last executing test programs: 4m32.234310295s ago: executing program 1 (id=414): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8b8ca478e1943099d7dc92f34a62f2ac"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9e2d7f29f6eb2d815fb88ed6cef452cf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "67589b1224d48fce"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48d0}, 0x8000) 4m31.373080258s ago: executing program 1 (id=422): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[], 0x0) 4m28.232666121s ago: executing program 1 (id=451): r0 = inotify_init1(0x80000) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400) r2 = dup(r0) inotify_rm_watch(r2, r1) read$FUSE(r2, &(0x7f0000000e40)={0x2020}, 0x2020) 4m27.814092698s ago: executing program 1 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m27.396568117s ago: executing program 1 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xfe, 0x0}, 0x10) 4m26.579906977s ago: executing program 1 (id=466): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 4m25.58524763s ago: executing program 32 (id=466): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 2m1.913529588s ago: executing program 4 (id=1357): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0x67}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000001240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "e600", 0x64, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "29624e40c6e6d79b1911f4834b435dd2518f63061278f30c5371048e8e0b180f", "73e1acf1dea2d14aface79d29d1c09f7", {"6bc6cfc3555269e081b5c52d82dc7563", "83337f41945f3a2ae6928d0ba0bfa400"}}}}}}}}, 0x0) 2m0.781071829s ago: executing program 4 (id=1362): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_udp(0x2, 0x2, 0x0) 2m0.087257179s ago: executing program 4 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) 1m59.265163101s ago: executing program 4 (id=1375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0x4f) 1m58.613693366s ago: executing program 4 (id=1379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000040) 1m56.897577131s ago: executing program 4 (id=1387): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 1m56.109052984s ago: executing program 33 (id=1387): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001400)=""/4046, 0xffd8) 37.16914682s ago: executing program 2 (id=1857): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x2, 0x0, 0x8000000000000003) 35.752081757s ago: executing program 2 (id=1860): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0xa004) 35.353251293s ago: executing program 2 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 34.673409857s ago: executing program 2 (id=1869): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@auto_da_alloc}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 34.04574054s ago: executing program 2 (id=1873): syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) 33.265501076s ago: executing program 2 (id=1876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.394344465s ago: executing program 34 (id=1876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.825575454s ago: executing program 6 (id=2011): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="05003300000000000000060088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 5.536071292s ago: executing program 8 (id=2013): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000a0c0}, 0x6584f2c77c24db5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 5.465624163s ago: executing program 7 (id=2014): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) 5.465366688s ago: executing program 5 (id=2015): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 5.314414916s ago: executing program 0 (id=2016): r0 = inotify_init1(0x800) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[], 0xfe, 0x567, &(0x7f0000007ac0)="$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") inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 5.197938378s ago: executing program 8 (id=2017): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xcf2, 0x6250, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_read(r0, 0x1, 0x1f, &(0x7f0000001000)) syz_usb_ep_write(r0, 0x82, 0x1, &(0x7f0000002000)="03") syz_usb_ep_write(r0, 0x82, 0xd, &(0x7f0000003000)='USBS\x00\x00\x00\x00\x00\x00\x00\x00\x00') 5.161948116s ago: executing program 7 (id=2018): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000046c0)) 4.533488142s ago: executing program 0 (id=2020): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x4}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x8) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x7101}], 0x1, 0x4001c00) 4.512139261s ago: executing program 6 (id=2021): syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0), 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) lseek(r0, 0x6, 0x1) getdents(r0, 0x0, 0x0) 4.10446598s ago: executing program 5 (id=2022): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 4.078445564s ago: executing program 0 (id=2023): syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000040)={[{@eas_rw}, {@eas_no}, {@umask={'umask', 0x3d, 0x8}}, {@check_none}]}, 0x5, 0x9e2f, &(0x7f0000013e80)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 3.875830421s ago: executing program 6 (id=2024): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') 3.712756969s ago: executing program 5 (id=2025): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'dh\x00', 0x1d, 0x59c810c3, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.361581484s ago: executing program 0 (id=2027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x40}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x34000091) 3.215234464s ago: executing program 3 (id=2028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x9213}}, 0x30) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[], 0x0) 3.137684606s ago: executing program 5 (id=2029): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 3.0631402s ago: executing program 8 (id=2030): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x80049370, 0x1000000000000) 2.85268598s ago: executing program 0 (id=2031): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5514, &(0x7f00000004c0)="$eJzs3M1rI/UfB/BP2u1uu7u//RXx4G0HFqGFTWj6sOit6i4+YJey6sGTpkkasptkSpOmtScPHsWD/4koePLo3+DBszfxoHgTlMxMZesTQtPGtq8XTN4z35l85vsNy8JnUhLApTWf/PxjKW7FXERMR8TNiGy/VGyZ9Tyei4jbETH11FYqxn8fuBoR1yPi1qh4XrNUnPr07vDO2g9v/PTVN9eu3Pjsy28nt2pg0p6PiO5Ovr/fzTNt5fm4GK8N21l2V4dF5ie6T4rjNM/95lZWYb92dF0ty5VWfn26s9cf5XanVh9lq72dje/08hv2h62jOtkbHtd2s+NGcyvLdj/NsnWYz+vgMP+/7bA/yOs0inofZOVjMDjKfLx50MzXs/Mky3pvUIznddNG82CUwyKL20U97TSyeWyd5JP+b3uz3ds7SIbN3X477SVrleoLleq9cnU3bTQHzdVyrdu4t5ostDqjy8qDZq273krTVqdZqafdxWShVa+Xq9Vk4X5zq13rJdVqZaWyVF5bLPbuJq8+fCfpNJKFUb7c7u0N2p1+sp3uJvk7FpPlysqLi8mdavLWxmay+ejBg43Nt9+7/+7DlzZef6W46E/TShaWl5aXy9Wl8nJ18RKt/6Ni0mNcP5xIadITADh/9P/AJJxe/7/7KOL0+//Q/4/Fuep/L3v/fwrrhxPR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFrfzXz+WrYznx/fKMb/Vww9UxyXImIqIn79C9Nx9VjN6aLOzN9cP/OHOXxdiqzC6B7Xiu16RKwX2y//P+1PAQAAAC6uLz68/Unerecv85OeEGcpe2gzFzffH1O92YiYmf9+TNWmRi/PjqlY9u/7ShyMqVr2AGt2TMXyR25XxlXtX5k+FrNPRSmPqTOdDgAAcCaOdwJn24UAAABwlj7+x7M6wgurFEdfZcbRH/Bfy6P4QnDu2BEAAABwDpUmPQEAAADg1GX9v9//AwAAgIst//0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgN3bu50ZtIIoD8LPBAfJHQVHuaSU3KCMl5JhjRAFpggJyIC2kAWogt5SwghUeLwsrH1by2Nauvk/yzo5lfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBP/6rd+s/PL7+65hxP3eQZDQAAANDmUO3W9T/L1H/X3P/Q3PrU9IuIKCOibe4+iTc3mZMmp3p8/vf189WTGv5G1Ann95g119uI+Npcdx/7/hQAAADg9dpvtqs0W09/lmMXxJDSok35/lumvCIiquX/TGnlOe9zprD6+z2NH5nS6gWseaawtOQ2zZX2LPXP/bJqN79qitSUrS+7FJlt7AAAwIAmN82wsxAAAACG9H3sAhhHEQ9bmZetwFlqmu29xU0PAAAAeIGKsQsAAAAAelfP/9vP/1vkPv/v5Pw/AAAAGEc6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+Harder/ZrrrmHE/d5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD37M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxc/++cVNxAMCf7fOVFBBHQDcEIZAYYKHXK7R0QwygiIE/ASlKryX0yo82A60qRBY2lLkLghEhJFDY+j90bqUuZetwQ5GYQc9n55z2EMcv+9p8PtLz+55j+X2fLUX5+jkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJXJW7M4i5veNE7LfTfvXd2M/a37+uj67u212GKcNJn0w+H5+oek314iAAAAHB5ZVd+HEO7ke+uxT3tF/Z9Xx8Sa/5snp3FVz99f91d9VfvH9vNPd5/dH6g3HSee9OzWeHT8wVQ6/98sl9tTf3lEp7jyxbOXrLgh6bs7z0zy4nomX9248Xa3CI80kS0A8E8cq/oyqP4eiv2wzcQAODQ6tcK7qv+zXrs5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADRhshMer+IkhLDWmcXRrXtXN+f113dvr1Xt1LVru+GL2TnjKfIQwtmt8eh4o7NZbpcuXzm/MR6PLjYfvBBCaGv0N8vpn3//T46JP6z2hNDK9RH8R0Fa3uxlyWcWrISlSGNu0N7vJAAAHk152WJdfyffW4/7ktUQfv/2YP3/ci0OC9b/dz84dbM+Vr3+HzY2w+U32L7wyeDS5Suvbl3YODc6N/ro9RPDN4avnT558vSgeFYy8MQEAACAf6dbtnr9n64+uP5/tBaHBev/T78efl4fK1P/z3VwxRsAAIC2PP3ib78mc/Yn3W74bGN7++Jwut3/fGK6bSHVv+1I2er1f7badlYAAABAEyY7yYH1/zO1OCy4/v/Ed8/9UD9nFkJYKdf/j21+PD7T3HSWWhP/Ttz2HAEAAGjXStnq6/958f5/uv/KQxpCeOWlaVx+DeBC9X/2zpff18eqv/+/0twUl1Lan16Pou+H0Om3nREAAACPssfKFov9X/K99Q9/PPpe1/v/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE37IwAA//9xjTwB") 2.766418971s ago: executing program 3 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 2.727897406s ago: executing program 8 (id=2033): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="1eac0b", @ANYRES64, @ANYRES32], 0x1, 0x1cd, &(0x7f00000024c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x3, 0xfffffffd, 0x3, 0x18, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 2.364760995s ago: executing program 3 (id=2034): r0 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r1, 0x0, 0x3ff, 0xf) write(0xffffffffffffffff, 0x0, 0x0) 2.164523747s ago: executing program 7 (id=2035): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./bus\x00', 0x3200041, &(0x7f0000000340)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007c1bcb554dcdcd464765613a01a861f4007fbefd8539539f5a5a3c1488b48284ca241df655e5c33cf630925e813ea6442f67a4ba1a92116aface282e9bc753fb4a324877709a4513", @ANYRES64, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRES16], 0xfe, 0x9e23, &(0x7f0000013e80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.826300524s ago: executing program 5 (id=2036): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000023c0)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fchown(r0, 0x0, 0xffffffffffffffff) 1.671812019s ago: executing program 6 (id=2037): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 1.54552772s ago: executing program 8 (id=2038): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1.543131998s ago: executing program 7 (id=2039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0x108, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x1}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0x108}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 1.150118521s ago: executing program 3 (id=2040): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x240441c6) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 1.018133894s ago: executing program 7 (id=2041): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) 861.638131ms ago: executing program 6 (id=2042): io_setup(0x490, &(0x7f0000000080)=0x0) unshare(0x20000400) r1 = fanotify_init(0x20, 0x80000) r2 = eventfd2(0x22, 0x1) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x80, r1, 0x0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r1, 0x0, 0x0, 0x9, 0x0, 0x1, r2}]) 860.561586ms ago: executing program 3 (id=2043): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x4, 0xaf7, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 736.874397ms ago: executing program 5 (id=2044): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 645.993199ms ago: executing program 0 (id=2045): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4000000, &(0x7f0000006680)) mknod(&(0x7f0000000080)='./bus\x00', 0x1024, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) llistxattr(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) 491.577083ms ago: executing program 7 (id=2046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x7c) r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001b80)={0x1c, &(0x7f0000001480)={0x40, 0x11, 0x1c, "a3a6f23e3a8539337f8815b5857b2c50205444cf5e26feca69caadf0"}, 0x0, 0x0}) 285.565185ms ago: executing program 6 (id=2047): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 65.797357ms ago: executing program 3 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x94, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x58, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x4}}, 0x0, @random=0x3, 0x4400, @void, @void, @val={0x3, 0x1, 0x34}, @void, @val={0x6, 0x2, 0x3}, @val={0x5, 0x3, {0x4, 0x6e, 0xff}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @val={0x76, 0x6, {0x7, 0x8, 0x4, 0xe}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x4880) 0s ago: executing program 8 (id=2049): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0xa, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, 0x0) kernel console output (not intermixed with test programs): 000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 383.957332][ T4395] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 383.957354][ T4395] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 383.957375][ T4395] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.957399][ T4395] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.957420][ T4395] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.957620][ T4395] XFS (loop5): metadata I/O error in "xfs_read_agf+0x287/0x560" at daddr 0x1 len 1 error 74 [ 383.957836][ T4395] loop5: lost filesystem error report for type 5 error -117 [ 383.990719][T11216] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 383.991918][T11216] loop5: lost filesystem error report for type 5 error -117 [ 384.074540][ T7669] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.467774][ T5629] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 384.518474][ T5629] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 385.384952][T11240] loop3: detected capacity change from 0 to 131072 [ 385.400265][T11240] F2FS-fs (loop3): invalid crc value [ 385.666551][T11243] loop2: detected capacity change from 0 to 131072 [ 385.668388][T11240] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 385.675711][T11243] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 385.675746][T11243] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 385.677793][T11243] F2FS-fs (loop2): invalid crc value [ 385.720256][T11240] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 385.814629][ T7265] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 385.885066][T11243] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 385.900425][T11243] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 385.900465][T11243] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 386.149621][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 386.564354][T11258] team1: entered promiscuous mode [ 386.567116][T11258] team1: entered allmulticast mode [ 386.567666][T11258] 8021q: adding VLAN 0 to HW filter on device team1 [ 387.001399][T11272] netlink: 'syz.6.1691': attribute type 8 has an invalid length. [ 387.795116][T11285] tipc: Started in network mode [ 387.795164][T11285] tipc: Node identity 0010000000000000002, cluster identity 1 [ 388.347185][ T5755] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 388.499548][T11290] loop5: detected capacity change from 0 to 40427 [ 388.501344][ T5755] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.530433][ T5755] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 388.530486][ T5755] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 28719, setting to 64 [ 388.563221][T11290] F2FS-fs (loop5): invalid crc value [ 388.637209][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.637256][ T5755] usb 8-1: Product: syz [ 388.637283][ T5755] usb 8-1: Manufacturer: syz [ 388.637311][ T5755] usb 8-1: SerialNumber: syz [ 388.671553][ T5755] usb 8-1: config 0 descriptor?? [ 388.721308][T11290] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 388.743969][T11290] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0 [ 388.744012][T11290] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 388.744135][T11290] F2FS-fs (loop5): Start checkpoint disabled! [ 388.798142][T11290] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0 [ 388.822497][T11290] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 389.028899][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 389.028929][ T31] audit: type=1800 audit(1789089286.511:65): pid=11290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1698" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 389.231617][ T1139] kworker/u8:7: attempt to access beyond end of device [ 389.231617][ T1139] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 389.279541][ T1139] CPU: 0 UID: 0 PID: 1139 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.279605][ T1139] Tainted: [L]=SOFTLOCKUP [ 389.279619][ T1139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 389.279645][ T1139] Workqueue: writeback wb_workfn (flush-7:5) [ 389.279718][ T1139] Call Trace: [ 389.279731][ T1139] [ 389.279746][ T1139] dump_stack_lvl+0x100/0x190 [ 389.279801][ T1139] f2fs_stop_checkpoint+0x5e6/0xb30 [ 389.279845][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.279892][ T1139] ? errseq_set+0xe3/0x150 [ 389.279939][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.279994][ T1139] f2fs_write_end_bio+0xef9/0x12d0 [ 389.280049][ T1139] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 389.280094][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.280148][ T1139] ? find_held_lock+0x2b/0x80 [ 389.280199][ T1139] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 389.280260][ T1139] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 389.280317][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.280379][ T1139] f2fs_write_end_io+0xc8/0x240 [ 389.280422][ T1139] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 389.280466][ T1139] bio_endio+0x7ba/0x9c0 [ 389.280528][ T1139] submit_bio_noacct+0x22a/0x2130 [ 389.280587][ T1139] f2fs_submit_write_bio+0x133/0x330 [ 389.280632][ T1139] __submit_merged_bio+0x330/0x7b0 [ 389.280677][ T1139] ? rcu_is_watching+0x13/0xc0 [ 389.280731][ T1139] __submit_merged_write_cond+0x3fe/0x510 [ 389.280789][ T1139] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 389.280848][ T1139] ? __pfx___might_resched+0x10/0x10 [ 389.280907][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.280953][ T1139] ? folio_clear_dirty_for_io+0x178/0x960 [ 389.281013][ T1139] f2fs_write_cache_pages+0x20e9/0x2630 [ 389.281094][ T1139] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 389.281155][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281204][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281252][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281298][ T1139] ? find_held_lock+0x2b/0x80 [ 389.281348][ T1139] ? nr_blockdev_pages+0xde/0x120 [ 389.281398][ T1139] ? nr_blockdev_pages+0xde/0x120 [ 389.281440][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281508][ T1139] ? si_meminfo+0x118/0x230 [ 389.281543][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281589][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281705][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281753][ T1139] ? rcu_is_watching+0x13/0xc0 [ 389.281811][ T1139] f2fs_write_data_pages+0x799/0x16d0 [ 389.281866][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.281926][ T1139] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 389.281995][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.282041][ T1139] ? __lock_acquire+0x5c0/0x1f40 [ 389.282078][ T1139] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 389.282136][ T1139] do_writepages+0x278/0x600 [ 389.282193][ T1139] ? __pfx_do_writepages+0x10/0x10 [ 389.282242][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.282288][ T1139] ? reacquire_held_locks+0xdd/0x1f0 [ 389.282323][ T1139] ? writeback_sb_inodes+0x3e1/0x1c50 [ 389.282394][ T1139] __writeback_single_inode+0x164/0x1560 [ 389.282454][ T1139] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 389.282513][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.282563][ T1139] ? __pfx___writeback_single_inode+0x10/0x10 [ 389.282623][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.282670][ T1139] ? do_raw_spin_unlock+0x145/0x1e0 [ 389.282716][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.282770][ T1139] writeback_sb_inodes+0x766/0x1c50 [ 389.282849][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.282897][ T1139] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 389.283020][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.283066][ T1139] ? rcu_is_watching+0x13/0xc0 [ 389.283112][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.283158][ T1139] ? queue_io+0x287/0x530 [ 389.283213][ T1139] wb_writeback+0x1c0/0xb50 [ 389.283283][ T1139] ? __pfx_wb_writeback+0x10/0x10 [ 389.283340][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.283406][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.283453][ T1139] ? mark_held_locks+0x40/0x70 [ 389.283489][ T1139] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.283549][ T1139] wb_workfn+0x143/0xc80 [ 389.283615][ T1139] ? __pfx_try_to_wake_up+0x10/0x10 [ 389.283659][ T1139] ? __pfx_wb_workfn+0x10/0x10 [ 389.283723][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.283770][ T1139] ? lock_acquire+0x1d1/0x380 [ 389.283805][ T1139] ? process_one_work+0xa2c/0x1b10 [ 389.283882][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.283932][ T1139] ? process_one_work+0x906/0x1b10 [ 389.283987][ T1139] ? process_one_work+0x906/0x1b10 [ 389.284042][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.284099][ T1139] process_one_work+0xac7/0x1b10 [ 389.284178][ T1139] ? __pfx_process_one_work+0x10/0x10 [ 389.284239][ T1139] ? lock_acquire+0x1d1/0x380 [ 389.284289][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.284343][ T1139] worker_thread+0x5ef/0xe50 [ 389.284428][ T1139] ? kthread+0x13a/0x450 [ 389.284478][ T1139] ? __pfx_worker_thread+0x10/0x10 [ 389.284531][ T1139] kthread+0x373/0x450 [ 389.284581][ T1139] ? __pfx_kthread+0x10/0x10 [ 389.284636][ T1139] ret_from_fork+0x730/0xd60 [ 389.284678][ T1139] ? __pfx_ret_from_fork+0x10/0x10 [ 389.284718][ T1139] ? srso_alias_return_thunk+0x5/0xfbef5 [ 389.284766][ T1139] ? __switch_to+0x800/0x10f0 [ 389.284816][ T1139] ? __switch_to_asm+0x39/0x70 [ 389.284853][ T1139] ? __pfx_kthread+0x10/0x10 [ 389.284908][ T1139] ret_from_fork_asm+0x1a/0x30 [ 389.284970][ T1139] [ 389.294721][T11287] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 389.295348][T11287] snd-usb-audio 8-1:0.0: Runtime PM usage count underflow! [ 389.434216][ T1139] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 389.684443][ T5755] usb 8-1: USB disconnect, device number 7 [ 389.769253][T10039] loop5: lost filesystem error report for type 5 error -108 [ 389.905947][ T5635] udevd[5635]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 389.906114][ T5635] udevd[5635]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 390.486480][T10020] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 390.496023][T10039] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 390.638392][T10020] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 390.639780][T10020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.663959][T10039] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 390.665311][T10039] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.665374][T10039] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.665431][T10039] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 390.665497][T10039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.809671][T11311] loop7: detected capacity change from 0 to 2048 [ 390.863099][T11311] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 390.917101][T11311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.103825][T11315] virt_wifi0: entered promiscuous mode [ 391.103861][T11315] virt_wifi0: entered allmulticast mode [ 391.177944][ T5763] usb 7-1: USB disconnect, device number 9 [ 391.230579][T11319] loop0: detected capacity change from 0 to 512 [ 391.266843][T11319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 391.267052][T11319] System zones: 1-12 [ 391.306662][T11319] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.1708: missing EA_INODE flag [ 391.306718][T11319] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 391.315717][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 391.315754][ C1] EXT4-fs (loop0): initial error at time 1789089288: ext4_xattr_inode_iget:437: inode 12 [ 391.315803][ C1] EXT4-fs (loop0): last error at time 1789089288: ext4_xattr_inode_iget:437: inode 12 [ 391.316609][T10020] usb 3-1: NFC: NXP PN500 firmware ver 0.0 now attached [ 391.321966][T11319] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.1708: error while reading EA inode 12 err=-117 [ 391.322014][T11319] loop0: lost filesystem error report for type 5 error -117 [ 391.324528][T11319] EXT4-fs (loop0): 1 orphan inode deleted [ 391.331071][T11319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.510293][ C0] usb 3-1: NFC: Urb failure (status -71) [ 391.511945][T10020] usb 3-1: NFC: Error on setting MAX_RETRIES config [ 391.532258][T10020] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -71 [ 391.580203][T10020] usb 3-1: USB disconnect, device number 15 [ 391.690003][T10316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.613883][T11352] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1721'. [ 392.841315][T10020] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 393.007993][T10020] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 393.009188][T10020] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.009242][T10020] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.009277][T10020] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 393.009314][T10020] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.011410][T10020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.011444][T10020] usb 4-1: Product: syz [ 393.011467][T10020] usb 4-1: Manufacturer: syz [ 393.011488][T10020] usb 4-1: SerialNumber: syz [ 393.055538][T10020] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 393.057666][T10020] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 393.057727][T10020] usbserial_generic 4-1:1.0: generic converter detected [ 393.110453][T10020] usb 4-1: generic converter now attached to ttyUSB0 [ 393.263534][T10039] usb 4-1: USB disconnect, device number 14 [ 393.283596][T10039] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 393.300082][T10039] usbserial_generic 4-1:1.0: device disconnected [ 396.245103][T11404] loop6: detected capacity change from 0 to 512 [ 396.257773][T11404] EXT4-fs: Ignoring removed bh option [ 396.259830][T11404] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 396.387058][T10018] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 396.439496][T11404] EXT4-fs (loop6): 1 truncate cleaned up [ 396.474146][T11404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.562018][T10018] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 396.592289][T10018] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.592362][T10018] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.592410][T10018] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.592455][T10018] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.592523][T10018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.717110][T11400] loop5: detected capacity change from 0 to 65536 [ 396.803208][T11400] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 396.873580][T11400] XFS (loop5): Ending clean mount [ 396.995659][ T5629] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 397.041781][T11421] 9pnet: p9_errstr2errno: server reported unknown error [ 397.089077][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.155061][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 397.482097][T11435] loop6: detected capacity change from 0 to 1024 [ 397.502795][T11435] hfsplus: failed to load extents file [ 397.541692][T10018] gud 8-1:1.0: Failed to get connectors (error=-5) [ 397.541739][T10018] gud 8-1:1.0: probe with driver gud failed with error -5 [ 397.697192][ T5755] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 397.748478][T10018] usb 8-1: USB disconnect, device number 8 [ 397.876463][ T5755] usb 1-1: Using ep0 maxpacket: 8 [ 397.877338][ T5755] usb 1-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 397.880312][ T5755] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 397.880393][ T5755] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.880440][ T5755] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.880485][ T5755] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.880529][ T5755] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.880595][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.097191][T11448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.296954][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1757'. [ 398.370847][T11450] vlan0: entered promiscuous mode [ 398.790273][T11465] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 398.796992][ T5755] usb 1-1: USB disconnect, device number 17 [ 398.947913][T11467] loop2: detected capacity change from 0 to 2048 [ 398.960669][T11467] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 398.974918][T11467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.314457][T11478] virt_wifi0: entered promiscuous mode [ 399.314493][T11478] virt_wifi0: entered allmulticast mode [ 400.059676][T11498] Format for deleting device is "id" (uint). [ 400.200680][T11480] loop0: detected capacity change from 0 to 32768 [ 400.285265][T11480] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.397974][T11480] XFS (loop0): Ending clean mount [ 400.441276][T11513] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input30 [ 400.621596][T10316] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.997629][T11523] virt_wifi0: entered promiscuous mode [ 400.997665][T11523] virt_wifi0: entered allmulticast mode [ 401.235921][ T5763] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 401.406564][ T5763] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 401.409598][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 401.409653][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.409710][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.420978][ T5763] usb 4-1: config 0 descriptor?? [ 401.875446][ T5763] hid_parser_main: 29 callbacks suppressed [ 401.875481][ T5763] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 401.875519][ T5763] elan 0003:04F3:0755.0016: unknown main item tag 0x0 [ 401.879453][ T5763] elan 0003:04F3:0755.0016: failed to start in urb: -90 [ 401.903116][ T5763] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 402.096427][ T5755] usb 4-1: USB disconnect, device number 15 [ 402.159555][T11549] fido_id[11549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 402.842153][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'. [ 402.871265][T11573] vlan0: entered promiscuous mode [ 402.902574][T11576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input31 [ 403.625002][ T5763] kernel read not supported for file /dynamic_events (pid: 5763 comm: kworker/1:5) [ 404.055927][T11600] loop0: detected capacity change from 0 to 128 [ 404.086975][T11600] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 404.105108][T11600] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.692797][T11596] loop7: detected capacity change from 0 to 131072 [ 404.714802][T11596] F2FS-fs (loop7): Test dummy encryption mode enabled [ 404.760933][T10316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.926547][T11596] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 404.934088][T11596] F2FS-fs (loop7): Mounted with checkpoint version = 1b41e955 [ 404.987093][ T31] audit: type=1800 audit(1789089302.471:66): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1812" name="bus" dev="loop7" ino=10 res=0 errno=0 [ 405.027150][T11626] ip_tables: iptables: counters copy to user failed while replacing table [ 405.119617][T11631] cgroup: fork rejected by pids controller in /syz0 [ 405.166795][T11629] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input32 [ 405.279997][T10020] kernel read not supported for file /video9 (pid: 10020 comm: kworker/1:10) [ 405.656287][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1830'. [ 406.227690][T11649] loop5: detected capacity change from 0 to 32768 [ 406.239288][T11649] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 406.239319][T11649] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 406.355818][ T5763] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 406.483020][T11649] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 406.493390][T10020] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 406.493428][T10020] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 406.547462][ T5763] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.549269][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.549317][ T5763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.549355][ T5763] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.549426][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.558923][ T5763] usb 4-1: config 0 descriptor?? [ 406.882628][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.999257][T10020] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 505ms [ 407.013295][T10020] gfs2: fsid=syz:syz.0: jid=0: Done [ 407.013391][T11649] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 407.120355][ T5763] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 407.331371][ T5763] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 407.347623][ T5763] usb 4-1: USB disconnect, device number 16 [ 407.585274][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.647217][T11661] fido_id[11661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 407.789925][T11667] loop2: detected capacity change from 0 to 128 [ 407.795547][T11667] EXT4-fs: Ignoring removed i_version option [ 407.887033][T11667] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.889915][T11667] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.963339][ T31] audit: type=1800 audit(1789089305.441:67): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1838" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 407.964210][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.003574][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.005208][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.027040][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.027834][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.053581][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.408892][T11677] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input34 [ 408.416200][ T7669] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 408.465074][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.584551][T11683] loop5: detected capacity change from 0 to 512 [ 408.649932][T11683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.650061][T11683] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.734582][T11686] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1844'. [ 408.764895][T11683] EXT4-fs warning (device loop5): verify_group_input:136: Cannot add at group 0 (only 1 groups) [ 409.058427][T11693] process 'syz.3.1846' launched './file0' with NULL argv: empty string added [ 409.098042][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.746984][T11705] loop5: detected capacity change from 0 to 32768 [ 409.749776][T11705] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1849 (11705) [ 409.780749][T11705] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 409.780800][T11705] BTRFS info (device loop5): using crc32c checksum algorithm [ 409.925449][T11705] BTRFS info (device loop5): enabling ssd optimizations [ 409.925491][T11705] BTRFS info (device loop5): turning on async discard [ 409.925520][T11705] BTRFS info (device loop5): enabling free space tree [ 410.185664][T11640] Bluetooth: hci0: command tx timeout [ 410.839183][ T13] bridge_slave_1: left allmulticast mode [ 410.839221][ T13] bridge_slave_1: left promiscuous mode [ 410.839473][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.928511][ T13] bridge_slave_0: left allmulticast mode [ 410.928547][ T13] bridge_slave_0: left promiscuous mode [ 410.928775][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.029213][ T5629] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 411.109107][T11748] loop7: detected capacity change from 0 to 4096 [ 411.122197][T11748] EXT4-fs (loop7): Test dummy encryption mode enabled [ 411.242458][T11748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.267187][T11640] Bluetooth: hci0: command tx timeout [ 412.689069][T11756] loop5: detected capacity change from 0 to 131072 [ 412.705147][T11756] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 412.705184][T11756] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 412.731381][T11756] F2FS-fs (loop5): invalid crc value [ 412.858554][T10148] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.868506][T11756] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 412.891565][T11756] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 412.891605][T11756] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 413.074854][T11774] FAULT_INJECTION: forcing a failure. [ 413.074854][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 413.074911][T11774] CPU: 1 UID: 0 PID: 11774 Comm: syz.6.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.074974][T11774] Tainted: [L]=SOFTLOCKUP [ 413.074988][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 413.075009][T11774] Call Trace: [ 413.075020][T11774] [ 413.075034][T11774] dump_stack_lvl+0x100/0x190 [ 413.075087][T11774] should_fail_ex.cold+0x5/0xa [ 413.075128][T11774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.075179][T11774] should_failslab+0xc2/0x120 [ 413.075219][T11774] __kmalloc_noprof+0xfc/0x840 [ 413.075273][T11774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.075321][T11774] ? trace_kmalloc+0xeb/0x110 [ 413.075356][T11774] ? lsm_blob_alloc+0x68/0x90 [ 413.075407][T11774] lsm_blob_alloc+0x68/0x90 [ 413.075448][T11774] security_sk_alloc+0x2d/0x290 [ 413.075503][T11774] sk_prot_alloc+0x12a/0x2a0 [ 413.075575][T11774] sk_alloc+0x36/0xe80 [ 413.075627][T11774] __netlink_create+0x5e/0x2c0 [ 413.075666][T11774] ? __wake_up+0x3f/0x60 [ 413.075723][T11774] netlink_create+0x29b/0x610 [ 413.075763][T11774] ? __pfx_genl_bind+0x10/0x10 [ 413.075810][T11774] ? __pfx_genl_unbind+0x10/0x10 [ 413.075858][T11774] ? __pfx_genl_release+0x10/0x10 [ 413.075917][T11774] __sock_create+0x339/0x860 [ 413.075972][T11774] __sys_socket+0x14d/0x260 [ 413.076010][T11774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.076060][T11774] ? __pfx___sys_socket+0x10/0x10 [ 413.076103][T11774] ? srso_alias_return_thunk+0x5/0xfbef5 [ 413.076160][T11774] __x64_sys_socket+0x72/0xb0 [ 413.076200][T11774] ? lockdep_hardirqs_on+0x7d/0x110 [ 413.076259][T11774] do_syscall_64+0x123/0x790 [ 413.076323][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.076363][T11774] RIP: 0033:0x7fdc28b9f9c7 [ 413.076395][T11774] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.076433][T11774] RSP: 002b:00007fdc29b09f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 413.076471][T11774] RAX: ffffffffffffffda RBX: 00007fdc28e25fa0 RCX: 00007fdc28b9f9c7 [ 413.076498][T11774] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 413.076523][T11774] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 413.076548][T11774] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 413.076572][T11774] R13: 00007fdc28e26038 R14: 00007fdc28e25fa0 R15: 00007ffed4f82fe8 [ 413.076624][T11774] [ 413.380804][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.427309][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.472288][ T13] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 413.488877][ T13] bond0 (unregistering): Released all slaves [ 413.567827][T11783] loop2: detected capacity change from 0 to 512 [ 413.588985][T11783] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 413.590491][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 413.654562][T11783] EXT4-fs (loop2): 1 truncate cleaned up [ 413.671937][T11783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.828528][T11787] loop6: detected capacity change from 0 to 512 [ 413.981209][T11787] EXT4-fs error (device loop6): ext4_iget_extra_inode:5209: inode #15: comm syz.6.1870: corrupted in-inode xattr: invalid ea_ino [ 413.981266][T11787] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.982003][T11787] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1870: couldn't read orphan inode 15 (err -117) [ 413.982051][T11787] loop6: lost filesystem error report for type 5 error -117 [ 413.985645][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 413.985678][ C0] EXT4-fs (loop6): initial error at time 1789089311: ext4_iget_extra_inode:5209: inode 15 [ 413.985727][ C0] EXT4-fs (loop6): last error at time 1789089311: ext4_orphan_get:1406 [ 414.025483][T11787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.171009][ T7669] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6540: inode #11: comm syz-executor: bad extra_isize 62 (inode size 256) [ 414.226165][ T7669] EXT4-fs (loop2): Remounting filesystem read-only [ 414.285463][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.285852][T10039] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 414.346787][T11640] Bluetooth: hci0: command tx timeout [ 414.450825][T10039] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 414.455549][T10039] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 414.455724][T10039] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 414.455768][T10039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 414.455833][T10039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.570280][T11794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 414.570475][T11794] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 414.582881][T10039] pl2303 8-1:1.0: pl2303 converter detected [ 414.673253][T10039] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 415.309242][T11809] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 415.311191][T11809] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 415.313410][T11809] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 415.370555][T11809] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 415.456450][ T13] hsr_slave_0: left promiscuous mode [ 415.467501][ T13] hsr_slave_1: left promiscuous mode [ 415.470266][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.470299][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.481060][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.481094][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.549841][ T13] veth1_macvtap: left promiscuous mode [ 415.549927][ T13] veth0_macvtap: left promiscuous mode [ 415.550058][ T13] veth1_vlan: left promiscuous mode [ 415.550152][ T13] veth0_vlan: left promiscuous mode [ 415.636170][T11809] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 415.637101][T11809] pl2303 ttyUSB0: error sending break = -32 [ 415.743698][T10039] usb 8-1: USB disconnect, device number 9 [ 415.792629][T10039] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 415.904762][T10039] pl2303 8-1:1.0: device disconnected [ 416.431682][T11640] Bluetooth: hci0: command tx timeout [ 416.525983][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.552605][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.558150][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.576165][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.579797][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.785148][T11839] loop6: detected capacity change from 0 to 1764 [ 416.849002][T11839] ip_tables: iptables: counters copy to user failed while replacing table [ 416.933748][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'. [ 417.204964][T11852] ima: policy update failed [ 417.205159][ T31] audit: type=1802 audit(1789089314.681:68): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1888" res=0 errno=0 [ 417.259806][T11850] Process accounting resumed [ 417.448564][ T13] team0 (unregistering): Port device team_slave_1 removed [ 417.494818][ T13] team0 (unregistering): Port device team_slave_0 removed [ 417.762430][T11863] loop5: detected capacity change from 0 to 512 [ 417.788890][T11863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 417.789049][T11863] System zones: 1-12 [ 417.790370][T11863] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #12: comm syz.5.1892: missing EA_INODE flag [ 417.790417][T11863] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 417.793479][T11863] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.1892: error while reading EA inode 12 err=-117 [ 417.793530][T11863] loop5: lost filesystem error report for type 5 error -117 [ 417.795622][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 417.795652][ C1] EXT4-fs (loop5): initial error at time 1789089315: ext4_xattr_inode_iget:437: inode 12 [ 417.795703][ C1] EXT4-fs (loop5): last error at time 1789089315: ext4_xattr_inode_iget:440 [ 417.882400][T11863] EXT4-fs (loop5): 1 orphan inode deleted [ 417.911176][T11863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.183385][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.377766][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 418.435375][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.435485][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.455219][T11669] bridge_slave_0: entered allmulticast mode [ 418.463656][T11669] bridge_slave_0: entered promiscuous mode [ 418.473885][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.474095][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.474344][T11669] bridge_slave_1: entered allmulticast mode [ 418.501599][T11669] bridge_slave_1: entered promiscuous mode [ 418.666155][T11640] Bluetooth: hci4: command tx timeout [ 418.844631][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.871583][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.097644][T11669] team0: Port device team_slave_0 added [ 419.102325][T11669] team0: Port device team_slave_1 added [ 419.223029][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.223058][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.223105][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.241428][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.241454][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.241501][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.316728][ T5763] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 419.496619][ T5763] usb 8-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 419.497984][ T5763] usb 8-1: config 1 has an invalid interface number: 3 but max is 0 [ 419.498024][ T5763] usb 8-1: config 1 has no interface number 0 [ 419.500705][ T5763] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.500739][ T5763] usb 8-1: Product: syz [ 419.500760][ T5763] usb 8-1: Manufacturer: syz [ 419.500783][ T5763] usb 8-1: SerialNumber: syz [ 419.571580][ T5763] usb 8-1: 3:1 : does not exist [ 419.571621][ T5763] usb 8-1: 3:2 : does not exist [ 419.818760][T11669] hsr_slave_0: entered promiscuous mode [ 419.823831][T11669] hsr_slave_1: entered promiscuous mode [ 419.844114][T10024] usb 8-1: USB disconnect, device number 10 [ 420.747457][T11640] Bluetooth: hci4: command tx timeout [ 421.102785][T11931] netlink: NAT attribute type 0 has unexpected length (1 != 0) [ 421.102839][T11931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.168078][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 421.737629][T11944] loop6: detected capacity change from 0 to 4096 [ 421.758591][T11944] EXT4-fs: Ignoring removed orlov option [ 421.762421][T11944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.762448][T11944] EXT4-fs (loop6): Test dummy encryption mode enabled [ 421.795175][T11944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.828088][ T5763] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 421.902418][ T5763] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 422.068808][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.261667][T11952] fido_id[11952]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 422.826864][T11640] Bluetooth: hci4: command tx timeout [ 423.081033][ T13] bridge_slave_1: left allmulticast mode [ 423.081072][ T13] bridge_slave_1: left promiscuous mode [ 423.081322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.101954][ T13] bridge_slave_0: left allmulticast mode [ 423.101990][ T13] bridge_slave_0: left promiscuous mode [ 423.102280][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.389159][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.393606][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.409685][ T13] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 423.452850][ T13] bond0 (unregistering): Released all slaves [ 423.588176][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 423.872353][T11832] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.875114][T11832] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.875341][T11832] bridge_slave_0: entered allmulticast mode [ 423.911472][T11832] bridge_slave_0: entered promiscuous mode [ 423.943811][T11832] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.944037][T11832] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.944195][T11832] bridge_slave_1: entered allmulticast mode [ 423.973782][T11832] bridge_slave_1: entered promiscuous mode [ 424.091128][T11832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.148443][T11832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.235373][T11832] team0: Port device team_slave_0 added [ 424.251603][T11832] team0: Port device team_slave_1 added [ 424.282763][T11669] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 424.319889][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.323966][T11669] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 424.330979][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.351120][T11669] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.358026][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.370093][ T13] hsr_slave_0: left promiscuous mode [ 424.370963][ T13] hsr_slave_1: left promiscuous mode [ 424.371987][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.372835][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.721999][ T13] team0 (unregistering): Port device team_slave_1 removed [ 424.747506][ T13] team0 (unregistering): Port device team_slave_0 removed [ 424.905771][T11640] Bluetooth: hci4: command tx timeout [ 424.909099][T11669] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.928471][T11669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.929678][T11832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.929700][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.929748][T11832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.953146][T11832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.953172][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.953220][T11832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.083103][T11832] hsr_slave_0: entered promiscuous mode [ 425.084139][T11832] hsr_slave_1: entered promiscuous mode [ 425.084775][T11832] debugfs: 'hsr0' already exists in 'hsr' [ 425.084805][T11832] Cannot create hsr debugfs directory [ 425.434206][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.501194][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.528674][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.528865][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.565244][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.565367][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.778918][T11832] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 425.797759][T11832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.799143][T11832] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 425.822792][T11832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.829316][T11832] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 425.849122][T11832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.856646][T11832] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 425.874166][T11832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.033330][T11832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.069473][T11832] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.087079][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.087206][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.108823][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.108985][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.823780][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.917707][T11669] veth0_vlan: entered promiscuous mode [ 426.952340][T11669] veth1_vlan: entered promiscuous mode [ 427.034401][T11669] veth0_macvtap: entered promiscuous mode [ 427.047641][T11669] veth1_macvtap: entered promiscuous mode [ 427.077000][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.098206][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.164980][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.166789][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.232761][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.304620][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.494179][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.511399][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.511432][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.572411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.572446][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.669060][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 428.355733][T10035] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 428.490394][T11832] veth0_vlan: entered promiscuous mode [ 428.506097][T10035] usb 6-1: Using ep0 maxpacket: 32 [ 428.508847][T10035] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 428.510375][T10035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.514396][T10035] usb 6-1: config 0 descriptor?? [ 428.558045][T11832] veth1_vlan: entered promiscuous mode [ 428.602783][T10035] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 428.662371][T11832] veth0_macvtap: entered promiscuous mode [ 428.684557][T11832] veth1_macvtap: entered promiscuous mode [ 428.772579][T11832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.848461][T11832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.076062][ T4395] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.076141][ T4395] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.076204][ T4395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.337987][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.590826][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.590860][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.604132][T10035] gspca_vc032x: reg_w err -71 [ 429.604155][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604172][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604186][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604200][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604215][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604230][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604245][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604258][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604272][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604288][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604303][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604319][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604334][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604349][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604365][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604380][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604396][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604411][T10035] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.604427][T10035] gspca_vc032x: Unknown sensor... [ 429.604517][T10035] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 429.674158][T12113] loop7: detected capacity change from 0 to 512 [ 429.687135][T12113] EXT4-fs: Ignoring removed bh option [ 429.692119][T12113] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 429.773852][T12113] EXT4-fs error (device loop7): ext4_orphan_get:1429: comm syz.7.1931: bad orphan inode 15 [ 429.773903][T12113] loop7: lost filesystem error report for type 5 error -117 [ 429.775616][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 429.775646][ C1] EXT4-fs (loop7): initial error at time 1789089327: ext4_orphan_get:1429 [ 429.775684][ C1] EXT4-fs (loop7): last error at time 1789089327: ext4_orphan_get:1429 [ 429.787492][T12113] ext4_test_bit(bit=14, block=4) = 1 [ 429.787519][T12113] is_bad_inode(inode)=0 [ 429.787533][T12113] NEXT_ORPHAN(inode)=100663296 [ 429.787548][T12113] max_ino=32 [ 429.787562][T12113] i_nlink=1 [ 429.830095][T12113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.852683][T10035] usb 6-1: USB disconnect, device number 15 [ 429.924047][T12110] loop6: detected capacity change from 0 to 2048 [ 430.054855][T12110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.054988][T12110] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.112901][ T3309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.112943][ T3309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.292158][T10148] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.436511][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.694317][T12127] loop7: detected capacity change from 0 to 512 [ 430.924014][T12126] gadgetfs: bound to dummy_udc driver [ 431.196726][T10023] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 431.197751][ C1] gadgetfs: connected [ 431.198343][T10023] gadgetfs: disconnected [ 431.367710][ C1] gadgetfs: connected [ 431.368835][T10023] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 431.369245][T10023] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 431.369303][T10023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.422887][ C1] gadgetfs: configuration #1 [ 431.814849][T12125] gadgetfs: suspended from state 3 [ 431.815540][T10036] usb 1-1: USB disconnect, device number 18 [ 431.827277][T12125] gadgetfs: disconnected [ 431.986478][T12137] loop5: detected capacity change from 0 to 131072 [ 432.009972][T12137] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 432.010012][T12137] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 432.010896][T12137] F2FS-fs (loop5): invalid crc value [ 432.127494][T12145] bridge0: port 3(veth0) entered blocking state [ 432.127625][T12145] bridge0: port 3(veth0) entered disabled state [ 432.127827][T12145] veth0: entered allmulticast mode [ 432.193399][T12137] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 432.211379][T12137] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 432.211419][T12137] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 432.238344][T12145] veth0: entered promiscuous mode [ 432.239172][T12145] bridge0: port 3(veth0) entered blocking state [ 432.239318][T12145] bridge0: port 3(veth0) entered forwarding state [ 432.283287][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1942'. [ 432.566789][T10023] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 432.719460][T10023] usb 8-1: Using ep0 maxpacket: 32 [ 432.726385][T10023] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 432.730062][T10023] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 432.730103][T10023] usb 8-1: config 0 has no interface number 0 [ 432.730158][T10023] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 432.774996][T10023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.775040][T10023] usb 8-1: Product: syz [ 432.775067][T10023] usb 8-1: Manufacturer: syz [ 432.775095][T10023] usb 8-1: SerialNumber: syz [ 432.807222][T10023] usb 8-1: config 0 descriptor?? [ 432.809275][T12157] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 432.818955][T12168] loop6: detected capacity change from 0 to 256 [ 432.840266][T12168] exfat: Deprecated parameter 'utf8' [ 432.861254][T12168] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d) [ 433.062991][T12157] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 433.752277][T12187] loop8: detected capacity change from 0 to 128 [ 433.847380][T12187] FAT-fs (loop8): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 433.923451][T10023] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 433.923506][T10023] asix 8-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 433.923766][T10023] asix 8-1:0.188: probe with driver asix failed with error -71 [ 433.970771][T10023] usb 8-1: USB disconnect, device number 11 [ 434.462128][T12200] hugetlbfs: syz.8.1955 (12200): Using mlock ulimits for SHM_HUGETLB is obsolete [ 435.260784][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 435.453054][T12206] nvme nvme0: failed to connect socket: -512 [ 435.638976][T12225] loop0: detected capacity change from 0 to 128 [ 435.640564][T12225] EXT4-fs: Ignoring removed i_version option [ 435.695527][T12225] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.703686][T12225] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.796593][ T31] audit: type=1800 audit(1789089333.271:69): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1963" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 435.824500][T12229] tipc: Started in network mode [ 435.824545][T12229] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 435.824808][T12229] tipc: Enabled bearer , priority 0 [ 436.035883][T12237] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1966'. [ 436.265029][T11669] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.777288][T12256] Falling back ldisc for ttyS3. [ 436.932094][T10018] tipc: Node number set to 43690 [ 437.282562][T10023] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 437.307380][T10023] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 437.611513][T12277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.700353][ T31] audit: type=1326 audit(1789089335.181:70): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=12280 comm="syz.8.1980" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45f159e159 code=0x0 [ 437.851836][T12282] loop8: detected capacity change from 0 to 512 [ 437.864914][T12282] EXT4-fs: Ignoring removed mblk_io_submit option [ 437.874754][T12282] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 437.894897][T12282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e0a8, mo2=0002] [ 437.895062][T12282] System zones: 1-12 [ 437.895346][T12282] EXT4-fs (loop8): orphan cleanup on readonly fs [ 437.944451][T12282] EXT4-fs error (device loop8): ext4_validate_block_bitmap:444: comm syz.8.1980: bg 0: block 361: padding at end of block bitmap is not set [ 437.944511][T12282] loop8: lost filesystem error report for type 5 error -117 [ 437.947561][ C0] EXT4-fs (loop8): initial error at time 1789089335: ext4_validate_block_bitmap:444 [ 437.947611][ C0] EXT4-fs (loop8): last error at time 1789089335: ext4_validate_block_bitmap:444 [ 438.061220][T12266] loop7: detected capacity change from 0 to 8192 [ 438.088945][T12282] EXT4-fs (loop8): Remounting filesystem read-only [ 438.093480][T12282] EXT4-fs (loop8): 1 truncate cleaned up [ 438.126057][T12266] Dev loop7: unable to read RDB block 8 [ 438.126229][T12266] loop7: unable to read partition table [ 438.126485][T12266] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 438.127270][T12282] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 438.458405][ T5276] 8021q: adding VLAN 0 to HW filter on device eth13 [ 438.605177][T11832] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 438.790806][T12260] loop0: detected capacity change from 0 to 40427 [ 438.870340][T12260] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 438.870381][T12260] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 438.908503][T12260] F2FS-fs (loop0): invalid crc value [ 439.247358][T12309] loop8: detected capacity change from 0 to 256 [ 439.324008][T12309] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 439.473796][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.473877][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.571841][T12311] loop5: detected capacity change from 0 to 512 [ 439.590322][T12260] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 439.628950][T12260] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 439.628996][T12260] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 439.634836][T12311] EXT4-fs error (device loop5): ext4_iget_extra_inode:5209: inode #15: comm syz.5.1989: corrupted in-inode xattr: invalid ea_ino [ 439.634891][T12311] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 439.635411][T12311] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1989: couldn't read orphan inode 15 (err -117) [ 439.635469][T12311] loop5: lost filesystem error report for type 5 error -117 [ 439.635628][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 439.635657][ C1] EXT4-fs (loop5): initial error at time 1789089337: ext4_iget_extra_inode:5209: inode 15 [ 439.635707][ C1] EXT4-fs (loop5): last error at time 1789089337: ext4_orphan_get:1406 [ 439.698900][T12311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.816124][T12260] syz.0.1973: attempt to access beyond end of device [ 439.816124][T12260] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 439.817918][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.0.1973 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.817984][T12260] Tainted: [L]=SOFTLOCKUP [ 439.817998][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 439.818020][T12260] Call Trace: [ 439.818032][T12260] [ 439.818046][T12260] dump_stack_lvl+0x100/0x190 [ 439.818104][T12260] f2fs_stop_checkpoint+0x5e6/0xb30 [ 439.818146][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.818194][T12260] ? errseq_set+0xe3/0x150 [ 439.818238][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.818291][T12260] f2fs_write_end_bio+0xef9/0x12d0 [ 439.818342][T12260] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 439.818386][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.818439][T12260] ? find_held_lock+0x2b/0x80 [ 439.818490][T12260] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 439.818548][T12260] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 439.818606][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.818661][T12260] f2fs_write_end_io+0xc8/0x240 [ 439.818708][T12260] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 439.818753][T12260] bio_endio+0x7ba/0x9c0 [ 439.818814][T12260] submit_bio_noacct+0x22a/0x2130 [ 439.818873][T12260] f2fs_submit_write_bio+0x133/0x330 [ 439.818916][T12260] __submit_merged_bio+0x330/0x7b0 [ 439.818968][T12260] ? rcu_is_watching+0x13/0xc0 [ 439.819023][T12260] __submit_merged_write_cond+0x3fe/0x510 [ 439.819085][T12260] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 439.819144][T12260] ? __pfx___might_resched+0x10/0x10 [ 439.819204][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819252][T12260] ? folio_clear_dirty_for_io+0x178/0x960 [ 439.819312][T12260] f2fs_write_cache_pages+0x20e9/0x2630 [ 439.819390][T12260] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 439.819446][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819497][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819546][T12260] ? unwind_next_frame+0x3be/0x2090 [ 439.819597][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819644][T12260] ? rcu_is_watching+0x13/0xc0 [ 439.819691][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819740][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819785][T12260] ? __kasan_check_byte+0x13/0x50 [ 439.819823][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819871][T12260] ? is_bpf_text_address+0x8a/0x1a0 [ 439.819911][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.819980][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820026][T12260] ? kernel_text_address+0x8d/0x100 [ 439.820082][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820191][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820238][T12260] ? check_prev_add+0x354/0xe60 [ 439.820303][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820350][T12260] ? rcu_is_watching+0x13/0xc0 [ 439.820404][T12260] f2fs_write_data_pages+0x799/0x16d0 [ 439.820473][T12260] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.820527][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820583][T12260] ? do_writepages+0x4b5/0x600 [ 439.820634][T12260] ? do_writepages+0x4b5/0x600 [ 439.820683][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820734][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.820781][T12260] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.820841][T12260] do_writepages+0x278/0x600 [ 439.820899][T12260] ? __pfx_do_writepages+0x10/0x10 [ 439.820955][T12260] ? do_raw_spin_unlock+0x145/0x1e0 [ 439.821001][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.821048][T12260] ? _raw_spin_unlock+0x28/0x50 [ 439.821105][T12260] filemap_writeback+0x22d/0x2e0 [ 439.821163][T12260] ? __pfx_filemap_writeback+0x10/0x10 [ 439.821270][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.821316][T12260] ? find_held_lock+0x2b/0x80 [ 439.821363][T12260] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 439.821418][T12260] ? f2fs_sync_dirty_inodes+0x38f/0x960 [ 439.821471][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.821529][T12260] f2fs_sync_dirty_inodes+0x452/0x960 [ 439.821601][T12260] block_operations+0x2a6/0xfc0 [ 439.821668][T12260] ? __pfx_block_operations+0x10/0x10 [ 439.821777][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.821826][T12260] ? ktime_get+0x22c/0x320 [ 439.821864][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.821911][T12260] ? rcu_is_watching+0x13/0xc0 [ 439.821972][T12260] f2fs_write_checkpoint+0x58b/0x53e0 [ 439.822035][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822082][T12260] ? lock_acquire+0x1d1/0x380 [ 439.822118][T12260] ? f2fs_down_write_trace+0xc8/0x350 [ 439.822167][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822219][T12260] ? __pfx___might_resched+0x10/0x10 [ 439.822278][T12260] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 439.822326][T12260] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 439.822375][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822419][T12260] ? down_write+0x146/0x1f0 [ 439.822458][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822507][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822550][T12260] ? rcu_is_watching+0x13/0xc0 [ 439.822602][T12260] f2fs_issue_checkpoint+0x1a4/0x770 [ 439.822658][T12260] ? __entry_text_end+0x102035/0x102039 [ 439.822702][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822746][T12260] ? look_up_lock_class+0x55/0x120 [ 439.822802][T12260] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 439.822860][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.822906][T12260] ? register_lock_class+0x3f/0x7b0 [ 439.822960][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.823006][T12260] ? __lock_acquire+0x5c0/0x1f40 [ 439.823079][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.823126][T12260] ? rcu_is_watching+0x13/0xc0 [ 439.823172][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.823217][T12260] ? __up_read+0x333/0x980 [ 439.823260][T12260] ? __pfx___up_read+0x10/0x10 [ 439.823300][T12260] ? f2fs_do_sync_file+0x8aa/0x1ca0 [ 439.823367][T12260] f2fs_sync_fs+0x33f/0x400 [ 439.823425][T12260] f2fs_do_sync_file+0x8da/0x1ca0 [ 439.823495][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.823543][T12260] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 439.823603][T12260] ? __pfx_futex_wait+0x10/0x10 [ 439.823716][T12260] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.823765][T12260] ? __fget_files+0x21f/0x3d0 [ 439.823809][T12260] f2fs_sync_file+0x13a/0x1a0 [ 439.823892][T12260] ? __pfx_f2fs_sync_file+0x10/0x10 [ 439.823956][T12260] do_fsync+0xbf/0x220 [ 439.824003][T12260] __x64_sys_fsync+0x32/0x50 [ 439.824048][T12260] do_syscall_64+0x123/0x790 [ 439.824110][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.824150][T12260] RIP: 0033:0x7f74c779e159 [ 439.824182][T12260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.824221][T12260] RSP: 002b:00007f74c8664028 EFLAGS: 00000246 ORIG_RAX: 000000000000004a [ 439.824259][T12260] RAX: ffffffffffffffda RBX: 00007f74c7a25fa0 RCX: 00007f74c779e159 [ 439.824285][T12260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 439.824308][T12260] RBP: 00007f74c783503b R08: 0000000000000000 R09: 0000000000000000 [ 439.824333][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.824357][T12260] R13: 00007f74c7a26038 R14: 00007f74c7a25fa0 R15: 00007ffe55fcc1f8 [ 439.824409][T12260] [ 439.824766][T12260] F2FS-fs (loop0): Remounting filesystem read-only [ 440.809407][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.487687][T12350] loop6: detected capacity change from 0 to 256 [ 441.498762][T12350] exfat: Deprecated parameter 'utf8' [ 441.498847][T12350] exfat: Deprecated parameter 'namecase' [ 441.498923][T12350] exfat: Deprecated parameter 'namecase' [ 441.557378][T12350] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 443.039994][T12403] loop0: detected capacity change from 0 to 164 [ 443.293896][T10035] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 443.338792][T10035] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.447248][T10023] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 443.531161][T12414] sctp: [Deprecated]: syz.3.2019 (pid 12414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.531161][T12414] Use struct sctp_sack_info instead [ 443.545933][T12414] sctp: [Deprecated]: syz.3.2019 (pid 12414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.545933][T12414] Use struct sctp_sack_info instead [ 443.681295][T10023] usb 9-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 443.695690][T10023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.695736][T10023] usb 9-1: Product: syz [ 443.695764][T10023] usb 9-1: Manufacturer: syz [ 443.695790][T10023] usb 9-1: SerialNumber: syz [ 443.753782][T10023] ums_eneub6250 9-1:1.0: USB Mass Storage device detected [ 443.907671][T10023] scsi host1: usb-storage 9-1:1.0 [ 443.983712][T12422] loop6: detected capacity change from 0 to 512 [ 444.109630][T12422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.153852][T12427] loop0: detected capacity change from 0 to 128 [ 444.182672][T10023] ums_eneub6250: This driver only supports SD/MS cards. It does not support SM cards. [ 444.270367][T12427] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 444.270618][T12427] hpfs: filesystem error: improperly stopped [ 444.270645][T12427] hpfs: You really don't want any checks? You are crazy... [ 444.271037][T12427] hpfs: hpfs_map_sector(): read error [ 444.271055][T12427] hpfs: code page support is disabled [ 444.274214][T12427] hpfs: hpfs_map_4sectors(): unaligned read [ 444.274404][T12427] hpfs: hpfs_map_4sectors(): unaligned read [ 444.274422][T12427] hpfs: filesystem error: unable to find root dir [ 444.287167][ T7265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.378126][T12427] hpfs: hpfs_map_4sectors(): unaligned read [ 444.400484][T10020] usb 9-1: USB disconnect, device number 2 [ 444.415355][T12427] hpfs: hpfs_map_sector(): read error [ 444.769678][ T385] IPVS: starting estimator thread 0... [ 444.855728][T12443] IPVS: using max 24 ests per chain, 57600 per kthread [ 445.297297][ T31] audit: type=1326 audit(1789089342.781:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12452 comm="syz.5.2029" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa45419e159 code=0x0 [ 445.610620][T12464] loop8: detected capacity change from 0 to 8 [ 445.652011][T12464] squashfs image failed sanity check [ 446.071406][T12474] loop7: detected capacity change from 0 to 128 [ 446.206350][T12474] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 446.206423][T12474] hpfs: filesystem error: improperly stopped [ 446.206448][T12474] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 446.206481][T12474] hpfs: You really don't want any checks? You are crazy... [ 446.206859][T12474] hpfs: hpfs_map_sector(): read error [ 446.206878][T12474] hpfs: code page support is disabled [ 446.207012][T12474] hpfs: hpfs_map_4sectors(): unaligned read [ 446.207096][T12474] hpfs: hpfs_map_4sectors(): unaligned read [ 446.207114][T12474] hpfs: filesystem error: unable to find root dir [ 446.585491][T12484] loop5: detected capacity change from 0 to 512 [ 446.623705][T12484] EXT4-fs error (device loop5): ext4_iget_extra_inode:5209: inode #15: comm syz.5.2036: corrupted in-inode xattr: invalid ea_ino [ 446.623764][T12484] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.624269][T12484] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2036: couldn't read orphan inode 15 (err -117) [ 446.624319][T12484] loop5: lost filesystem error report for type 5 error -117 [ 446.685416][T12484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.025064][T12459] loop0: detected capacity change from 0 to 40427 [ 447.077628][T12459] F2FS-fs (loop0): invalid crc value [ 447.123948][T12459] F2FS-fs (loop0): Wrong journal entry on segno 150994944 [ 447.170704][T12459] loop0: lost filesystem error report for type 5 error -117 [ 447.170736][T12459] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 447.388606][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.809248][ T31] audit: type=1800 audit(1789089345.291:72): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2043" name="file1" dev="tmpfs" ino=1623 res=0 errno=0 [ 448.135891][T10035] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 448.292908][T10035] usb 8-1: not running at top speed; connect to a high speed hub [ 448.292965][T10035] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 448.298166][T10035] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.298288][T10035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.420264][T10035] uvcvideo 8-1:1.0: Found UVC 1.00 device (046d:0825) [ 453.472629][T10035] uvcvideo 8-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 453.473004][T10035] uvcvideo 8-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 453.473056][T10035] uvcvideo 8-1:1.1: Failed to initialize the device (-5). [ 453.490364][T10035] uvcvideo 8-1:1.0: probe with driver uvcvideo failed with error -5 [ 467.145775][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 500.917870][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.917962][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.715858][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 538.835677][T12631] Bluetooth: hci4: command 0x0406 tx timeout [ 562.351105][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.351202][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.866143][ T32] INFO: task kworker/u8:3:50 blocked in I/O wait for more than 143 seconds. [ 605.866200][ T32] Tainted: G L syzkaller #0 [ 605.866233][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.866254][ T32] task:kworker/u8:3 state:D stack:23704 pid:50 tgid:50 ppid:2 ** replaying previous printk message ** [ 605.866254][ T32] task:kworker/u8:3 state:D stack:23704 pid:50 tgid:50 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 605.866422][ T32] Workqueue: writeback wb_workfn (flush-8:0) [ 605.866521][ T32] Call Trace: [ 605.866537][ T32] [ 605.866567][ T32] __schedule+0x1259/0x6920 [ 605.866646][ T32] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 605.866724][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.866796][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.866871][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.866937][ T32] ? kthread_data+0x53/0xc0 [ 605.867005][ T32] ? __pfx___schedule+0x10/0x10 [ 605.867075][ T32] ? find_held_lock+0x2b/0x80 [ 605.867147][ T32] ? schedule+0x225/0x2c0 [ 605.867215][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.867309][ T32] ? rq_qos_wait+0x21c/0x330 [ 605.867388][ T32] schedule+0xdd/0x2c0 [ 605.867462][ T32] io_schedule+0x8a/0xf0 [ 605.867691][ T32] rq_qos_wait+0x22d/0x330 [ 605.867751][ T32] ? __pfx_rq_qos_wait+0x10/0x10 [ 605.867813][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.867862][ T32] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 605.867919][ T32] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 605.867966][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.868016][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.868064][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.868141][ T32] wbt_wait+0x18a/0x310 [ 605.868186][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 605.868228][ T32] ? bio_crypt_rq_ctx_compatible+0xd1/0x110 [ 605.868296][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.868342][ T32] ? blk_attempt_bio_merge.part.0+0x155/0x4e0 [ 605.868399][ T32] ? __pfx_dd_bio_merge+0x10/0x10 [ 605.868438][ T32] ? __pfx_wbt_wait+0x10/0x10 [ 605.868473][ T32] __rq_qos_throttle+0x56/0xa0 [ 605.868516][ T32] blk_mq_submit_bio+0xc03/0x3000 [ 605.868563][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.868600][ T32] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 605.868660][ T32] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 605.868700][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.868735][ T32] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 605.868787][ T32] __submit_bio+0x90/0x3d0 [ 605.868823][ T32] submit_bio_noacct_nocheck+0x549/0xc00 [ 605.868859][ T32] ? rcu_read_unlock+0x17/0x60 [ 605.868897][ T32] ? __entry_text_end+0x102035/0x102039 [ 605.868933][ T32] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 605.868976][ T32] ? __pfx___might_resched+0x10/0x10 [ 605.869038][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.869079][ T32] submit_bio_noacct+0xc93/0x2130 [ 605.869146][ T32] ext4_io_submit+0xf7/0x1a0 [ 605.869192][ T32] ext4_bio_write_folio+0x709/0x1ab0 [ 605.869252][ T32] mpage_process_page_bufs+0x473/0x8b0 [ 605.869300][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.869341][ T32] mpage_prepare_extent_to_map+0xb7f/0x1a20 [ 605.869408][ T32] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 605.869491][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.869535][ T32] ? ext4_init_io_end+0x24/0x170 [ 605.869587][ T32] ext4_do_writepages+0x9bc/0x3e80 [ 605.869629][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.869675][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.869708][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.869750][ T32] ? __pfx_ext4_do_writepages+0x10/0x10 [ 605.869790][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.869829][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.869872][ T32] ? ext4_writepages+0x34a/0x750 [ 605.869903][ T32] ext4_writepages+0x34a/0x750 [ 605.869938][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 605.869988][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870023][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.870052][ T32] ? __pfx_ext4_writepages+0x10/0x10 [ 605.870088][ T32] do_writepages+0x278/0x600 [ 605.870135][ T32] ? __pfx_do_writepages+0x10/0x10 [ 605.870174][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870209][ T32] ? reacquire_held_locks+0xdd/0x1f0 [ 605.870238][ T32] ? writeback_sb_inodes+0x3e1/0x1c50 [ 605.870288][ T32] __writeback_single_inode+0x164/0x1560 [ 605.870333][ T32] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 605.870377][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870414][ T32] ? __pfx___writeback_single_inode+0x10/0x10 [ 605.870459][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870494][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 605.870530][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870570][ T32] writeback_sb_inodes+0x766/0x1c50 [ 605.870637][ T32] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 605.870685][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870721][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.870789][ T32] ? _raw_spin_unlock+0x28/0x50 [ 605.870826][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.870862][ T32] ? move_expired_inodes+0x5ea/0x8f0 [ 605.870911][ T32] __writeback_inodes_wb+0xf8/0x2d0 [ 605.870963][ T32] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 605.871008][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.871044][ T32] ? queue_io+0x287/0x530 [ 605.871085][ T32] wb_writeback+0x6f6/0xb50 [ 605.871140][ T32] ? __pfx_wb_writeback+0x10/0x10 [ 605.871182][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.871225][ T32] ? get_nr_inodes+0x100/0x150 [ 605.871275][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.871311][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.871354][ T32] wb_workfn+0x93f/0xc80 [ 605.871404][ T32] ? __pfx_try_to_wake_up+0x10/0x10 [ 605.871438][ T32] ? __pfx_wb_workfn+0x10/0x10 [ 605.871493][ T32] ? process_one_work+0x906/0x1b10 [ 605.871535][ T32] ? process_one_work+0x906/0x1b10 [ 605.871576][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.871623][ T32] process_one_work+0xac7/0x1b10 [ 605.871682][ T32] ? __pfx_process_one_work+0x10/0x10 [ 605.871727][ T32] ? lock_acquire+0x1d1/0x380 [ 605.871765][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.871807][ T32] worker_thread+0x5ef/0xe50 [ 605.871865][ T32] ? kthread+0x13a/0x450 [ 605.871901][ T32] ? __pfx_worker_thread+0x10/0x10 [ 605.871942][ T32] kthread+0x373/0x450 [ 605.871979][ T32] ? __pfx_kthread+0x10/0x10 [ 605.872020][ T32] ret_from_fork+0x730/0xd60 [ 605.872052][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 605.872083][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.872119][ T32] ? __switch_to+0x800/0x10f0 [ 605.872156][ T32] ? __switch_to_asm+0x39/0x70 [ 605.872184][ T32] ? __pfx_kthread+0x10/0x10 [ 605.872226][ T32] ret_from_fork_asm+0x1a/0x30 [ 605.872273][ T32] [ 605.872374][ T32] INFO: task jbd2/sda1-8:4943 blocked in I/O wait for more than 143 seconds. [ 605.872399][ T32] Tainted: G L syzkaller #0 [ 605.872416][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.872428][ T32] task:jbd2/sda1-8 state:D stack:25784 pid:4943 tgid:4943 ppid:2 task_flags:0x240040 flags:0x00080000 [ 605.872521][ T32] Call Trace: [ 605.872531][ T32] [ 605.872547][ T32] __schedule+0x1259/0x6920 [ 605.872585][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.872625][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.872669][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.872705][ T32] ? lock_acquire+0x1d1/0x380 [ 605.872734][ T32] ? __pfx___schedule+0x10/0x10 [ 605.872772][ T32] ? find_held_lock+0x2b/0x80 [ 605.872812][ T32] ? schedule+0x225/0x2c0 [ 605.872848][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.872892][ T32] schedule+0xdd/0x2c0 [ 605.872931][ T32] io_schedule+0x8a/0xf0 [ 605.872971][ T32] bit_wait_io+0xd/0xe0 [ 605.873013][ T32] __wait_on_bit+0x65/0x180 [ 605.873056][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.873102][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.873146][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.873196][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.873242][ T32] ? __pfx___might_resched+0x10/0x10 [ 605.873294][ T32] __wait_on_buffer+0x64/0x70 [ 605.873333][ T32] jbd2_journal_commit_transaction+0x37ef/0x6700 [ 605.873397][ T32] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 605.873430][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.873469][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.873504][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 605.873546][ T32] ? debug_object_deactivate+0x2e4/0x3b0 [ 605.873589][ T32] ? __pfx_debug_object_deactivate+0x10/0x10 [ 605.873640][ T32] ? _raw_spin_lock_irqsave+0x52/0x60 [ 605.873680][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.873716][ T32] ? find_held_lock+0x2b/0x80 [ 605.873754][ T32] ? __try_to_del_timer_sync+0x107/0x160 [ 605.873810][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.873846][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 605.873887][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.873937][ T32] ? __timer_delete_sync+0x151/0x1c0 [ 605.873988][ T32] kjournald2+0x200/0x760 [ 605.874029][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.874066][ T32] ? __pfx_kjournald2+0x10/0x10 [ 605.874098][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.874133][ T32] ? find_held_lock+0x2b/0x80 [ 605.874171][ T32] ? __kthread_parkme+0xbb/0x230 [ 605.874203][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.874239][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.874277][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 605.874322][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.874359][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.874394][ T32] ? __kthread_parkme+0x18f/0x230 [ 605.874431][ T32] ? kthread+0x13a/0x450 [ 605.874467][ T32] ? __pfx_kjournald2+0x10/0x10 [ 605.874498][ T32] kthread+0x373/0x450 [ 605.874535][ T32] ? __pfx_kthread+0x10/0x10 [ 605.874576][ T32] ret_from_fork+0x730/0xd60 [ 605.874612][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 605.874643][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.874678][ T32] ? __switch_to+0x800/0x10f0 [ 605.874716][ T32] ? __switch_to_asm+0x39/0x70 [ 605.874744][ T32] ? __pfx_kthread+0x10/0x10 [ 605.874785][ T32] ret_from_fork_asm+0x1a/0x30 [ 605.874833][ T32] [ 605.874857][ T32] INFO: task syz-executor:5602 blocked in I/O wait for more than 143 seconds. [ 605.874883][ T32] Tainted: G L syzkaller #0 [ 605.874900][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.874913][ T32] task:syz-executor state:D stack:22736 pid:5602 tgid:5602 ppid:5601 task_flags:0x440100 flags:0x00080000 [ 605.874999][ T32] Call Trace: [ 605.875009][ T32] [ 605.875025][ T32] __schedule+0x1259/0x6920 [ 605.875064][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.875100][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.875150][ T32] ? __pfx___schedule+0x10/0x10 [ 605.875188][ T32] ? find_held_lock+0x2b/0x80 [ 605.875229][ T32] ? schedule+0x225/0x2c0 [ 605.875265][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.875309][ T32] schedule+0xdd/0x2c0 [ 605.875349][ T32] io_schedule+0x8a/0xf0 [ 605.875390][ T32] bit_wait_io+0xd/0xe0 [ 605.875431][ T32] __wait_on_bit+0x65/0x180 [ 605.875475][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.875521][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.876357][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.876425][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.876490][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.876546][ T32] do_get_write_access+0x836/0x11e0 [ 605.876635][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.876706][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.876759][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.876813][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.876862][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.876921][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.876967][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.877015][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.877077][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.877184][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.877250][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.877297][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.877345][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.877385][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.877429][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.877483][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.877528][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.877573][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.877630][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.877695][ T32] file_update_time_flags+0x49c/0x520 [ 605.877754][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.877811][ T32] ? tcp_recvmsg+0x14c/0x630 [ 605.877855][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.877904][ T32] ? __pfx_vm_normal_page+0x10/0x10 [ 605.877961][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878008][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878055][ T32] ? find_held_lock+0x2b/0x80 [ 605.878106][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.878159][ T32] do_page_mkwrite+0x17a/0x440 [ 605.878221][ T32] do_wp_page+0x9ed/0x45c0 [ 605.878295][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878342][ T32] ? lock_acquire+0x1d1/0x380 [ 605.878379][ T32] ? __pfx_do_wp_page+0x10/0x10 [ 605.878442][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878490][ T32] ? lock_acquire+0x1d1/0x380 [ 605.878526][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878575][ T32] ? do_raw_spin_lock+0x128/0x260 [ 605.878628][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 605.878702][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878761][ T32] __handle_mm_fault+0x1cd2/0x2f60 [ 605.878815][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.878860][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.878910][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.878963][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.879036][ T32] handle_mm_fault+0x363/0xa20 [ 605.879093][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.879157][ T32] exc_page_fault+0x6f/0xd0 [ 605.879216][ T32] asm_exc_page_fault+0x26/0x30 [ 605.879256][ T32] RIP: 0033:0x7f3eca47c6e2 [ 605.879288][ T32] RSP: 002b:00007fff67df1c00 EFLAGS: 00010212 [ 605.879321][ T32] RAX: 00007f3ec8468000 RBX: 0000555586dd8030 RCX: 0000000000000007 [ 605.879348][ T32] RDX: 0000000000000c8e RSI: 0000555586ddff20 RDI: 0000000000000080 [ 605.879374][ T32] RBP: 00007fff67df2100 R08: 0000555586ddff40 R09: 000000000000009d [ 605.879402][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff67df1f40 [ 605.879428][ T32] R13: 00007fff67df1d30 R14: 585858582e7a7973 R15: 00007fff67df1c80 [ 605.879483][ T32] [ 605.879570][ T32] INFO: task syz.5.2044:12508 blocked in I/O wait for more than 143 seconds. [ 605.879609][ T32] Tainted: G L syzkaller #0 [ 605.879633][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.879650][ T32] task:syz.5.2044 state:D stack:26712 pid:12508 tgid:12508 ppid:5629 task_flags:0x440040 flags:0x00080002 [ 605.879772][ T32] Call Trace: [ 605.879786][ T32] [ 605.879807][ T32] __schedule+0x1259/0x6920 [ 605.879858][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.879906][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.879972][ T32] ? __pfx___schedule+0x10/0x10 [ 605.880022][ T32] ? find_held_lock+0x2b/0x80 [ 605.880074][ T32] ? schedule+0x225/0x2c0 [ 605.880123][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.880181][ T32] schedule+0xdd/0x2c0 [ 605.880233][ T32] io_schedule+0x8a/0xf0 [ 605.880285][ T32] bit_wait_io+0xd/0xe0 [ 605.880340][ T32] __wait_on_bit+0x65/0x180 [ 605.880396][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.880457][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.880515][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.880580][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.880649][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.880703][ T32] do_get_write_access+0x836/0x11e0 [ 605.880785][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.880852][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.880904][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.880958][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.881007][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.881067][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.881112][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.881160][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.881222][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.881268][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.881332][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.881380][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.881427][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.881468][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.881512][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.881565][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.881615][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.881659][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.881709][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.881774][ T32] file_update_time_flags+0x49c/0x520 [ 605.881831][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.881892][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.881938][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.882002][ T32] do_page_mkwrite+0x17a/0x440 [ 605.882062][ T32] do_fault+0x659/0x1830 [ 605.882122][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.882164][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 605.882214][ T32] ? __pfx_do_fault+0x10/0x10 [ 605.882273][ T32] ? pgd_none+0x9f/0xe0 [ 605.882343][ T32] ? __pfx_pgd_none+0x10/0x10 [ 605.882387][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.882435][ T32] ? lock_acquire+0x1d1/0x380 [ 605.882478][ T32] __handle_mm_fault+0x150b/0x2f60 [ 605.882531][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.882575][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.882629][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.882681][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.882755][ T32] handle_mm_fault+0x363/0xa20 [ 605.882812][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.882875][ T32] exc_page_fault+0x6f/0xd0 [ 605.882934][ T32] asm_exc_page_fault+0x26/0x30 [ 605.882973][ T32] RIP: 0033:0x7fa454072809 [ 605.883004][ T32] RSP: 002b:00007fff610725e0 EFLAGS: 00010202 [ 605.883036][ T32] RAX: 0000001b34624000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 605.883062][ T32] RDX: 0000001b34623ffc RSI: 00000000005ffde8 RDI: 00007fa454f55700 [ 605.883089][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fa454412000 [ 605.883116][ T32] R10: 00007fa454f55700 R11: 0000000000000000 R12: 0000000000000000 [ 605.883142][ T32] R13: 000000000007ffff R14: ffffffff825f1be6 R15: 00007fa454f55720 [ 605.883171][ T32] ? __get_user_pages+0x766/0x2c30 [ 605.883253][ T32] [ 605.883270][ T32] INFO: task syz.0.2045:12509 blocked in I/O wait for more than 143 seconds. [ 605.883304][ T32] Tainted: G L syzkaller #0 [ 605.883327][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.883344][ T32] task:syz.0.2045 state:D stack:27096 pid:12509 tgid:12509 ppid:11669 task_flags:0x440040 flags:0x00080002 [ 605.883467][ T32] Call Trace: [ 605.883480][ T32] [ 605.883502][ T32] __schedule+0x1259/0x6920 [ 605.883552][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.883600][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.883663][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.883710][ T32] ? lock_acquire+0x1d1/0x380 [ 605.883750][ T32] ? __pfx___schedule+0x10/0x10 [ 605.883799][ T32] ? find_held_lock+0x2b/0x80 [ 605.883852][ T32] ? schedule+0x225/0x2c0 [ 605.883901][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.883959][ T32] schedule+0xdd/0x2c0 [ 605.884027][ T32] io_schedule+0x8a/0xf0 [ 605.884081][ T32] bit_wait_io+0xd/0xe0 [ 605.884136][ T32] __wait_on_bit+0x65/0x180 [ 605.884199][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.884261][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.884320][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.884383][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.884446][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.884502][ T32] do_get_write_access+0x836/0x11e0 [ 605.884584][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.884659][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.884707][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.884757][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.884804][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.884862][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.884908][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.884954][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.885016][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.885060][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.885129][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.885176][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.885223][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.885263][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.885307][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.885359][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.885409][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.885453][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.885502][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.886008][ T32] file_update_time_flags+0x49c/0x520 [ 605.886070][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.886131][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.886184][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.886231][ T32] ? lock_acquire+0x1d1/0x380 [ 605.886275][ T32] do_page_mkwrite+0x17a/0x440 [ 605.886336][ T32] do_fault+0x659/0x1830 [ 605.886397][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.886442][ T32] ? __pfx_do_fault+0x10/0x10 [ 605.886501][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.886546][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.886590][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.886662][ T32] ? __pte_offset_map+0x179/0x310 [ 605.886728][ T32] __handle_mm_fault+0x150b/0x2f60 [ 605.886781][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.886825][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.886874][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.886926][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.886999][ T32] handle_mm_fault+0x363/0xa20 [ 605.887055][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.887137][ T32] exc_page_fault+0x6f/0xd0 [ 605.887196][ T32] asm_exc_page_fault+0x26/0x30 [ 605.887236][ T32] RIP: 0033:0x7f74c7672f32 [ 605.887267][ T32] RSP: 002b:00007ffe55fcc250 EFLAGS: 00010202 [ 605.887298][ T32] RAX: 0000000000003008 RBX: 00007f74c8555720 RCX: 0000000000000000 [ 605.887325][ T32] RDX: 0000001b2e021000 RSI: 0000000000000008 RDI: 00007f74c8555720 [ 605.887352][ T32] RBP: 0000000000000b95 R08: 00007f74c7a10000 R09: 00007f74c7a26038 [ 605.887379][ T32] R10: 0000000000000007 R11: 0000000000000002 R12: ffffffff8bc8191d [ 605.887405][ T32] R13: 00007f74c7a26038 R14: 00000000000001dc R15: ffffffffffffd000 [ 605.887460][ T32] ? mas_next_slot+0x3bd/0x13a0 [ 605.887543][ T32] [ 605.887559][ T32] INFO: task syz.7.2046:12512 blocked in I/O wait for more than 143 seconds. [ 605.887593][ T32] Tainted: G L syzkaller #0 [ 605.887622][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.887639][ T32] task:syz.7.2046 state:D stack:27128 pid:12512 tgid:12512 ppid:10148 task_flags:0x440040 flags:0x00080002 [ 605.887762][ T32] Call Trace: [ 605.887774][ T32] [ 605.887796][ T32] __schedule+0x1259/0x6920 [ 605.887846][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.887894][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.887952][ T32] ? lock_acquire+0x1d1/0x380 [ 605.887992][ T32] ? __pfx___schedule+0x10/0x10 [ 605.888042][ T32] ? find_held_lock+0x2b/0x80 [ 605.888095][ T32] ? schedule+0x225/0x2c0 [ 605.888143][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.888200][ T32] schedule+0xdd/0x2c0 [ 605.888252][ T32] io_schedule+0x8a/0xf0 [ 605.888305][ T32] bit_wait_io+0xd/0xe0 [ 605.888359][ T32] __wait_on_bit+0x65/0x180 [ 605.888416][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.888476][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.888535][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.888600][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.888668][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.888722][ T32] do_get_write_access+0x836/0x11e0 [ 605.888804][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.888871][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.888923][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.888978][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.889027][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.889086][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.889132][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.889179][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.889241][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.889289][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.889352][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.889399][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.889446][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.889487][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.889531][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.889584][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.889635][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.889679][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.889729][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.889793][ T32] file_update_time_flags+0x49c/0x520 [ 605.889850][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.889911][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.889959][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.889998][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.890045][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 605.890109][ T32] do_page_mkwrite+0x17a/0x440 [ 605.890170][ T32] do_fault+0x659/0x1830 [ 605.890231][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.890276][ T32] ? __pfx_do_fault+0x10/0x10 [ 605.890335][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.890380][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.890423][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.890472][ T32] ? __pte_offset_map+0x179/0x310 [ 605.890538][ T32] __handle_mm_fault+0x150b/0x2f60 [ 605.890591][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.890640][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.890690][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.890742][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.890815][ T32] handle_mm_fault+0x363/0xa20 [ 605.890871][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.890935][ T32] exc_page_fault+0x6f/0xd0 [ 605.890992][ T32] asm_exc_page_fault+0x26/0x30 [ 605.891031][ T32] RIP: 0033:0x7f6c39e72f32 [ 605.891062][ T32] RSP: 002b:00007ffe82dc4420 EFLAGS: 00010202 [ 605.891094][ T32] RAX: 0000000000004008 RBX: 00007f6c3ad55720 RCX: 0000000000000000 [ 605.891119][ T32] RDX: 0000001b2e220000 RSI: 0000000000000008 RDI: 00007f6c3ad55720 [ 605.891146][ T32] RBP: 0000000000000c23 R08: 00007f6c3a210000 R09: 00007f6c3a226038 [ 605.891173][ T32] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff8bcac346 [ 605.891199][ T32] R13: 00007f6c3a226038 R14: 00000000000000ec R15: ffffffffffffc000 [ 605.891230][ T32] ? __radix_tree_replace+0x166/0x350 [ 605.891306][ T32] [ 605.891322][ T32] INFO: task syz.6.2047:12515 blocked in I/O wait for more than 143 seconds. [ 605.891356][ T32] Tainted: G L syzkaller #0 [ 605.891379][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.891395][ T32] task:syz.6.2047 state:D stack:27128 pid:12515 tgid:12515 ppid:7265 task_flags:0x440040 flags:0x00080002 [ 605.891518][ T32] Call Trace: [ 605.891530][ T32] [ 605.891553][ T32] __schedule+0x1259/0x6920 [ 605.891608][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.891655][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.891714][ T32] ? lock_acquire+0x1d1/0x380 [ 605.891754][ T32] ? __pfx___schedule+0x10/0x10 [ 605.891803][ T32] ? find_held_lock+0x2b/0x80 [ 605.891856][ T32] ? schedule+0x225/0x2c0 [ 605.891904][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.891962][ T32] schedule+0xdd/0x2c0 [ 605.892014][ T32] io_schedule+0x8a/0xf0 [ 605.892067][ T32] bit_wait_io+0xd/0xe0 [ 605.892121][ T32] __wait_on_bit+0x65/0x180 [ 605.892178][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.892239][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.892321][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.892385][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.892449][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.892505][ T32] do_get_write_access+0x836/0x11e0 [ 605.892586][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.892705][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.892756][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.892810][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.892878][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.892936][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.892982][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.893041][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.893103][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.893150][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.893214][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.893262][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.893309][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.893350][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.893394][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.893447][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.893493][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.893538][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.893588][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.893657][ T32] file_update_time_flags+0x49c/0x520 [ 605.893714][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.893775][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.893838][ T32] do_page_mkwrite+0x17a/0x440 [ 605.893899][ T32] do_fault+0x659/0x1830 [ 605.893959][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.894004][ T32] ? __pfx_do_fault+0x10/0x10 [ 605.894063][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.894107][ T32] ? rcu_read_unlock+0x2d/0xb0 [ 605.894152][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.894200][ T32] ? __pte_offset_map+0x179/0x310 [ 605.894265][ T32] __handle_mm_fault+0x150b/0x2f60 [ 605.894323][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.894370][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.894419][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.894471][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.894544][ T32] handle_mm_fault+0x363/0xa20 [ 605.894633][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.894696][ T32] exc_page_fault+0x6f/0xd0 [ 605.894756][ T32] asm_exc_page_fault+0x26/0x30 [ 605.894795][ T32] RIP: 0033:0x7fdc28a727a9 [ 605.894825][ T32] RSP: 002b:00007ffed4f83030 EFLAGS: 00010202 [ 605.894857][ T32] RAX: 0000001b31e1b000 RBX: ffffffff81ae625b RCX: 0000001b31e1aff8 [ 605.894885][ T32] RDX: 0000001b31824220 RSI: 0000000000000008 RDI: 00007fdc29955720 [ 605.894911][ T32] RBP: 00000000000001e2 R08: 00007fdc28e10000 R09: 00007fdc28e12000 [ 605.894938][ T32] R10: 0000000081ae625f R11: 0000000000000004 R12: 00007fdc28e26038 [ 605.894964][ T32] R13: 0000000000000548 R14: ffffffff81ae6a35 R15: 00007fdc29955720 [ 605.894993][ T32] ? smp_text_poke_batch_finish+0x7f5/0xc60 [ 605.895052][ T32] ? smp_text_poke_batch_finish+0x1b/0xc60 [ 605.895123][ T32] [ 605.895138][ T32] INFO: task syz.8.2049:12518 blocked in I/O wait for more than 143 seconds. [ 605.895167][ T32] Tainted: G L syzkaller #0 [ 605.895186][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.895200][ T32] task:syz.8.2049 state:D stack:27128 pid:12518 tgid:12518 ppid:11832 task_flags:0x440040 flags:0x00080002 [ 605.895324][ T32] Call Trace: [ 605.895337][ T32] [ 605.895359][ T32] __schedule+0x1259/0x6920 [ 605.895410][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.895458][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.895518][ T32] ? lock_acquire+0x1d1/0x380 [ 605.895596][ T32] ? __pfx___schedule+0x10/0x10 [ 605.895652][ T32] ? find_held_lock+0x2b/0x80 [ 605.895705][ T32] ? schedule+0x225/0x2c0 [ 605.895753][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.895811][ T32] schedule+0xdd/0x2c0 [ 605.895863][ T32] io_schedule+0x8a/0xf0 [ 605.895916][ T32] bit_wait_io+0xd/0xe0 [ 605.895970][ T32] __wait_on_bit+0x65/0x180 [ 605.896027][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.896088][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.896147][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.896212][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.896276][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.896330][ T32] do_get_write_access+0x836/0x11e0 [ 605.896411][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.896478][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.896530][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.896583][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.896636][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.896696][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.896742][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.896790][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.896851][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.896898][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.896962][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.897009][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.897057][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.897098][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.897180][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.897234][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.897280][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.897324][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.897373][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.897437][ T32] file_update_time_flags+0x49c/0x520 [ 605.897510][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.897571][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.897647][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.897727][ T32] do_page_mkwrite+0x17a/0x440 [ 605.897788][ T32] do_fault+0x659/0x1830 [ 605.897849][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.897889][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 605.897954][ T32] ? __pfx_do_fault+0x10/0x10 [ 605.898012][ T32] ? pgd_none+0x9f/0xe0 [ 605.898055][ T32] ? __pfx_pgd_none+0x10/0x10 [ 605.898099][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.898219][ T32] ? lock_acquire+0x1d1/0x380 [ 605.898272][ T32] __handle_mm_fault+0x150b/0x2f60 [ 605.898329][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.898383][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.898450][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.898519][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.898587][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.898665][ T32] handle_mm_fault+0x363/0xa20 [ 605.898735][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.898818][ T32] exc_page_fault+0x6f/0xd0 [ 605.898891][ T32] asm_exc_page_fault+0x26/0x30 [ 605.898941][ T32] RIP: 0033:0x7f45f1472809 [ 605.898979][ T32] RSP: 002b:00007ffedaea4c90 EFLAGS: 00010202 [ 605.899019][ T32] RAX: 0000001b2f824000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 605.899064][ T32] RDX: 0000001b2f823ffc RSI: 00000000005ffde8 RDI: 00007f45f2355700 [ 605.899098][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f45f1812000 [ 605.899129][ T32] R10: 00007f45f2355700 R11: 0000000000000000 R12: 0000000000000000 [ 605.899161][ T32] R13: 0000000000000bbf R14: ffffffff81af7040 R15: 00007f45f2355720 [ 605.899199][ T32] ? fpregs_assert_state_consistent+0xb0/0x150 [ 605.899300][ T32] [ 605.899322][ T32] INFO: task syz.3.2048:12519 blocked in I/O wait for more than 143 seconds. [ 605.899364][ T32] Tainted: G L syzkaller #0 [ 605.899392][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.899413][ T32] task:syz.3.2048 state:D stack:27640 pid:12519 tgid:12519 ppid:6515 task_flags:0x440040 flags:0x00080002 [ 605.899573][ T32] Call Trace: [ 605.899587][ T32] [ 605.899609][ T32] __schedule+0x1259/0x6920 [ 605.899659][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.899707][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 605.899772][ T32] ? lock_acquire+0x1d1/0x380 [ 605.899811][ T32] ? __pfx___schedule+0x10/0x10 [ 605.899861][ T32] ? find_held_lock+0x2b/0x80 [ 605.899914][ T32] ? schedule+0x225/0x2c0 [ 605.899962][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.900020][ T32] schedule+0xdd/0x2c0 [ 605.900091][ T32] io_schedule+0x8a/0xf0 [ 605.900145][ T32] bit_wait_io+0xd/0xe0 [ 605.900200][ T32] __wait_on_bit+0x65/0x180 [ 605.900256][ T32] ? __pfx_bit_wait_io+0x10/0x10 [ 605.900318][ T32] out_of_line_wait_on_bit+0xdc/0x110 [ 605.900377][ T32] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 605.900440][ T32] ? __pfx_wake_bit_function+0x10/0x10 [ 605.900505][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.900562][ T32] do_get_write_access+0x836/0x11e0 [ 605.900647][ T32] jbd2_journal_get_write_access+0x1d6/0x280 [ 605.900714][ T32] __ext4_journal_get_write_access+0x277/0x380 [ 605.900769][ T32] ext4_reserve_inode_write+0x1b7/0x330 [ 605.900823][ T32] __ext4_mark_inode_dirty+0x18f/0x910 [ 605.900875][ T32] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 605.900935][ T32] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 605.900983][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.901030][ T32] ? trace_jbd2_handle_start+0x83/0x240 [ 605.901102][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.901146][ T32] ? jbd2__journal_start+0xf7/0x6b0 [ 605.901207][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.901255][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.901302][ T32] ? __ext4_journal_start_sb+0x17b/0x610 [ 605.901343][ T32] ? ext4_dirty_inode+0xa1/0x130 [ 605.901388][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.901441][ T32] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 605.901487][ T32] ext4_dirty_inode+0xd9/0x130 [ 605.901532][ T32] ? rcu_is_watching+0x13/0xc0 [ 605.901582][ T32] __mark_inode_dirty+0x1f3/0x16e0 [ 605.901646][ T32] file_update_time_flags+0x49c/0x520 [ 605.901704][ T32] ext4_page_mkwrite+0x324/0x1860 [ 605.901766][ T32] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 605.901811][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.901874][ T32] do_page_mkwrite+0x17a/0x440 [ 605.901936][ T32] do_fault+0x659/0x1830 [ 605.901996][ T32] ? __pfx_filemap_map_pages+0x10/0x10 [ 605.902036][ T32] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 605.902097][ T32] ? __pfx_do_fault+0x10/0x10 [ 605.902156][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.902206][ T32] ? do_raw_spin_unlock+0x145/0x1e0 [ 605.902257][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.902304][ T32] ? _raw_spin_unlock+0x28/0x50 [ 605.902354][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.902401][ T32] ? __pmd_alloc+0x3fb/0x950 [ 605.902443][ T32] __handle_mm_fault+0x150b/0x2f60 [ 605.902496][ T32] ? lock_vma_under_rcu+0x11d/0x590 [ 605.902539][ T32] ? __pfx___handle_mm_fault+0x10/0x10 [ 605.902589][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.902641][ T32] ? lock_vma_under_rcu+0x17c/0x590 [ 605.902715][ T32] handle_mm_fault+0x363/0xa20 [ 605.902770][ T32] do_user_addr_fault+0x59c/0x12f0 [ 605.902834][ T32] exc_page_fault+0x6f/0xd0 [ 605.902894][ T32] asm_exc_page_fault+0x26/0x30 [ 605.902933][ T32] RIP: 0033:0x7fd6fe26baa3 [ 605.902965][ T32] RSP: 002b:00007ffc676d5680 EFLAGS: 00010246 [ 605.902997][ T32] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b33464000 [ 605.903023][ T32] RDX: 0000001b33424000 RSI: 0000000000600000 RDI: 00007fd6fe5e0708 [ 605.903051][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.903083][ T32] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 605.903108][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc676d5910 [ 605.903161][ T32] [ 605.903189][ T32] [ 605.903189][ T32] Showing all locks held in the system: [ 605.903208][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 605.903236][ T32] #0: ffffffff8edd8738 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 605.903336][ T32] #1: ffffffff9bc5e1b8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 605.903432][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 605.903461][ T32] #0: ffffffff8edec420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 605.903577][ T32] locks held by kworker/u8:3/50: 4, on CPU#1: [ 605.903605][ T32] #0: ffff888021ae7140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 605.903716][ T32] #1: ffffc90000ba7d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 605.903826][ T32] #2: ffff88803700c0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 605.903946][ T32] #3: ffff88803700ac98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 605.904110][ T32] locks held by klogd/4970: 1, last CPU#0: [ 605.904139][ T32] #0: ffffffff8effc158 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 605.904244][ T32] locks held by getty/5368: 2, on CPU#1: [ 605.904272][ T32] #0: ffff88803776d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 605.904369][ T32] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 605.904486][ T32] locks held by syz-executor/5602: 3, on CPU#1: [ 605.904515][ T32] #0: ffff88807b35d6c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.904607][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.904712][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.904843][ T32] locks held by syz.5.2044/12508: 3, on CPU#0: [ 605.904872][ T32] #0: ffff88805a430808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.904964][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.905083][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.905192][ T32] locks held by syz.0.2045/12509: 3, on CPU#1: [ 605.905220][ T32] #0: ffff88807621ba88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.905312][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.905417][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.905527][ T32] locks held by syz.7.2046/12512: 3, on CPU#0: [ 605.905630][ T32] #0: ffff888069da9e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.905725][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.905830][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.905939][ T32] locks held by syz.6.2047/12515: 3, on CPU#1: [ 605.905968][ T32] #0: ffff88807f27ea88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.906068][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.906173][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.906281][ T32] locks held by syz.8.2049/12518: 3, on CPU#1: [ 605.906309][ T32] #0: ffff8880278fabc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.906402][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.906506][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.906615][ T32] locks held by syz.3.2048/12519: 3, on CPU#0: [ 605.906643][ T32] #0: ffff8880762bfa88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 605.906735][ T32] #1: ffff88803700c558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 605.906841][ T32] #2: ffff888037008938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfa7/0x1390 [ 605.906951][ T32] [ 605.906961][ T32] ============================================= [ 605.906961][ T32] [ 605.906977][ T32] NMI backtrace for cpu 1 [ 605.907003][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 605.907061][ T32] Tainted: [L]=SOFTLOCKUP [ 605.907076][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 605.907100][ T32] Call Trace: [ 605.907115][ T32] [ 605.907130][ T32] dump_stack_lvl+0x100/0x190 [ 605.907184][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 605.907242][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 605.907283][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 605.907338][ T32] sys_info+0x141/0x190 [ 605.907378][ T32] watchdog+0xcb1/0x1030 [ 605.907428][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 605.907483][ T32] ? __pfx_watchdog+0x10/0x10 [ 605.907520][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.907568][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.907620][ T32] ? __kthread_parkme+0x18f/0x230 [ 605.907667][ T32] ? kthread+0x13a/0x450 [ 605.907713][ T32] ? __pfx_watchdog+0x10/0x10 [ 605.907750][ T32] kthread+0x373/0x450 [ 605.907798][ T32] ? __pfx_kthread+0x10/0x10 [ 605.907854][ T32] ret_from_fork+0x730/0xd60 [ 605.907896][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 605.907937][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.907982][ T32] ? __switch_to+0x800/0x10f0 [ 605.908031][ T32] ? __switch_to_asm+0x39/0x70 [ 605.908074][ T32] ? __pfx_kthread+0x10/0x10 [ 605.908128][ T32] ret_from_fork_asm+0x1a/0x30 [ 605.908189][ T32] [ 605.908204][ T32] Sending NMI from CPU 1 to CPUs 0: [ 605.908241][ C0] NMI backtrace for cpu 0 [ 605.908264][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.908315][ C0] Tainted: [L]=SOFTLOCKUP [ 605.908328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 605.908349][ C0] RIP: 0010:delay_tsc+0x37/0xc0 [ 605.908391][ C0] Code: 00 41 54 55 53 e8 79 8e 08 f6 e8 74 7e 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 f3 90 bf 01 00 00 00 54 8e 08 f6 e8 4f 7e 01 00 44 39 e0 75 36 0f 01 f9 66 90 48 c1 [ 605.908425][ C0] RSP: 0018:ffffc90000157950 EFLAGS: 00000082 [ 605.908452][ C0] RAX: 8000000000000002 RBX: 0000015f50cd8c76 RCX: 0000000000000000 [ 605.908475][ C0] RDX: 0000000000000004 RSI: ffffffff8c622e00 RDI: 0000000000000001 [ 605.908496][ C0] RBP: 0000015f50cd8a5b R08: 0000000000000005 R09: 0000000000000000 [ 605.908518][ C0] R10: 0000000000000723 R11: 6f776b3a6b736174 R12: 0000000000000000 [ 605.908540][ C0] R13: 0000000000000993 R14: fffffbfff378bc91 R15: dffffc0000000000 [ 605.908573][ C0] FS: 0000000000000000(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 605.908603][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.908626][ C0] CR2: 000055994a853168 CR3: 0000000035c1d000 CR4: 0000000000350ef0 [ 605.908649][ C0] Call Trace: [ 605.908660][ C0] [ 605.908681][ C0] wait_for_lsr+0xf3/0x210 [ 605.908733][ C0] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 605.908785][ C0] __serial8250_console_fifo_write+0xa5/0x290 [ 605.908834][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 605.908879][ C0] serial8250_console_write+0xf46/0x1330 [ 605.908940][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 605.908995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909036][ C0] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 605.909093][ C0] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 605.909147][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909190][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909235][ C0] nbcon_emit_next_record+0x8f7/0xa70 [ 605.909292][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 605.909344][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909385][ C0] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 605.909435][ C0] ? do_raw_spin_lock+0x70/0x260 [ 605.909483][ C0] ? __pfx___cant_migrate+0x10/0x10 [ 605.909526][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909573][ C0] ? _raw_spin_lock_irqsave+0x42/0x60 [ 605.909622][ C0] nbcon_emit_one+0x1a8/0x2b0 [ 605.909672][ C0] ? __pfx_nbcon_emit_one+0x10/0x10 [ 605.909723][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909771][ C0] nbcon_kthread_func+0x613/0x7d0 [ 605.909828][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 605.909879][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909924][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.909966][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.910006][ C0] ? __kthread_parkme+0x18f/0x230 [ 605.910046][ C0] ? kthread+0x13a/0x450 [ 605.910087][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 605.910139][ C0] kthread+0x373/0x450 [ 605.910181][ C0] ? __pfx_kthread+0x10/0x10 [ 605.910227][ C0] ret_from_fork+0x730/0xd60 [ 605.910262][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 605.910297][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 605.910343][ C0] ? __switch_to+0x800/0x10f0 [ 605.910385][ C0] ? __switch_to_asm+0x39/0x70 [ 605.910417][ C0] ? __pfx_kthread+0x10/0x10 [ 605.910463][ C0] ret_from_fork_asm+0x1a/0x30 [ 605.910509][ C0] [ 605.911239][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 610.637220][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 610.647937][ T32] Tainted: [L]=SOFTLOCKUP [ 610.652284][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 610.662355][ T32] Call Trace: [ 610.665648][ T32] [ 610.668593][ T32] dump_stack_lvl+0x100/0x190 [ 610.673317][ T32] vpanic+0x553/0x970 [ 610.677333][ T32] ? __pfx_vpanic+0x10/0x10 [ 610.682039][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.687736][ T32] panic+0xd1/0xe0 [ 610.691489][ T32] ? __pfx_panic+0x10/0x10 [ 610.695935][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.701609][ T32] ? wq_watchdog_touch+0xec/0x1a0 [ 610.706684][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 610.712881][ T32] ? watchdog.cold+0x1ec/0x234 [ 610.717690][ T32] watchdog.cold+0x1fd/0x234 [ 610.722331][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 610.728190][ T32] ? __pfx_watchdog+0x10/0x10 [ 610.732907][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.738587][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.744263][ T32] ? __kthread_parkme+0x18f/0x230 [ 610.749338][ T32] ? kthread+0x13a/0x450 [ 610.753617][ T32] ? __pfx_watchdog+0x10/0x10 [ 610.758404][ T32] kthread+0x373/0x450 [ 610.762527][ T32] ? __pfx_kthread+0x10/0x10 [ 610.767165][ T32] ret_from_fork+0x730/0xd60 [ 610.771788][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 610.776937][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 610.782705][ T32] ? __switch_to+0x800/0x10f0 [ 610.787429][ T32] ? __switch_to_asm+0x39/0x70 [ 610.792268][ T32] ? __pfx_kthread+0x10/0x10 [ 610.796905][ T32] ret_from_fork_asm+0x1a/0x30 [ 610.801729][ T32] [ 610.804990][ T32] Kernel Offset: disabled [ 610.809327][ T32] Rebooting in 86400 seconds..