last executing test programs: 1m11.73885161s ago: executing program 3 (id=411): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x200}) 1m11.489343077s ago: executing program 3 (id=415): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') 1m11.219350865s ago: executing program 3 (id=419): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x17e) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='n', 0x1) 1m10.526365027s ago: executing program 3 (id=426): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000180)={[{@discard}, {@fmask={'fmask', 0x3d, 0x2}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@errors_continue}, {@utf8}]}, 0x1, 0x1535, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002440)='./proc\x00', &(0x7f0000002480)='proc\x00', 0x0, 0x0) 1m9.964238866s ago: executing program 3 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d09, &(0x7f0000000900)) 1m9.289486366s ago: executing program 3 (id=437): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x8, {0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 1m8.932270733s ago: executing program 32 (id=437): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x8, {0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) 3.027459154s ago: executing program 5 (id=949): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x48d0}, 0x4c51) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.800832217s ago: executing program 2 (id=952): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2.581639431s ago: executing program 2 (id=955): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x61c, 0x65, 0x600, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5f0, 0x2, [@TCA_BPF_ACT={0x5ec, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1fc, 0x0, 0x0, 0x0, {{0xb}, {0xc0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0xfffffffffffffffd, 0x5, 0x400}, 0x2000000000a}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="aeb845cba598"}]}, {0x111, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a7f00fdceadb267bc88d280e432e710accced1337070322e520c97518"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x14, 0x4, [{0x400, 0x6, 0x2}, {0x970, 0xa, 0xd, 0x10000}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x9d, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1bc, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x404, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @local, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x6c, 0x9, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.452366364s ago: executing program 2 (id=956): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000440)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) 2.452232284s ago: executing program 4 (id=957): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x181) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0xfffffffffffffffe) 2.182239312s ago: executing program 2 (id=958): mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000500)=0x31, 0x8) 2.037909197s ago: executing program 4 (id=959): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x12, "3eccd8fd0000000000000010000000040100"}) 1.874229774s ago: executing program 2 (id=960): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 1.873889584s ago: executing program 5 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0) write(r0, 0x0, 0x23) 1.600305962s ago: executing program 0 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080180002d01010000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.553971307s ago: executing program 5 (id=964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xc864, @private1, 0x99}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="a3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x2}, &(0x7f0000000340)=0x8) 1.34334402s ago: executing program 0 (id=966): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1.263459818s ago: executing program 5 (id=967): r0 = io_uring_setup(0x11a4, &(0x7f0000000080)={0x0, 0xd3e8, 0x80, 0x3, 0x7}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000004c00)=[{}], 0x1) syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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") 1.097132615s ago: executing program 0 (id=968): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x40000) 1.096965175s ago: executing program 1 (id=969): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffe}, &(0x7f00000000c0)=0x8) 932.263762ms ago: executing program 1 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000004c0)="02155e", 0x3, 0x2) 901.604765ms ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 900.635926ms ago: executing program 0 (id=972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x486, 0x0, 0x7fffffffffffffff}]}) 846.735361ms ago: executing program 2 (id=973): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0xff, 0x5f15, &(0x7f0000001700)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D4QQ4oS1ORlY2F2fwCEGk4T8KemBkpA2Lalx7LVx4lO9awIIlU2hLVGQitRe0IumSZRGkdoKVEVqKtEIqZHau+aqETdRK3HhC6gMSqqmCmz1zjzP45nZ2Zn1YeyZ9/l8IvvnnXln5pl33pnd75LvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBowydm/2SoKIryT+2vdUVxafnvNcWu8suF7Rd7hQAAAMC5eqf2999elk7YtYILNWzzLx/5t+8vLi4uFl98++S7f7a4mM6YKIqR1UVROy/611/8fLFxm+CZYnxouOHr4S43P9Ll/NEu5491OX9Vl/NXdzl/vMv5S3bAEmvqv4+pXdl1tX+uq+/S4opirHbedW0u9czQ6uHh+LucmqHaZRbH9hcHi0PFbDG95DJDtf8VxSsbytu6r4i3NdxwW+uLojj11lN74xqGwj6+rmi6sZrGx+7Ne4qJt996au9359/4YLvZdTcsWWlRbNpYrvPZojj966piqFid9klc53DDOte3WedI0zqHapcr/926zlMrXGe83+NhnT/usM714bTHry2KYqFYdptWzxTDxdqWW037e7x+RJTXUT6U7ytGz+g42bCC46S8zOvXNh8nrcdk3P8bwj4ZXWYNjQ/Hm19dtWS/n+1xUt7rfjhWy+t+oLzR8fHGX602HavlNk9dv/wx0Paxa3MMpGO54RjY2O0YGF41UjsGhk+veWPTMTCz5DLDxVDttk5e3/kYmJo/fGxq7oknbz14eM+B2QOzR2amt2/dsm3rlm3bpvYfPDQ7Xf/7zHbpAFlbDKdjcGN4rYnH4I0t2zYekovfOn/Pg/E+eR6U9/2zN5QLunS4WOYYL7d5dtO5Pw/S9/2G58Fow/Og7Wtqm+fB6AqeB+U2pzat7HvmaMOfdmvo1WvhuoZj4GJ+Pyxv8+Gbln8tXB/W9dzNZ/r9cGTJMRDv1lB47pWnpJ/3xu8I+2XpcXF1ecYlq4oTc7PHb3t8z/z88ZkijAvi8obHqvV4Wdtwn4olx8vwGR8vu/7mlzdc3eb0dWFfjd/S+bEqt9k62fmxqr26t9+fTaduLsI4zy70/mz33azcnylLdNif5TbP3nruPwumXNLw+jfW7fVvZGy0/vo3kvbGWNPr39KHZqS2sqI4devKXv/Gwp8L/fp3RZ+8/pX76uHbOh8D5TbPTZ3pMTDa8fXv2jCHwnpuColhvCH3v1s7f6F+mDY8ll2Pm9HRsXDcjMZbbD5utiy5THlt5W1vmj6742bTtc2PVdPPLRU8bsp99efTnY+bcptXZ879tWNN/GfDa8eqbsfA2Miqcr1j6SCov94tronHwG3F3uJocajYly5TPsrlbU1uXtkxsCr8udCvHVf1yTFQ7qsXN3c+BsptfrTl/P7stCmckrZp+Nmp9fcLy2X+q0dPX1/rbjvfmb9c5ye3dv7dULnNG1vPNGd03k+3hFMuabOfWp8/yx3T+4oLs5+uCus8tK3z76bKba7YvsLjaVdRFK/NvFb7fVf4/e7fn/j37zf93rfd75Rfm3nt/qkHf3Im6wcA4Oy9W/t7YVX9Z82G/2K9kv/+DwAAAAyEmPuHw0zkfwAAAKiMmPtHwkzkfwAAAKiMmPtHw0wyyf+P3rHjpXeeLtK7AS4G8fy4Gx64q75d7HgvhK8nFk8rT//4d8Ze+trTK7vt4aIofnn/h9pu/+hdcV11x+I6P9p8+hJXXbOi23/kodPbNb5/wqkd9euP92elh0HsKr8ytbl2vRNPzNTmq/cXtfngwnPP1K+//nXc/uSW+vZ/Gd60ZNf+oabLbwrruS7MifCeMg/sOr0fyhkv99L6j/zz5Z87fXvxckMb31u7my/+Qf1643tEvXB5fft4v5db/z99/Xsvlds/fn379T893H79J8P1vh7mL3bWt2/c519rWP8fhfXH24uXu+3bP2y7/pc/UN/+5XBcfDPM1vXf86cffqfd4xVvZ9ed9cvF25/+7621y8Xri9ffuv7xp2ea9kfr9b/6dv16dj72s5HG7ePp8XaiR+5sPr6HwuPb1CMviuJ7f1w07efiY/XL/WPL+uP1Hbuz/fpvaVnnsaFrapc/fX/WNd2vb/z15rb3N65n19+ta7o/L9wb9t/bUz8qr/fkg+F4DOf/74/r19f6XqYv39v8ehO3/+a6+vM2Xt9Uy/pfaFn/wjXlvuu+/vverq//5btXN61/16fC8XRffXZb/4G/uqzp8t/6bv3xOP6VySNH504c3NewVxufx6vH16y95NL3vPey8Fra+vXuo/OPzh6fmJ6YLoqJAXzLwF6v/9th/ld9LJz/W6j7yc/qx93zn65/37rx5/WvXwinPxIez/j98Rt/MdZ0vLY+7gt31+e5rv/msI6V+sDX//OaFW148guvnPiHP3yj9eeCeH+OvX+8dv9e3HBl7byhV+vnt75edfMf729+Xv90dLo2fxD262J4Z+aNV9Zvr/X643uTPP+Z+vM3/iQXL1+0vJ/IupHm+3Gu6/9p+Dnmh1c1v/7F4+MHT7e8m/O6YqhcwkJ4fSgW6ufHreL+fv7UlW1vL74PT7HwwTNZ5rLmnpibOnTwyInHp+Zn5+an5p54cvfhoyeOzO+uvXfp7i91u/zp5/fa2vN73+z2rUXt2X60PnrsYq//2EN7990+fcO+2f17Tuyff+jY7PEDe+fm9s7um7thz/79s1/pdvmD+3bObN6x5fbNkwcO7tt5x44dW3ZMHjxytFxGfVFdbJ/+8uSR47trF5nbuXXHzLZtW6cnDx/dN7vz9unpyRPdLl/73jRZXvqxyeOzh/bMHzw8Ozl38MnZnTM7tm/f3PXdHw8f2z83MXX8xJGpE3Ozx6fq92VivnZy+b2v2+XJw9zR8HrXYij8dP75W7an98ctfeery15VfZPmH0+LN8N7QcXvb92+jrl/LMwkk/wPAAAAOYi5P7zx/+kz5H8AAACojJj7V4eZyP8AAABQGTH3j4eZZJL/M+r/r2n8Qv+/Tv9f/7/Q/9f/7zH9f/3/TjLs/78V/qX/X4H16//r/9Ndv/X/Y+5fUxRZ5n8AAADIQcz9a8NM5H8AAACojJj7Lwkzkf8BAACgMmLuvzTMJI/8P9b6zwr3/5vo/9fp/3fr/8dt9f8L/X/9/7Ok/6//30mG/X+f/38eXez192H/f43+P/2m3/r/Mfe/J8wkj/wPAAAAWYi5/71hJvI/AAAAVEbM/ZeFmcj/AAAAUBkx968LM8kk/2f0+f9N9P/r9P99/n+h/6//f/417WL9f/3/TvT/9f8Hef192P/3+f/0nX7r/8fc///CTDLJ/wAAAJCDmPvfF2Yi/wMAAEBlxNx/eZiJ/A8AAACVEXP/FWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5//1hJpnkfwAAAMhBzP1XhpnI/wAAAFAZMfd/IMxE/gcAAIDKiLn/qjCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/8Ewk0zyPwAAAOQg5v6rw0zkfwAAAKiMmPs/FGYi/wMAAEBlxNy/Pswkk/yv/6//r/+v/6//r//fS4PV/x9e9hz9/zr9/2b6//r/+v/6/3TWb/3/mPs/HGaSSf4HAACAHMTc/5EwE/kfAAAAKiPm/mvCTOR/AAAAqIyY+yfCTDLJ//r/+v/6//r/+v/6/700WP3/5en/1+n/N9P/1//X/9f/p7N+6/9PrClquX9DUWSZ/wEAACAHMfdvDDOR/wEAAKAyYu6/NsxE/gcAAIDKiLn/ujCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X1n/f1W3K6LS+q3/H3P/9WEmmeR/AAAAyEHM/TeEmcj/AAAAUBkx998YZiL/AwAAQGXE3L8pzCST/K//r/+v/6//r/+v/99L+v9L+v+v/0+h/x/p/+v/92z9K/h5UP/f5//Te/3W/4+5/6Ywk0zyPwAAAOQg5v6bw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu6fDDPJJP/r/+v/6//r/+v/6//3UlX7/+l11Of/6//r//dn/9/n/+v/0xf6rf8fc/+tYSaZ5H8AAADIQcz9t4WZyP8AAABQGTH3T4WZyP8AAABQGTH3T4eZZJL/9f/1//X/+7v/P97meNP/1/8fJFXt/5/D5//r/zdo6v+vKYpC/1//f4DWr/+v/093/db/j7l/Jswkk/wPAAAAOYi5f3OYifwPAAAAlRFz/5YwE/kfAAAAKiPm/q1hJpnkf/1//X/9//7u//v8f/1//f/O9P8r1P/3+f/6/wO2fv1//X+aDbc5rd/6/zH3bwszyST/AwAAQA5i7t8eZiL/AwAAwGBp/T+XNoi5//YwE/kfAAAAKiPm/jvCTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+OMJNM8j8AAADkIOb+j4aZyP8AAABQGTH33xlmIv8DAADAQGn3OYRRzP0fCzPJJP/r/1e9/7+4Wv9f/1//v/P69f97S/9f/78T/X/9/0Fev/6//j/d9Vv/P+b+nWEmK87/q1e6IQAAAHCRxNx/V5hJJv/9HwAAAHIQc//dYSbyPwAAAFRGzP27wkwyyf/6/1Xv//v8f/1//f9u69f/7y39f/3/TvT/B7P/H9uv+v8XpP8/vtzlG/v/5TGk/08/6rf+f8z994SZZJL/AQAAIAcx9388zET+BwAAgMqIuf8TYSbyPwAAAFRGzP2fDDPJJP/r/+v/6//r/+v/6//3kv6//n8n+v+D2f+P9P99/r/+P930W/8/5v57w0wyyf8AAACQg5j7PxVmIv8DAABAZcTc///DTOR/AAAAqIyY++8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP2/EmaSSf4HAACAHMTcf3+YifwPAAAAlRFz/6fDTOR/AAAAqIyY+381zCST/K//f2H6/8Pp+vX/9f/1//X/9f/PJ/1//f9C//+sXez+/KCvX/9f/5/u+q3/H3P/r4WZZJL/AQAAIAcx9/96mIn8DwAAAJVR5v41RVH8Ru0r+R8AAACqKOb+B8JMMsn/+v8+/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+B8NM5H8AAACojJj7PxNmIv8DAABAZcTc/9kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOs/v/3/8nHV/6d6+q3/H3P/Q2EmmeR/AAAAyEHM/Z8LM5H/AQAAoDJi7v+tMBP5HwAAACoj5v7fDjPJJP/r/+v/6//r/+v/6//3kv7/0v5/+Rp2Mfv/q1ayof7/iuj/6//7/H/9fzrrt/5/zP2fDzPJJP8DAABADmLu/50wE/kfAAAAKiPm/t8NM5H/AQAAoDJi7n84zCST/K//r/+v/6//r/+v/99L+v8+/78T/X/9/0Fev/6//j/d9Vv/P+b+L4SZZJL/AQAAIAcx9/9emIn8DwAAAJURc//uMBP5HwAAACoj5v5Hwkwyyf/6//r/K+j/x831//X/9f/1/8+Y/r/+fyf6//r/g7x+/X/9f7rrt/5/zP17wkwyyf8AAACQg5j7vxhmIv8DAABAZcTcvzfMRP4HAACAyoi5f1+YSSb5X/9/gPv/YY0+/1//X/9f/7+f6f/r/3ei/6//P8jr1//X/6e7fuv/x9w/G2aSSf4HAACAHMTcvz/MRP4HAACAyoi5/0CYifwPAAAAlRFz/6NhJpnkf/3/Ae7/X7jP/9f/1/+v0f/X/z8b+v/6/53o/+v/D/L69f/1/+mu3/r/MfcfDDPJJP8DAABADmLu/1KYifwPAAAAlRFz/5fDTOR/AAAAqIyY+w+FmWSS//X/9f/1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v7DYSaZ5H8AAADIQcz9R8JM5H8AAACojJj7j4aZyP8AAABQGTH3HwszyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/b8fZpJJ/gcAAIAcxNx/PMxE/gcAAIDKiLl/LsxE/gcAAIDKiLl/Pswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3nwgzyST/AwAAQA5i7n8szET+BwAA+D/27nNX07KK4/CLOEBijMfiEZj43XgMfvIQ7Ipd7L0X7F2xYe9i712x94ZirwlG9lpr4x54ntl75uW9n3td15cVh8lw66jhn8kvD0wjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r/4/7/2vvf/TjB+r/jzo//b/+X/9/Kvp//f9O/39mh+7nt/5+/b/+n3Wj9f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAEwjd/9D4hb7HwAAAKaRu/+hcUuT/a//1//r/zfy/f/rj39c/6//3xL9v/5/if5f/7/l9+v/9f+sG63/z93/sLilyf4HAACADnL3Pzxusf8BAABgGrn7HxG32P8AAAAwjdz9V8ctTfa//l//r//fSP9/G/p//f+W6P/1/0v0//r/Lb9f/6//Z91o/X/u/kfGLU32PwAAAHSQu/9RcYv9DwAAANPI3f/ouMX+BwAAgGnk7n9M3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9ZN1r/n7v/sXFLk/0PAAAAHeTuf1zcYv8DAADANHL3Pz5usf8BAABgGrn7nxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9btvf+/7zW33gvt/3P3XxO3NNn/AAAA0EHu/ifGLfY/AAAATCN3/5PiFvsfAAAAppG7/8lxS5P9r//X/x/3/7dcpv/X/+v/j39c/39p6P/1/0v0/6P2/xf2n4T+X/+v/2fN3vv/ld7/5L/O3f+UuKXJ/gcAAIAOcvc/NW6x/wEAAGAaufufFrfY/wAAADCN3P1Pj1ua7H/9v/7f9/9vqPxc/6//1/9fevp//f8S/f+o/b/v/19s/3+vC3j/cf//v38O1/8zp9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7/1lxi/0PAAAA08jd/+y4pcn+1//r//X/vv+v/9f/75P+X/+/RP+v/9/y+33/X//PutH6/9z9z4lbmux/AAAA6CB3/3PjFvsfAAAAppG7/3lxi/0PAAAA08jd//y4pcn+1//r//X/+v+L6v8v1//r/5fp//X/S/T/+v8tv1//r/9n3Wj9f+7+F8QtTfY/AAAAdJC7/4Vxi/0PAAAA08jd/6K4xf4HAACAaeTuf3Hc0mT/6//1//p//b/v/+v/90n/P13/f5n+/5j+X/+v/9f/s2y0/j93/0vilib7HwAAADrI3f/SuMX+BwAAgGnk7n9Z3GL/AwAAwDRy918btzTZ//p//b/+X/+v/9f/75P+f7r+3/f/b0P/r//X/+v/WTZa/5+7/+Vxy9rwO7fy1wEAAIBh5O5/RdzS5M//AQAAoIPc/a+MW+x/AAAAmEbu/lfFLU32v/5f/6//1//r//X/+6T/1/8v0f/ffv9/1R38/fT/Y71f/6//Z91o/X/u/lfHLU32PwAAAHSQu/81cYv9DwAAANPI3f/auMX+BwAAgGnk7n9d3NJk/99R/3/z3Y7++in7/7vq//X/G+7/44ev1v/X30n/r/+/eJP2/+d2+n/9v+//6//1//p/Vo3W/+fuf33c0mT/AwAAQAe5+98Qt9j/AAAAMI3c/W+MW+x/AAAAmEbu/jfFLU32v+//6//1/77/r//X/+/TpP2/7//r/2+l/9f/6//1/ywbrf/P3f/muKXJ/gcAAIAOcve/JW6x/wEAAGAaufvfGrfY/wAAADCN3P3XxS1N9r/+X/9/8P7/Lvr/pP+P31f9v/7/FPT/+v+d/v/MDt3Pb/39+n/9P+tG6/9z978tbmmy/wEAAKCD3P1vj1vsfwAAAJhG7v53xC32PwAAAEwjd/8745Ym+1//r/8/eP/v+/9F/x+/r/p//f8p6P/1/zv9/5kdup/f+vv1//p/1o3W/+fuf1fc0mT/AwAAQAe5+6+PW+x/AAAAmEbu/nfHLfY/AAAATCN3/3vilib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P3vjVua7H8AAADoIHf/++IW+x8AAACmkbv//XGL/Q8AAADTyN3/gbilyf7X/2+9/7/fTfEC/b/+X/+v/x+S/l//v+QC+v/73Fv/X/T/Y71f/6//Z91o/X/u/g/GLU32PwAAAHSQu/9DcYv9DwAAANPI3f/huMX+BwAAgGnk7v9I3NJk//fo/8+d99Pm6f99/1//r//X/49N/6//X+L7//r/Lb9/H/3/Ffp/JjNa/5+7/6NxS5P9DwAAAB3k7v9Y3GL/AwAAwEZcufozcvd/PG6x/wEAAGAaufs/Ebc02f89+v/zNej/89/Wndv/33IP/b/+v+j/9f87/b/+f4X+X/8/5Puv2Pn+v/6fS2S0/j93/w1xS5P9DwAAAB3k7v9k3GL/AwAAwDRy938qbrH/AQAAYBq5+z8dN9zz7od70p1K/z9t/+/7//p//b/+fwj6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLP/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5f/z9d/x//e9L/j0H/r/9fov/X/2/5/fp//T/rRuv/c/d/IW5psv8BAACgg9z9X4xb7H8AAACYRu7+L8Ut9j8AAABMI3f/l+OWJvtf/6//1/9fsv7/3MlfX//v+//6f/2//n+Z/l//v+X36//1/6wbrf/P3f+VuKXJ/gcAAIAOcvd/NW6x/wEAAGAaufu/FrfY/wAAADCN3P1fj1ua7H/9/2b7/3P6/+H6//N+ff2//l//r//X/y/T/+v/t/x+/b/+n3Wj9f+5+78RtzTZ/wAAANBB7v5vxi32PwAAAEwjd/+34hb7HwAAAKaRu//bcUuT/T9z/7/00ybo/33/X/+v/z/xfv3/mPT/+v8l+n/9/5bfr//X/7NutP4/d/934pYm+x8AAAA6yN3/3bjF/gcAAIBp5O6/MW6x/wEAAGAaufu/F7c02f8z9/9L9P9H9P/6/53+X/+/Z/p//f8S/b/+f8vv1//r/1k3Wv+fu//7cUuT/Q8AAAAd5O7/Qdxi/wMAAMA0cvf/MG6x/wEAAGAauft/FLc02f/6f/2//l//r//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/3Hc0mT/AwAAQAe5+38St9j/AAAAMI3c/T+NW+x/AAAAmEbu/p/FLU32v/5f/6//H6r/v+Lkr6P/1//r/5fp//X/O/3/mR26n9/6+/X/+n/Wjdb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjdz9v4xb7H8AAACYRu7+X8UtTfa//l//r/8/c/9/+c73///vPfp//f/t0f9vs/+/Mf6Lrv9fpv/X/+v/9f8sG63/z93/67ilyf4HAACADnL3/yZusf8BAABgGrn7fxu32P8AAAAwjdz9v4tbmux//b/+X/8/1Pf/9f/6f/3/Ken/ff9/p/8/s0P381t/v/5f/8+60fr/3P03xS1N9j8AAAB0kLv/93GL/Q8AAADTyN3/h7jF/gcAAIBp5O6/OW5psv/1//r/Kfv/K/X/+n/9/yj0//r/Jfp//f+W36//1/+zbrT+P3f/H+OWJvsfAAAAOsjd/6e4xf4HAACAaeTu/3PcYv8DAADANHL3/yVuabL/9f/6/yn7f9//1/9vrf+//Pj/gPX/p6P/1//v9P9nduh+fuvv1//r/1k3Wv+fu/+vcUuT/Q8AAAAd5O7/W9xi/wMAAMA0cvf/PW6x/wEAAGAaufv/Ebc02f9d+v+TGYn+/4j+X/+/0/+P0f83+v7/yd/vi7X1/v+qi3y//v+I/v9sDt3Pb/39+n/9P+tG6/9z9/8zbmmy/wEAAKCD3P3/ilvsfwAAAJhG7v5/xy32PwAAAEwjd/9/4pYm+79L/3+S/v+I/l//v9P/H7L/v27XsP+/1Lbe//v+v/5/p//f7Pv1//p/1o3W/+fu/28AAAD//9wgGwg=") syz_mount_image$vfat(&(0x7f000000bc40), &(0x7f000000bc80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18340dc, 0x0, 0x3d, 0x0, &(0x7f0000000640)) r0 = open(&(0x7f000000e480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x15) getdents64(r0, &(0x7f000000e580)=""/224, 0xe0) 750.096022ms ago: executing program 4 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/kernel/mm/ksm/pages_to_scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1G', 0x2) 749.503532ms ago: executing program 1 (id=975): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = epoll_create(0x752) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x1, 0x4) 614.676525ms ago: executing program 4 (id=976): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 587.700248ms ago: executing program 0 (id=977): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002600)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)=@getstats={0x1c, 0x5e, 0x1, 0xf0bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 529.850694ms ago: executing program 1 (id=978): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 358.201603ms ago: executing program 0 (id=979): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b0, &(0x7f0000000280)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 264.503362ms ago: executing program 5 (id=980): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffe}, &(0x7f00000000c0)=0x8) 262.918092ms ago: executing program 1 (id=990): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) 85.286831ms ago: executing program 4 (id=981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 21.010167ms ago: executing program 5 (id=982): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x544, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x9, 0xe34}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x3cc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x718, 0x6, 0x6, 0x1, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x1a4, 0x2, [@m_csum={0x170, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xd1, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x30, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x544}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=983): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) kernel console output (not intermixed with test programs): ongly recommended to keep mac addresses unique to avoid problems! [ 89.047593][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.106768][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.115711][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.128388][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.135844][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.159555][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.171995][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180803][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.189879][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.217703][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.227293][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.236036][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.245875][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.258044][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.275135][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.305592][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.314315][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.343059][ T4279] device veth0_macvtap entered promiscuous mode [ 89.354975][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.365310][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.396454][ T4280] device veth0_vlan entered promiscuous mode [ 89.397107][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 89.408905][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 89.409024][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 89.434500][ T4279] device veth1_macvtap entered promiscuous mode [ 89.484508][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 89.538911][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.553147][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.566366][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 89.573529][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.587767][ T4280] device veth1_vlan entered promiscuous mode [ 89.598512][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.630333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.641916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.650856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.661123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.669629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.679047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.688219][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.700447][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.710896][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.722299][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.734232][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.744337][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.745807][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.756012][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.773211][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.783921][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.792621][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.801683][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.838519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.846663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.855328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.865086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.874824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.889794][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.901660][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.910491][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.923135][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.975971][ T4290] device veth0_vlan entered promiscuous mode [ 89.994754][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.004122][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.030672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.044787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.056282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.064974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.080862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.089855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.099225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.138795][ T4290] device veth1_vlan entered promiscuous mode [ 90.159874][ T4280] device veth0_macvtap entered promiscuous mode [ 90.202032][ T4280] device veth1_macvtap entered promiscuous mode [ 90.222170][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.249465][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.273092][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.285954][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.296168][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.307451][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.317576][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.330725][ T4398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.338257][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.369445][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.382475][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.392110][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.406642][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.415178][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.430994][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.443971][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.458963][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.490300][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.504474][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.514969][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.527008][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.537490][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.556816][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.576179][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.591576][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.603450][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.612976][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.623538][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.638561][ T4290] device veth0_macvtap entered promiscuous mode [ 90.645750][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.660102][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.687497][ T4280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.711840][ T4280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.736143][ T4280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.758027][ T4280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.788484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.810296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.829813][ T4290] device veth1_macvtap entered promiscuous mode [ 90.920551][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.946017][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.958665][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.969855][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.982418][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.993337][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.004532][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.015326][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.034495][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.067437][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.076084][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.096582][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.112019][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.144383][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.155989][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.168148][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.180748][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.191561][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.201983][ T4290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.217294][ T4290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.229651][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.253244][ T4414] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.262297][ T4414] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.271117][ T4414] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.279918][ T4414] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.305760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.314399][ T4414] Zero length message leads to an empty skb [ 91.333779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.377216][ T4290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.402990][ T4290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.426383][ T4290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.475686][ T4290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.608372][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.626496][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.670185][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.742165][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.753136][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.762129][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.774213][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.800550][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.810028][ T27] cfg80211: failed to load regulatory.db [ 91.823449][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.834143][ T4426] loop2: detected capacity change from 0 to 2048 [ 91.904475][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.923296][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.969643][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.233027][ T4436] loop0: detected capacity change from 0 to 2048 [ 92.348893][ T4436] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 92.381641][ T4436] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 92.457386][ T4436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.014754][ T4459] loop3: detected capacity change from 0 to 512 [ 93.068552][ T4459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.097895][ T4459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.155876][ T4459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.217839][ T4459] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.24: bad orphan inode 131083 [ 93.259128][ T4459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.347285][ T4459] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.24: Logical block already allocated [ 93.363499][ T4352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.394040][ T4475] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.24: Logical block already allocated [ 93.568465][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 93.585409][ T4352] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.616027][ T4352] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.656367][ T4352] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 93.696592][ T4352] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 93.738227][ T4488] loop2: detected capacity change from 0 to 512 [ 93.752580][ T4352] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 93.803197][ T4352] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 93.833593][ T4488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.854312][ T4352] usb 5-1: config 1 interface 1 has no altsetting 0 [ 93.961434][ T4352] usb 5-1: string descriptor 0 read error: -22 [ 94.006498][ T4352] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 94.033513][ T4352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.155166][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 94.716929][ T4522] loop1: detected capacity change from 0 to 512 [ 94.733489][ T4522] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.790317][ T4522] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.44: inode #88: comm syz.1.44: iget: illegal inode # [ 94.852362][ T4522] EXT4-fs (loop1): Remounting filesystem read-only [ 94.866453][ T4522] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.44: error while reading EA inode 88 err=-117 [ 94.897405][ T4522] EXT4-fs (loop1): Remounting filesystem read-only [ 94.909997][ T4352] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 94.917119][ T4522] EXT4-fs (loop1): 1 orphan inode deleted [ 94.923609][ T4522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.955131][ T4352] usb 5-1: USB disconnect, device number 2 [ 95.038085][ T4522] EXT4-fs (loop1): shut down requested (2) [ 95.187062][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 95.261095][ T4394] udevd[4394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.382992][ T4538] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 95.426582][ T4538] File: /dev/nullb0 PID: 4538 Comm: syz.0.47 [ 95.766442][ T4552] tun0: tun_chr_ioctl cmd 1074025676 [ 95.796625][ T4552] tun0: owner set to 0 [ 96.107187][ T4563] input: syz0 as /devices/virtual/input/input5 [ 96.403720][ T4574] loop2: detected capacity change from 0 to 1024 [ 96.464574][ T4364] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.659374][ T4583] bond0: no command found in slaves file - use +ifname or -ifname [ 96.756337][ T4285] Bluetooth: hci4: command 0x0405 tx timeout [ 97.936350][ T4395] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.128127][ T4395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.156184][ T4395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.205470][ T4395] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 98.234990][ T4395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.288905][ T4395] metro_usb 1-1:1.0: Metrologic USB to Serial converter detected [ 98.335899][ T4395] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 98.524903][ T4622] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 98.588820][ T4395] usb 1-1: USB disconnect, device number 2 [ 98.631532][ T4395] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 98.672445][ T4395] metro_usb 1-1:1.0: device disconnected [ 99.376445][ T4395] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 99.404587][ T4678] loop3: detected capacity change from 0 to 512 [ 99.526748][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.547365][ T4678] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.567631][ T4395] usb 3-1: not running at top speed; connect to a high speed hub [ 99.583373][ T4395] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 99.597566][ T4395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.605877][ T4395] usb 3-1: Product: syz [ 99.610262][ T4395] usb 3-1: Manufacturer: syz [ 99.614903][ T4395] usb 3-1: SerialNumber: syz [ 99.621050][ T4506] udevd[4506]: symlink '../../loop3' '/dev/disk/by-diskseq/81.tmp-b7:3' failed: Read-only file system [ 99.641264][ T4395] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 99.666975][ T4653] loop1: detected capacity change from 0 to 32768 [ 99.678034][ T4395] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 99.696701][ T4506] udevd[4506]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 99.710355][ T4653] ======================================================= [ 99.710355][ T4653] WARNING: The mand mount option has been deprecated and [ 99.710355][ T4653] and is ignored by this kernel. Remove the mand [ 99.710355][ T4653] option from the mount to silence this warning. [ 99.710355][ T4653] ======================================================= [ 99.759159][ T4395] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 99.802512][ T4395] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 99.848265][ C0] usb 3-1: malformed indat packet [ 99.853796][ C0] usb 3-1: malformed indat packet [ 99.859827][ C0] usb 3-1: malformed indat packet [ 99.865139][ C0] usb 3-1: malformed indat packet [ 99.871976][ C0] usb 3-1: malformed indat packet [ 99.877455][ C0] usb 3-1: malformed indat packet [ 99.895960][ T4395] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 99.925256][ C0] usb 3-1: malformed indat packet [ 99.965778][ T4290] EXT4-fs (loop3): unmounting filesystem. [ 100.010482][ T4506] udevd[4506]: symlink '../../loop3' '/dev/disk/by-diskseq/81.tmp-b7:3' failed: Read-only file system [ 100.059846][ T4506] udevd[4506]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 100.123008][ T4653] jfs_strtoUCS: char2uni returned -22. [ 100.149016][ T4653] charset = cp936, char = 0xd4 [ 100.228793][ T27] usb 3-1: USB disconnect, device number 2 [ 100.286009][ T4394] udevd[4394]: setting mode of /dev/ttyUSB0 to 020660 failed: Read-only file system [ 100.303846][ T27] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 100.331460][ T4394] udevd[4394]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: Read-only file system [ 100.364309][ T27] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 100.364692][ T4689] udevd[4689]: symlink '../../loop3' '/dev/disk/by-diskseq/81.tmp-b7:3' failed: Read-only file system [ 100.424994][ T4529] udevd[4529]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 100.434600][ T27] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 100.491047][ T27] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 100.506790][ T4689] udevd[4689]: symlink '../../loop3' '/dev/disk/by-diskseq/81.tmp-b7:3' failed: Read-only file system [ 100.520525][ T4529] udevd[4529]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 100.542783][ T27] keyspan 3-1:1.0: device disconnected [ 100.881330][ T4689] udevd[4689]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 100.955762][ T4689] udevd[4689]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 101.033724][ T4689] udevd[4689]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 101.142424][ T4718] ip_tables: iptables: counters copy to user failed while replacing table [ 101.343294][ T4724] loop4: detected capacity change from 0 to 512 [ 101.422118][ T4727] loop1: detected capacity change from 0 to 64 [ 101.508606][ T4728] loop2: detected capacity change from 0 to 1024 [ 101.517342][ T4691] udevd[4691]: symlink '../../loop1' '/dev/disk/by-diskseq/86.tmp-b7:1' failed: Read-only file system [ 101.987442][ T4352] kernel write not supported for file /input/mice (pid: 4352 comm: kworker/0:4) [ 102.647837][ T26] audit: type=1326 audit(1793303435.071:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 102.712549][ T26] audit: type=1326 audit(1793303435.101:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 102.796424][ T26] audit: type=1326 audit(1793303435.111:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 102.896358][ T26] audit: type=1326 audit(1793303435.111:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 102.957586][ T26] audit: type=1326 audit(1793303435.111:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 103.018759][ T26] audit: type=1326 audit(1793303435.111:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 103.071044][ T4783] loop2: detected capacity change from 0 to 512 [ 103.081491][ T4779] netlink: 71 bytes leftover after parsing attributes in process `syz.0.134'. [ 103.125570][ T26] audit: type=1326 audit(1793303435.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 103.159801][ T4783] EXT4-fs (loop2): 1 truncate cleaned up [ 103.168481][ T4786] loop1: detected capacity change from 0 to 1024 [ 103.195398][ T26] audit: type=1326 audit(1793303435.141:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 103.219701][ T26] audit: type=1326 audit(1793303435.141:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 103.243930][ T26] audit: type=1326 audit(1793303435.161:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.0.128" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f6699f559 code=0x7ffc0000 [ 103.279525][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.428228][ T4783] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.137: bg 0: block 465: padding at end of block bitmap is not set [ 103.593343][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 103.615674][ T4793] loop3: detected capacity change from 0 to 64 [ 104.199501][ T4805] loop2: detected capacity change from 0 to 1024 [ 104.265396][ T4811] loop0: detected capacity change from 0 to 1024 [ 104.437169][ T32] hfsplus: b-tree write err: -5, ino 25 [ 104.443210][ T32] hfsplus: b-tree write err: -5, ino 4 [ 104.476558][ T32] hfsplus: b-tree write err: -5, ino 2 [ 104.829050][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 104.998422][ T4838] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 105.249599][ T4356] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.461882][ T4356] usb 1-1: Using ep0 maxpacket: 16 [ 105.473439][ T4356] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 105.505506][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.534721][ T4356] usb 1-1: Product: syz [ 105.554960][ T4356] usb 1-1: Manufacturer: syz [ 105.570047][ T4356] usb 1-1: SerialNumber: syz [ 105.591900][ T4356] usb 1-1: config 0 descriptor?? [ 105.615638][ T4356] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 105.624622][ T4841] loop4: detected capacity change from 0 to 32768 [ 105.724392][ T4841] JBD2: Ignoring recovery information on journal [ 105.937261][ T4841] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 106.213814][ T4841] syz.4.162 (4841) used greatest stack depth: 18624 bytes left [ 106.378063][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 106.424702][ T4356] ssu100: probe of 1-1:0.0 failed with error -71 [ 106.452856][ T4356] usb 1-1: USB disconnect, device number 3 [ 107.379652][ T4908] Bluetooth: MGMT ver 1.22 [ 107.413940][ T4910] overlayfs: upper fs does not support tmpfile. [ 108.122765][ T4395] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.326587][ T4395] usb 3-1: Using ep0 maxpacket: 32 [ 108.334250][ T4395] usb 3-1: unable to get BOS descriptor or descriptor too short [ 108.382593][ T4395] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.438887][ T4395] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.507067][ T4395] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 108.573403][ T4395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.616328][ T4395] usb 3-1: Product: syz [ 108.638927][ T4395] usb 3-1: Manufacturer: syz [ 108.673391][ T4395] usb 3-1: SerialNumber: syz [ 108.716229][ C1] sched: RT throttling activated [ 108.738581][ T4395] usb 3-1: selecting invalid altsetting 1 [ 108.785219][ T4925] loop3: detected capacity change from 0 to 131072 [ 108.879114][ T4938] bonding: no command found in bonding_masters - use +ifname or -ifname [ 108.898599][ T4689] udevd[4689]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.916570][ T4925] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.006601][ T4925] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.029211][ T4927] loop2: detected capacity change from 0 to 2048 [ 109.075962][ T4925] F2FS-fs (loop3): recover xattr in inode (7), error(0) [ 109.076105][ T4925] F2FS-fs (loop3): set inode (7) has corrupted xattr [ 109.151487][ T4927] loop2: p1 < > p4 [ 109.151487][ T4927] p4: [ 109.156800][ T4927] loop2: p4 size 722688 extends beyond EOD, truncated [ 109.178640][ T4355] usb 3-1: USB disconnect, device number 3 [ 109.807840][ T4355] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.986291][ T4395] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.025696][ T4355] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.053374][ T4952] loop0: detected capacity change from 0 to 40427 [ 110.056522][ T4355] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.081656][ T4952] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 110.091170][ T4355] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.112318][ T4952] F2FS-fs (loop0): invalid crc value [ 110.123961][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.139871][ T4952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.153509][ T4951] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.178486][ T4395] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.206383][ T4395] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.251222][ T4395] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 110.291134][ T4395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.306924][ T4952] F2FS-fs (loop0): Start checkpoint disabled! [ 110.316494][ T4356] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.421806][ T4952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 110.506424][ T4356] usb 3-1: Using ep0 maxpacket: 32 [ 110.517665][ T4356] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.585739][ T4356] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 110.596380][ T4356] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.638732][ T4356] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 110.681103][ T4356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.722364][ T4356] usb 3-1: Product: syz [ 110.753537][ T4356] usb 3-1: Manufacturer: syz [ 110.766364][ T4356] usb 3-1: SerialNumber: syz [ 110.825043][ T4356] usb 3-1: config 0 descriptor?? [ 110.925996][ T4352] usb 5-1: USB disconnect, device number 3 [ 110.966175][ C0] usb 2-1: received EP1 urb->status = -71 [ 110.972191][ T4395] snd-usb-caiaq 2-1:1.0: bogus number of streams: 0 [ 110.978916][ T4395] snd-usb-caiaq 2-1:1.0: Unable to set up audio system (ret=-22) [ 111.003608][ T4395] usb 2-1: unable to init card! (ret=-22) [ 111.011517][ T32] kworker/u4:2: attempt to access beyond end of device [ 111.011517][ T32] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.033559][ T4395] snd-usb-caiaq: probe of 2-1:1.0 failed with error -22 [ 111.087698][ T4395] usb 2-1: USB disconnect, device number 2 [ 111.250223][ T4356] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 111.511448][ T4961] loop3: detected capacity change from 0 to 32768 [ 111.666602][ T4356] usb 3-1: USB disconnect, device number 4 [ 111.771345][ T4961] XFS (loop3): Mounting V5 Filesystem [ 111.894962][ T4978] loop0: detected capacity change from 0 to 2048 [ 111.942770][ T4978] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 112.007736][ T4978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.023815][ T4961] XFS (loop3): Ending clean mount [ 112.186337][ T4355] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 112.199526][ T4290] XFS (loop3): Unmounting Filesystem [ 112.298318][ T4990] ip_tables: iptables: counters copy to user failed while replacing table [ 112.355586][ T4994] netlink: 52 bytes leftover after parsing attributes in process `syz.2.226'. [ 112.428696][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.456437][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.469977][ T4997] loop0: detected capacity change from 0 to 2048 [ 112.488907][ T4355] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 112.507949][ T4997] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 112.526143][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.544765][ T4997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.584888][ T4355] usb 2-1: config 0 descriptor?? [ 112.800963][ T5004] pimreg1: tun_chr_ioctl cmd 35111 [ 113.050523][ T4355] hid-generic 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 113.064747][ T5008] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.340446][ T4395] usb 2-1: USB disconnect, device number 3 [ 113.419172][ T5015] fido_id[5015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 113.807483][ T5037] raw_sendmsg: syz.2.239 forgot to set AF_INET. Fix it! [ 114.346860][ T5033] loop0: detected capacity change from 0 to 32768 [ 114.388473][ T5033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.238 (5033) [ 114.496765][ T5033] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.520028][ T5033] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 114.543679][ T5033] BTRFS info (device loop0): use zlib compression, level 3 [ 114.571156][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 114.580563][ T5033] BTRFS info (device loop0): turning on sync discard [ 114.580628][ T5033] BTRFS info (device loop0): using free space tree [ 114.747206][ T5080] loop3: detected capacity change from 0 to 256 [ 114.780155][ T5080] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 114.896563][ T5033] BTRFS info (device loop0): enabling ssd optimizations [ 114.937577][ T4395] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.126269][ T4395] usb 5-1: Using ep0 maxpacket: 32 [ 115.133432][ T4395] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 115.192168][ T4395] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 115.241421][ T4395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.292097][ T4395] usb 5-1: Product: syz [ 115.309398][ T4282] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.311654][ T4395] usb 5-1: Manufacturer: syz [ 115.368619][ T5099] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 115.375691][ T5099] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5 [ 115.398873][ T4395] usb 5-1: SerialNumber: syz [ 115.446999][ T4395] usb 5-1: config 0 descriptor?? [ 115.452757][ T5099] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 115.467900][ T5071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.508747][ T4395] hub 5-1:0.0: bad descriptor, ignoring hub [ 115.514738][ T4395] hub: probe of 5-1:0.0 failed with error -5 [ 115.663085][ T4395] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 115.887670][ T4395] usb 5-1: USB disconnect, device number 4 [ 115.893590][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 116.347954][ T5127] netlink: 'syz.3.263': attribute type 6 has an invalid length. [ 116.959884][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 116.959919][ T26] audit: type=1326 audit(1793303449.381:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.4.270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84139f559 code=0x7fc00000 [ 117.195117][ T5158] loop1: detected capacity change from 0 to 2048 [ 117.227608][ T5161] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 117.289541][ T5158] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 117.309574][ T5158] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.426068][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 117.527884][ T26] audit: type=1326 audit(1793303449.951:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.4.270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8413408d9 code=0x7fc00000 [ 117.588559][ T26] audit: type=1326 audit(1793303449.951:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.4.270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc84134099d code=0x7fc00000 [ 117.621197][ T5168] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 117.675876][ T5155] loop3: detected capacity change from 0 to 32768 [ 117.684445][ T26] audit: type=1326 audit(1793303449.951:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.4.270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc84139f559 code=0x7fc00000 [ 117.738625][ T5170] loop0: detected capacity change from 0 to 16 [ 117.756005][ T5170] erofs: (device loop0): mounted with root inode @ nid 36. [ 117.771920][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 117.784188][ T5170] syz.0.281: attempt to access beyond end of device [ 117.784188][ T5170] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 117.809617][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 117.819046][ T5170] syz.0.281: attempt to access beyond end of device [ 117.819046][ T5170] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 117.837625][ T5170] syz.0.281: attempt to access beyond end of device [ 117.837625][ T5170] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 117.849408][ T5155] [ 117.849408][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.849408][ T5155] [ 117.866283][ T26] audit: type=1800 audit(1793303450.271:25): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.281" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 117.930994][ T5174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.015561][ T5155] ERROR: (device loop3): diWrite: ixpxd invalid [ 118.015561][ T5155] [ 118.056048][ T5155] ERROR: (device loop3): txCommit: [ 118.056048][ T5155] [ 118.135347][ T5155] [ 118.135347][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.135347][ T5155] [ 118.195825][ T5155] [ 118.195825][ T5155] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.195825][ T5155] [ 118.215696][ T5183] loop0: detected capacity change from 0 to 128 [ 118.252075][ T5155] ERROR: (device loop3): diWrite: ixpxd invalid [ 118.252075][ T5155] [ 118.282772][ T5155] ERROR: (device loop3): txCommit: [ 118.282772][ T5155] [ 118.327429][ T5183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 118.426406][ T5183] System zones: 1-3, 19-19, 35-36 [ 118.432339][ T5183] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.494664][ T4290] ERROR: (device loop3): diFree: wmap shows inode already free [ 118.494664][ T4290] [ 118.512928][ T5183] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.546664][ T5106] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.559341][ T4290] [ 118.559341][ T4290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.559341][ T4290] [ 118.570660][ T4290] [ 118.570660][ T4290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.570660][ T4290] [ 118.602982][ T5183] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 118.717271][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 118.758433][ T5106] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.801491][ T5106] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.827509][ T5106] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.846283][ T5106] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.877217][ T5106] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 118.896626][ T5106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.196963][ T5205] loop2: detected capacity change from 0 to 16 [ 119.214436][ T5205] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 119.290017][ T4691] udevd[4691]: incorrect cramfs checksum on /dev/loop2 [ 119.379178][ T4691] udevd[4691]: incorrect cramfs checksum on /dev/loop2 [ 119.448836][ T5210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 119.543870][ T5192] loop4: detected capacity change from 0 to 32768 [ 119.576505][ T5192] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.289 (5192) [ 119.589195][ T5106] gud 2-1:1.0: Failed to get properties (error=-5) [ 119.597627][ T5106] gud: probe of 2-1:1.0 failed with error -5 [ 119.649803][ T5192] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 119.667033][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.685424][ T5192] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 119.705572][ T5212] loop2: detected capacity change from 0 to 4096 [ 119.711765][ T5192] BTRFS info (device loop4): using free space tree [ 119.753784][ T5212] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 119.824795][ T5106] usb 2-1: USB disconnect, device number 4 [ 119.889529][ T22] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.915231][ T5192] BTRFS info (device loop4): enabling ssd optimizations [ 119.932664][ T22] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 119.995945][ T22] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.050049][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.076327][ T22] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 120.094446][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.109962][ T22] usb 4-1: config 0 descriptor?? [ 120.115845][ T5208] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.429222][ T5192] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512 [ 120.571897][ T22] input: HID 0079:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0079:0006.0002/input/input7 [ 120.584740][ T4280] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.665779][ T5244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 120.942292][ T22] dragonrise 0003:0079:0006.0002: value 1 is out of range [ 121.075941][ T22] dragonrise 0003:0079:0006.0002: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 121.122792][ T22] dragonrise 0003:0079:0006.0002: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley [ 121.172951][ T22] usb 4-1: USB disconnect, device number 2 [ 121.453643][ T5263] fido_id[5263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 121.806284][ T3601] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.854101][ T5286] loop3: detected capacity change from 0 to 256 [ 121.996440][ T3601] usb 2-1: Using ep0 maxpacket: 8 [ 122.005174][ T3601] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.040690][ T3601] usb 2-1: config 4 interface 0 has no altsetting 0 [ 122.082854][ T3601] usb 2-1: string descriptor 0 read error: -22 [ 122.109545][ T3601] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 122.146255][ T3601] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 122.217990][ T3601] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 122.252923][ T3601] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 122.286861][ T3601] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 122.326930][ T3601] usb 2-1: media controller created [ 122.348088][ T5271] loop0: detected capacity change from 0 to 32768 [ 122.374796][ T3601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.473651][ T5271] XFS (loop0): Mounting V5 Filesystem [ 122.620385][ T5271] XFS (loop0): Ending clean mount [ 122.675830][ T3601] zl10353_read_register: readreg error (reg=127, ret==0) [ 122.784254][ T3601] usb 2-1: USB disconnect, device number 5 [ 122.895483][ T5316] tap0: tun_chr_ioctl cmd 1074025677 [ 122.912414][ T5316] tap0: linktype set to 825 [ 122.935029][ T4282] XFS (loop0): Unmounting Filesystem [ 122.966686][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.174951][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.197508][ T22] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.228215][ T22] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 123.246264][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 123.269869][ T22] usb 3-1: Product: syz [ 123.274130][ T22] usb 3-1: Manufacturer: syz [ 123.295017][ T22] navman 3-1:1.0: navman converter detected [ 123.318756][ T22] usb 3-1: navman converter now attached to ttyUSB0 [ 123.506286][ T5331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.517582][ T5309] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 123.550877][ T4352] usb 3-1: USB disconnect, device number 5 [ 123.581192][ T4352] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 123.612001][ T4352] navman 3-1:1.0: device disconnected [ 123.765677][ T5320] loop4: detected capacity change from 0 to 32768 [ 124.006906][ T5344] loop1: detected capacity change from 0 to 512 [ 124.041699][ T5344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 124.069037][ T5344] System zones: 1-12 [ 124.123933][ T5344] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.339: Directory hole found for htree index block 0 [ 124.183361][ T5344] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 124.193121][ T5344] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.339: Directory hole found for htree index block 0 [ 124.207532][ T5344] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 124.215851][ T5344] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.216642][ T4352] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.334212][ T5344] EXT4-fs (loop1): shut down requested (2) [ 124.453307][ T4352] usb 5-1: Using ep0 maxpacket: 8 [ 124.460096][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 124.461341][ T4352] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 124.526304][ T4352] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 124.555143][ T4352] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 124.591913][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.603721][ T5357] loop0: detected capacity change from 0 to 512 [ 124.631444][ T4352] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected [ 124.673559][ T4352] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 124.705637][ T5357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.721137][ T5357] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.053463][ T5357] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 125.094090][ T5357] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 125.136339][ T5357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.156377][ T5357] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 125.230225][ T5357] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 125.354020][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 125.370871][ T4352] usb 5-1: USB disconnect, device number 5 [ 125.376005][ T5353] loop2: detected capacity change from 0 to 32768 [ 125.391977][ T4352] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 125.444606][ T4352] kobil_sct 5-1:1.0: device disconnected [ 125.529738][ T5353] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 125.555483][ T5353] XFS (loop2): Mounting V5 Filesystem [ 125.733008][ T5353] XFS (loop2): Ending clean mount [ 125.805065][ T5353] XFS (loop2): Quotacheck needed: Please wait. [ 125.910249][ T5353] XFS (loop2): Quotacheck: Done. [ 126.209369][ T4279] XFS (loop2): Unmounting Filesystem [ 126.371528][ T5406] loop4: detected capacity change from 0 to 8192 [ 126.479836][ T5406] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.531661][ T5406] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 126.541326][ T5406] REISERFS (device loop4): using ordered data mode [ 126.548066][ T5406] reiserfs: using flush barriers [ 126.559165][ T5417] loop1: detected capacity change from 0 to 1024 [ 126.626979][ T5417] hfsplus: invalid length 1280 has been corrected to 255 [ 126.627967][ T5406] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.679429][ T5417] hfsplus: invalid length 1280 has been corrected to 255 [ 126.716314][ T5417] hfsplus: invalid length 1280 has been corrected to 255 [ 126.723439][ T5417] hfsplus: invalid length 1280 has been corrected to 255 [ 126.781624][ T5417] hfsplus: invalid length 1280 has been corrected to 255 [ 126.790258][ T5406] REISERFS (device loop4): checking transaction log (loop4) [ 126.848376][ T5406] REISERFS (device loop4): Using r5 hash to sort names [ 126.880548][ T5406] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 127.478022][ T5449] loop3: detected capacity change from 0 to 64 [ 127.553299][ T5453] loop2: detected capacity change from 0 to 256 [ 127.659567][ T5453] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 127.783309][ T5455] kAFS: Invalid Command on /proc/fs/afs/cells file [ 128.123734][ T5470] loop0: detected capacity change from 0 to 128 [ 128.187080][ T5470] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 128.228221][ T5470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.504650][ T5481] program syz.0.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.617832][ T26] audit: type=1326 audit(1793303461.041:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 128.697975][ T5489] loop0: detected capacity change from 0 to 8 [ 128.709602][ T26] audit: type=1326 audit(1793303461.041:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 128.794525][ T26] audit: type=1326 audit(1793303461.061:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 128.873713][ T26] audit: type=1326 audit(1793303461.061:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 128.956301][ T26] audit: type=1326 audit(1793303461.061:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 129.066584][ T26] audit: type=1326 audit(1793303461.071:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 129.126587][ T5499] loop0: detected capacity change from 0 to 256 [ 129.143167][ T26] audit: type=1326 audit(1793303461.071:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 129.192935][ T5499] exfat: Deprecated parameter 'namecase' [ 129.209012][ T5499] exfat: Deprecated parameter 'namecase' [ 129.226431][ T5495] loop1: detected capacity change from 0 to 4096 [ 129.240169][ T5499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 129.262520][ T26] audit: type=1326 audit(1793303461.071:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 129.360599][ T26] audit: type=1326 audit(1793303461.071:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 129.444614][ T5504] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.496650][ T26] audit: type=1326 audit(1793303461.071:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5484 comm="syz.3.400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd88f9f559 code=0x7ffc0000 [ 129.967176][ T5483] loop4: detected capacity change from 0 to 32768 [ 130.087513][ T5483] XFS (loop4): Mounting V5 Filesystem [ 130.115026][ T5525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.416'. [ 130.249925][ T5483] XFS (loop4): Ending clean mount [ 130.281331][ T5483] XFS (loop4): Quotacheck needed: Please wait. [ 130.345848][ T5483] XFS (loop4): Quotacheck: Done. [ 130.637585][ T4280] XFS (loop4): Unmounting Filesystem [ 130.730588][ T5542] loop1: detected capacity change from 0 to 2048 [ 130.993431][ T5551] loop3: detected capacity change from 0 to 256 [ 131.025785][ T5551] exfat: Deprecated parameter 'utf8' [ 131.036845][ T5551] exfat: Deprecated parameter 'namecase' [ 131.052057][ T5551] exfat: Deprecated parameter 'utf8' [ 131.100115][ T5551] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 131.335437][ T5553] loop1: detected capacity change from 0 to 4096 [ 131.441641][ T5553] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 131.483568][ T5557] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 131.532432][ T5553] ntfs3: loop1: Failed to load $Extend. [ 131.539622][ T5557] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 131.568248][ T5557] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.922892][ T4274] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 132.036066][ T5564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.084920][ T5564] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.230678][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.363406][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 132.379672][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.541461][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.672981][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.760742][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.772282][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.189848][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.193286][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.194160][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.194997][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.195564][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.195852][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.419362][ T5603] set_capacity_and_notify: 2 callbacks suppressed [ 133.419403][ T5603] loop1: detected capacity change from 0 to 2048 [ 133.573299][ T5603] EXT4-fs: Ignoring removed nobh option [ 133.606350][ T5250] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.629579][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 133.641304][ T5594] rxe_eth0 speed is unknown, defaulting to 1000 [ 133.796387][ T5250] usb 5-1: Using ep0 maxpacket: 16 [ 133.806529][ T5250] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 133.833554][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.852106][ T5250] usb 5-1: Product: syz [ 133.856811][ T5250] usb 5-1: Manufacturer: syz [ 133.861465][ T5250] usb 5-1: SerialNumber: syz [ 133.980317][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 134.160195][ T5250] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 134.206149][ T5250] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 134.240451][ T5250] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 134.289069][ T5250] usb 5-1: media controller created [ 134.315576][ T5250] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.407451][ T5250] zl10353_read_register: readreg error (reg=127, ret==-71) [ 134.494673][ T5250] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 134.522116][ T5250] usb 5-1: USB disconnect, device number 6 [ 134.711069][ T5635] loop1: detected capacity change from 0 to 256 [ 134.785599][ T5635] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 135.129052][ T5639] ip_tables: iptables: counters copy to user failed while replacing table [ 135.159111][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 135.238353][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 135.394553][ T5641] loop4: detected capacity change from 0 to 512 [ 135.496668][ T5641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.511862][ T5644] loop1: detected capacity change from 0 to 1024 [ 135.582814][ T5106] kernel write not supported for file /comedi4 (pid: 5106 comm: kworker/1:9) [ 135.796020][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 135.882701][ T5644] hfsplus: request for non-existent node 62977 in B*Tree [ 135.919869][ T5644] hfsplus: request for non-existent node 62977 in B*Tree [ 136.109734][ T4788] hfsplus: b-tree write err: -5, ino 3 [ 136.249880][ T5594] chnl_net:caif_netlink_parms(): no params data found [ 136.606533][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.613788][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.647331][ T5594] device bridge_slave_0 entered promiscuous mode [ 136.678167][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.685527][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.714911][ T5594] device bridge_slave_1 entered promiscuous mode [ 136.771746][ T5681] loop2: detected capacity change from 0 to 128 [ 136.839220][ T5681] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 136.892564][ T5681] hpfs: filesystem error: improperly stopped [ 136.925708][ T5681] hpfs: You really don't want any checks? You are crazy... [ 136.948513][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.986141][ T5681] hpfs: hpfs_map_sector(): read error [ 137.013206][ T5681] hpfs: code page support is disabled [ 137.022435][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.043171][ T5681] hpfs: hpfs_map_4sectors(): unaligned read [ 137.071581][ T5681] hpfs: hpfs_map_4sectors(): unaligned read [ 137.087487][ T5681] hpfs: filesystem error: unable to find root dir [ 137.140882][ T48] device hsr_slave_0 left promiscuous mode [ 137.167946][ T48] device hsr_slave_1 left promiscuous mode [ 137.189490][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.217464][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.242498][ T5691] capability: warning: `syz.0.473' uses 32-bit capabilities (legacy support in use) [ 137.254370][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.262055][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.286095][ T5691] program syz.0.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.298232][ T48] device bridge_slave_1 left promiscuous mode [ 137.315520][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.316942][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 137.423415][ T48] device bridge_slave_0 left promiscuous mode [ 137.453619][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.597628][ T48] device veth1_macvtap left promiscuous mode [ 137.604426][ T48] device veth0_macvtap left promiscuous mode [ 137.636547][ T48] device veth1_vlan left promiscuous mode [ 137.642767][ T48] device veth0_vlan left promiscuous mode [ 138.171186][ T5694] loop4: detected capacity change from 0 to 32768 [ 138.249130][ T5696] loop2: detected capacity change from 0 to 32768 [ 138.341195][ T5696] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.730332][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 138.797072][ T5715] loop4: detected capacity change from 0 to 512 [ 139.232026][ T5715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.269780][ T5715] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.480: inode has both inline data and extents flags [ 139.284069][ T5715] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.480: couldn't read orphan inode 15 (err -117) [ 139.296751][ T5715] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.396511][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 139.568544][ T5715] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 139.606007][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 139.606022][ T26] audit: type=1800 audit(1793303472.021:37): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.480" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 139.704107][ T48] team0 (unregistering): Port device team_slave_1 removed [ 139.710175][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 139.824976][ T48] team0 (unregistering): Port device team_slave_0 removed [ 139.925107][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.045515][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.140538][ T5733] loop2: detected capacity change from 0 to 40427 [ 140.169366][ T5733] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 140.189062][ T5733] F2FS-fs (loop2): invalid crc value [ 140.218657][ T5733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.313468][ T5733] F2FS-fs (loop2): recover fsync data on readonly fs [ 140.333199][ T5733] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 140.353924][ T5733] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 140.374417][ T5733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.409228][ T5737] loop4: detected capacity change from 0 to 32768 [ 140.577505][ T5737] XFS (loop4): Mounting V5 Filesystem [ 140.680735][ T5737] XFS (loop4): Ending clean mount [ 140.699316][ T5737] XFS (loop4): Quotacheck needed: Please wait. [ 140.748161][ T4276] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 140.802014][ T5737] XFS (loop4): Quotacheck: Done. [ 141.001391][ T4280] XFS (loop4): Unmounting Filesystem [ 141.048486][ T48] bond0 (unregistering): Released all slaves [ 141.117587][ T5594] team0: Port device team_slave_0 added [ 141.153991][ T5594] team0: Port device team_slave_1 added [ 141.233416][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.306614][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.382843][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.410510][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.429910][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.467225][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.480684][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 141.561642][ T5594] device hsr_slave_0 entered promiscuous mode [ 141.568855][ T5594] device hsr_slave_1 entered promiscuous mode [ 141.575608][ T5594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.583699][ T5594] Cannot create hsr debugfs directory [ 141.887126][ T5766] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 141.943514][ T5766] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 141.993531][ T5766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'. [ 142.013776][ T5766] netlink: 'syz.2.490': attribute type 2 has an invalid length. [ 142.022660][ T5766] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 142.056349][ T5766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'. [ 142.076627][ T5766] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 142.183791][ T5594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.250166][ T5594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.291971][ T5594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.328444][ T5594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.360437][ T5751] loop0: detected capacity change from 0 to 32768 [ 142.481826][ T5751] JBD2: Ignoring recovery information on journal [ 142.515886][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.587380][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.627252][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.655031][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.701975][ T5751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 142.716022][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.745954][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.790127][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.797371][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.835991][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.871830][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.914591][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.963088][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.970348][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.013587][ T5763] loop1: detected capacity change from 0 to 32768 [ 143.038436][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.077478][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.124038][ T5763] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 143.179698][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.203546][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 143.218194][ T5763] JBD2: Ignoring recovery information on journal [ 143.224823][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 143.262945][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.334485][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.382208][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.406875][ T5763] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 143.437337][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.465233][ T5594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.497857][ T5594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.528552][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.539381][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.588516][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.932645][ T5787] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input9 [ 144.009782][ T5798] loop4: detected capacity change from 0 to 512 [ 144.173682][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 144.499269][ T5806] loop2: detected capacity change from 0 to 512 [ 144.517490][ T4276] Bluetooth: hci4: command 0x0411 tx timeout [ 144.605760][ T5806] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.497: inode has both inline data and extents flags [ 144.643670][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.706520][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.720636][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.758472][ T5806] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.497: couldn't read orphan inode 15 (err -117) [ 144.770771][ T4276] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 144.779525][ T4276] Bluetooth: hci2: Injecting HCI hardware error event [ 144.789764][ T4285] Bluetooth: hci2: hardware error 0x00 [ 144.810053][ T5806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.176512][ T4352] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.319165][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 145.370366][ T4352] usb 5-1: Using ep0 maxpacket: 8 [ 145.381173][ T4352] usb 5-1: config index 0 descriptor too short (expected 1060, got 36) [ 145.432560][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.465939][ T4352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.506534][ T4352] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.541381][ T4352] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 145.576255][ T4352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.612244][ T5841] netlink: 'syz.0.505': attribute type 11 has an invalid length. [ 145.620347][ T4352] usb 5-1: config 0 descriptor?? [ 145.969108][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.996640][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.081523][ T5594] device veth0_vlan entered promiscuous mode [ 146.113379][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.137369][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.177342][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.207065][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.235734][ T5594] device veth1_vlan entered promiscuous mode [ 146.249958][ T5856] loop2: detected capacity change from 0 to 512 [ 146.286101][ T5857] loop0: detected capacity change from 0 to 2048 [ 146.330705][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.376139][ T5856] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 146.389024][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.419752][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.439204][ T5856] FAT-fs (loop2): Filesystem has been set read-only [ 146.445398][ T5862] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.461117][ T4352] sony 0003:1345:3008.0003: can't set operational mode: step 1 [ 146.473540][ T4352] sony 0003:1345:3008.0003: Failed to set controller into operational mode [ 146.489154][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.536168][ T5594] device veth0_macvtap entered promiscuous mode [ 146.562833][ T5594] device veth1_macvtap entered promiscuous mode [ 146.577182][ T5857] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 146.617725][ T4352] sony 0003:1345:3008.0003: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 146.641678][ T5857] Remounting filesystem read-only [ 146.674768][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.702635][ T5864] loop1: detected capacity change from 0 to 256 [ 146.723915][ T4352] sony 0003:1345:3008.0003: failed to claim input [ 146.758036][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.796541][ T4352] usb 5-1: USB disconnect, device number 7 [ 146.800233][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.812175][ T5864] exfat: Deprecated parameter 'utf8' [ 146.873836][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.887735][ T5864] exfat: Deprecated parameter 'namecase' [ 146.895338][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.916332][ T4285] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 146.994285][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.007006][ T5864] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 147.038588][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.062582][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.088006][ T5867] fido_id[5867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 147.160052][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.221001][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.240152][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.265867][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.297815][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.327464][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.354469][ T5873] loop4: detected capacity change from 0 to 164 [ 147.360634][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.406506][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.441002][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.473698][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.515498][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.545887][ T5594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.580126][ T5594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.636047][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.667881][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.689730][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.722366][ T5594] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.751535][ T5594] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.764636][ T5594] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.793950][ T5594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.952393][ T5880] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 147.972619][ T5880] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.518'. [ 148.090002][ T4789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.127297][ T4789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.167860][ T5883] loop4: detected capacity change from 0 to 4096 [ 148.200395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.225412][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.265807][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.291011][ T5883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.335926][ T5886] loop0: detected capacity change from 0 to 256 [ 148.377186][ T5886] exfat: Deprecated parameter 'namecase' [ 148.398466][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.458058][ T5886] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 148.749314][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 148.820897][ T5875] loop1: detected capacity change from 0 to 32768 [ 148.873331][ T5875] XFS: ikeep mount option is deprecated. [ 148.999922][ T5896] loop4: detected capacity change from 0 to 512 [ 149.108907][ T5875] XFS (loop1): Mounting V5 Filesystem [ 149.375457][ T5875] XFS (loop1): Ending clean mount [ 149.573355][ T5910] loop5: detected capacity change from 0 to 4096 [ 149.702856][ T4274] XFS (loop1): Unmounting Filesystem [ 150.081354][ T5928] loop2: detected capacity change from 0 to 1024 [ 150.390776][ T5932] loop5: detected capacity change from 0 to 64 [ 150.702180][ T5937] loop1: detected capacity change from 0 to 64 [ 150.769826][ T5937] hfs: unable to locate alternate MDB [ 150.776931][ T5937] hfs: continuing without an alternate MDB [ 150.885209][ T5920] loop0: detected capacity change from 0 to 32768 [ 150.953021][ T5920] (syz.0.528,5920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.016579][ T5920] (syz.0.528,5920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 151.112444][ T5914] loop4: detected capacity change from 0 to 32768 [ 151.124303][ T5920] JBD2: Ignoring recovery information on journal [ 151.255661][ T5920] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 151.351921][ T5914] XFS (loop4): Mounting V5 Filesystem [ 151.359715][ T5955] loop1: detected capacity change from 0 to 1024 [ 151.504734][ T5955] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.545626][ T5914] XFS (loop4): Ending clean mount [ 151.874173][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 151.919892][ T4280] XFS (loop4): Unmounting Filesystem [ 152.000462][ T5943] loop2: detected capacity change from 0 to 32768 [ 152.105584][ T5943] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 152.145512][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 152.218145][ T5967] bond0: option mode: unable to set because the bond device has slaves [ 152.272308][ T5943] JBD2: Ignoring recovery information on journal [ 152.424373][ T5943] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 152.686633][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 153.016409][ T4352] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.209342][ T4352] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.244353][ T4352] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.285334][ T4352] usb 1-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 153.314540][ T4352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.340193][ T4352] usb 1-1: Product: syz [ 153.355607][ T4352] usb 1-1: Manufacturer: syz [ 153.366154][ T4352] usb 1-1: SerialNumber: syz [ 153.396084][ T4352] symbolserial 1-1:1.0: symbol converter detected [ 153.414353][ T4352] usb 1-1: symbol converter now attached to ttyUSB0 [ 153.645816][ T5976] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 153.709159][ T4352] usb 1-1: USB disconnect, device number 4 [ 153.731256][ T4352] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 153.764130][ T4352] symbolserial 1-1:1.0: device disconnected [ 154.318498][ T26] audit: type=1400 audit(1793303486.741:38): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=6008 comm="syz.5.551" name="p" offset=59 [ 154.905660][ T5998] loop1: detected capacity change from 0 to 32768 [ 155.013541][ T26] audit: type=1800 audit(1793303487.431:39): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.547" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 155.524591][ T6014] loop0: detected capacity change from 0 to 32768 [ 155.628212][ T6014] JBD2: Ignoring recovery information on journal [ 155.794578][ T6014] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 156.117184][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 156.382333][ T6026] loop5: detected capacity change from 0 to 32768 [ 156.469050][ T6026] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 156.893216][ T5594] ocfs2: Unmounting device (7,5) on (node local) [ 157.153819][ T6042] loop4: detected capacity change from 0 to 40427 [ 157.174949][ T6060] loop1: detected capacity change from 0 to 4096 [ 157.207797][ T6060] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 157.276463][ T6042] F2FS-fs (loop4): invalid crc value [ 157.313607][ T6042] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.533485][ T6042] F2FS-fs (loop4): Start checkpoint disabled! [ 157.605922][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.614993][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.627242][ T6042] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 157.762047][ T6073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.570'. [ 158.213005][ T4363] kworker/u4:5: attempt to access beyond end of device [ 158.213005][ T4363] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.236877][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.323570][ T6049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.421176][ T6085] loop2: detected capacity change from 0 to 128 [ 159.484067][ T6085] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 159.518814][ T6085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.744381][ T6089] loop1: detected capacity change from 0 to 512 [ 159.980200][ T6049] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.990203][ T6049] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.999913][ T6049] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.017225][ T6049] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.245966][ T6073] netlink: 60 bytes leftover after parsing attributes in process `syz.5.570'. [ 160.245984][ T6081] netlink: 'syz.4.572': attribute type 12 has an invalid length. [ 160.246002][ T6081] netlink: 'syz.4.572': attribute type 29 has an invalid length. [ 160.306612][ T6081] netlink: 148 bytes leftover after parsing attributes in process `syz.4.572'. [ 160.315749][ T6081] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 160.336360][ T6081] netlink: 47 bytes leftover after parsing attributes in process `syz.4.572'. [ 161.163892][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.586'. [ 161.218618][ T6118] batman_adv: batadv0: Adding interface: ipvlan2 [ 161.244405][ T6118] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.326306][ T4360] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.335345][ T6118] batman_adv: batadv0: Interface activated: ipvlan2 [ 161.519452][ T4360] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 161.534520][ T4360] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 161.553137][ T4360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 161.597947][ T4360] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 161.624046][ T4360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 161.652705][ T4360] usb 2-1: Product: syz [ 161.659162][ T4360] usb 2-1: Manufacturer: syz [ 161.909820][ T6116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.956407][ T6116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.982601][ T4360] dvb_ttusb_budget: ttusb_init_controller: error [ 162.016416][ T4360] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 162.207232][ T6116] dvb_ttusb_budget: failed urb submission (0: err = -8)! [ 162.362805][ T4360] DVB: Unable to find symbol cx22700_attach() [ 162.473479][ T6148] loop4: detected capacity change from 0 to 128 [ 162.531667][ T6148] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 162.550201][ T4360] DVB: Unable to find symbol tda10046_attach() [ 162.558918][ T4360] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 162.590000][ T6148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.606622][ T4360] usb 2-1: USB disconnect, device number 6 [ 162.773334][ T5250] kernel read not supported for file /dsp (pid: 5250 comm: kworker/0:13) [ 163.207672][ T6163] loop0: detected capacity change from 0 to 2048 [ 163.353306][ T6163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.392216][ T6163] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.711222][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 164.720363][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'. [ 165.207289][ T6224] loop2: detected capacity change from 0 to 512 [ 165.295511][ T6224] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 165.329481][ T6224] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.435588][ T6224] capability: warning: `syz.2.623' uses deprecated v2 capabilities in a way that may be insecure [ 165.594698][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 165.697662][ T6242] MTRR 1 not used [ 165.836414][ T5106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.980331][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'. [ 166.013961][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.038443][ T5106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 166.060131][ T5106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.088268][ T5106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 166.109664][ T5106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 166.142648][ T5106] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 166.162219][ T5106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.178790][ T5106] usb 1-1: Product: syz [ 166.183067][ T5106] usb 1-1: Manufacturer: syz [ 166.195224][ T5106] usb 1-1: SerialNumber: syz [ 166.217197][ T5106] usb 1-1: config 0 descriptor?? [ 166.361071][ T6267] loop2: detected capacity change from 0 to 64 [ 166.456117][ T4360] kernel read not supported for file /dsp (pid: 4360 comm: kworker/0:5) [ 166.482944][ T5106] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 166.596267][ T6270] loop1: detected capacity change from 0 to 64 [ 166.682956][ T3601] usb 1-1: USB disconnect, device number 5 [ 166.806039][ T6278] loop1: detected capacity change from 0 to 64 [ 166.903715][ T6280] loop5: detected capacity change from 0 to 128 [ 166.906613][ T4360] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 166.932903][ T6280] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 166.988809][ T6280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.108290][ T4360] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.125149][ T4360] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 167.136760][ T4360] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.150836][ T4360] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.158707][ T4360] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 167.168144][ T4360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.211378][ T4360] usb 5-1: config 0 descriptor?? [ 167.236947][ T6273] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.337004][ T6290] loop1: detected capacity change from 0 to 2048 [ 167.346424][ T3601] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 167.395129][ T6288] loop5: detected capacity change from 0 to 8192 [ 167.410717][ T6290] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.474381][ T6290] EXT4-fs (loop1): shut down requested (2) [ 167.515636][ T6288] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.528559][ T6299] kAFS: bad VL server IP address [ 167.539864][ T3601] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 167.559478][ T3601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.580447][ T3601] usb 3-1: Product: syz [ 167.584688][ T3601] usb 3-1: Manufacturer: syz [ 167.605883][ T3601] usb 3-1: SerialNumber: syz [ 167.618960][ T3601] usb 3-1: config 0 descriptor?? [ 167.662690][ T4360] input: HID 0079:0006 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0079:0006.0004/input/input11 [ 167.667850][ T3601] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 167.733068][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 167.776072][ T4360] dragonrise 0003:0079:0006.0004: value 1 is out of range [ 167.840407][ T4360] dragonrise 0003:0079:0006.0004: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 167.889827][ T4360] dragonrise 0003:0079:0006.0004: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley [ 167.925846][ T4360] usb 5-1: USB disconnect, device number 8 [ 168.254048][ T6304] fido_id[6304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 168.437526][ T3601] usb 3-1: USB disconnect, device number 6 [ 168.568947][ T32] bond0: (slave bond_slave_0): interface is now down [ 168.591310][ T32] bond0: (slave bond_slave_1): interface is now down [ 168.638837][ T32] bond0: (slave bond_slave_0): interface is now down [ 168.645700][ T32] bond0: (slave bond_slave_1): interface is now down [ 168.687768][ T32] bond0: now running without any active interface! [ 168.728831][ T6321] mmap: syz.1.655 (6321) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.235127][ T6314] loop0: detected capacity change from 0 to 32768 [ 169.341094][ T6314] XFS (loop0): Mounting V5 Filesystem [ 169.365455][ T6339] loop4: detected capacity change from 0 to 2048 [ 169.386461][ T5106] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.447571][ T6339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.476374][ T6339] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.491718][ T6314] XFS (loop0): Ending clean mount [ 169.533370][ T26] audit: type=1800 audit(1793303501.951:40): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.659" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 169.621612][ T5106] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 169.646573][ T5106] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.681315][ T4282] XFS (loop0): Unmounting Filesystem [ 169.693898][ T5106] usb 3-1: config 0 descriptor?? [ 169.703674][ T6353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.669: bg 0: block 345: padding at end of block bitmap is not set [ 169.723508][ T5106] cp210x 3-1:0.0: cp210x converter detected [ 169.740122][ T6352] loop5: detected capacity change from 0 to 2048 [ 169.798952][ T6353] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 28 [ 169.821923][ T6353] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.821923][ T6353] [ 169.867674][ T6353] EXT4-fs (loop4): Total free blocks count 0 [ 169.873826][ T6353] EXT4-fs (loop4): Free/Dirty block details [ 169.900082][ T6352] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 169.937928][ T6353] EXT4-fs (loop4): free_blocks=0 [ 169.980847][ T6353] EXT4-fs (loop4): dirty_blocks=192 [ 169.996345][ T6334] loop1: detected capacity change from 0 to 32768 [ 170.032159][ T6353] EXT4-fs (loop4): Block reservation details [ 170.040341][ T6352] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.671: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 170.060231][ T6353] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 170.066580][ T6334] JBD2: Ignoring recovery information on journal [ 170.130968][ T5106] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 170.216592][ T6352] EXT4-fs (loop5): Remounting filesystem read-only [ 170.223769][ T6352] CacheFiles: Lookup cache failed with error -117 [ 170.253809][ T6334] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 170.268120][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 167 with error 28 [ 170.311211][ T6352] CacheFiles: Failed to register: -117 [ 170.352657][ T5106] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 170.382884][ T5106] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 170.420450][ T5106] usb 3-1: cp210x converter now attached to ttyUSB0 [ 170.455457][ T5106] usb 3-1: USB disconnect, device number 7 [ 170.517591][ T5106] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 170.538038][ T5594] EXT4-fs (loop5): unmounting filesystem. [ 170.545353][ T5106] cp210x 3-1:0.0: device disconnected [ 170.604372][ T4274] ocfs2: Unmounting device (7,1) on (node local) [ 170.799709][ T6372] loop5: detected capacity change from 0 to 1024 [ 170.917203][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 171.377652][ T6391] netlink: 'syz.4.681': attribute type 3 has an invalid length. [ 171.675212][ T6382] loop1: detected capacity change from 0 to 32768 [ 171.775722][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 171.795055][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 172.474785][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.693'. [ 172.683218][ T6427] loop0: detected capacity change from 0 to 2048 [ 172.733050][ T6431] device-mapper: table: 248:0: striped: Target length not divisible by number of stripes (-EINVAL) [ 172.764617][ T6427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.774296][ T6431] device-mapper: ioctl: error adding target to table [ 173.056508][ T4395] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.210566][ T6440] loop4: detected capacity change from 0 to 4096 [ 173.248378][ T4395] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.260031][ T6440] NILFS (loop4): invalid segment: Checksum error in segment payload [ 173.293740][ T6440] NILFS (loop4): trying rollback from an earlier position [ 173.301369][ T4395] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 173.314991][ T6445] zero sized request [ 173.342598][ T6442] loop0: detected capacity change from 0 to 4096 [ 173.353834][ T4395] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.383986][ T6440] NILFS (loop4): recovery complete [ 173.411237][ T6442] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 173.416739][ T6448] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.436965][ T4395] usb 6-1: config 0 interface 0 has no altsetting 0 [ 173.464269][ T4395] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 173.495651][ T4395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.510848][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 173.547065][ T4395] usb 6-1: config 0 descriptor?? [ 173.569264][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.581605][ T6434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 173.624644][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.685911][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.729030][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.750803][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.772926][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.835133][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.898688][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.936465][ T5245] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.953101][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 173.992711][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.031238][ T4395] input: HID 0079:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0079:0006.0005/input/input12 [ 174.042866][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.081344][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.121149][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.137362][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.146313][ T5245] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.159670][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.186363][ T5245] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.190513][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.216257][ T5245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.235438][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.235627][ T4395] dragonrise 0003:0079:0006.0005: value 1 is out of range [ 174.255547][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.266239][ T3601] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 174.278878][ T5245] usb 3-1: config 0 descriptor?? [ 174.308615][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.337907][ T4395] dragonrise 0003:0079:0006.0005: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 174.348678][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.371841][ T4395] dragonrise 0003:0079:0006.0005: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley [ 174.396418][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.407726][ T4395] usb 6-1: USB disconnect, device number 2 [ 174.449126][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.493606][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.507264][ T3601] usb 1-1: config 127 has an invalid interface number: 2 but max is 0 [ 174.527405][ T3601] usb 1-1: config 127 has no interface number 0 [ 174.560701][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.572280][ T3601] usb 1-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=4b.5f [ 174.592335][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.605930][ T3601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.624511][ T3601] usb 1-1: Product: syz [ 174.634631][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.654915][ T3601] usb 1-1: Manufacturer: syz [ 174.669560][ T3601] usb 1-1: SerialNumber: syz [ 174.675237][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.694230][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.697983][ T5245] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 174.721449][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.741609][ T6463] fido_id[6463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 174.768481][ T6440] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 174.772336][ T5245] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0006/input/input13 [ 174.802885][ T6440] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 174.892483][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.944049][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.977141][ T5245] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 174.984515][ T3601] ftdi_sio 1-1:127.2: FTDI USB Serial Device converter detected [ 175.038435][ T3601] ftdi_sio ttyUSB0: unknown device type: 0x4b5f [ 175.054285][ T3601] usb 1-1: USB disconnect, device number 6 [ 175.098212][ T3601] ftdi_sio 1-1:127.2: device disconnected [ 175.137712][ T5106] usb 3-1: USB disconnect, device number 8 [ 175.158800][ T6473] kAFS: Invalid Command on /proc/fs/afs/cells file [ 175.360857][ T6472] fido_id[6472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.696377][ T5245] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 175.863786][ T6499] loop0: detected capacity change from 0 to 512 [ 175.886384][ T5245] usb 6-1: Using ep0 maxpacket: 8 [ 175.893518][ T5245] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 175.921894][ T6494] loop4: detected capacity change from 0 to 4096 [ 175.928979][ T5245] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.981727][ T6494] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 176.001939][ T5245] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.044909][ T5245] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.086354][ T5245] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.139914][ T5245] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.180822][ T5245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.425046][ T5245] usb 6-1: GET_CAPABILITIES returned 0 [ 176.430838][ T5245] usbtmc 6-1:16.0: can't read capabilities [ 176.637660][ T5245] usb 6-1: USB disconnect, device number 3 [ 176.784768][ T6524] vivid-000: disconnect [ 176.799319][ T6520] vivid-000: reconnect [ 177.779945][ T6566] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 177.828266][ T6566] File: /dev/nullb0 PID: 6566 Comm: syz.4.740 [ 178.378919][ T6565] loop0: detected capacity change from 0 to 32768 [ 178.482735][ T6565] XFS (loop0): Mounting V5 Filesystem [ 178.667295][ T6565] XFS (loop0): Ending clean mount [ 178.704305][ T6565] XFS (loop0): Quotacheck needed: Please wait. [ 178.843974][ T6565] XFS (loop0): Quotacheck: Done. [ 179.092026][ T4282] XFS (loop0): Unmounting Filesystem [ 179.316831][ T4362] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.355436][ T6592] loop1: detected capacity change from 0 to 32768 [ 179.518336][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.539996][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.576224][ T4362] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 179.606286][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.647929][ T4362] usb 5-1: config 0 descriptor?? [ 179.896667][ T6619] loop1: detected capacity change from 0 to 256 [ 180.064152][ T4362] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 180.094901][ T4362] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 180.154998][ T4362] hid-steam 0003:28DE:1142.0008: unknown main item tag 0x0 [ 180.213309][ T4362] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 180.346359][ T4362] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 180.361256][ T4362] usb 5-1: USB disconnect, device number 9 [ 180.416046][ T4362] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 180.516585][ T4276] Bluetooth: hci5: command 0x1003 tx timeout [ 180.525612][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 180.707941][ T6630] fido_id[6630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 180.770798][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.759'. [ 181.363855][ T6671] block2mtd: parameter too long [ 181.614509][ T6678] tap0: tun_chr_ioctl cmd 1074025673 [ 181.950009][ T6686] loop0: detected capacity change from 0 to 8192 [ 182.198355][ T6707] program syz.4.783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.038797][ T6724] loop0: detected capacity change from 0 to 512 [ 183.119822][ T6700] loop2: detected capacity change from 0 to 32768 [ 183.220343][ T6724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 183.260407][ T6724] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.280589][ T6700] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 183.475308][ T6705] loop1: detected capacity change from 0 to 40427 [ 183.502961][ T6713] loop4: detected capacity change from 0 to 32768 [ 183.555297][ T6705] F2FS-fs (loop1): invalid crc value [ 183.567747][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 183.600709][ T6713] XFS (loop4): Mounting V5 Filesystem [ 183.638959][ T6705] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.724991][ T6713] XFS (loop4): Ending clean mount [ 183.745660][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 183.929664][ T6705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.018838][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 184.083624][ T4280] XFS (loop4): Unmounting Filesystem [ 184.136631][ T6753] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 184.230341][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 184.368975][ T4274] syz-executor: attempt to access beyond end of device [ 184.368975][ T4274] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.414344][ T6755] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 184.789969][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 185.049393][ T6774] loop0: detected capacity change from 0 to 24 [ 185.098035][ T6774] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 185.140906][ T6774] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 185.528728][ T6783] bond0: no command found in slaves file - use +ifname or -ifname [ 185.765169][ T6761] loop5: detected capacity change from 0 to 32768 [ 185.844166][ T6790] loop0: detected capacity change from 0 to 512 [ 185.993733][ T6773] loop4: detected capacity change from 0 to 32768 [ 186.003772][ T6773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.797 (6773) [ 186.035268][ T6761] XFS (loop5): Mounting V5 Filesystem [ 186.060370][ T6773] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.082748][ T6790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.140343][ T6790] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.151619][ T6773] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 186.172127][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 186.181725][ T6773] BTRFS info (device loop4): using free space tree [ 186.392718][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 186.499493][ T6761] XFS (loop5): Ending clean mount [ 186.617878][ T6761] XFS (loop5): Quotacheck needed: Please wait. [ 186.661338][ T6831] netem: incorrect gi model size [ 186.698544][ T6773] BTRFS info (device loop4): enabling ssd optimizations [ 186.708925][ T6831] netem: change failed [ 186.746671][ T6761] XFS (loop5): Quotacheck: Done. [ 186.773247][ T6761] XFS (loop5): User initiated shutdown received. [ 186.787064][ T6761] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 186.802531][ T6761] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 186.993392][ T5594] XFS (loop5): Unmounting Filesystem [ 187.214143][ T4280] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 187.346839][ T6845] netlink: 72 bytes leftover after parsing attributes in process `syz.0.810'. [ 187.547310][ T6847] netem: incorrect gi model size [ 187.553313][ T6847] netem: change failed [ 188.335675][ T6883] netlink: 19 bytes leftover after parsing attributes in process `syz.2.818'. [ 188.491179][ T6891] program syz.5.822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.652728][ T6901] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 188.831864][ T6907] loop2: detected capacity change from 0 to 1024 [ 188.940247][ T6912] overlayfs: failed to set xattr on upper [ 188.981103][ T26] audit: type=1800 audit(1793303521.401:41): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.828" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 189.043264][ T6907] hfsplus: found bad thread record in catalog [ 189.186324][ T32] hfsplus: found bad thread record in catalog [ 189.541130][ T6937] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma? [ 189.826958][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 189.849497][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 190.165581][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 190.175763][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 190.520493][ T6977] loop0: detected capacity change from 0 to 256 [ 190.544622][ T26] audit: type=1800 audit(1793303522.961:42): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.857" name="file1" dev="loop0" ino=1048746 res=0 errno=0 [ 190.851688][ T6987] usb usb8: usbfs: process 6987 (syz.0.862) did not claim interface 0 before use [ 190.879598][ T6987] loop0: detected capacity change from 0 to 1024 [ 191.146125][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 192.058798][ T7038] tap0: tun_chr_ioctl cmd 1074025677 [ 192.080875][ T7038] tap0: linktype set to 778 [ 192.122244][ T7040] loop2: detected capacity change from 0 to 2048 [ 192.183218][ T7040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.769823][ T7056] loop2: detected capacity change from 0 to 256 [ 193.097680][ T7063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.642759][ T7078] loop5: detected capacity change from 0 to 8192 [ 193.674603][ T6852] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.723826][ T7078] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.769918][ T7078] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 193.780161][ T7078] REISERFS (device loop5): using ordered data mode [ 193.787365][ T7078] reiserfs: using flush barriers [ 193.810600][ T7089] loop2: detected capacity change from 0 to 1024 [ 193.820347][ T7078] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.847050][ T7078] REISERFS (device loop5): checking transaction log (loop5) [ 193.902747][ T6852] usb 5-1: Using ep0 maxpacket: 16 [ 193.913932][ T6852] usb 5-1: config 0 has no interfaces? [ 193.936480][ T7078] REISERFS (device loop5): Using r5 hash to sort names [ 193.954123][ T6852] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 193.958348][ T7078] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 193.984634][ T6852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.035242][ T6852] usb 5-1: Product: syz [ 194.055472][ T6852] usb 5-1: Manufacturer: syz [ 194.065593][ T6852] usb 5-1: SerialNumber: syz [ 194.098563][ T6852] r8152-cfgselector 5-1: config 0 descriptor?? [ 194.182154][ T7094] loop0: detected capacity change from 0 to 64 [ 194.199862][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.206563][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.267575][ T7094] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 194.336591][ T6852] r8152-cfgselector 5-1: Unknown version 0x0000 [ 194.352790][ T6852] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 194.387815][ T7094] gfs2: path_lookup on c::: returned error -2 [ 194.437416][ T7080] loop1: detected capacity change from 0 to 32768 [ 194.463186][ T7080] XFS: noikeep mount option is deprecated. [ 194.489764][ T7080] XFS: ikeep mount option is deprecated. [ 194.618671][ T7080] XFS (loop1): Mounting V5 Filesystem [ 194.732149][ T7080] XFS (loop1): Ending clean mount [ 194.773249][ T7108] netlink: 56 bytes leftover after parsing attributes in process `syz.5.915'. [ 194.986633][ T4274] XFS (loop1): Unmounting Filesystem [ 195.011273][ T26] audit: type=1400 audit(1793303527.431:43): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7111 comm="syz.4.917" name="unknown" offset=16 [ 195.279778][ T7115] loop4: detected capacity change from 0 to 8192 [ 195.326603][ T7101] loop0: detected capacity change from 0 to 32768 [ 195.373382][ T26] audit: type=1800 audit(1793303527.791:44): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.919" name="bus" dev="loop4" ino=1048748 res=0 errno=0 [ 195.410912][ T7101] (syz.0.914,7101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.467264][ T7101] (syz.0.914,7101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 195.530608][ T7101] JBD2: Ignoring recovery information on journal [ 195.718519][ T7101] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 195.936018][ T7127] loop1: detected capacity change from 0 to 2048 [ 196.009927][ T7129] loop2: detected capacity change from 0 to 2048 [ 196.104376][ T7127] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 196.155344][ T7129] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 196.168000][ T7129] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 196.209328][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 196.227763][ T7129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.390301][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 196.397139][ T7139] ima: policy update failed [ 196.418611][ T26] audit: type=1802 audit(1793303528.841:45): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.925" res=0 errno=0 [ 196.439110][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.924426][ T7156] loop5: detected capacity change from 0 to 128 [ 196.982932][ T7156] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 196.989251][ T7158] loop4: detected capacity change from 0 to 256 [ 197.149945][ T26] audit: type=1800 audit(1793303529.571:46): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.934" name="file1" dev="loop5" ino=1048749 res=0 errno=0 [ 197.276450][ T4788] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 197.316568][ T5250] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 197.520457][ T5250] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 197.534262][ T5250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.551515][ T5250] usb 3-1: Product: syz [ 197.560849][ T5250] usb 3-1: Manufacturer: syz [ 197.571160][ T5250] usb 3-1: SerialNumber: syz [ 197.604218][ T5250] usb 3-1: config 0 descriptor?? [ 197.664232][ T7147] loop0: detected capacity change from 0 to 40427 [ 197.716468][ T7147] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.730394][ T7147] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.778054][ T7147] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.898406][ T6852] usb 3-1: USB disconnect, device number 9 [ 197.996981][ T7147] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 198.014365][ T7147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.731446][ T7204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.954'. [ 198.839299][ T7189] loop1: detected capacity change from 0 to 32768 [ 198.977396][ T7211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.020333][ T7211] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.251006][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 199.574679][ T7220] ima: policy update failed [ 199.594678][ T26] audit: type=1802 audit(1793303532.011:47): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.961" res=0 errno=0 [ 200.194362][ T26] audit: type=1326 audit(1793303532.611:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.5.967" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ad119f559 code=0x0 [ 200.267949][ T7238] set_capacity_and_notify: 1 callbacks suppressed [ 200.267965][ T7238] loop5: detected capacity change from 0 to 16 [ 200.331359][ T7238] erofs: (device loop5): mounted with root inode @ nid 36. [ 200.804199][ T7257] loop4: detected capacity change from 0 to 512 [ 200.869238][ T7257] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.976: bad orphan inode 11862016 [ 200.909329][ T7257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 200.923497][ T7257] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.093392][ T7265] loop0: detected capacity change from 0 to 256 [ 201.307441][ T7250] loop2: detected capacity change from 0 to 32768 [ 201.350212][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 206.516346][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 206.522434][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 206.528553][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 255.649251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655621][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.036294][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 317.078636][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085002][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.436512][ T28] INFO: task jbd2/sda1-8:3603 blocked for more than 143 seconds. [ 364.444324][ T28] Not tainted syzkaller #0 [ 364.456976][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.465668][ T28] task:jbd2/sda1-8 state:D stack:23824 pid:3603 ppid:2 flags:0x00004000 [ 364.475769][ T28] Call Trace: [ 364.479134][ T28] [ 364.482102][ T28] __schedule+0x107f/0x4030 [ 364.486795][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 364.491875][ T28] ? release_firmware_map_entry+0x187/0x187 [ 364.497902][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 364.503852][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 364.509180][ T28] schedule+0xb9/0x180 [ 364.513290][ T28] io_schedule+0x7c/0xd0 [ 364.517615][ T28] bit_wait_io+0xd/0xc0 [ 364.521827][ T28] __wait_on_bit+0x9b/0x2c0 [ 364.526446][ T28] ? bit_wait+0xc0/0xc0 [ 364.530662][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 364.536214][ T28] ? bit_wait+0xc0/0xc0 [ 364.540394][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 364.545156][ T28] ? do_raw_write_lock+0x11a/0x260 [ 364.550358][ T28] ? bit_waitqueue+0x30/0x30 [ 364.554997][ T28] ? do_raw_read_unlock+0x39/0x70 [ 364.560179][ T28] jbd2_journal_commit_transaction+0x2f0f/0x5f30 [ 364.566689][ T28] ? jbd2_journal_finish_inode_data_buffers+0xa0/0xa0 [ 364.574130][ T28] ? lock_chain_count+0x20/0x20 [ 364.579584][ T28] ? _raw_spin_unlock+0x40/0x40 [ 364.584496][ T28] ? rcu_is_watching+0x11/0xa0 [ 364.589609][ T28] ? __timer_delete_sync+0x239/0x2e0 [ 364.594907][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 364.600914][ T28] ? timer_delete_sync+0x20/0x20 [ 364.605903][ T28] ? do_raw_read_unlock+0x70/0x70 [ 364.611313][ T28] ? prepare_to_wait+0x1a6/0x1f0 [ 364.616508][ T28] kjournald2+0x40b/0x800 [ 364.620899][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 364.626174][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 364.632238][ T28] ? wake_bit_function+0x200/0x200 [ 364.637454][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 364.643445][ T28] ? __kthread_parkme+0x71/0x1c0 [ 364.648463][ T28] ? __kthread_parkme+0x15b/0x1c0 [ 364.653639][ T28] kthread+0x29d/0x330 [ 364.657808][ T28] ? jbd2_seq_info_show+0x5c0/0x5c0 [ 364.663105][ T28] ? kthread_blkcg+0xd0/0xd0 [ 364.667774][ T28] ret_from_fork+0x1f/0x30 [ 364.672943][ T28] [ 364.676023][ T28] INFO: task syz-executor:4262 blocked for more than 143 seconds. [ 364.683953][ T28] Not tainted syzkaller #0 [ 364.689380][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.698312][ T28] task:syz-executor state:D stack:22992 pid:4262 ppid:4261 flags:0x00004002 [ 364.707777][ T28] Call Trace: [ 364.711098][ T28] [ 364.714071][ T28] __schedule+0x107f/0x4030 [ 364.719672][ T28] ? mark_lock+0x94/0x320 [ 364.724050][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 364.729357][ T28] ? release_firmware_map_entry+0x187/0x187 [ 364.735280][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 364.741497][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 364.746989][ T28] schedule+0xb9/0x180 [ 364.751105][ T28] io_schedule+0x7c/0xd0 [ 364.755371][ T28] bit_wait_io+0xd/0xc0 [ 364.760012][ T28] __wait_on_bit+0x9b/0x2c0 [ 364.764585][ T28] ? bit_wait+0xc0/0xc0 [ 364.769031][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 364.775134][ T28] ? bit_wait+0xc0/0xc0 [ 364.779605][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 364.784381][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 364.789711][ T28] ? bit_waitqueue+0x30/0x30 [ 364.794353][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 364.799951][ T28] do_get_write_access+0x605/0xf20 [ 364.805149][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 364.811707][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 364.818177][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 364.824402][ T28] ? rcu_is_watching+0x11/0xa0 [ 364.829553][ T28] ext4_reserve_inode_write+0x201/0x290 [ 364.835154][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 364.841002][ T28] ext4_dirty_inode+0xbf/0x100 [ 364.845901][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 364.851835][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 364.856953][ T28] __file_update_time+0x21d/0x240 [ 364.862027][ T28] file_update_time+0x2f3/0x370 [ 364.867046][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 364.872396][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 364.878294][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 364.884582][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 364.890164][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 364.895224][ T28] do_page_mkwrite+0x16b/0x5c0 [ 364.900302][ T28] wp_page_shared+0x167/0x370 [ 364.905015][ T28] handle_mm_fault+0x1b1b/0x3d40 [ 364.911131][ T28] ? mt_find+0x157/0x830 [ 364.915451][ T28] ? numa_migrate_prep+0x250/0x250 [ 364.921297][ T28] ? lock_chain_count+0x20/0x20 [ 364.926245][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 364.931585][ T28] do_user_addr_fault+0x58e/0xb20 [ 364.936732][ T28] exc_page_fault+0x60/0x100 [ 364.941378][ T28] ? clear_bhb_loop+0x60/0xb0 [ 364.946182][ T28] asm_exc_page_fault+0x22/0x30 [ 364.951094][ T28] RIP: 0033:0x7f874e2715e3 [ 364.955551][ T28] RSP: 002b:00007ffdd4fbc240 EFLAGS: 00010202 [ 364.961720][ T28] RAX: 00007f874aff515c RBX: 00007ffdd4fbc370 RCX: 0000000000000000 [ 364.969881][ T28] RDX: 00007f874aff5158 RSI: 0000000000000008 RDI: 00007ffdd4fbc370 [ 364.977937][ T28] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 364.986575][ T28] R10: 00007ffdd4fbc350 R11: 0000000000000000 R12: 0000000000000000 [ 364.994592][ T28] R13: 000000000000aea4 R14: ffffffffffff515c R15: 0000000000000000 [ 365.002804][ T28] [ 365.005952][ T28] INFO: task syz.2.973:7249 blocked for more than 143 seconds. [ 365.013610][ T28] Not tainted syzkaller #0 [ 365.018793][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.027653][ T28] task:syz.2.973 state:D stack:26256 pid:7249 ppid:4279 flags:0x00004004 [ 365.036946][ T28] Call Trace: [ 365.040285][ T28] [ 365.043254][ T28] __schedule+0x107f/0x4030 [ 365.047880][ T28] ? mark_lock+0x94/0x320 [ 365.052279][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 365.057743][ T28] ? release_firmware_map_entry+0x187/0x187 [ 365.063699][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 365.069881][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 365.075129][ T28] schedule+0xb9/0x180 [ 365.079521][ T28] io_schedule+0x7c/0xd0 [ 365.084839][ T28] bit_wait_io+0xd/0xc0 [ 365.089288][ T28] __wait_on_bit+0x9b/0x2c0 [ 365.093920][ T28] ? bit_wait+0xc0/0xc0 [ 365.098341][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 365.103844][ T28] ? bit_wait+0xc0/0xc0 [ 365.108274][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 365.113111][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 365.118505][ T28] ? bit_waitqueue+0x30/0x30 [ 365.123149][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 365.128815][ T28] do_get_write_access+0x605/0xf20 [ 365.134008][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 365.140347][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 365.146805][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 365.153022][ T28] ? rcu_is_watching+0x11/0xa0 [ 365.158378][ T28] ext4_reserve_inode_write+0x201/0x290 [ 365.163997][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 365.169995][ T28] ext4_dirty_inode+0xbf/0x100 [ 365.174814][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 365.181009][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 365.186959][ T28] __file_update_time+0x21d/0x240 [ 365.192074][ T28] file_update_time+0x2f3/0x370 [ 365.197282][ T28] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 365.202633][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 365.208288][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 365.213382][ T28] ? pte_alloc_one+0x287/0x310 [ 365.218533][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 365.224820][ T28] ? count_memcg_event_mm+0x8a/0x3c0 [ 365.230422][ T28] ? put_page+0x270/0x270 [ 365.234900][ T28] do_page_mkwrite+0x16b/0x5c0 [ 365.240798][ T28] handle_mm_fault+0x199c/0x3d40 [ 365.245781][ T28] ? mt_find+0x157/0x830 [ 365.250380][ T28] ? numa_migrate_prep+0x250/0x250 [ 365.255534][ T28] ? lock_chain_count+0x20/0x20 [ 365.260712][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 365.266049][ T28] do_user_addr_fault+0x58e/0xb20 [ 365.271465][ T28] exc_page_fault+0x60/0x100 [ 365.276172][ T28] asm_exc_page_fault+0x22/0x30 [ 365.281168][ T28] RIP: 0033:0x7fc986673c09 [ 365.285650][ T28] RSP: 002b:00007ffeca809080 EFLAGS: 00010202 [ 365.292543][ T28] RAX: 0000001b30124000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 365.300648][ T28] RDX: 0000001b30123ffc RSI: 00000000005ffde8 RDI: 00007fc987555700 [ 365.308721][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fc986a12000 [ 365.316862][ T28] R10: 00007fc987555700 R11: 0000000000000000 R12: 0000000000000000 [ 365.324875][ T28] R13: 000000000000567d R14: ffffffff812f8a4c R15: 00007fc987555720 [ 365.332974][ T28] ? fpregs_assert_state_consistent+0xac/0xe0 [ 365.339155][ T28] [ 365.342235][ T28] INFO: task syz.5.982:7270 blocked for more than 144 seconds. [ 365.350016][ T28] Not tainted syzkaller #0 [ 365.354996][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.363772][ T28] task:syz.5.982 state:D stack:27600 pid:7270 ppid:5594 flags:0x00004004 [ 365.373072][ T28] Call Trace: [ 365.376442][ T28] [ 365.379417][ T28] __schedule+0x107f/0x4030 [ 365.383982][ T28] ? mark_lock+0x94/0x320 [ 365.388439][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 365.394407][ T28] ? release_firmware_map_entry+0x187/0x187 [ 365.402568][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 365.408548][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 365.413799][ T28] schedule+0xb9/0x180 [ 365.417992][ T28] io_schedule+0x7c/0xd0 [ 365.422298][ T28] bit_wait_io+0xd/0xc0 [ 365.426584][ T28] __wait_on_bit+0x9b/0x2c0 [ 365.431135][ T28] ? bit_wait+0xc0/0xc0 [ 365.435332][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 365.440873][ T28] ? bit_wait+0xc0/0xc0 [ 365.445063][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 365.449936][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 365.455010][ T28] ? bit_waitqueue+0x30/0x30 [ 365.460720][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 365.465960][ T28] do_get_write_access+0x605/0xf20 [ 365.471160][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 365.484007][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 365.492223][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 365.498501][ T28] ? rcu_is_watching+0x11/0xa0 [ 365.503321][ T28] ext4_reserve_inode_write+0x201/0x290 [ 365.508976][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 365.514501][ T28] ext4_dirty_inode+0xbf/0x100 [ 365.519361][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 365.525221][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 365.530348][ T28] __file_update_time+0x21d/0x240 [ 365.535433][ T28] file_update_time+0x2f3/0x370 [ 365.540420][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 365.545759][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 365.550863][ T28] ? pte_alloc_one+0x287/0x310 [ 365.555696][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 365.562053][ T28] do_page_mkwrite+0x16b/0x5c0 [ 365.567084][ T28] handle_mm_fault+0x199c/0x3d40 [ 365.572072][ T28] ? mt_find+0x157/0x830 [ 365.576424][ T28] ? numa_migrate_prep+0x250/0x250 [ 365.581600][ T28] ? lock_chain_count+0x20/0x20 [ 365.586659][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 365.592053][ T28] do_user_addr_fault+0x58e/0xb20 [ 365.598071][ T28] exc_page_fault+0x60/0x100 [ 365.602722][ T28] ? clear_bhb_loop+0x60/0xb0 [ 365.607528][ T28] asm_exc_page_fault+0x22/0x30 [ 365.612425][ T28] RIP: 0033:0x7f4ad106cea3 [ 365.616910][ T28] RSP: 002b:00007fff6ceac780 EFLAGS: 00010246 [ 365.623026][ T28] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b31164000 [ 365.631161][ T28] RDX: 0000001b31124000 RSI: 0000000000400000 RDI: 00007f4ad13e7708 [ 365.642142][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.650185][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.658308][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff6ceaca10 [ 365.666436][ T28] [ 365.669518][ T28] INFO: task syz.1.983:7271 blocked for more than 144 seconds. [ 365.678010][ T28] Not tainted syzkaller #0 [ 365.683001][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 365.691801][ T28] task:syz.1.983 state:D stack:27600 pid:7271 ppid:4274 flags:0x00004004 [ 365.702448][ T28] Call Trace: [ 365.705769][ T28] [ 365.708782][ T28] __schedule+0x107f/0x4030 [ 365.713435][ T28] ? mark_lock+0x94/0x320 [ 365.717868][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 365.723060][ T28] ? release_firmware_map_entry+0x187/0x187 [ 365.729144][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 365.735083][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 365.740361][ T28] schedule+0xb9/0x180 [ 365.744474][ T28] io_schedule+0x7c/0xd0 [ 365.748828][ T28] bit_wait_io+0xd/0xc0 [ 365.753044][ T28] __wait_on_bit+0x9b/0x2c0 [ 365.757671][ T28] ? bit_wait+0xc0/0xc0 [ 365.761892][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 365.767448][ T28] ? bit_wait+0xc0/0xc0 [ 365.771653][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 365.776667][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 365.781746][ T28] ? bit_waitqueue+0x30/0x30 [ 365.786759][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 365.792012][ T28] do_get_write_access+0x605/0xf20 [ 365.797633][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 365.804321][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 365.810768][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 365.817138][ T28] ? rcu_is_watching+0x11/0xa0 [ 365.821963][ T28] ext4_reserve_inode_write+0x201/0x290 [ 365.827779][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 365.833287][ T28] ext4_dirty_inode+0xbf/0x100 [ 365.838279][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 365.844232][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 365.849534][ T28] __file_update_time+0x21d/0x240 [ 365.854617][ T28] file_update_time+0x2f3/0x370 [ 365.859751][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 365.865092][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 365.870368][ T28] ? pte_alloc_one+0x287/0x310 [ 365.875218][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 365.881810][ T28] do_page_mkwrite+0x16b/0x5c0 [ 365.886780][ T28] handle_mm_fault+0x199c/0x3d40 [ 365.891790][ T28] ? mt_find+0x157/0x830 [ 365.897014][ T28] ? numa_migrate_prep+0x250/0x250 [ 365.903113][ T28] ? lock_chain_count+0x20/0x20 [ 365.909048][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 365.914381][ T28] do_user_addr_fault+0x58e/0xb20 [ 365.919703][ T28] exc_page_fault+0x60/0x100 [ 365.924361][ T28] ? clear_bhb_loop+0x60/0xb0 [ 365.929351][ T28] asm_exc_page_fault+0x22/0x30 [ 365.934254][ T28] RIP: 0033:0x7fb821c6cea3 [ 365.939030][ T28] RSP: 002b:00007ffd58327b20 EFLAGS: 00010246 [ 365.945164][ T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fa64000 [ 365.953226][ T28] RDX: 0000001b2fa24000 RSI: 0000000000600000 RDI: 00007fb821fe7708 [ 365.961272][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.969352][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 365.977395][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd58327db0 [ 365.985410][ T28] [ 365.988518][ T28] INFO: task syz.4.981:7272 blocked for more than 144 seconds. [ 365.996146][ T28] Not tainted syzkaller #0 [ 366.001122][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 366.011453][ T28] task:syz.4.981 state:D stack:27600 pid:7272 ppid:4280 flags:0x00004004 [ 366.020939][ T28] Call Trace: [ 366.024267][ T28] [ 366.027999][ T28] __schedule+0x107f/0x4030 [ 366.032567][ T28] ? mark_lock+0x94/0x320 [ 366.037833][ T28] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.042932][ T28] ? release_firmware_map_entry+0x187/0x187 [ 366.048965][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 366.054911][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 366.060196][ T28] schedule+0xb9/0x180 [ 366.064337][ T28] io_schedule+0x7c/0xd0 [ 366.068674][ T28] bit_wait_io+0xd/0xc0 [ 366.072870][ T28] __wait_on_bit+0x9b/0x2c0 [ 366.077515][ T28] ? bit_wait+0xc0/0xc0 [ 366.081763][ T28] out_of_line_wait_on_bit+0x138/0x190 [ 366.087338][ T28] ? bit_wait+0xc0/0xc0 [ 366.091547][ T28] ? __wait_on_bit+0x2c0/0x2c0 [ 366.096443][ T28] ? do_raw_spin_lock+0x128/0x2f0 [ 366.101541][ T28] ? bit_waitqueue+0x30/0x30 [ 366.107267][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 366.112547][ T28] do_get_write_access+0x605/0xf20 [ 366.118569][ T28] jbd2_journal_get_write_access+0x108/0x140 [ 366.124720][ T28] __ext4_journal_get_write_access+0x24b/0x6e0 [ 366.131142][ T28] ? __ext4_journal_ensure_credits+0x450/0x450 [ 366.137477][ T28] ? rcu_is_watching+0x11/0xa0 [ 366.142303][ T28] ext4_reserve_inode_write+0x201/0x290 [ 366.147983][ T28] __ext4_mark_inode_dirty+0x161/0x7b0 [ 366.153526][ T28] ext4_dirty_inode+0xbf/0x100 [ 366.158426][ T28] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 366.164361][ T28] __mark_inode_dirty+0x2e7/0xe80 [ 366.169520][ T28] __file_update_time+0x21d/0x240 [ 366.174592][ T28] file_update_time+0x2f3/0x370 [ 366.179644][ T28] ? __file_remove_privs+0x5f0/0x5f0 [ 366.184995][ T28] ext4_page_mkwrite+0x1a9/0x10d0 [ 366.190119][ T28] ? pte_alloc_one+0x287/0x310 [ 366.194929][ T28] ? ext4_change_inode_journal_flag+0x710/0x710 [ 366.201662][ T28] do_page_mkwrite+0x16b/0x5c0 [ 366.206535][ T28] handle_mm_fault+0x199c/0x3d40 [ 366.212195][ T28] ? mt_find+0x157/0x830 [ 366.216559][ T28] ? numa_migrate_prep+0x250/0x250 [ 366.221734][ T28] ? lock_chain_count+0x20/0x20 [ 366.226705][ T28] ? lock_mm_and_find_vma+0xae/0x2f0 [ 366.232060][ T28] do_user_addr_fault+0x58e/0xb20 [ 366.237361][ T28] exc_page_fault+0x60/0x100 [ 366.242017][ T28] ? clear_bhb_loop+0x60/0xb0 [ 366.247535][ T28] asm_exc_page_fault+0x22/0x30 [ 366.252442][ T28] RIP: 0033:0x7fc84126cea3 [ 366.257691][ T28] RSP: 002b:00007ffd080e48e0 EFLAGS: 00010246 [ 366.263793][ T28] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2fd64000 [ 366.271852][ T28] RDX: 0000001b2fd24000 RSI: 0000000000600000 RDI: 00007fc8415e7708 [ 366.279921][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.288033][ T28] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 366.296041][ T28] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd080e4b70 [ 366.304130][ T28] [ 366.307278][ T28] [ 366.307278][ T28] Showing all locks held in the system: [ 366.315546][ T28] 3 locks held by kworker/u4:0/9: [ 366.320702][ T28] 1 lock held by rcu_tasks_kthre/12: [ 366.326029][ T28] #0: ffffffff8db2e230 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 366.337238][ T28] 1 lock held by rcu_tasks_trace/13: [ 366.342730][ T28] #0: ffffffff8db2ea50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 366.354318][ T28] 1 lock held by khungtaskd/28: [ 366.359663][ T28] #0: ffffffff8db2d8a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 366.369680][ T28] 2 locks held by kworker/u4:2/32: [ 366.374946][ T28] 2 locks held by getty/4029: [ 366.379789][ T28] #0: ffff88803135d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 366.389772][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 366.400090][ T28] 3 locks held by syz-executor/4262: [ 366.405460][ T28] #0: ffff88807d2ca6d8 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 366.416016][ T28] #1: ffff88807e7dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 366.425915][ T28] #2: ffff88807e7e0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 366.435904][ T28] 3 locks held by syz.2.973/7249: [ 366.441176][ T28] #0: ffff8880310b5b58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 366.452827][ T28] #1: ffff88807e7dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 366.463209][ T28] #2: ffff88807e7e0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 366.473379][ T28] 3 locks held by syz.5.982/7270: [ 366.478527][ T28] #0: ffff888028d3cc58 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 366.488665][ T28] #1: ffff88807e7dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 366.498544][ T28] #2: ffff88807e7e0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 366.508469][ T28] 3 locks held by syz.1.983/7271: [ 366.513544][ T28] #0: ffff8880310b7958 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 366.530311][ T28] #1: ffff88807e7dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 366.540303][ T28] #2: ffff88807e7e0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 366.550358][ T28] 3 locks held by syz.4.981/7272: [ 366.555427][ T28] #0: ffff8880310b1058 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x2e/0x2f0 [ 366.565503][ T28] #1: ffff88807e7dc558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x192/0x10d0 [ 366.575492][ T28] #2: ffff88807e7e0990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2014/0x2240 [ 366.585352][ T28] [ 366.587848][ T28] ============================================= [ 366.587848][ T28] [ 366.596368][ T28] NMI backtrace for cpu 1 [ 366.600743][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 366.607976][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 366.618059][ T28] Call Trace: [ 366.621366][ T28] [ 366.624318][ T28] dump_stack_lvl+0x188/0x24e [ 366.629025][ T28] ? show_regs_print_info+0x12/0x12 [ 366.634249][ T28] ? load_image+0x410/0x410 [ 366.638779][ T28] ? vprintk_emit+0x59f/0x6a0 [ 366.643500][ T28] ? printk_sprint+0x460/0x460 [ 366.648295][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 366.653261][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 366.659441][ T28] ? _printk+0xda/0x130 [ 366.663623][ T28] ? load_image+0x410/0x410 [ 366.668149][ T28] ? load_image+0x410/0x410 [ 366.672676][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 366.678777][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 366.684882][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 366.690896][ T28] watchdog+0xf0e/0xf50 [ 366.695095][ T28] ? watchdog+0x1ed/0xf50 [ 366.699454][ T28] kthread+0x29d/0x330 [ 366.703550][ T28] ? hungtask_pm_notify+0x40/0x40 [ 366.708622][ T28] ? kthread_blkcg+0xd0/0xd0 [ 366.713233][ T28] ret_from_fork+0x1f/0x30 [ 366.717686][ T28] [ 366.721325][ T28] Sending NMI from CPU 1 to CPUs 0: [ 366.726744][ C0] NMI backtrace for cpu 0 [ 366.726755][ C0] CPU: 0 PID: 4371 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 366.726771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 366.726782][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 366.726813][ C0] RIP: 0010:mark_lock+0x0/0x320 [ 366.726840][ C0] Code: 38 c1 7c 90 48 c7 c7 a8 14 23 8f e8 5a e4 6e 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <55> 41 57 41 56 41 55 41 54 53 50 89 d5 49 89 f6 48 89 fb 49 bd 00 [ 366.726855][ C0] RSP: 0018:ffffc90004a672d8 EFLAGS: 00000046 [ 366.726869][ C0] RAX: 0000000000000003 RBX: ffff88802d770b80 RCX: 0000000000000003 [ 366.726880][ C0] RDX: 0000000000000008 RSI: ffff88802d770b80 RDI: ffff88802d770000 [ 366.726892][ C0] RBP: ffffc90004a67528 R08: dffffc0000000000 R09: 1ffffffff236e055 [ 366.726904][ C0] R10: dffffc0000000000 R11: fffffbfff236e056 R12: 0000000000000003 [ 366.726916][ C0] R13: ffff88802d770000 R14: ffffffff91502c4a R15: ffff88802d770ba0 [ 366.726929][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 366.726944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.726955][ C0] CR2: 000055758ef3e168 CR3: 000000000d88e000 CR4: 00000000003506f0 [ 366.726971][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.726980][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.726991][ C0] Call Trace: [ 366.726996][ C0] [ 366.727001][ C0] __lock_acquire+0xe35/0x7ea0 [ 366.727038][ C0] ? __lock_acquire+0x1359/0x7ea0 [ 366.727061][ C0] ? verify_lock_unused+0x140/0x140 [ 366.727107][ C0] lock_acquire+0x1bc/0x4a0 [ 366.727130][ C0] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 366.727157][ C0] ? read_lock_is_recursive+0x10/0x10 [ 366.727181][ C0] ? verify_lock_unused+0x140/0x140 [ 366.727205][ C0] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 366.727226][ C0] ieee80211_bss_info_update+0x358/0xbf0 [ 366.727246][ C0] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 366.727270][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 366.727296][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 366.727323][ C0] ? ieee80211_vif_get_shift+0x22b/0x290 [ 366.727350][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 366.727375][ C0] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 366.727402][ C0] ? verify_lock_unused+0x140/0x140 [ 366.727431][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 366.727459][ C0] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 366.727489][ C0] ? mark_lock+0x94/0x320 [ 366.727512][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 366.727535][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 366.727558][ C0] ? lock_chain_count+0x20/0x20 [ 366.727578][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 366.727606][ C0] ? kcov_remote_start+0x87/0x810 [ 366.727626][ C0] ? skb_dequeue+0x120/0x150 [ 366.727642][ C0] ieee80211_iface_work+0x72c/0xc70 [ 366.727663][ C0] cfg80211_wiphy_work+0x224/0x260 [ 366.727688][ C0] ? process_one_work+0x7b4/0x1160 [ 366.727707][ C0] process_one_work+0x8ab/0x1160 [ 366.727732][ C0] ? worker_detach_from_pool+0x240/0x240 [ 366.727754][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 366.727775][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 366.727799][ C0] ? wq_worker_running+0x97/0x190 [ 366.727816][ C0] worker_thread+0xaf5/0x12a0 [ 366.727840][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 366.727870][ C0] kthread+0x29d/0x330 [ 366.727883][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 366.727901][ C0] ? kthread_blkcg+0xd0/0xd0 [ 366.727916][ C0] ret_from_fork+0x1f/0x30 [ 366.727944][ C0] [ 366.735345][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 367.094832][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 367.102037][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 367.112103][ T28] Call Trace: [ 367.115385][ T28] [ 367.118336][ T28] dump_stack_lvl+0x188/0x24e [ 367.123042][ T28] ? memcpy+0x3c/0x60 [ 367.127043][ T28] ? show_regs_print_info+0x12/0x12 [ 367.132285][ T28] ? load_image+0x410/0x410 [ 367.136851][ T28] panic+0x2d3/0x710 [ 367.140792][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 367.146464][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 367.151008][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 367.156611][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 367.162812][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 367.169013][ T28] watchdog+0xf4d/0xf50 [ 367.173217][ T28] ? watchdog+0x1ed/0xf50 [ 367.177593][ T28] kthread+0x29d/0x330 [ 367.181714][ T28] ? hungtask_pm_notify+0x40/0x40 [ 367.186791][ T28] ? kthread_blkcg+0xd0/0xd0 [ 367.191403][ T28] ret_from_fork+0x1f/0x30 [ 367.195839][ T28] [ 367.199475][ T28] Kernel Offset: disabled [ 367.203813][ T28] Rebooting in 86400 seconds..