: 0000559510f02410 R14: 0000000000000000 R15: 0000559510f04320 [ 343.911963][ T27] [ 343.915285][ T27] [ 343.915285][ T27] Showing all locks held in the system: [ 343.924428][ T27] 1 lock held by khungtaskd/27: [ 343.929392][ T27] #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 343.940133][ T27] 3 locks held by kworker/u4:1/144: [ 343.945447][ T27] 2 locks held by kworker/u5:0/147: [ 343.953135][ T27] #0: ffff888020e0a138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 343.963823][ T27] #1: ffffc9000178fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 343.975477][ T27] 2 locks held by nbd5-recv/1053: [ 343.980827][ T27] #0: ffff888020e0a138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 343.991682][ T27] #1: ffffc9000498fd20 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.003312][ T27] 2 locks held by nbd6-recv/1056: [ 344.009194][ T27] #0: ffff888020cff138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.020111][ T27] #1: ffffc900049dfd20 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.036898][ T27] 2 locks held by getty/3949: [ 344.041689][ T27] #0: ffff88802c247098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 344.053567][ T27] #1: ffffc900025ce2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 344.063870][ T27] 2 locks held by kworker/u5:1/4188: [ 344.069377][ T27] #0: ffff888020cf8938 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.080578][ T27] #1: ffffc900014dfd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.091908][ T27] 2 locks held by kworker/u5:2/4190: [ 344.097420][ T27] #0: ffff888020cf8938 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.108918][ T27] #1: ffffc90002f7fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.120814][ T27] 2 locks held by kworker/u5:3/4199: [ 344.126140][ T27] #0: ffff888020cf8938 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.136790][ T27] #1: ffffc9000301fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.147969][ T27] 5 locks held by kworker/0:4/4227: [ 344.153892][ T27] #0: ffff88801befbd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.165917][ T27] #1: ffffc9000319fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.178049][ T27] #2: ffff888148682220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260 [ 344.187198][ T27] #3: ffff88807b847220 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xf8/0x8a0 [ 344.197819][ T27] #4: ffff8880541631a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa1/0x710 [ 344.216193][ T27] 3 locks held by kworker/0:6/4239: [ 344.222260][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.238562][ T27] #1: ffffc9000320fd00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.255272][ T27] #2: ffffffff8c1cf770 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_lock_wait+0x108/0x210 [ 344.266763][ T27] 1 lock held by udevd/4301: [ 344.272841][ T27] #0: ffff888020a44518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x162/0xa50 [ 344.283703][ T27] 2 locks held by kworker/u5:4/9344: [ 344.289172][ T27] #0: ffff888020cff138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.299855][ T27] #1: ffffc90003607d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.311213][ T27] 2 locks held by kworker/u5:5/9637: [ 344.316641][ T27] #0: ffff888020cff138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 344.327313][ T27] #1: ffffc9000410fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 344.339379][ T27] [ 344.341765][ T27] ============================================= [ 344.341765][ T27] [ 344.351638][ T27] NMI backtrace for cpu 1 [ 344.356080][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 344.363851][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.374362][ T27] Call Trace: [ 344.377658][ T27] [ 344.380694][ T27] dump_stack_lvl+0x188/0x250 [ 344.385571][ T27] ? show_regs_print_info+0x20/0x20 [ 344.390776][ T27] ? load_image+0x410/0x410 [ 344.395402][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 344.401582][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 344.406914][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 344.412041][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 344.418232][ T27] ? _printk+0xda/0x130 [ 344.422557][ T27] ? load_image+0x410/0x410 [ 344.427642][ T27] ? load_image+0x410/0x410 [ 344.432319][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 344.438395][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 344.444396][ T27] watchdog+0xe1b/0xe60 [ 344.448611][ T27] kthread+0x42e/0x520 [ 344.452708][ T27] ? hungtask_pm_notify+0x40/0x40 [ 344.457751][ T27] ? kthread_blkcg+0xd0/0xd0 [ 344.462401][ T27] ret_from_fork+0x1f/0x30 [ 344.466850][ T27] [ 344.469883][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.476986][ T27] Sending NMI from CPU 1 to CPUs 0: [ 344.482549][ C0] NMI backtrace for cpu 0 [ 344.482562][ C0] CPU: 0 PID: 3548 Comm: klogd Not tainted syzkaller #0 [ 344.482578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.482586][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0xd4/0x7c0 [ 344.482610][ C0] Code: d2 d0 a5 7e 85 c0 0f 85 b3 03 00 00 48 c7 c0 80 4f 2f 96 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 57 05 00 00 83 3d bc a9 d2 14 00 <75> 79 c6 44 13 04 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 f7 [ 344.482623][ C0] RSP: 0018:ffffc90002ebfe40 EFLAGS: 00000046 [ 344.482636][ C0] RAX: 0000000000000004 RBX: 1ffff920005d7fcc RCX: ffffffff962f4f03 [ 344.482647][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff89c01fc1 [ 344.482656][ C0] RBP: ffffc90002ebfee8 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 344.482667][ C0] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 0000000000000000 [ 344.482680][ C0] R13: 0000000000000000 R14: ffffc90002ebff58 R15: 0000000000000000 [ 344.482689][ C0] FS: 00007fcbd788bc80(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 344.482701][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.482711][ C0] CR2: 00007f08ee7162f8 CR3: 000000002420d000 CR4: 00000000003506f0 [ 344.482724][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.482732][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.482741][ C0] Call Trace: [ 344.482745][ C0] [ 344.482752][ C0] ? account_other_time+0x64/0x280 [ 344.482768][ C0] ? lock_chain_count+0x20/0x20 [ 344.482785][ C0] ? rcu_is_watching+0x11/0xa0 [ 344.482799][ C0] trace_hardirqs_on+0x67/0x80 [ 344.482815][ C0] syscall_enter_from_user_mode+0x21/0x70 [ 344.482831][ C0] do_syscall_64+0x24/0xa0 [ 344.482842][ C0] ? clear_bhb_loop+0x30/0x80 [ 344.482857][ C0] ? clear_bhb_loop+0x30/0x80 [ 344.482871][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.482884][ C0] RIP: 0033:0x7fcbd7a55a37 [ 344.482896][ C0] Code: 73 01 c3 48 8b 0d c1 f3 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 67 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 91 f3 0c 00 f7 d8 64 89 01 48 [ 344.482907][ C0] RSP: 002b:00007ffddab8d788 EFLAGS: 00000206 ORIG_RAX: 0000000000000067 [ 344.482921][ C0] RAX: ffffffffffffffda RBX: 00007fcbd7bf5490 RCX: 00007fcbd7a55a37 [ 344.482931][ C0] RDX: 00000000000003ff RSI: 00007fcbd7bf5490 RDI: 0000000000000002 [ 344.482940][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 344.482948][ C0] R10: 0000000000004000 R11: 0000000000000206 R12: 00007fcbd7bf5490 [ 344.482957][ C0] R13: 00007fcbd7bd2dfe R14: 00007fcbd7bf567a R15: 00007fcbd7bf567a [ 344.482973][ C0] [ 344.508454][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 344.763320][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 344.770529][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.780883][ T27] Call Trace: [ 344.784299][ T27] [ 344.787556][ T27] dump_stack_lvl+0x188/0x250 [ 344.792250][ T27] ? show_regs_print_info+0x20/0x20 [ 344.797581][ T27] ? load_image+0x410/0x410 [ 344.802275][ T27] panic+0x2f8/0x850 [ 344.806209][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 344.811873][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 344.816400][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 344.822573][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 344.829008][ T27] watchdog+0xe5a/0xe60 [ 344.833287][ T27] kthread+0x42e/0x520 [ 344.837503][ T27] ? hungtask_pm_notify+0x40/0x40 [ 344.842526][ T27] ? kthread_blkcg+0xd0/0xd0 [ 344.847123][ T27] ret_from_fork+0x1f/0x30 [ 344.851565][ T27] [ 344.855016][ T27] Kernel Offset: disabled [ 344.859373][ T27] Rebooting in 86400 seconds..