last executing test programs: 10m27.470740486s ago: executing program 32 (id=130): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x200, 0x100000002, 0x7ab2, 0xfff}) 7m52.729318596s ago: executing program 1 (id=1286): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{{0x1}, {0x0, 0x1}}, {{0x1, 0x1}, {0x0, 0x1}}], 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000280), 0x10) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) 7m52.260188485s ago: executing program 1 (id=1302): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m51.885159152s ago: executing program 1 (id=1291): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7m51.554749929s ago: executing program 1 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f000001f380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 7m50.86140368s ago: executing program 1 (id=1314): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) close(r0) 7m50.661934088s ago: executing program 1 (id=1305): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100), 0x4000}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 7m49.912367987s ago: executing program 33 (id=1305): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100), 0x4000}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) 7m40.573502868s ago: executing program 6 (id=1333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000480)='87', &(0x7f00000005c0)=""/152}, 0x20) 7m40.340830107s ago: executing program 6 (id=1337): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x1) 7m40.090627102s ago: executing program 6 (id=1338): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1085, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 7m39.754089766s ago: executing program 6 (id=1341): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000002880)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@uni_xlate}, {@fat=@usefree}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 7m39.281250645s ago: executing program 6 (id=1349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4) 7m37.8302483s ago: executing program 6 (id=1355): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x411}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 7m37.31645674s ago: executing program 34 (id=1355): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x411}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) 4m46.695147086s ago: executing program 3 (id=2490): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m44.639226901s ago: executing program 3 (id=2513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m44.472710528s ago: executing program 3 (id=2515): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000280)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@mblk_io_submit}, {@init_itable}, {@nomblk_io_submit}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf2, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0xc, r0, 0x9, 0x7, 0x1, 0xfffffffffe000001}) 4m43.651990425s ago: executing program 3 (id=2521): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@test_dummy_encryption}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x44}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@data_err_abort}, {@errors_remount}]}, 0x0, 0x47a, &(0x7f0000000680)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m42.742884144s ago: executing program 3 (id=2524): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x1f, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) 4m41.590087585s ago: executing program 3 (id=2530): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="00214717a70700000002030600710a5f1feb54985de3", 0x16}], 0x1, 0x7, 0x0) 4m40.945692659s ago: executing program 35 (id=2530): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="00214717a70700000002030600710a5f1feb54985de3", 0x16}], 0x1, 0x7, 0x0) 1m48.660459179s ago: executing program 0 (id=3536): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x10, 0x0, &(0x7f0000000200)="77ec327dc379ed7b0800dd5cc6f0cd69", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m48.436112223s ago: executing program 0 (id=3539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 1m48.056865548s ago: executing program 0 (id=3544): unshare(0x28000600) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0x8, 0x1000}], 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 1m47.794343148s ago: executing program 0 (id=3546): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) syz_usb_connect$uac2(0x4, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) 1m46.368799546s ago: executing program 0 (id=3559): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m44.710813272s ago: executing program 0 (id=3572): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000c202, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1m44.203427842s ago: executing program 36 (id=3572): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000c202, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 19.429195652s ago: executing program 7 (id=4158): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000900)=@xdp={0x2c, 0xa, r1, 0x1b}, 0x80, 0x0}}], 0x2, 0x4) 19.196574639s ago: executing program 7 (id=4160): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{@fixed}]}) 18.210194099s ago: executing program 7 (id=4171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) rename(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 17.755025157s ago: executing program 7 (id=4177): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00') 17.436054684s ago: executing program 7 (id=4181): r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 16.133919845s ago: executing program 7 (id=4192): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0"], 0x398}}, 0x0) 15.599816228s ago: executing program 37 (id=4192): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0"], 0x398}}, 0x0) 7.789875126s ago: executing program 4 (id=4236): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 7.398762941s ago: executing program 4 (id=4237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bf2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2c00000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4040000) 7.298704461s ago: executing program 4 (id=4238): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) read$FUSE(r0, &(0x7f0000000fc0)={0x2020}, 0x2020) 7.1786266s ago: executing program 4 (id=4239): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x8, 0x105b7, &(0x7f00000105c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) lseek(r0, 0x1, 0x3) 5.154810082s ago: executing program 4 (id=4246): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') 4.448757185s ago: executing program 9 (id=4251): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="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", 0x0, 0x3800, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x7}, 0x24) 3.900301512s ago: executing program 9 (id=4254): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0xc7, 0xffffffff}, 0xc) 3.861963263s ago: executing program 2 (id=4255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x39, 0x1, 0x7fffa, 0x4, {0x1}}, 0x14}}, 0x24048080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000740)={r2, 0x1}, 0x8) 3.548878242s ago: executing program 2 (id=4258): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 3.545187122s ago: executing program 9 (id=4259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.170993418s ago: executing program 9 (id=4262): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x98c7, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) lseek(r0, 0x800, 0x3) 2.716324505s ago: executing program 8 (id=4264): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x3, @desc3}) 2.444832571s ago: executing program 2 (id=4266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x1, 0x4, 0x800077, 0x20800000000412, 0x1, 0x3e, 0x1000, 0x8, 0xfffffffc}) creat(&(0x7f00000007c0)='./bus\x00', 0x182) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) getpid() 2.306250498s ago: executing program 5 (id=4268): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x7d, 0x5, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800}) 2.292973546s ago: executing program 8 (id=4269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x2004000, &(0x7f0000000380)={[{@clear_cache}, {@user_subvol_rm}, {@datasum}, {}, {@enospc_debug}, {@autodefrag}, {@nossd_spread}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000340)={0x0, {0x50979c6b8b4af6c1, 0x0, 0x56, 0x2}}) 1.606606259s ago: executing program 8 (id=4270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.605387824s ago: executing program 4 (id=4281): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf5, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x2000008, 0x289}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.599167651s ago: executing program 5 (id=4271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000700000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000aa0a00007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b7040000000000008500000003000000850000001100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.508757116s ago: executing program 2 (id=4272): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="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", 0x0, 0x3800, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x7}, 0x24) 1.35898626s ago: executing program 8 (id=4273): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.173052009s ago: executing program 8 (id=4274): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffffdaa455a0, 0x1, 0x6, 0xfffffffc, 0x9, 0x0, 0x0, 0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x5d4}, 0x18) 1.077004428s ago: executing program 5 (id=4275): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x0, 0xfffffffe, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) 955.05155ms ago: executing program 2 (id=4276): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 774.392169ms ago: executing program 9 (id=4277): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3b94, &(0x7f0000000180)={0x85, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 704.661397ms ago: executing program 5 (id=4278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000080)) 526.700864ms ago: executing program 5 (id=4279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 136.670662ms ago: executing program 8 (id=4280): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001280)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@usefree}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}, {@rodir}, {@utf8}, {@utf8}, {@shortname_lower}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 135.538054ms ago: executing program 2 (id=4292): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r1, 0x0, 0x0) close_range(r0, r1, 0x0) 113.918819ms ago: executing program 5 (id=4282): r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000d00007f0000000a020000000e0000000000000204000000020000000000000c0100000010000000000000110500000007000000060000000000000b010000000700000007000093000000001000000003000000800000000600000004000000ff0f00000a0000000400"], 0x0, 0xf3, 0x0, 0x0, 0x5f94}, 0x28) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=4283): open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x4142, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): nfig 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.450385][ T5786] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 636.484628][ T5786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.495853][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.579618][ T5786] usb 6-1: config 0 descriptor?? [ 636.643021][T16075] loop7: detected capacity change from 0 to 64 [ 636.754414][T16075] hfs: get root inode failed [ 636.940502][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 636.952294][ T5786] hub 6-1:0.0: USB hub found [ 637.150118][ T5786] hub 6-1:0.0: 1 port detected [ 637.379985][T16077] loop9: detected capacity change from 0 to 4096 [ 637.498339][T16077] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 637.515534][T16077] NILFS (loop9): invalid segment: Checksum error in segment payload [ 637.523596][T16077] NILFS (loop9): unable to fall back to spare super block [ 637.530718][T16077] NILFS (loop9): error -22 while searching super root [ 637.591452][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.778703][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 637.934518][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 638.024247][ T5773] usb 8-1: USB disconnect, device number 16 [ 638.052214][ T5786] hub 6-1:0.0: activate --> -90 [ 638.167949][ T5867] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 638.254502][ T29] usb 6-1: USB disconnect, device number 32 [ 638.290068][ T5786] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 638.683585][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.693359][T16113] loop0: detected capacity change from 0 to 4096 [ 638.757423][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.790482][T16113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 638.920113][T16113] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 638.930690][T16113] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 638.940081][T16113] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.3546: Failed to acquire dquot type 1 [ 638.986498][ T30] audit: type=1326 audit(1780458040.940:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16098 comm="syz.7.3541" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093719ce59 code=0x7fc00000 [ 639.034353][T16113] EXT4-fs warning (device loop0): ext4_enable_quotas:7265: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 639.558433][ T5867] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 639.568940][ T5867] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.585789][ T5867] usb 9-1: config 0 descriptor?? [ 639.844182][ T5867] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 639.856794][ T5621] net_ratelimit: 1 callbacks suppressed [ 639.856818][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.014393][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 640.076622][ T5628] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 640.163597][ T5867] gp8psk: usb in 128 operation failed. [ 640.175323][ T5628] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 640.320937][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3561'. [ 640.348092][T16147] netlink: 'syz.5.3561': attribute type 9 has an invalid length. [ 640.428866][T16147] netlink: 15 bytes leftover after parsing attributes in process `syz.5.3561'. [ 640.603309][ T5867] gp8psk: usb in 146 operation failed. [ 640.608830][ T5867] gp8psk: failed to get FW version [ 640.706621][T16151] loop2: detected capacity change from 0 to 4096 [ 640.757677][T16151] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 640.864425][ T5867] gp8psk: FPGA Version = 0 [ 640.952826][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.037521][T16151] ntfs3(loop2): ino=0, attr_set_size_ex [ 641.064992][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 641.113407][T16151] ntfs3(loop2): ino=0, attr_set_size_ex [ 641.206760][ T5867] gp8psk: usb in 138 operation failed. [ 641.212308][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 641.222682][ T5867] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 641.237149][ T5867] usb 9-1: USB disconnect, device number 13 [ 641.254068][T16159] ntfs3(loop2): ino=0, attr_set_size_ex [ 641.660680][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.702531][T16168] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3568'. [ 641.768105][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.800151][T16167] sctp: [Deprecated]: syz.7.3569 (pid 16167) Use of int in maxseg socket option. [ 641.800151][T16167] Use struct sctp_assoc_value instead [ 641.835389][T16170] loop9: detected capacity change from 0 to 128 [ 641.954417][T16170] syz.9.3571: attempt to access beyond end of device [ 641.954417][T16170] loop9: rw=0, sector=121, nr_sectors = 8 limit=128 [ 642.006434][ T30] audit: type=1800 audit(1780458043.900:253): pid=16170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3571" name="file1" dev="loop9" ino=1048769 res=0 errno=0 [ 642.058404][ T13] kworker/u8:1: attempt to access beyond end of device [ 642.058404][ T13] loop9: rw=1, sector=145, nr_sectors = 78 limit=128 [ 642.102575][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.126884][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.447838][ T30] audit: type=1326 audit(1780458044.410:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.8.3576" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef1b39ce59 code=0x0 [ 642.543926][T16179] IPVS: Scheduler module ip_vs_sip not found [ 642.612758][ T5883] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 642.633558][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 642.695796][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 642.704611][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 642.712808][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 642.720538][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.852499][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 642.866393][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.917137][ T5883] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 642.963405][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.990634][T16183] loop7: detected capacity change from 0 to 32768 [ 642.998154][T16183] btrfs: Deprecated parameter 'usebackuproot' [ 643.004379][T16183] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 643.045346][ T5883] usb 3-1: config 0 descriptor?? [ 643.052325][T16183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3574 (16183) [ 643.145714][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 643.155595][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.185477][T16183] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 643.195629][T16183] BTRFS info (device loop7): using crc32c checksum algorithm [ 643.453885][ T78] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 643.467618][T16183] BTRFS error (device loop7): failed to load root extent [ 643.552368][T16183] BTRFS warning (device loop7): try to load backup roots slot 1 [ 643.560483][ T47] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 643.574356][T16183] BTRFS warning (device loop7): couldn't read tree root [ 643.581314][T16183] BTRFS warning (device loop7): try to load backup roots slot 2 [ 643.589259][ T47] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 643.601191][ T5883] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 643.652640][T16183] BTRFS warning (device loop7): couldn't read tree root [ 643.659653][T16183] BTRFS warning (device loop7): try to load backup roots slot 3 [ 643.695837][T16183] BTRFS info (device loop7): rebuilding free space tree [ 643.744790][T16183] BTRFS info (device loop7): checking UUID tree [ 643.759453][T16183] BTRFS info (device loop7): enabling ssd optimizations [ 643.768468][T16183] BTRFS info (device loop7): turning on async discard [ 643.775637][T16183] BTRFS info (device loop7): enabling free space tree [ 643.782423][T16183] BTRFS info (device loop7): force clearing of disk cache [ 643.789551][T16183] BTRFS info (device loop7): trying to use backup root at mount time [ 643.813465][T16183] BTRFS info (device loop7): use lzo compression, level 1 [ 644.102573][ T5883] usb 3-1: USB disconnect, device number 31 [ 644.246654][ T9421] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 644.842316][ T50] Bluetooth: hci0: command tx timeout [ 644.958507][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3585'. [ 645.150553][T16237] vlan2: entered allmulticast mode [ 645.182587][T16237] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 645.246504][ C0] net_ratelimit: 3 callbacks suppressed [ 645.246533][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 645.281648][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.851509][T16257] loop2: detected capacity change from 0 to 64 [ 645.953161][T16259] loop7: detected capacity change from 0 to 1024 [ 645.960660][T16259] EXT4-fs: Ignoring removed mblk_io_submit option [ 646.242920][T16259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 646.286834][T16259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 646.382283][T16259] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.404100][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 646.414084][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.638858][ T5867] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 646.708986][T16278] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.902481][T16186] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.914402][T16186] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.980854][ T50] Bluetooth: hci0: command tx timeout [ 646.995099][T16186] bridge_slave_0: entered allmulticast mode [ 647.003441][ T9421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 647.028513][T16186] bridge_slave_0: entered promiscuous mode [ 647.037482][T16186] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.044624][T16186] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.051869][T16186] bridge_slave_1: entered allmulticast mode [ 647.059937][T16186] bridge_slave_1: entered promiscuous mode [ 647.076773][ T5883] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 647.127677][ T5883] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 647.305064][T16186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.342744][ T5867] usb 6-1: Using ep0 maxpacket: 16 [ 647.368300][T16186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.405720][T16284] fido_id[16284]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 647.442227][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.492634][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.556811][T16186] team0: Port device team_slave_0 added [ 647.592758][T16186] team0: Port device team_slave_1 added [ 647.701932][T16294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.723559][T16294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.732120][T16294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.921168][T16186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.954653][T16186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.954714][T16186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.974356][T16186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.974386][T16186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.974437][T16186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.017847][ T5867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.017915][ T5867] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 648.017957][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.026847][ T5867] usb 6-1: config 0 descriptor?? [ 648.279070][T16301] loop9: detected capacity change from 0 to 512 [ 648.280142][T16301] EXT4-fs: Ignoring removed oldalloc option [ 648.284041][T16301] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 648.308300][T16186] hsr_slave_0: entered promiscuous mode [ 648.332743][T16186] hsr_slave_1: entered promiscuous mode [ 648.333605][T16186] debugfs: 'hsr0' already exists in 'hsr' [ 648.333637][T16186] Cannot create hsr debugfs directory [ 648.358522][T16289] loop7: detected capacity change from 0 to 4096 [ 648.390066][T16289] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 648.419248][T16289] NILFS (loop7): invalid segment: Checksum error in segment payload [ 648.419295][T16289] NILFS (loop7): unable to fall back to spare super block [ 648.419321][T16289] NILFS (loop7): error -22 while searching super root [ 648.426529][T16301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.426664][T16301] ext4 filesystem being mounted at /184/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.815008][T13217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.948652][ T5867] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 649.082740][ T50] Bluetooth: hci0: command tx timeout [ 649.363109][ T5867] usb 6-1: USB disconnect, device number 33 [ 649.536260][T16318] sctp: [Deprecated]: syz.2.3617 (pid 16318) Use of int in maxseg socket option. [ 649.536260][T16318] Use struct sctp_assoc_value instead [ 649.785470][T16323] loop2: detected capacity change from 0 to 1024 [ 650.395195][T16329] loop9: detected capacity change from 0 to 40427 [ 650.432823][T16329] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 650.440624][T16329] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 650.469217][T16329] F2FS-fs (loop9): invalid crc value [ 650.581395][ C0] net_ratelimit: 776 callbacks suppressed [ 650.581427][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 650.698145][T16329] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 650.727117][T16329] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 650.734208][T16329] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 650.814337][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.052312][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.177010][ T50] Bluetooth: hci0: command tx timeout [ 651.226185][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.299839][T16358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.379221][T16358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.391259][T16358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.400178][T16358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.408967][T16358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.417750][T16358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.358012][T16374] loop5: detected capacity change from 0 to 1024 [ 652.365442][T16374] EXT4-fs: Ignoring removed mblk_io_submit option [ 652.566785][T16374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 652.590213][T16374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 652.602371][T16374] ext4 filesystem being mounted at /616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.986365][ T5645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 653.333569][T16186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.435536][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.505869][T16186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 653.648042][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.657104][T16186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 653.787661][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.843136][T16186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 654.173183][T16410] loop8: detected capacity change from 0 to 40427 [ 654.185856][T16186] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.193450][T16414] hsr0: entered allmulticast mode [ 654.198496][T16414] hsr_slave_0: entered allmulticast mode [ 654.204145][T16414] hsr_slave_1: entered allmulticast mode [ 654.212679][T16410] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 654.220427][T16410] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 654.236101][T16410] F2FS-fs (loop8): invalid crc value [ 654.318674][T16414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3644'. [ 654.415587][T16410] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 654.496678][T16414] hsr_slave_0: left promiscuous mode [ 654.574152][T16410] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 654.585111][T16410] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 654.611887][T16414] hsr_slave_1: left promiscuous mode [ 654.719585][T16414] hsr0 (unregistering): left allmulticast mode [ 655.148007][T16186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.168255][T16186] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.297413][ T3358] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.304630][ T3358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.391588][ T3358] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.398834][ T3358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.785202][ C0] net_ratelimit: 1027 callbacks suppressed [ 655.785232][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 656.073219][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.332504][T16460] loop7: detected capacity change from 0 to 1024 [ 656.773808][T16460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 656.786056][T16460] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.828724][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.178567][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.234359][ T5773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.259935][T16471] EXT4-fs error (device loop7): ext4_free_blocks:6717: comm syz.7.3654: Freeing blocks not in datazone - block = 0, count = 16 [ 657.589797][ T1160] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set [ 657.666692][ T1160] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 657.695529][ T1160] EXT4-fs (loop7): This should not happen!! Data will be lost [ 657.695529][ T1160] [ 657.716279][ T1160] EXT4-fs (loop7): Total free blocks count 0 [ 657.736096][ T1160] EXT4-fs (loop7): Free/Dirty block details [ 657.760681][ T1160] EXT4-fs (loop7): free_blocks=16 [ 657.778281][ T1160] EXT4-fs (loop7): dirty_blocks=80 [ 657.792861][ T1160] EXT4-fs (loop7): Block reservation details [ 657.810591][ T1160] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 657.829315][ T5883] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 657.869630][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.882109][T16186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.900405][T16487] loop9: detected capacity change from 0 to 2048 [ 657.907299][ T1160] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 320 with max blocks 64 with error 28 [ 657.929330][ T9421] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 658.096990][ T5883] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.140481][ T5883] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 658.172649][T16487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 658.218586][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.261955][ T5883] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 658.381273][ T5883] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 658.400412][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.426631][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 658.471881][ T5883] usb 3-1: Product: syz [ 658.497982][ T5883] usb 3-1: Manufacturer: syz [ 658.524525][T16484] loop8: detected capacity change from 0 to 4096 [ 658.558455][ T5883] cdc_wdm 3-1:1.0: skipping garbage [ 658.607591][ T5883] cdc_wdm 3-1:1.0: skipping garbage [ 658.613337][T16484] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 658.664930][ T5883] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 658.704583][T16469] loop5: detected capacity change from 0 to 40427 [ 658.713260][T16484] NILFS (loop8): invalid segment: Checksum error in segment payload [ 658.721515][T16484] NILFS (loop8): unable to fall back to spare super block [ 658.734210][T16469] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 658.752043][T16469] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 658.805004][T16484] NILFS (loop8): error -22 while searching super root [ 658.814490][ T5867] usb 3-1: USB disconnect, device number 32 [ 658.820243][T16469] F2FS-fs (loop5): invalid crc value [ 658.910259][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.442735][T16469] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 659.493551][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.532271][T16186] veth0_vlan: entered promiscuous mode [ 659.545656][T16469] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 659.561504][T16469] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 659.670513][T16186] veth1_vlan: entered promiscuous mode [ 659.866184][T16186] veth0_macvtap: entered promiscuous mode [ 659.910453][T16186] veth1_macvtap: entered promiscuous mode [ 659.951114][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 660.027561][T16186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.097229][T16186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.143258][ T3358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.158003][ T3358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.209257][ T3358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.288162][ T3358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.848335][ T9065] net_ratelimit: 7 callbacks suppressed [ 660.848361][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.991623][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 661.215132][T16541] loop9: detected capacity change from 0 to 1024 [ 661.398912][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.406902][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.612461][T16541] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 661.689508][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 661.698444][T16554] netlink: 'syz.2.3674': attribute type 30 has an invalid length. [ 661.723710][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.755537][T16541] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.802112][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3674'. [ 661.811037][T16555] netlink: 'syz.2.3674': attribute type 30 has an invalid length. [ 661.865784][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.870433][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.874061][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.890024][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.898271][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.905313][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.012610][T16541] EXT4-fs error (device loop9): ext4_validate_block_bitmap:440: comm syz.9.3671: bg 0: block 112: padding at end of block bitmap is not set [ 662.040258][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 662.196913][T16562] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.3671: Freeing blocks not in datazone - block = 0, count = 16 [ 662.260423][T16559] vlan2: entered allmulticast mode [ 662.285553][T16559] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 662.565053][T16539] loop8: detected capacity change from 0 to 40427 [ 662.621159][T16539] F2FS-fs (loop8): build fault injection rate: 14 [ 662.627646][T16539] F2FS-fs (loop8): build fault injection type: 0xe4 [ 662.639459][T16539] F2FS-fs (loop8): invalid crc value [ 662.689766][T16539] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x1060 [ 662.756321][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.801943][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3573'. [ 662.901878][T13217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 663.193949][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 663.363265][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.441154][T16539] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 663.493188][T16539] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 663.608979][T16539] F2FS-fs (loop8): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x1087/0x2fd0 [ 663.638794][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.663190][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.706276][T16596] syz.8.3670: attempt to access beyond end of device [ 663.706276][T16596] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 663.792739][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.866167][T16600] loop5: detected capacity change from 0 to 2048 [ 664.039641][T16600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.080025][ T9638] syz-executor: attempt to access beyond end of device [ 664.080025][ T9638] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 664.120793][T16600] ext4 filesystem being mounted at /624/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 664.157381][ T9638] CPU: 0 UID: 0 PID: 9638 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 664.157441][ T9638] Tainted: [L]=SOFTLOCKUP [ 664.157456][ T9638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.157479][ T9638] Call Trace: [ 664.157492][ T9638] [ 664.157508][ T9638] dump_stack_lvl+0x100/0x190 [ 664.157556][ T9638] f2fs_stop_checkpoint+0x600/0x9b0 [ 664.157601][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.157651][ T9638] ? errseq_set+0xe3/0x150 [ 664.157710][ T9638] ? errseq_set+0xe3/0x150 [ 664.157770][ T9638] f2fs_write_end_io+0xf59/0x1340 [ 664.157824][ T9638] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 664.157881][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.157942][ T9638] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 664.157990][ T9638] bio_endio+0x78f/0x8f0 [ 664.158040][ T9638] submit_bio_noacct+0x64c/0x2000 [ 664.158116][ T9638] f2fs_submit_write_bio+0x135/0x340 [ 664.158164][ T9638] __submit_merged_bio+0x331/0x780 [ 664.158222][ T9638] __submit_merged_write_cond+0x3fe/0x510 [ 664.158290][ T9638] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 664.158354][ T9638] ? __pfx___might_resched+0x10/0x10 [ 664.158407][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.158467][ T9638] f2fs_write_cache_pages+0x20e9/0x2630 [ 664.158554][ T9638] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 664.158621][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.158669][ T9638] ? __lock_acquire+0x4a5/0x2630 [ 664.158716][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.158765][ T9638] ? __kasan_check_byte+0x13/0x50 [ 664.158825][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.158875][ T9638] ? unwind_next_frame+0x3be/0x2090 [ 664.158930][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.158978][ T9638] ? rcu_is_watching+0x12/0xc0 [ 664.159034][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.159101][ T9638] ? bpf_ksym_find+0x124/0x1c0 [ 664.159226][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.159287][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.159335][ T9638] ? add_lock_to_list+0x99/0x110 [ 664.159399][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.159447][ T9638] ? rcu_is_watching+0x12/0xc0 [ 664.159511][ T9638] f2fs_write_data_pages+0x799/0x16d0 [ 664.159586][ T9638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 664.159643][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.159703][ T9638] ? do_writepages+0x4b5/0x600 [ 664.159764][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.159819][ T9638] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 664.159881][ T9638] do_writepages+0x278/0x600 [ 664.159953][ T9638] ? __pfx_do_writepages+0x10/0x10 [ 664.160016][ T9638] ? do_raw_spin_unlock+0x145/0x1e0 [ 664.160072][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.160120][ T9638] ? _raw_spin_unlock+0x28/0x50 [ 664.160178][ T9638] filemap_writeback+0x22d/0x2e0 [ 664.160249][ T9638] ? __pfx_filemap_writeback+0x10/0x10 [ 664.160318][ T9638] ? check_noncircular+0x97/0x160 [ 664.160419][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.160468][ T9638] ? find_held_lock+0x2b/0x80 [ 664.160527][ T9638] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 664.160587][ T9638] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 664.160644][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.160707][ T9638] f2fs_sync_dirty_inodes+0x469/0x990 [ 664.160789][ T9638] block_operations+0x2a6/0xfc0 [ 664.160845][ T9638] ? __bfs+0x150/0x2a0 [ 664.160919][ T9638] ? __pfx_block_operations+0x10/0x10 [ 664.160978][ T9638] ? check_noncircular+0x97/0x160 [ 664.161078][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161135][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161182][ T9638] ? rcu_is_watching+0x12/0xc0 [ 664.161237][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161301][ T9638] f2fs_write_checkpoint+0x582/0x5550 [ 664.161370][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161418][ T9638] ? _raw_spin_unlock_irq+0x2e/0x50 [ 664.161469][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161517][ T9638] ? __wait_for_common+0x1f3/0x4c0 [ 664.161576][ T9638] ? __pfx_schedule_timeout+0x10/0x10 [ 664.161632][ T9638] ? __pfx___wait_for_common+0x10/0x10 [ 664.161694][ T9638] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 664.161768][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161817][ T9638] ? rcu_is_watching+0x12/0xc0 [ 664.161872][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.161920][ T9638] ? kthread_stop+0x280/0x640 [ 664.161968][ T9638] kill_f2fs_super+0x3f1/0x4a0 [ 664.162027][ T9638] ? __pfx_kill_f2fs_super+0x10/0x10 [ 664.162111][ T9638] ? lockdep_hardirqs_on+0x78/0x100 [ 664.162170][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.162219][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.162290][ T9638] deactivate_locked_super+0xc1/0x1b0 [ 664.162353][ T9638] deactivate_super+0xe7/0x110 [ 664.162411][ T9638] cleanup_mnt+0x21f/0x450 [ 664.162454][ T9638] task_work_run+0x150/0x240 [ 664.162502][ T9638] ? __pfx_task_work_run+0x10/0x10 [ 664.162553][ T9638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.162601][ T9638] ? rcu_is_watching+0x12/0xc0 [ 664.162663][ T9638] exit_to_user_mode_loop+0x157/0x670 [ 664.162711][ T9638] ? rcu_is_watching+0x12/0xc0 [ 664.162775][ T9638] do_syscall_64+0x666/0x870 [ 664.162841][ T9638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.162881][ T9638] RIP: 0033:0x7fef1b39e097 [ 664.162913][ T9638] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 664.162951][ T9638] RSP: 002b:00007ffcc28f8718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 664.162988][ T9638] RAX: 0000000000000000 RBX: 00007fef1b4321ca RCX: 00007fef1b39e097 [ 664.163013][ T9638] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc28f87d0 [ 664.163038][ T9638] RBP: 00007ffcc28f87d0 R08: 00007ffcc28f97d0 R09: 00000000ffffffff [ 664.163063][ T9638] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc28f9860 [ 664.163088][ T9638] R13: 00007fef1b4321ca R14: 00000000000a21b5 R15: 00007ffcc28f98a0 [ 664.163144][ T9638] [ 664.163160][ T9638] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 664.238741][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 664.307636][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.820727][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.844353][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.883306][ T5645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.233214][T16614] loop5: detected capacity change from 0 to 256 [ 665.250922][T16614] exfat: Deprecated parameter 'utf8' [ 665.282887][T16614] exfat: Deprecated parameter 'utf8' [ 665.544077][T16614] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 665.787878][ T3358] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.820786][ T3358] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.829743][ T3358] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.874652][ T5621] net_ratelimit: 1 callbacks suppressed [ 665.874676][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.911358][T16624] loop8: detected capacity change from 0 to 128 [ 665.935245][ T3358] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.024866][T16624] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.140180][T16624] ext4 filesystem being mounted at /396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 666.317975][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 666.459048][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.576840][T16641] Bluetooth: MGMT ver 1.23 [ 666.596576][ T9638] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.816472][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3694'. [ 666.867921][T16649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.877123][T16649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.913395][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.070833][T16649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.079242][T16649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.147610][T16649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.155981][T16649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.371345][T16662] xt_hashlimit: size too large, truncated to 1048576 [ 667.519018][T16670] loop4: detected capacity change from 0 to 256 [ 667.591056][T16670] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 668.412642][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3707'. [ 668.470264][T16687] netlink: 'syz.9.3707': attribute type 30 has an invalid length. [ 668.531629][ T47] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.553983][ T47] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.602365][ T47] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.660554][T16695] input: syz1 as /devices/virtual/input/input49 [ 668.672263][ T141] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.217473][T16706] bridge: RTM_NEWNEIGH with invalid ether address [ 669.264289][T16706] bridge: RTM_NEWNEIGH with invalid ether address [ 669.782929][ T141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 670.194539][T16734] loop7: detected capacity change from 0 to 256 [ 671.003034][T15520] Bluetooth: hci0: command 0x0405 tx timeout [ 671.063543][ T121] net_ratelimit: 263 callbacks suppressed [ 671.063570][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.479203][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 671.523992][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 671.537519][T16737] loop2: detected capacity change from 0 to 131072 [ 671.558716][T16737] F2FS-fs (loop2): Test dummy encryption mode enabled [ 671.570273][T16737] F2FS-fs (loop2): invalid crc value [ 671.676544][T16737] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 671.706660][T16737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 671.742639][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 671.783222][ T29] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 671.829688][ T29] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 671.882875][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 671.915037][ T29] usb 5-1: config 1 has no interface number 0 [ 671.935155][ T29] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 671.957665][ T29] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 671.984485][ T29] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 672.059582][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.211248][T16772] vlan2: entered allmulticast mode [ 672.273174][ T29] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 672.279856][T16772] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 672.482343][ T29] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 672.526371][T16774] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3738'. [ 672.560675][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 672.609416][T16774] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3738'. [ 672.686600][T16750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.776800][T16750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.906833][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.915584][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.076763][T16779] netlink: 'syz.5.3739': attribute type 4 has an invalid length. [ 673.121468][ T29] usb 5-1: USB disconnect, device number 2 [ 673.186178][ T29] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 673.309532][T16769] loop8: detected capacity change from 0 to 131072 [ 673.379790][T16769] F2FS-fs (loop8): invalid crc value [ 673.549986][T16769] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 673.588554][T16769] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 673.612623][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.776406][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3743'. [ 673.964973][ T5621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.073590][T16801] hsr0: entered allmulticast mode [ 674.102271][T16801] hsr_slave_0: entered allmulticast mode [ 674.130714][T16801] hsr_slave_1: entered allmulticast mode [ 674.165052][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3746'. [ 674.194655][ T121] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 674.231096][T16802] hsr_slave_0: left promiscuous mode [ 674.315839][T16802] hsr_slave_1: left promiscuous mode [ 674.397588][T16802] hsr0 (unregistering): left allmulticast mode [ 674.629962][T16808] syzkaller1: entered promiscuous mode [ 674.635528][T16808] syzkaller1: entered allmulticast mode [ 674.657831][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 674.718676][T16811] loop8: detected capacity change from 0 to 512 [ 674.825308][T16811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 674.893082][ T121] usb 6-1: Using ep0 maxpacket: 16 [ 674.948701][T16811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.961284][T16811] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.122214][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.185296][ T30] audit: type=1800 audit(1780458077.080:255): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3747" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 675.394316][T16825] vivid-000: disconnect [ 675.405901][T16824] vivid-000: reconnect [ 675.582975][ T121] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 675.591138][ T121] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 675.599368][ T121] usb 6-1: config 0 has no interface number 0 [ 675.605499][ T121] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 675.615468][ T121] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 675.695892][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 675.704513][ T9638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.955757][T16838] loop9: detected capacity change from 0 to 256 [ 676.097539][T16838] FAT-fs (loop9): Directory bread(block 64) failed [ 676.104132][T16838] FAT-fs (loop9): Directory bread(block 65) failed [ 676.110755][T16838] FAT-fs (loop9): Directory bread(block 66) failed [ 676.117300][T16838] FAT-fs (loop9): Directory bread(block 67) failed [ 676.125012][T16838] FAT-fs (loop9): Directory bread(block 68) failed [ 676.131569][T16838] FAT-fs (loop9): Directory bread(block 69) failed [ 676.138244][T16838] FAT-fs (loop9): Directory bread(block 70) failed [ 676.162245][T16838] FAT-fs (loop9): Directory bread(block 71) failed [ 676.168913][T16838] FAT-fs (loop9): Directory bread(block 72) failed [ 676.175472][T16838] FAT-fs (loop9): Directory bread(block 73) failed [ 676.191817][ T10] net_ratelimit: 1 callbacks suppressed [ 676.191842][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.208023][T16842] vlan2: entered allmulticast mode [ 676.244759][T16842] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 676.454036][ T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 676.513709][ T121] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 676.522827][ T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.530849][ T121] usb 6-1: Product: syz [ 676.535033][ T121] usb 6-1: Manufacturer: syz [ 676.539648][ T121] usb 6-1: SerialNumber: syz [ 676.552239][ T121] usb 6-1: config 0 descriptor?? [ 676.628666][T16796] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 676.636000][T16796] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 676.732496][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 676.742914][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 676.760645][ T29] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 676.786895][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.826737][ T29] usb 8-1: Product: syz [ 676.840752][ T29] usb 8-1: Manufacturer: syz [ 676.854151][ T29] usb 8-1: SerialNumber: syz [ 676.865393][ T10] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 676.874519][ T121] asix 6-1:0.251: probe with driver asix failed with error -71 [ 676.893096][ T29] usb 8-1: config 0 descriptor?? [ 676.923867][ T121] usb 6-1: USB disconnect, device number 34 [ 677.019989][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3762'. [ 677.204624][ T29] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 017 [ 677.220022][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.558816][T16845] i2c i2c-1: failure writing data [ 677.580708][ T5867] usb 8-1: USB disconnect, device number 17 [ 677.612578][T16841] loop4: detected capacity change from 0 to 32768 [ 677.720746][T16841] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 677.782971][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 678.016256][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 678.040932][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3766'. [ 678.250750][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.308147][T16841] XFS (loop4): Ending clean mount [ 678.398477][T16841] XFS (loop4): Quotacheck needed: Please wait. [ 678.477578][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.487811][ T10] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 678.496893][ T10] usb 10-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 678.507800][ T10] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 678.654037][T16841] XFS (loop4): Quotacheck: Done. [ 678.823545][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 679.011336][T16186] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 679.021484][T16879] loop8: detected capacity change from 0 to 131072 [ 679.038495][T16879] F2FS-fs (loop8): invalid crc value [ 679.052394][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.198852][T16879] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 679.222930][T16879] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 679.296296][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.411339][ T10] usb 10-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 679.420545][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.428643][ T10] usb 10-1: Product: syz [ 679.432906][ T10] usb 10-1: Manufacturer: syz [ 679.437607][ T10] usb 10-1: SerialNumber: syz [ 679.547145][T16908] loop3: detected capacity change from 0 to 7 [ 679.595543][T16908] Dev loop3: unable to read RDB block 7 [ 679.749733][T16908] loop3: unable to read partition table [ 679.755654][T16908] loop3: partition table beyond EOD, truncated [ 679.761834][T16908] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.843849][ T10] usb 10-1: can't set config #1, error -71 [ 679.866065][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 679.947686][ T10] usb 10-1: USB disconnect, device number 11 [ 680.043761][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.915551][ T121] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 681.494683][ T5867] net_ratelimit: 2 callbacks suppressed [ 681.494712][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.619522][ T121] usb 9-1: Using ep0 maxpacket: 8 [ 682.070759][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 682.123073][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.302114][ T121] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.312728][ T121] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 682.321794][ T121] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.343948][T16981] ALSA: mixer_oss: invalid OSS volume '' [ 682.363153][ T121] usb 9-1: config 0 descriptor?? [ 682.440600][T16985] loop2: detected capacity change from 0 to 128 [ 682.544323][ T121] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 682.583951][T16985] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 682.656209][T16985] ext4 filesystem being mounted at /628/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 682.659883][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.869974][T16995] loop4: detected capacity change from 0 to 512 [ 682.947594][T16995] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.3803: iget: bogus i_mode (16) [ 682.949920][ T5648] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 682.969691][T16995] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 682.992026][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 683.007569][ C0] EXT4-fs (loop4): initial error at time 1780458084: ext4_orphan_get:1397: inode 15 [ 683.016984][ C0] EXT4-fs (loop4): last error at time 1780458084: ext4_orphan_get:1397: inode 15 [ 683.027151][T16995] EXT4-fs (loop4): Remounting filesystem read-only [ 683.049232][T16995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.224575][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 683.471130][T16186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.573197][ T121] gspca_vc032x: reg_r err -71 [ 683.584338][ T121] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 683.618543][ T121] usb 9-1: USB disconnect, device number 14 [ 683.695928][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.086041][T17028] loop5: detected capacity change from 0 to 512 [ 684.109986][T17025] gtp0: entered promiscuous mode [ 684.115002][T17025] gtp0: entered allmulticast mode [ 684.216457][T17025] team0: Device gtp0 is of different type [ 684.230009][T17031] loop4: detected capacity change from 0 to 2048 [ 684.276200][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 684.347626][T17028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.360420][T17028] ext4 filesystem being mounted at /650/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.430345][T17035] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 684.645797][ T5645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.738058][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.148652][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.155026][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.211075][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.366642][T17056] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 685.783742][ T121] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 685.844287][T17070] loop8: detected capacity change from 0 to 1024 [ 685.925880][T17070] hfsplus: failed to load extents file [ 686.298925][T17081] loop2: detected capacity change from 0 to 128 [ 686.314215][T17070] loop8: detected capacity change from 0 to 8192 [ 686.321331][T17081] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 686.411493][T17083] loop7: detected capacity change from 0 to 16 [ 686.439887][T17083] erofs (device loop7): mounted with root inode @ nid 36. [ 686.469098][ T121] usb 10-1: Using ep0 maxpacket: 8 [ 686.582798][ C0] net_ratelimit: 3 callbacks suppressed [ 686.582826][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 686.823918][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.959652][T17083] erofs (device loop7): bogus lookback distance 1 @ lcn 0 of nid 46 [ 687.081003][T17083] syz.7.3836: attempt to access beyond end of device [ 687.081003][T17083] loop7: rw=0, sector=296, nr_sectors = 8 limit=16 [ 687.151053][T17083] erofs (device loop7): read error -5 @ 0 of nid 46 [ 687.180023][T17083] erofs (device loop7): bogus lookback distance 1 @ lcn 0 of nid 46 [ 687.220052][T17083] syz.7.3836: attempt to access beyond end of device [ 687.220052][T17083] loop7: rw=0, sector=296, nr_sectors = 8 limit=16 [ 687.237534][T17083] erofs (device loop7): read error -5 @ 0 of nid 46 [ 687.311929][ T29] kernel read not supported for file /audio (pid: 29 comm: kworker/1:1) [ 687.396381][T17102] loop4: detected capacity change from 0 to 512 [ 687.436431][T17102] EXT4-fs: Ignoring removed orlov option [ 687.491935][T17102] EXT4-fs: Ignoring removed mblk_io_submit option [ 687.566674][T17102] EXT4-fs error (device loop4): ext4_iget_extra_inode:5127: inode #15: comm syz.4.3845: corrupted in-inode xattr: e_value size too large [ 687.622351][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 687.668003][T17102] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 687.668556][T17102] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.3845: couldn't read orphan inode 15 (err -117) [ 687.677864][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 687.677897][ C1] EXT4-fs (loop4): initial error at time 1780458089: ext4_iget_extra_inode:5127: inode 15 [ 687.677954][ C1] EXT4-fs (loop4): last error at time 1780458089: ext4_iget_extra_inode:5127: inode 15 [ 687.737984][T17102] loop4: lost filesystem error report for type 5 error -117 [ 687.784433][T17102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.860696][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.953119][T17115] syzkaller1: entered promiscuous mode [ 687.984456][T17102] EXT4-fs error (device loop4): ext4_check_dx_root:2200: inode #2: comm syz.4.3845: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 687.984984][T17115] syzkaller1: entered allmulticast mode [ 688.449286][T16186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.552729][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 688.664118][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 688.689479][ T121] usb 10-1: unable to get BOS descriptor or descriptor too short [ 688.897334][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.011970][ T121] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 689.019693][ T121] usb 10-1: can't read configurations, error -71 [ 689.029160][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.245072][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 689.270708][T17117] loop2: detected capacity change from 0 to 131072 [ 689.418638][T17117] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 689.447302][T17117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 689.541594][T17130] loop9: detected capacity change from 0 to 128 [ 689.556069][T17130] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 689.568431][T17130] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 689.604244][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.633454][T17130] fscrypt (loop9, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 689.710256][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.878590][T17128] loop4: detected capacity change from 0 to 4096 [ 689.912808][T17128] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 689.992879][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.033145][T17128] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 690.059991][T13217] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.091476][T17128] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 690.385325][T17132] ntfs3(loop4): ino=1e, mi_enum_attr [ 690.416774][T17132] ntfs3(loop4): ino=1e, mi_enum_attr [ 691.211924][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 691.221032][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.229040][ T10] usb 9-1: Product: syz [ 691.233215][ T10] usb 9-1: Manufacturer: syz [ 691.242451][ T10] usb 9-1: config 0 descriptor?? [ 691.331571][ T10] usb 9-1: can't set config #0, error -71 [ 691.339945][ T10] usb 9-1: USB disconnect, device number 15 [ 691.348029][ T5791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 691.789418][ C0] net_ratelimit: 2 callbacks suppressed [ 691.789448][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 691.818061][T17157] loop9: detected capacity change from 0 to 512 [ 692.020205][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 692.059922][T17157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.072744][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.303177][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.364533][T13217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.619445][T17168] loop7: detected capacity change from 0 to 4096 [ 692.713872][ T5791] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 692.722017][ T5791] usb 5-1: config 0 has no interface number 0 [ 692.728140][ T5791] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 692.738929][ T5791] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 692.750500][ T5791] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 692.761478][ T5791] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 692.774466][ T5791] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 692.783515][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.829298][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 692.880951][T17172] loop5: detected capacity change from 0 to 4096 [ 692.888896][T17172] EXT4-fs: Ignoring removed orlov option [ 692.925777][T17170] loop2: detected capacity change from 0 to 32768 [ 692.945628][T17170] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3855 (17170) [ 692.966636][T17172] EXT4-fs (loop5): Test dummy encryption mode enabled [ 692.993618][ T5791] usb 5-1: config 0 descriptor?? [ 693.001995][T17170] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 693.005750][T17172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.013485][T17170] BTRFS info (device loop2): using sha256 checksum algorithm [ 693.182227][ T5791] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 693.210539][T17170] BTRFS info (device loop2): rebuilding free space tree [ 693.238801][T17170] BTRFS info (device loop2): allowing degraded mounts [ 693.245674][T17170] BTRFS info (device loop2): enabling ssd optimizations [ 693.252693][T17170] BTRFS info (device loop2): using spread ssd allocation scheme [ 693.260343][T17170] BTRFS info (device loop2): turning on async discard [ 693.267161][T17170] BTRFS info (device loop2): enabling free space tree [ 693.275128][T17170] BTRFS info (device loop2): force clearing of disk cache [ 693.282292][T17170] BTRFS info (device loop2): enabling auto defrag [ 693.389967][T17172] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 693.409805][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.499303][ T5791] usb 5-1: USB disconnect, device number 3 [ 693.524546][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 693.616029][ T5645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.702169][ T5791] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 693.778068][ T3358] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 693.869309][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 694.001012][ T5648] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 694.085659][T15520] Bluetooth: hci0: link tx timeout [ 694.100154][T15520] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 694.121051][T15520] Bluetooth: hci0: link tx timeout [ 694.126651][T15520] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 694.138174][T15520] Bluetooth: hci0: link tx timeout [ 694.143704][T15520] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 694.627131][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.908017][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 695.132647][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.346350][T17231] loop9: detected capacity change from 0 to 128 [ 695.402360][T17231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 695.410750][T17231] System zones: 1-3, 19-19, 35-36 [ 695.449313][T17231] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 695.517490][T17231] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 695.655693][T17231] EXT4-fs warning (device loop9): verify_group_input:156: Last group not full [ 695.715650][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.929090][T13217] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 696.179505][T15520] Bluetooth: hci0: command 0x0405 tx timeout [ 696.583484][T17259] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3900'. [ 696.685019][T17263] loop7: detected capacity change from 0 to 64 [ 696.881561][ T5791] net_ratelimit: 2 callbacks suppressed [ 696.881589][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.912851][T17266] loop5: detected capacity change from 0 to 1024 [ 697.007624][T17271] loop2: detected capacity change from 0 to 256 [ 697.106761][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 697.145613][T17276] loop9: detected capacity change from 0 to 512 [ 697.189935][T17276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 697.413462][T17276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.426406][T17276] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.885033][T13217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.939026][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.205680][ T9065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.258625][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 698.285446][T17280] loop5: detected capacity change from 0 to 32768 [ 698.324923][T17280] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3908 (17280) [ 698.463307][T17280] BTRFS info (device loop5 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 698.608894][T17280] BTRFS info (device loop5 state S): using crc32c checksum algorithm [ 698.662097][T17303] loop8: detected capacity change from 0 to 512 [ 698.727087][T17303] EXT4-fs: Ignoring removed i_version option [ 698.733162][T17303] EXT4-fs: Ignoring removed bh option [ 698.896017][ T3358] BTRFS warning (device loop5 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 698.923456][T17303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.043363][ T141] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored [ 699.061883][T17303] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 699.068288][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.085883][ T29] IPVS: starting estimator thread 0... [ 699.199777][ T141] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored [ 699.254409][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.299330][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.355631][T17280] BTRFS error (device loop5 state ES): failed to load root free space [ 699.446914][ T141] BTRFS warning (device loop5 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored [ 699.464025][T17325] IPVS: using max 23 ests per chain, 55200 per kthread [ 699.501301][ T9638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.545130][T17280] BTRFS info (device loop5 state ES): enabling ssd optimizations [ 699.571273][T17280] BTRFS info (device loop5 state ES): enabling free space tree [ 699.612909][T17280] BTRFS info (device loop5 state ES): ignoring bad roots [ 699.619989][T17280] BTRFS info (device loop5 state ES): ignoring meta csums [ 699.627118][T17280] BTRFS info (device loop5 state ES): force zlib compression, level 3 [ 699.655881][T17329] loop9: detected capacity change from 0 to 32768 [ 699.715687][ T141] kworker/u8:6: attempt to access beyond end of device [ 699.715687][ T141] loop7: rw=1, sector=73, nr_sectors = 1 limit=64 [ 699.790000][T17329] JBD2: Ignoring recovery information on journal [ 699.826986][ T141] buffer_io_error: 138 callbacks suppressed [ 699.827012][ T141] Buffer I/O error on dev loop7, logical block 73, lost async page write [ 699.841411][T17280] BTRFS warning (device loop5 state ES): failed to trim 2 block group(s), first error -5 [ 699.855802][ T141] kworker/u8:6: attempt to access beyond end of device [ 699.855802][ T141] loop7: rw=1, sector=74, nr_sectors = 1 limit=64 [ 699.899970][ T141] Buffer I/O error on dev loop7, logical block 74, lost async page write [ 699.912714][T17329] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 699.927842][ T141] kworker/u8:6: attempt to access beyond end of device [ 699.927842][ T141] loop7: rw=1, sector=167, nr_sectors = 1 limit=64 [ 699.941626][ T141] Buffer I/O error on dev loop7, logical block 167, lost async page write [ 699.950529][ T141] kworker/u8:6: attempt to access beyond end of device [ 699.950529][ T141] loop7: rw=1, sector=169, nr_sectors = 1 limit=64 [ 700.003773][ T141] Buffer I/O error on dev loop7, logical block 169, lost async page write [ 700.012419][ T141] kworker/u8:6: attempt to access beyond end of device [ 700.012419][ T141] loop7: rw=1, sector=171, nr_sectors = 1 limit=64 [ 700.025645][ T141] Buffer I/O error on dev loop7, logical block 171, lost async page write [ 700.034247][ T141] kworker/u8:6: attempt to access beyond end of device [ 700.034247][ T141] loop7: rw=1, sector=172, nr_sectors = 1 limit=64 [ 700.072237][ T141] Buffer I/O error on dev loop7, logical block 172, lost async page write [ 700.080853][ T141] kworker/u8:6: attempt to access beyond end of device [ 700.080853][ T141] loop7: rw=1, sector=173, nr_sectors = 1 limit=64 [ 700.094073][ T141] Buffer I/O error on dev loop7, logical block 173, lost async page write [ 700.130077][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.287401][ T141] kworker/u8:6: attempt to access beyond end of device [ 700.287401][ T141] loop7: rw=1, sector=174, nr_sectors = 1 limit=64 [ 700.300677][ T141] Buffer I/O error on dev loop7, logical block 174, lost async page write [ 700.337240][ T141] kworker/u8:6: attempt to access beyond end of device [ 700.337240][ T141] loop7: rw=1, sector=175, nr_sectors = 1 limit=64 [ 700.366534][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.441344][T13217] ocfs2: Unmounting device (7,9) on (node local) [ 700.520235][T17347] loop8: detected capacity change from 0 to 256 [ 700.557410][ T5645] BTRFS info (device loop5 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 700.583149][ T141] Buffer I/O error on dev loop7, logical block 175, lost async page write [ 700.652266][ T5867] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 700.668656][ T141] kworker/u8:6: attempt to access beyond end of device [ 700.668656][ T141] loop7: rw=1, sector=176, nr_sectors = 1 limit=64 [ 700.681876][ T141] Buffer I/O error on dev loop7, logical block 176, lost async page write [ 701.552750][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 701.715591][T17367] loop4: detected capacity change from 0 to 128 [ 701.803567][ T141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 702.202737][ T9065] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 702.235758][T17374] loop5: detected capacity change from 0 to 4096 [ 702.243687][ T5867] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 702.252745][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.271099][ T5867] usb 3-1: config 0 descriptor?? [ 702.336027][ T121] net_ratelimit: 3 callbacks suppressed [ 702.336051][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.440245][ T9065] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 702.464746][ T9065] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 702.508347][ T9065] usb 10-1: config 0 interface 0 has no altsetting 0 [ 702.532214][ T9065] usb 10-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 702.561684][ T9065] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.562373][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 702.615132][ T12] ntfs3(loop5): ino=5, mi_enum_attr [ 702.646623][ T5867] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 702.654447][ T9065] usb 10-1: config 0 descriptor?? [ 702.941707][T17390] batadv_slave_1: entered promiscuous mode [ 702.950298][T17389] batadv_slave_1: left promiscuous mode [ 703.078611][T17392] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3946'. [ 703.095770][ T9065] lenovo 0003:17EF:60EE.002D: unknown main item tag 0x2 [ 703.103045][ T9065] lenovo 0003:17EF:60EE.002D: unknown main item tag 0x6 [ 703.108170][T17392] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3946'. [ 703.120783][ T9065] lenovo 0003:17EF:60EE.002D: ignoring exceeding usage max [ 703.151105][ T9065] lenovo 0003:17EF:60EE.002D: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.9-1/input0 [ 703.376668][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.562943][T17401] loop7: detected capacity change from 0 to 2048 [ 703.603577][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 703.685516][ T9065] lenovo 0003:17EF:60EE.002D: Sensitivity setting failed: -71 [ 703.705832][ T50] Bluetooth: hci4: unexpected event for opcode 0x200a [ 703.738804][T17401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.778313][ T9065] usb 10-1: USB disconnect, device number 14 [ 703.847367][T17406] loop5: detected capacity change from 0 to 2048 [ 703.855216][T17406] udf: Unknown parameter 'ÿÿ' [ 703.937808][ T29] usb 3-1: USB disconnect, device number 33 [ 704.037233][T17412] loop8: detected capacity change from 0 to 64 [ 704.353438][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.411656][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.438158][ T9421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.642095][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 704.703536][T17429] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3958'. [ 704.774874][T17433] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 704.785025][T17433] gretap1: entered allmulticast mode [ 704.924257][T17435] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 705.292029][T17443] batadv_slave_1: entered promiscuous mode [ 705.305090][T17442] batadv_slave_1: left promiscuous mode [ 705.452904][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.533745][T17446] loop9: detected capacity change from 0 to 512 [ 705.609903][T17446] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 705.653529][T17446] EXT4-fs (loop9): 1 truncate cleaned up [ 705.661381][T17446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.691666][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 706.508004][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.535338][T13217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.857160][ T5867] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 706.857344][T17483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input51 [ 707.166057][T17495] xt_hashlimit: size too large, truncated to 1048576 [ 707.446622][ T29] net_ratelimit: 1 callbacks suppressed [ 707.446650][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.555068][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.784018][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 708.246189][ T5867] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 708.254514][ T5867] usb 3-1: config 179 has no interface number 0 [ 708.260806][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 708.271957][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 708.281880][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 708.293123][ T5867] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 708.341618][ T5867] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 708.396611][ T5867] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 708.423034][ T50] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 708.432400][ T50] Bluetooth: hci0: unexpected event for opcode 0x203e [ 708.439300][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.488893][T17476] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 708.822945][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.832978][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 709.022144][ T5791] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 709.030237][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.084522][ T5867] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 709.179267][ T5867] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 709.193698][ T5867] usb 3-1: USB disconnect, device number 34 [ 709.440589][T17555] loop4: detected capacity change from 0 to 1024 [ 709.514282][T17555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.647274][ T5791] usb 10-1: Using ep0 maxpacket: 8 [ 709.819181][T16186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.992164][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 709.993785][T17565] loop5: detected capacity change from 0 to 32768 [ 710.006797][T17565] btrfs: Deprecated parameter 'usebackuproot' [ 710.012986][T17565] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 710.023028][T17565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4016 (17565) [ 710.056324][T17565] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 710.066511][T17565] BTRFS info (device loop5): using crc32c checksum algorithm [ 710.113503][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.339709][ T5791] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 710.350992][ T5791] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 710.374671][ T5791] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 710.384695][ T5791] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.397760][ T5791] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 710.406902][ T5791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.466770][ T1152] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 710.515984][T17565] BTRFS error (device loop5): failed to load root extent [ 710.525737][T17565] BTRFS warning (device loop5): try to load backup roots slot 1 [ 710.533864][ T1148] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 710.552362][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.593884][T17565] BTRFS warning (device loop5): couldn't read tree root [ 710.600939][T17565] BTRFS warning (device loop5): try to load backup roots slot 2 [ 710.609090][ T1148] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 710.619542][T17565] BTRFS warning (device loop5): couldn't read tree root [ 710.631289][T17565] BTRFS warning (device loop5): try to load backup roots slot 3 [ 710.728027][T17565] BTRFS info (device loop5): rebuilding free space tree [ 710.807067][T17594] loop2: detected capacity change from 0 to 4096 [ 710.833035][T17565] BTRFS info (device loop5): checking UUID tree [ 710.840551][T17565] BTRFS info (device loop5): enabling ssd optimizations [ 710.847635][T17565] BTRFS info (device loop5): turning on sync discard [ 710.855186][T17565] BTRFS info (device loop5): enabling free space tree [ 710.861975][T17565] BTRFS info (device loop5): force clearing of disk cache [ 710.869179][T17565] BTRFS info (device loop5): enabling auto defrag [ 710.875650][T17565] BTRFS info (device loop5): trying to use backup root at mount time [ 710.883839][T17565] BTRFS info (device loop5): use zstd compression, level 3 [ 710.913672][T17594] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 711.040470][ T5791] usb 10-1: GET_CAPABILITIES returned 0 [ 711.046623][ T5791] usbtmc 10-1:16.0: can't read capabilities [ 711.135119][T17605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.193082][ T30] audit: type=1800 audit(1780458113.110:256): pid=17594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4024" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 711.239663][ T5645] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 711.277713][ T10] usb 10-1: USB disconnect, device number 15 [ 711.427237][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a8abc00: rx timeout, send abort [ 711.442298][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802a8abc00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 711.575392][T17613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.896448][T17621] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 712.240340][T17630] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.4037'. [ 712.387672][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4039'. [ 712.564444][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 712.580040][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 712.590620][T15520] Bluetooth: hci0: hardware error 0x00 [ 712.935214][T17647] loop4: detected capacity change from 0 to 2048 [ 712.991266][T17647] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 713.062535][T17647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.077368][T17652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.152497][ T5883] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 713.271036][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 713.378069][ T5883] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 713.379494][ C0] net_ratelimit: 11 callbacks suppressed [ 713.379519][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 713.405789][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.408205][ T5883] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 713.466534][ T5883] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.492891][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.543393][T17648] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 713.582820][ T5883] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 713.634259][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.995083][ T5883] usb 8-1: USB disconnect, device number 18 [ 714.354741][ T9065] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 714.417425][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 714.425149][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.592714][ T9065] usb 5-1: Using ep0 maxpacket: 16 [ 714.624809][ T9065] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 714.638629][ T9065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.662964][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.712438][ T9065] usb 5-1: Product: syz [ 714.723204][ T9065] usb 5-1: Manufacturer: syz [ 714.733592][ T9065] usb 5-1: SerialNumber: syz [ 714.775516][ T9065] usb 5-1: config 0 descriptor?? [ 715.005034][T15520] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 715.253308][ T9065] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 715.304091][ T9065] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 715.333028][ T9065] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 715.358586][ T9065] usb 5-1: media controller created [ 715.405894][ T9065] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.468200][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 715.476049][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.595849][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 715.604949][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.632449][ T10] usb 6-1: Product: syz [ 715.636668][ T10] usb 6-1: Manufacturer: syz [ 715.641276][ T10] usb 6-1: SerialNumber: syz [ 715.932661][ T10] usb 6-1: can't set config #1, error -71 [ 715.952809][ T10] usb 6-1: USB disconnect, device number 35 [ 716.068876][T17673] dtv5100: wlen = 0, aborting. [ 716.074557][ T9065] zl10353_read_register: readreg error (reg=127, ret==0) [ 716.096608][ T9065] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 716.131278][ T9065] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 716.184017][ T9065] usb 5-1: USB disconnect, device number 4 [ 716.505679][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 716.640411][ T9065] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 716.645606][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.756123][T17718] loop5: detected capacity change from 0 to 32768 [ 716.777495][T17718] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4077 (17718) [ 716.803866][T17728] loop7: detected capacity change from 0 to 512 [ 716.803932][T17718] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 716.832081][T17718] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 716.854818][T17728] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 716.947967][T17728] EXT4-fs (loop7): 1 truncate cleaned up [ 717.058459][T17728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.273580][T17718] BTRFS info (device loop5): enabling ssd optimizations [ 717.330909][T17718] BTRFS info (device loop5): turning on async discard [ 717.338108][T17718] BTRFS info (device loop5): enabling free space tree [ 717.370603][ T9421] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.510700][ T30] audit: type=1800 audit(1780458119.450:257): pid=17718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4077" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 717.546365][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 717.658705][T17759] loop7: detected capacity change from 0 to 256 [ 717.719580][T17759] exfat: Deprecated parameter 'utf8' [ 717.746459][ T5645] BTRFS info (device loop5): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 717.773758][T17759] exfat: Deprecated parameter 'utf8' [ 717.816828][T17759] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 717.894433][ T10] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 718.344585][T17773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.409826][ T50] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 718.417662][ T50] Bluetooth: hci4: unexpected event for opcode 0x203e [ 718.636159][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 718.828397][T17786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4096'. [ 719.056832][T17792] loop2: detected capacity change from 0 to 512 [ 719.085862][T17792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 719.239122][T17792] EXT4-fs (loop2): 1 truncate cleaned up [ 719.255920][T17792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.345984][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 719.357023][ T10] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 719.379984][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 719.389760][ T10] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 719.398901][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.502413][ T10] usb 9-1: config 0 descriptor?? [ 719.643619][T17797] loop9: detected capacity change from 0 to 4096 [ 719.653929][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.665340][T17797] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 719.681432][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.042834][ T30] audit: type=1800 audit(1780458121.990:258): pid=17797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4101" name="file2" dev="loop9" ino=31 res=0 errno=0 [ 720.178381][ T10] lenovo 0003:17EF:60EE.002E: unknown main item tag 0x2 [ 720.192188][ T10] lenovo 0003:17EF:60EE.002E: unknown main item tag 0x6 [ 720.199303][ T10] lenovo 0003:17EF:60EE.002E: ignoring exceeding usage max [ 720.292582][ T10] lenovo 0003:17EF:60EE.002E: hidraw0: USB HID v0.81 Device [HID 17ef:60ee] on usb-dummy_hcd.8-1/input0 [ 720.529933][T17817] loop9: detected capacity change from 0 to 2048 [ 720.644980][T17817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.691370][T17817] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 720.721718][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.958088][ T10] lenovo 0003:17EF:60EE.002E: Sensitivity setting failed: -71 [ 720.973677][ T10] usb 9-1: USB disconnect, device number 16 [ 720.975697][T13217] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.220126][T17839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.687539][T17848] IPv6: NLM_F_CREATE should be specified when creating new route [ 721.763026][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 721.838730][T17851] loop4: detected capacity change from 0 to 256 [ 721.882954][T17851] FAT-fs (loop4): Directory bread(block 64) failed [ 721.889538][T17851] FAT-fs (loop4): Directory bread(block 65) failed [ 721.896145][T17851] FAT-fs (loop4): Directory bread(block 66) failed [ 721.902678][T17851] FAT-fs (loop4): Directory bread(block 67) failed [ 721.909283][T17851] FAT-fs (loop4): Directory bread(block 68) failed [ 721.915824][T17851] FAT-fs (loop4): Directory bread(block 69) failed [ 721.922433][T17851] FAT-fs (loop4): Directory bread(block 70) failed [ 721.928966][T17851] FAT-fs (loop4): Directory bread(block 71) failed [ 721.936175][T17851] FAT-fs (loop4): Directory bread(block 72) failed [ 721.942716][T17851] FAT-fs (loop4): Directory bread(block 73) failed [ 722.516170][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 722.525870][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 722.549236][T15520] Bluetooth: hci4: hardware error 0x00 [ 722.799542][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 722.998535][T17874] input: syz1 as /devices/virtual/input/input53 [ 723.296177][T17859] loop9: detected capacity change from 0 to 40427 [ 723.439362][T17859] F2FS-fs (loop9): build fault injection rate: 14 [ 723.443849][T17861] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.476037][T17859] F2FS-fs (loop9): build fault injection type: 0xe4 [ 723.558887][T17859] F2FS-fs (loop9): invalid crc value [ 723.582970][T17882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.701763][T17859] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of __f2fs_build_free_nids+0x1fe/0x1060 [ 723.838022][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 723.896070][T17886] xt_hashlimit: size too large, truncated to 1048576 [ 723.922469][T17861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.992677][T17861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.168714][T17859] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 724.209614][T17859] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 724.282418][T17859] F2FS-fs (loop9): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x1087/0x2fd0 [ 724.354064][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 724.462379][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.471405][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.547946][T17906] bio_check_eod: 119 callbacks suppressed [ 724.547976][T17906] syz.9.4125: attempt to access beyond end of device [ 724.547976][T17906] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 724.550000][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.592757][T17906] syz.9.4125: attempt to access beyond end of device [ 724.592757][T17906] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 724.595348][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.638001][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 724.685645][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 724.766330][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 724.808979][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.879064][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 724.896575][T17903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 724.955633][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.975996][T13217] syz-executor: attempt to access beyond end of device [ 724.975996][T13217] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 724.993252][T13217] CPU: 1 UID: 0 PID: 13217 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 724.993313][T13217] Tainted: [L]=SOFTLOCKUP [ 724.993327][T13217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.993351][T13217] Call Trace: [ 724.993364][T13217] [ 724.993379][T13217] dump_stack_lvl+0x100/0x190 [ 724.993425][T13217] f2fs_stop_checkpoint+0x600/0x9b0 [ 724.993466][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.993514][T13217] ? errseq_set+0xe3/0x150 [ 724.993570][T13217] ? errseq_set+0xe3/0x150 [ 724.993625][T13217] f2fs_write_end_io+0xf59/0x1340 [ 724.993676][T13217] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 724.993729][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.993786][T13217] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 724.993832][T13217] bio_endio+0x78f/0x8f0 [ 724.993888][T13217] submit_bio_noacct+0x64c/0x2000 [ 724.993958][T13217] f2fs_submit_write_bio+0x135/0x340 [ 724.994004][T13217] __submit_merged_bio+0x331/0x780 [ 724.994062][T13217] __submit_merged_write_cond+0x3fe/0x510 [ 724.994123][T13217] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 724.994181][T13217] ? __pfx___might_resched+0x10/0x10 [ 724.994234][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.994297][T13217] f2fs_write_cache_pages+0x20e9/0x2630 [ 724.994378][T13217] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 724.994437][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.994485][T13217] ? bpf_ksym_find+0x124/0x1c0 [ 724.994542][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.994588][T13217] ? __kasan_check_byte+0x13/0x50 [ 724.994646][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.994695][T13217] ? unwind_next_frame+0x3be/0x2090 [ 724.994748][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.994795][T13217] ? rcu_is_watching+0x12/0xc0 [ 724.994857][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.994919][T13217] ? bpf_ksym_find+0x124/0x1c0 [ 724.995052][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.995105][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.995152][T13217] ? add_lock_to_list+0x99/0x110 [ 724.995212][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.995260][T13217] ? rcu_is_watching+0x12/0xc0 [ 724.995321][T13217] f2fs_write_data_pages+0x799/0x16d0 [ 724.995391][T13217] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 724.995444][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.995500][T13217] ? do_writepages+0x4b5/0x600 [ 724.995558][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.995611][T13217] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 724.995672][T13217] do_writepages+0x278/0x600 [ 724.995738][T13217] ? __pfx_do_writepages+0x10/0x10 [ 724.995800][T13217] ? do_raw_spin_unlock+0x145/0x1e0 [ 724.995864][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.995912][T13217] ? _raw_spin_unlock+0x28/0x50 [ 724.995970][T13217] filemap_writeback+0x22d/0x2e0 [ 724.996039][T13217] ? __pfx_filemap_writeback+0x10/0x10 [ 724.996101][T13217] ? check_noncircular+0x97/0x160 [ 724.996199][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.996249][T13217] ? find_held_lock+0x2b/0x80 [ 724.996307][T13217] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 724.996363][T13217] ? f2fs_sync_dirty_inodes+0x3a6/0x990 [ 724.996419][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.996477][T13217] f2fs_sync_dirty_inodes+0x469/0x990 [ 724.996553][T13217] block_operations+0x2a6/0xfc0 [ 724.996608][T13217] ? __bfs+0x150/0x2a0 [ 724.996679][T13217] ? __pfx_block_operations+0x10/0x10 [ 724.996736][T13217] ? check_noncircular+0x97/0x160 [ 724.996825][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.996888][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.996936][T13217] ? rcu_is_watching+0x12/0xc0 [ 724.996991][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997046][T13217] f2fs_write_checkpoint+0x582/0x5550 [ 724.997114][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997163][T13217] ? _raw_spin_unlock_irq+0x2e/0x50 [ 724.997214][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997261][T13217] ? __wait_for_common+0x1f3/0x4c0 [ 724.997318][T13217] ? __pfx_schedule_timeout+0x10/0x10 [ 724.997372][T13217] ? __pfx___wait_for_common+0x10/0x10 [ 724.997432][T13217] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 724.997503][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997551][T13217] ? rcu_is_watching+0x12/0xc0 [ 724.997602][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997648][T13217] ? kthread_stop+0x280/0x640 [ 724.997692][T13217] kill_f2fs_super+0x3f1/0x4a0 [ 724.997746][T13217] ? __pfx_kill_f2fs_super+0x10/0x10 [ 724.997822][T13217] ? lockdep_hardirqs_on+0x78/0x100 [ 724.997885][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997933][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.997993][T13217] deactivate_locked_super+0xc1/0x1b0 [ 724.998051][T13217] deactivate_super+0xe7/0x110 [ 724.998108][T13217] cleanup_mnt+0x21f/0x450 [ 724.998148][T13217] task_work_run+0x150/0x240 [ 724.998195][T13217] ? __pfx_task_work_run+0x10/0x10 [ 724.998243][T13217] ? srso_alias_return_thunk+0x5/0xfbef5 [ 724.998289][T13217] ? rcu_is_watching+0x12/0xc0 [ 724.998349][T13217] exit_to_user_mode_loop+0x157/0x670 [ 724.998393][T13217] ? rcu_is_watching+0x12/0xc0 [ 724.998452][T13217] do_syscall_64+0x666/0x870 [ 724.998514][T13217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.998553][T13217] RIP: 0033:0x7f87f539e097 [ 724.998583][T13217] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 724.998620][T13217] RSP: 002b:00007fffacc752b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 724.998655][T13217] RAX: 0000000000000000 RBX: 00007f87f54321ca RCX: 00007f87f539e097 [ 724.998681][T13217] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffacc75370 [ 724.998706][T13217] RBP: 00007fffacc75370 R08: 00007fffacc76370 R09: 00000000ffffffff [ 724.998733][T13217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffacc76400 [ 724.998758][T13217] R13: 00007f87f54321ca R14: 00000000000b0e9b R15: 00007fffacc76440 [ 724.998810][T13217] [ 725.035081][T13217] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 725.056887][T15520] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 725.225194][T17883] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 725.327508][ T29] usb 5-1: USB disconnect, device number 5 [ 725.928256][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 725.929155][T17883] usb 3-1: Using ep0 maxpacket: 16 [ 726.207090][T17931] syzkaller1: entered promiscuous mode [ 726.207129][T17931] syzkaller1: entered allmulticast mode [ 726.505879][ T5791] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 726.557831][ T30] audit: type=1326 audit(1780458128.470:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311b19ce59 code=0x7ffc0000 [ 726.576770][T17939] sch_fq: defrate 6 ignored. [ 726.623310][ T30] audit: type=1326 audit(1780458128.470:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311b19ce59 code=0x7ffc0000 [ 726.648914][T17883] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 726.649238][T17938] loop5: detected capacity change from 0 to 512 [ 726.657026][T17883] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 726.657068][T17883] usb 3-1: config 0 has no interface number 0 [ 726.664784][ T30] audit: type=1326 audit(1780458128.470:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f311b19ce59 code=0x7ffc0000 [ 726.671451][T17883] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 726.694188][T17938] EXT4-fs: Ignoring removed mblk_io_submit option [ 726.702677][T17883] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 726.770304][ T30] audit: type=1326 audit(1780458128.470:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f311b19cbc2 code=0x7ffc0000 [ 726.872121][ T30] audit: type=1326 audit(1780458128.550:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f311b15d68e code=0x7ffc0000 [ 726.884721][T17938] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (43466!=33349) [ 726.923646][ T30] audit: type=1326 audit(1780458128.550:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f311b19cc87 code=0x7ffc0000 [ 726.985757][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.006718][ T30] audit: type=1326 audit(1780458128.550:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f311b15d68e code=0x7ffc0000 [ 727.062082][ T30] audit: type=1326 audit(1780458128.550:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f311b19caeb code=0x7ffc0000 [ 727.123540][T17938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 727.131606][T17938] System zones: 1-12 [ 727.135796][T17938] EXT4-fs (loop5): orphan cleanup on readonly fs [ 727.142150][T17938] EXT4-fs error (device loop5): ext4_read_inode_bitmap:166: comm syz.5.4153: Inode bitmap for bg 0 marked uninitialized [ 727.156025][T17938] loop5: lost filesystem error report for type 5 error -117 [ 727.156506][T17938] EXT4-fs (loop5): Remounting filesystem read-only [ 727.172917][T17938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 727.185626][ T30] audit: type=1326 audit(1780458128.600:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f311b15d68e code=0x7ffc0000 [ 727.234435][ T30] audit: type=1326 audit(1780458128.600:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.5.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f311b15d68e code=0x7ffc0000 [ 727.239047][ T5791] usb 9-1: Using ep0 maxpacket: 16 [ 727.318404][ T5645] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 727.538437][T17964] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 727.573170][T17883] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 727.582273][T17883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.590288][T17883] usb 3-1: Product: syz [ 727.594461][T17883] usb 3-1: Manufacturer: syz [ 727.599070][T17883] usb 3-1: SerialNumber: syz [ 727.624066][T17883] usb 3-1: config 0 descriptor?? [ 727.684724][T17910] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 727.692018][T17910] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 727.915690][T17883] asix 3-1:0.251: probe with driver asix failed with error -71 [ 727.929365][T17883] usb 3-1: USB disconnect, device number 35 [ 727.944831][ T5791] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 727.959562][ T5791] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 728.029590][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 728.166323][T17978] loop2: detected capacity change from 0 to 128 [ 728.351054][T17981] loop7: detected capacity change from 0 to 256 [ 728.839820][ T5791] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 728.849334][ T5791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.857758][ T5791] usb 9-1: Product: syz [ 728.861935][ T5791] usb 9-1: Manufacturer: syz [ 728.866547][ T5791] usb 9-1: SerialNumber: syz [ 728.903478][ T5791] usb 9-1: config 0 descriptor?? [ 729.070552][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 729.187383][T17898] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 729.206700][ T5791] usb 9-1: can't set config #0, error -71 [ 729.229389][ T5791] usb 9-1: USB disconnect, device number 17 [ 729.287637][T18006] bridge0: port 3(vlan2) entered blocking state [ 729.306016][T18006] bridge0: port 3(vlan2) entered disabled state [ 729.317227][T18006] vlan2: entered allmulticast mode [ 729.324173][T18006] geneve0: entered allmulticast mode [ 729.337283][T18006] vlan2: entered promiscuous mode [ 729.343038][T18006] geneve0: entered promiscuous mode [ 729.542384][ T5883] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 729.567653][T18011] loop2: detected capacity change from 0 to 4096 [ 729.596023][T18013] loop4: detected capacity change from 0 to 1024 [ 729.674913][T18013] hfsplus: bad catalog file entry [ 729.753030][ T5883] usb 10-1: Using ep0 maxpacket: 32 [ 729.762974][ T5883] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 729.798641][ T5883] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 729.817722][ T5883] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 729.835472][ T5883] usb 10-1: config 1 has no interface number 0 [ 729.841903][ T5883] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 729.853546][ T5883] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 729.868563][ T5883] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 729.877994][ T5883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.880693][T17898] usb 6-1: Using ep0 maxpacket: 32 [ 729.920433][ T5883] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 730.105240][ T5883] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 730.111244][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 730.401889][T18007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.447802][T18007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.501087][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.723249][ T5759] usb 10-1: USB disconnect, device number 16 [ 730.768083][ T5759] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 730.881882][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.018713][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 731.036853][T18030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.040555][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 731.070030][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 731.085370][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 731.093525][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.150953][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 731.502745][T17898] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 731.511847][T17898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.519856][T17898] usb 6-1: Product: syz [ 731.524028][T17898] usb 6-1: Manufacturer: syz [ 731.528642][T17898] usb 6-1: SerialNumber: syz [ 731.554465][T17898] usb 6-1: config 0 descriptor?? [ 731.771195][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.001468][T17898] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 732.010061][T17898] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 732.089880][T17898] usb 6-1: USB disconnect, device number 36 [ 732.192088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 732.378261][T18065] loop2: detected capacity change from 0 to 4096 [ 732.745045][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.061164][T18078] loop2: detected capacity change from 0 to 512 [ 733.191395][T18078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.203988][T18078] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.232780][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 733.267534][T15520] Bluetooth: hci2: command tx timeout [ 733.384347][T18084] gtp1: entered promiscuous mode [ 733.402682][T18084] gtp1: entered allmulticast mode [ 733.448499][T18084] team0: Device gtp1 is of different type [ 733.480704][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.193875][T18093] loop9: detected capacity change from 0 to 32768 [ 734.202039][T18093] btrfs: Deprecated parameter 'usebackuproot' [ 734.208191][T18093] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 734.241263][T18093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4220 (18093) [ 734.386374][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 734.448993][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 734.739775][T18093] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 734.749994][T18093] BTRFS info (device loop9): using crc32c checksum algorithm [ 734.780093][ T141] BTRFS warning (device loop9): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 734.898119][T18093] BTRFS error (device loop9): failed to load root extent [ 734.905935][T18093] BTRFS warning (device loop9): try to load backup roots slot 1 [ 734.923060][ T1152] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 735.004536][T18087] loop2: detected capacity change from 0 to 131072 [ 735.012743][T18093] BTRFS warning (device loop9): couldn't read tree root [ 735.020195][T18093] BTRFS warning (device loop9): try to load backup roots slot 2 [ 735.024768][T18087] F2FS-fs (loop2): invalid crc value [ 735.033662][ T1152] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 735.044507][T18093] BTRFS warning (device loop9): couldn't read tree root [ 735.051526][T18093] BTRFS warning (device loop9): try to load backup roots slot 3 [ 735.173926][T18093] BTRFS info (device loop9): rebuilding free space tree [ 735.196667][T18087] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 735.228453][T18087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 735.231037][T18093] BTRFS info (device loop9): disabling free space tree [ 735.242955][T18093] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 735.252962][T18093] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 735.275296][T18093] BTRFS info (device loop9): checking UUID tree [ 735.289721][T18093] BTRFS info (device loop9): enabling ssd optimizations [ 735.297555][T18093] BTRFS info (device loop9): turning on async discard [ 735.304386][T18093] BTRFS info (device loop9): force clearing of disk cache [ 735.311511][T18093] BTRFS info (device loop9): enabling auto defrag [ 735.318143][T18093] BTRFS info (device loop9): trying to use backup root at mount time [ 735.326608][T18093] BTRFS info (device loop9): use zlib compression, level 3 [ 735.341900][T15520] Bluetooth: hci2: command tx timeout [ 735.541636][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 735.928212][T13217] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 736.208799][ T12] team0: left allmulticast mode [ 736.226897][ T12] team_slave_0: left allmulticast mode [ 736.261972][ T12] team_slave_1: left allmulticast mode [ 736.352020][ T12] team0: left promiscuous mode [ 736.422214][ T12] team_slave_0: left promiscuous mode [ 736.464129][ T12] team_slave_1: left promiscuous mode [ 736.499513][ T12] bridge1: left promiscuous mode [ 736.535850][ T12] bridge0: port 3(team0) entered disabled state [ 736.580515][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 736.688221][ T12] bridge_slave_1: left allmulticast mode [ 736.716194][ T12] bridge_slave_1: left promiscuous mode [ 736.737556][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.891870][ T12] bridge_slave_0: left allmulticast mode [ 736.921421][ T12] bridge_slave_0: left promiscuous mode [ 736.952956][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.403498][T15520] Bluetooth: hci2: command tx timeout [ 737.617340][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 738.167663][T18170] loop4: detected capacity change from 0 to 1024 [ 738.272776][T18170] hfsplus: failed to load extents file [ 738.476216][T18170] loop4: detected capacity change from 0 to 8192 [ 738.652443][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 739.029068][ T12] team0: Port device bridge1 removed [ 739.476710][T15520] Bluetooth: hci2: command tx timeout [ 739.500414][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.530683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.548333][ T12] bond0 (unregistering): Released all slaves [ 739.642271][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 739.695088][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 740.189354][T18185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4240'. [ 740.395857][T18156] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 740.435956][T18156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 740.473661][T18156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 740.697530][T18180] loop4: detected capacity change from 0 to 131072 [ 740.732514][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 740.829765][T18180] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 740.873662][T18180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 740.970700][T18204] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 741.106080][T18156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 741.116583][T18209] batadv_slave_0: entered promiscuous mode [ 741.333495][T18156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 741.339532][T18156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 741.395713][T18156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 741.404441][T18156] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 741.485006][T18156] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 741.590479][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.625307][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.653063][T18218] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 741.668039][T18031] bridge_slave_0: entered allmulticast mode [ 741.699007][T18031] bridge_slave_0: entered promiscuous mode [ 741.758985][T18206] batadv_slave_0: left promiscuous mode [ 741.764863][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.783027][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 741.795663][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.816795][T18031] bridge_slave_1: entered allmulticast mode [ 741.842236][T18220] Bluetooth: MGMT ver 1.23 [ 741.861076][T18031] bridge_slave_1: entered promiscuous mode [ 742.034545][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.047793][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.174743][T18224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4249'. [ 742.422732][T15520] Bluetooth: hci5: command 0x0c1a tx timeout [ 742.425734][T18224] syz_tun: Device is already in use. [ 742.438579][T18031] team0: Port device team_slave_0 added [ 742.451469][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 742.483690][T15520] Bluetooth: hci3: command 0x0406 tx timeout [ 742.822573][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 743.097282][T18031] team0: Port device team_slave_1 added [ 743.326240][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.333253][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.354100][T15520] Bluetooth: hci1: command 0x0406 tx timeout [ 743.469371][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.475204][T15520] Bluetooth: hci2: command 0x0c1a tx timeout [ 743.558379][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.565858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.687440][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.694895][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.810330][ T12] veth1_macvtap: left promiscuous mode [ 743.815880][ T12] veth0_macvtap: left promiscuous mode [ 743.821449][ T12] veth1_vlan: left promiscuous mode [ 743.826720][ T12] veth0_vlan: left promiscuous mode [ 743.860373][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 744.225276][T18262] loop2: detected capacity change from 0 to 512 [ 744.268374][T18262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 744.441429][T18262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.496748][T18268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 744.524692][T18262] ext4 filesystem being mounted at /709/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 744.553338][T15520] Bluetooth: hci3: command 0x0406 tx timeout [ 744.872260][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 744.954323][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.977382][T18251] loop9: detected capacity change from 0 to 32768 [ 745.105907][T18251] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 745.337784][T18251] XFS (loop9): Ending clean mount [ 745.432398][T15520] Bluetooth: hci1: command 0x0406 tx timeout [ 745.450258][T18251] XFS (loop9): User initiated shutdown received. [ 745.479981][T18251] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:465). Shutting down filesystem. [ 745.514538][T15520] Bluetooth: hci2: command 0x0c1a tx timeout [ 745.535734][T18296] loop2: detected capacity change from 0 to 512 [ 745.544082][T18296] EXT4-fs: Ignoring removed i_version option [ 745.550411][T18296] EXT4-fs: Ignoring removed bh option [ 745.557675][T18251] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 745.616193][T13217] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 745.630195][T18296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.703715][T18296] ext4 filesystem being mounted at /711/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 745.912453][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.081289][ T5648] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.388557][ T12] team0 (unregistering): Port device team_slave_1 removed [ 746.524926][ T12] team0 (unregistering): Port device team_slave_0 removed [ 746.558255][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.566625][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.577663][ T1312] ------------[ cut here ]------------ [ 746.584265][ T1312] !skb_transport_header_was_set(skb) [ 746.584290][ T1312] WARNING: ./include/linux/skbuff.h:3244 at lowpan_xmit+0xe84/0x1150, CPU#0: aoe_tx0/1312 [ 746.599600][ T1312] Modules linked in: [ 746.605982][ T1312] CPU: 0 UID: 0 PID: 1312 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.616697][ T1312] Tainted: [L]=SOFTLOCKUP [ 746.621060][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.631204][ T1312] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 746.636602][ T1312] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 17 10 17 fe e9 7c fc ff ff e8 bd 20 c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 af 20 c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 746.656308][ T1312] RSP: 0018:ffffc90005c078a0 EFLAGS: 00010293 [ 746.662448][ T1312] RAX: 0000000000000000 RBX: ffffc90005c07930 RCX: ffffffff8b416526 [ 746.670514][ T1312] RDX: ffff88802a253e00 RSI: ffffffff8b416e83 RDI: ffff88802a253e00 [ 746.678562][ T1312] RBP: ffffc90005c07a40 R08: 0000000000000003 R09: 000000000000ffff [ 746.686604][ T1312] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888078a25ab6 [ 746.694665][ T1312] R13: ffffc90005c07940 R14: ffff888029a00e50 R15: ffff888078a25a00 [ 746.702712][ T1312] FS: 0000000000000000(0000) GS:ffff888124384000(0000) knlGS:0000000000000000 [ 746.711666][ T1312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.718317][ T1312] CR2: 0000200000000000 CR3: 0000000035a6e000 CR4: 0000000000350ef0 [ 746.726375][ T1312] Call Trace: [ 746.729664][ T1312] [ 746.732692][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 746.737713][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.743476][ T1312] ? skb_network_protocol+0x2ce/0x3d0 [ 746.748922][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.754657][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.760343][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.766072][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.771774][ T1312] ? dev_hard_start_xmit+0x128/0x7a0 [ 746.775952][ T5759] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 746.777401][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 746.790033][ T1312] dev_hard_start_xmit+0x128/0x7a0 [ 746.795285][ T1312] __dev_queue_xmit+0x1baa/0x4950 [ 746.800379][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.806164][ T1312] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 746.812186][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.817886][ T1312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 746.823387][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.829081][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.834839][ T1312] ? __lock_acquire+0x4a5/0x2630 [ 746.839861][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.845608][ T1312] ? ref_tracker_free+0x37e/0x6c0 [ 746.850720][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.856489][ T1312] ? do_raw_spin_lock+0x128/0x260 [ 746.861587][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.867344][ T1312] ? rcu_is_watching+0x12/0xc0 [ 746.872231][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.877937][ T1312] ? __pfx_tx+0x10/0x10 [ 746.882221][ T1312] tx+0xc4/0x130 [ 746.885831][ T1312] kthread+0x1d8/0x3c0 [ 746.889997][ T1312] ? __kthread_parkme+0xbb/0x230 [ 746.895089][ T1312] ? __pfx_kthread+0x10/0x10 [ 746.899732][ T1312] ? rcu_is_watching+0x12/0xc0 [ 746.904643][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.910331][ T1312] ? __pfx_default_wake_function+0x10/0x10 [ 746.916258][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.921986][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.927740][ T1312] ? __kthread_parkme+0x18c/0x230 [ 746.932886][ T1312] ? kthread+0x13a/0x450 [ 746.937201][ T1312] ? __pfx_kthread+0x10/0x10 [ 746.941839][ T1312] kthread+0x370/0x450 [ 746.946002][ T1312] ? __pfx_kthread+0x10/0x10 [ 746.950640][ T1312] ret_from_fork+0x72b/0xd50 [ 746.955449][ T1312] ? __pfx_ret_from_fork+0x10/0x10 [ 746.960609][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.966348][ T1312] ? __switch_to+0x800/0x1100 [ 746.971119][ T1312] ? __switch_to_asm+0x39/0x70 [ 746.976025][ T1312] ? __pfx_kthread+0x10/0x10 [ 746.980676][ T1312] ret_from_fork_asm+0x1a/0x30 [ 746.985579][ T1312] [ 746.988660][ T1312] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 746.995974][ T1312] CPU: 0 UID: 0 PID: 1312 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.006606][ T1312] Tainted: [L]=SOFTLOCKUP [ 747.011073][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 747.021156][ T1312] Call Trace: [ 747.024451][ T1312] [ 747.027400][ T1312] dump_stack_lvl+0x100/0x190 [ 747.032117][ T1312] vpanic+0x552/0x970 [ 747.036231][ T1312] ? __pfx_vpanic+0x10/0x10 [ 747.040783][ T1312] panic+0xd1/0xe0 [ 747.044547][ T1312] ? __pfx_panic+0x10/0x10 [ 747.049022][ T1312] ? check_panic_on_warn+0x1f/0x90 [ 747.054183][ T1312] check_panic_on_warn.cold+0x19/0x34 [ 747.059612][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 747.064351][ T1312] __warn.cold+0x191/0x328 [ 747.068825][ T1312] __report_bug+0x296/0x3d0 [ 747.073380][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 747.078122][ T1312] ? __pfx___report_bug+0x10/0x10 [ 747.083201][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.088932][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.094616][ T1312] ? stack_depot_save_flags+0x27/0x9d0 [ 747.100238][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.105927][ T1312] ? __lock_acquire+0x4a5/0x2630 [ 747.110915][ T1312] ? kfree_skbmem+0x19a/0x210 [ 747.115646][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.121344][ T1312] ? __kasan_slab_free+0x5f/0x80 [ 747.126341][ T1312] ? kmem_cache_free+0x127/0x6c0 [ 747.131331][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 747.136073][ T1312] report_bug+0xb2/0x220 [ 747.140368][ T1312] ? lowpan_xmit+0xe84/0x1150 [ 747.145106][ T1312] handle_bug+0x16a/0x2a0 [ 747.149474][ T1312] exc_invalid_op+0x17/0x50 [ 747.154015][ T1312] asm_exc_invalid_op+0x1a/0x20 [ 747.158906][ T1312] RIP: 0010:lowpan_xmit+0xe84/0x1150 [ 747.164253][ T1312] Code: 00 00 48 8b 8d a8 fe ff ff 0f b7 85 74 fe ff ff 4c 89 ff 48 01 81 40 02 00 00 e8 17 10 17 fe e9 7c fc ff ff e8 bd 20 c7 f6 90 <0f> 0b 90 e9 a8 f6 ff ff e8 af 20 c7 f6 90 0f 0b 90 e9 af f5 ff ff [ 747.183905][ T1312] RSP: 0018:ffffc90005c078a0 EFLAGS: 00010293 [ 747.190016][ T1312] RAX: 0000000000000000 RBX: ffffc90005c07930 RCX: ffffffff8b416526 [ 747.198021][ T1312] RDX: ffff88802a253e00 RSI: ffffffff8b416e83 RDI: ffff88802a253e00 [ 747.206023][ T1312] RBP: ffffc90005c07a40 R08: 0000000000000003 R09: 000000000000ffff [ 747.214024][ T1312] R10: 000000000000ffff R11: 0000000000000000 R12: ffff888078a25ab6 [ 747.222069][ T1312] R13: ffffc90005c07940 R14: ffff888029a00e50 R15: ffff888078a25a00 [ 747.230094][ T1312] ? lowpan_xmit+0x526/0x1150 [ 747.234830][ T1312] ? lowpan_xmit+0xe83/0x1150 [ 747.239587][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 747.244581][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.250296][ T1312] ? skb_network_protocol+0x2ce/0x3d0 [ 747.255723][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.261435][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.267119][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.272888][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.278611][ T1312] ? dev_hard_start_xmit+0x128/0x7a0 [ 747.283941][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 747.288941][ T1312] dev_hard_start_xmit+0x128/0x7a0 [ 747.294124][ T1312] __dev_queue_xmit+0x1baa/0x4950 [ 747.299217][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.304904][ T1312] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 747.310867][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.316593][ T1312] ? __pfx___dev_queue_xmit+0x10/0x10 [ 747.322028][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.327713][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.333391][ T1312] ? __lock_acquire+0x4a5/0x2630 [ 747.338419][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.344102][ T1312] ? ref_tracker_free+0x37e/0x6c0 [ 747.349189][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.354891][ T1312] ? do_raw_spin_lock+0x128/0x260 [ 747.359998][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.365684][ T1312] ? rcu_is_watching+0x12/0xc0 [ 747.370494][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.376163][ T1312] ? __pfx_tx+0x10/0x10 [ 747.380354][ T1312] tx+0xc4/0x130 [ 747.383960][ T1312] kthread+0x1d8/0x3c0 [ 747.388075][ T1312] ? __kthread_parkme+0xbb/0x230 [ 747.393060][ T1312] ? __pfx_kthread+0x10/0x10 [ 747.397685][ T1312] ? rcu_is_watching+0x12/0xc0 [ 747.402486][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.408152][ T1312] ? __pfx_default_wake_function+0x10/0x10 [ 747.414009][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.419680][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.425432][ T1312] ? __kthread_parkme+0x18c/0x230 [ 747.430507][ T1312] ? kthread+0x13a/0x450 [ 747.434774][ T1312] ? __pfx_kthread+0x10/0x10 [ 747.439402][ T1312] kthread+0x370/0x450 [ 747.443500][ T1312] ? __pfx_kthread+0x10/0x10 [ 747.448120][ T1312] ret_from_fork+0x72b/0xd50 [ 747.452744][ T1312] ? __pfx_ret_from_fork+0x10/0x10 [ 747.457890][ T1312] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.463554][ T1312] ? __switch_to+0x800/0x1100 [ 747.468272][ T1312] ? __switch_to_asm+0x39/0x70 [ 747.473071][ T1312] ? __pfx_kthread+0x10/0x10 [ 747.477694][ T1312] ret_from_fork_asm+0x1a/0x30 [ 747.482521][ T1312] [ 747.486626][ T1312] Kernel Offset: disabled [ 747.490944][ T1312] Rebooting in 86400 seconds..