last executing test programs: 7m14.806976021s ago: executing program 32 (id=522): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x40) 6m41.76918303s ago: executing program 33 (id=947): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$nfc_llcp(r0, &(0x7f0000001b00), 0x0, 0x80800) 5m58.027518711s ago: executing program 34 (id=1558): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x31, 0x24, 0x67, 0x0, 0x9f, 0x21, 0x0, @multicast2, @loopback}, {{0x4e23, 0x4e21, 0x4, 0x1, 0xd, 0x0, 0x0, 0x3, 0x0, "00eb6c", 0xcd, "1113e6"}}}}}}, 0x0) 5m40.240747129s ago: executing program 35 (id=1738): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/iommu_groups\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/4096, 0x1000) 5m31.133270969s ago: executing program 6 (id=1822): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 5m30.827044877s ago: executing program 6 (id=1823): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) 5m30.826766117s ago: executing program 6 (id=1824): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7c9}, @device_b, @device_a, @from_mac=@device_b, {0x8, 0x3}}, 0x3f, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 5m30.248425442s ago: executing program 6 (id=1835): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 5m29.150977101s ago: executing program 6 (id=1834): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) 5m28.158885137s ago: executing program 6 (id=1845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x17) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x3a4}], 0x1, 0x40000102, 0x0) 5m28.04036879s ago: executing program 36 (id=1845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x1, 0x17) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x3a4}], 0x1, 0x40000102, 0x0) 4m17.165743975s ago: executing program 8 (id=2694): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="1400000001"], 0x48}}, 0x4800) 4m17.028822768s ago: executing program 8 (id=2696): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xe80}, {0x0, 0xe00}], 0x10000000000000fb) tkill(r0, 0x7) 4m16.885092142s ago: executing program 8 (id=2698): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="1a5a84648bc61793438471d9944ff308c10dcf4e661c88eb7c3989451fb8861c9798bfdd75fade3231ac60fb37e994737a4f7980dcec822874079b6d3f1a0097f7a32d070328e4f1b8919e56a1a202737298e1d67edb3f00"/102, 0x66}], 0x2b) 4m16.700450147s ago: executing program 8 (id=2703): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcXIddd3AD+zN6+dm4GQOqmBjWOCcTbZ9SW+0LqYcG24lUAo9ILtetdmwTe8dgk0ko0CJRJGRRVtw0NbQKjNS4VVIZVWgPKAWlWqBO0DfUFUqDxEVUABqVJbQbaac/7//87Mzs7sesfrmXM+Hyn5xTNn5pw585/Z/a7z3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGt39+tlP17Isq/+T/2tzlt1c/++NE5vzy15zo48QAAAAWKtf5P9+/rZ0weEV3Khhm396+Xe+trCwsJC9b/hPRj+/sJCumMiy0Q1Zll8XXf3h+2uN2wRPZOO1oYY/D3XZ/XCX60e6XD/a5fqxLtdv6HL9eJfrl5yAJTYWP4/J72x7/p+bi1Oa3Z6N5tdtb3OrJ2obhobiz3Jytfw2C6MnsrnsVDabTTdtX2xby7f/xt31fb0li/saatjX1voK+enjx+Mx1MI53t60r8X7jH78umziZz99/PhfXXjuznaz62lour/iOHdsqx/nJ8MlxbHWsg3pnMTjHGo4zq1tnpPhpuOs5ber/3frcT6/wuMcXjzMddX6nI9nQ/l/fzc/TyONP9ZL52lruOx/7smy7PLiYbdus2Rf2VC2qemSocXnZ7xYkfX7qC+lF2cjq1qnd69gndbnzPbmddr6mojP/93hdiPLHEPj0/TjT4w1PO8/X7iWdRrVH/Vyr5XWNdjr10q/rMG4Lr6bP+gn267B7eHxP37v8muw7dppswbT425Yg9u6rcGhseH8mNOTUMtvs7gGdzVtP5zvqZbPZ+/tvAanLpw+NzX/sY/fP3f62MnZk7Nn9uzaNb1n374DBw5MnZg7NTtd/Psaz3b/25QNpdfAtnDu4mvgVS3bNi7VhS+NLXn/vdbX4XiH1+Hmlm17/TocaX1wtfV5QS5d08Vr4z31kz5+ZShb5jWWPz871/46TI+74XU40vA6bPs1pc3rcGQFr8P6Nud2rux7lpGGf9odw/JfC9a2Bjc3rMHW70da12Cvvx/plzU4HtbF93cu/7VgazjeJydX+/3I8JI1mB5ueO+pX5K+3x8/kI926/Ku+hU3jWUX52fPP/DYsQsXzu/KwlgXL2lYK63rdVPDY8qWrNehVa/Xw3Mvf/KuNpdvDudq/P76v8aXfa7q2+x9oPNzlX91a38+my7dnYXRY+t9Ptt9Na+fz7Es+8K3P/HINx//wuuXPZ/1vPnJqbV/L55yacP77+gy778x979Q7C/d1RPDoyPF63c4nZ3Rpvfj5qdqJH/vquX7fn5qZe/Ho+Gf9X4/vr3D+/GWlm17/X482vrg4vtxrdtPO9am9fkcD+vk1HTn9+P6Nlt2r3ZNjnR8P74nzFo4/68OSSHlooa1s9y6TfsaGRkNj2sk7qF5ne5p2n40ZLP6vp7efW3rdMc9xX0Np0e3aL3W6UTLtr1ep+lnX8ut01q3n75dm9bnczysi9v3dF6n9W2e2bv2986N8T8b3jvHuq3B0eGx+jGPpkWYv99nCxvjGnwgO56dzU5lM/m1Y/l6quX7mnxwZWtwLPyz3u+VWzqswR0t2/Z6DaavY8utvdrI0gffA63P53hYF0892HkN1rd5w/7efu+6I1yStmn43rX152vL/czrrpbTdL3Wykg4zm/v7/yz2fo2pw6sNmd2Pk/3hUtuanOeWl+/y72mZrL1OU9bwnE+d2D581Q/nvo2nz+4wvV0OMuySx95KP95b/j7lb+9+L2vNf29S7u/07n0kYd+csuJf1zN8QMw+F4oxqbia13D30yt5O//AQAAgIEQc/9QmIn8DwAAAKURc3/8v8IT+R8AAABKI+b+kTCTiuT/LW94bu6FS1lq5i8E8fp0Gh4utosd1+nw54mFRfXLH/rK7H//w6WV7Xsoy7KfP/wHbbff8nA8rsJEOM6rb2y+fImv3b+ifR999FLab2N//Yvh/uPjWekyaFfBnc6y7Bu3fTbfz8T7r+TzmYeP5vORy08+Ud/m+YPFn+Ptn31Jsf2fh/Lv4RPHmm7/bDgPPwpz+q3tz0e83VevvHrr/vcu7i/errbt1vxhP/WB4n7j78n53BPF9vE8L3f83/zM01+tb//YK9sf/6Wh9sf/dLjfr4T5vy8rtm98Dup/jrf7VDj+uL94uwe+/K22x3/108X2595UbHc0zLj/HeHP29/03Fzj+XqsdqzpcWVvLraL+5/+3h/l18f7i/ffevzjR640nY/W9fHMvxX3M9Wyfbw87if6+5b91++ncX3G/T/9h0ebznO3/V995NmX1e+3df/3tWx37iM78/0v3l/zb2z6i099tu3+4vEc/ptzTY/n8LvC6zjs/6kPhPUYrv+/q8X9tf52haPvan7/idt/cfOlpscTveVnxf6vvvZkPjeMb9x008233Hr5FfVzl2Xf3VDcX7f9n/zLs03H/6U7ivMRr48d/db9Lyfu//xHJ8+cnb84N5PO6uO35b87523F8cTjvS28t7b++cjZCx+cPT8xPTGdZRPl/RV61+zLYf6kGJc7b72w5B1056Ph+bzrz76x6d5//Uy8/N/fU1x+5a3F161Xhe0+Fy7fHJ6/1e1/qafuviN/fdeeCUe4sPT3Ba/F1u3/dWBFG4bH3/p9QVzv5176wfw81K/Lv27E1/Uaj/8HM8X9fD2c14Xwm5m33bG4v8bt4+9GuPLu4vW+5vMX3ubi8/rX4fl++4+K+4/HFR/vD8L3Md/a0vx+F9fH1y8Ntd5//ls8Lof3k+xycX3cKp7vK8/f0fbw4u8hyS7fmf/5j9P93Lmqh7mc+Y/NT52aO3PxsakLs/MXpuY/9vEjp89ePHPhSP67PI98qNvtF9+fNuXvTzOz+/Zm+bvV2WJcZzf6+M89enxm//S9M7Mnjl08ceHRc7PnTx6fnz8+OzN/77ETJ2Y/2u32czOHdu0+uGf/7smTczOHDhw8uOfg5NyZs/XDKA6qi33TH548c/5IfpP5Q3sP7nrwwb3Tk6fPzswe2j89PXmx2+3zr02T9Vv//uT52VPHLsydnp2cn/v47KFdB/ft2931twGePndifmLq/MUzUxfnZ89PFY9l4kJ+cf1rX7fbU07z/1F8P9uqVvwivuyd9+1Lv5+17iufWPauik1afoHoc+F30fzzi84dWMmfY+4fDTOpSP4HAACAKoi5fyzMRP4HAACA0oi5f0OYifwPAAAApRFz/3iYSUXyf+n6/1surWj/+v/6/43nS/+/Yv3/d/db/794v9D/74219u/1/wP9f/1//X/9f/1/eqDf+v8x92/MskrmfwAAAKiCmPs3hZnI/wAAAFAaMfffFGYi/wMAAEBpxNx/c5hJRfK//v/17v8P6//r/+v/x3Wp/6//vw70/zvT/+9C/38qq1b//3Ivj1//X/+fpfqt/x9z/y1hJhXJ/wAAAFAFMfffGmYi/wMAAEBpxNx/W5iJ/A8AAAClEXP/5jCTiuR//f+++fz/v8v0/3P6/4u30/8v6P/r/6+G/n9n+v9d6P/7/H/9f/1/eqrf+v8x978ozKQi+R8AAACqIOb+F4eZyP8AAADQf0au7WYx978kzGRJ/r/GHQAAAAA3XMz9t2ctRfCK/P2//n/f9P9z+v/6//r/g9j/H870//uH/n9n+v9d6P/r/+v/6//TU/3W/89zfzaevTTMpCL5HwAAAKog5v47wkzkfwAAACiNmPt/KcxE/gcAAIDSiLl/S5hJRfK//r/+v/6//r/+f/v9+/z/waT/35n+fxf6//r/+v/6//RUv/X/Y+6/M8ykIvkfAAAAqiDm/rvCTOR/AAAAKI2Y+385zET+BwAAgNKIuX9rmElF8r/+f5/3/2NzVP9f/1//X/9f/39F9P870//vQv9f/1//X/+fnuq3/n/M/S8LM6lI/gcAAIAqiLn/5WEm8j8AAACURsz9rwgzkf8BAACgNGLunwgzqUj+1//vUf9/+y1LLvP5//r/aX2Eqf+v/6//f/3p/3em/9+F/r/+v/6//j891W/9/5j77w4zqUj+BwAAgCqIuX9bmIn8DwAAAKURc/89YSbyPwAAAJRGzP3bw0wqkv/1//v88//1//X/9f/1//X/V0X/vzP9/y70//X/9f/1/+mpfuv/x9z/yjCTiuR/AAAAqIKY++8NM5H/AQAAoDRi7n9VmIn8DwAAAKURc/+OMJOK5H/9f/1//X/9f/3/9vvX/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/leHmVQk/wMAAEAVxNy/M8xE/gcAAIDSiLn/vjAT+R8AAABKI+b+yTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v77w0wqkv8BAACgCmLufyDMRP4HAACA0oi5fyrMRP4HAACA0oi5fzrMpCL5X/9f/1//X/9/Vf3/Vyzer/5/Qf+/v+j/d6b/34X+v/7/De//j+r/Uyr91v+PuX9XmElF8j8AAABUQcz9u8NM5H8AAAAojZj794SZyP8AAABQGjH37w0zqUj+1//X/9f/1//3+f/t96//P5j0/zvrff8/PkT9f/1//X+f/6//z1L91v+Puf/BMJOK5H8AAACogpj794WZyP8AAABQGjH37w8zkf8BAACgNGLuPxBmUpH8r/+v/6//r/+v/99+//r/g0n/vzOf/9+F/r/+v/6//j891W/9/5j7D4aZVCT/AwAAQBXE3P+aMBP5HwAAAEoj5v5fCTOR/wEAAKA0Yu7/1TCTiuR//X/9f/1//X/9//b71/8fTAPb/y++DOv/6//r/w/w8ev/6/+zVL/1/2PuPxRmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/NsxE/gcAAIDSiLn/cJhJRfK//r/+v/6//r/+f/v96/8PpoHt/wcV6/+PtV6g/6//P8jHr/+v/89S/db/j7n/dWEmFcn/AAAAUAUx9z8UZiL/AwAAQGnE3P/6MBP5HwAAAEoj5v43hJlUJP/r/+v/6//r/+v/t9+//v9g0v/vrM/6/0tc5/7/UNcD0P/X/9f/1/+np/qt/x9z/xvDTCqS/wEAAKAKYu5/U5iJ/A8AAAClEXP/m8NM5H8AAAAojZj73xJmUpH8r/+v/6//r/+v/99+//r/g0n/v7OK9/+70/8vWf9/4hb9f/1/rpd2CWipa+v/3/zzZXe4xv5/zP2/HmZSkfwPAAAAVRBz/8NhJvI/AAAAlEbM/W8NM5H/AQAAoDRi7n9bmElF8v+a+v9j+v+R/n/z8ev/t18f+v/6//r/15/+f2cD1v//xa3hcv3/gv5/fx9/X/b/f7hc/39hQ+vt9f+5Hq6t/99WT/r/Mfe/PcykIvkfAAAAqiDm/neEmcj/AAAAUBox978zzET+BwAAgNKIuf83wkwqkv99/n/9OBbby/r/+v/5Bfr/+v/6/wOrZ/3/hReaviDq/xd8/r/+fyf6/33Y//f5/9xg/db/j7n/XWEmFcn/AAAAUAUx9z8SZiL/AwAAQGnE3P/uMBP5HwAAAEoj5v73hJlUJP/r//v8f/1//X/9//b71/8fTD7/vzP9/y70//X/+63//5/6/wy2fuv/x9z/aJhJRfI/AAAAVEHM/e8NM5H/AQAAoDRi7v/NMBP5HwAAAEoj5v73hZlUJP/r/w9K/39C/1//X/+/5fHo/+v/t6P/35n+fxf6//r//db/9/n/DLh+6//H3P/+MJOV5//xFW8JAAAA3BAx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/0Hp//v8/0z/X/+/5fHo/+v/t7N+/f/4zqP/r/9/Hfr/G9sfnv5/fx+//r/+P0v1W/8/5v7fDTOpSP4HAACAKoi5/wNhJvI/AAAADIR2/092q5j7j4SZyP8AAABQGjH3Hw0zqUj+1//X/9f/79P+/59u+5fvf+cdR3fp/+v/6/+vyrp+/n/9xe/z//X/ff5/ov+v/6//T6t+6//H3H8szKQi+R8AAACqIOb+3wszkf8BAACgNGLuPx5mIv8DAABAacTcPxNmUpH8r/+v/6//3yf9/1oty0ry+f/xfOj/N+tZ/z++6er/t7Wu/f/3LvbE9f9X2/8fa3up/r/+/yAfv/6//j9L9Vv/P+b+2TCTiuR/AAAAqIKQ+4dOFHPxCvkfAAAASiPm/pNhJvI/AAAAlEbM/R8MM6lI/tf/1//X/++T/n/r5/8PcP/f5/+35/P/14f+f2f90/9vT/9f/3+Qj1//X/+fpfqt/x9z/1yYSUXyPwAAAFRBzP0fCjOR/wEAAKA0Yu7/cJiJ/A8AAAClEXP/qTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v7TYSYVyf8AAABQBTH3nwkzkf/5f/burNnSurrj+O6kId3FC8hFKlXc5xWkuEiqcpe8gFzkJhdJVSoXIQkZnGkUJ1ScZxTnGQdQxAnnCZxQnMV5VhxwxqEtPWut7nN6n2efbvbpfp7/+nxulnbT7iO2DT/gW38AAACGkbv/8rjF/gcAAIBh5O7/z7ilyf7X/+v/h+3//0b/v9/n6//1/yPT/0/T/2+g/9f/6//1/2zV3Pr/3P3/Fbc02f8AAADQQe7+/45b7H8AAAAYRu7+K+IW+x8AAACGkbv/f+KWJvt/T/9/ZNWz/8+MV/8/Uv/v/f99P1//r/8f2fnt/6/6w698+n/9v/4/6P/1//p/9ppb/5+7/3/jlib7HwAAADrI3f9/cYv9DwAAAMPI3f//cYv9DwAAAMPI3X+/uKXJ/vf+v/f/9f/6f/3/+s/X/y+T9/+nder/r7jzkv+45+a/uOVsPl//r//X/+v/2a659f+5++8ft+wefn+3989HAQAAgOXI3f+AuKXJ3/8HAACADnL3PzBusf8BAABgGLn7HxS3NNn/+n/9v/5f/6//X//5+v9l0v9P69T/n8vn6//1//p//T/bNbf+P3f/g+OWJvsfAAAAOsjd/5C4xf4HAACAYeTuvzJusf8BAABgGLn7T8QtTfa//v/w+//f6v/1/3H1//p//f/h0/9P0/9voP/X/+v/9f9s1dz6/9z9V8UtTfY/AAAAdJC7/6Fxi/0PAAAAw8jd/7C4xf4HAACAYeTuvzpuabL/9f/e/9f/6//1/+s/X/+/TPr/aee//1/3R8j96f8X3/9fpP/X/+v/Od1Z9v/3TvyyvZX+P3f/w+OWJvsfAAAAOsjd/4i4xf4HAACAYeTuf2TcYv8DAADAMHL3PypuabL/9f/6f/2//l//v/7z9f/LpP+fNpv3/48cXfvN+v/F9//e/9f/6//ZZW7v/+fuf3Tc0mT/AwAAQAe5+6+JW+x/AAAAGEbu/sfELfY/AAAADCN3/2Pjlib7X/+v/9f/6//1/+s/f6r/v+W0r0//Py8b+/sNv7Dr/8Nh9//70P/r/5f89ev/9f+caW79f+7+x8UtTfY/AAAAdJC7/9q4xf4HAACAYeTuf3zcYv8DAADAMHL3PyFuabL/1/f/p75f/38w+v/dX7/+f/3Pj231//mfqP+f7P//1vv/PXn/f5r+fwP9v/5f/79f/39804/X/7PO3Pr/3P1PjFua7H8AAADoIHf/k+IW+x8AAACGkbv/yXGL/Q8AAADDyN3/lLilyf73/r/+X/+/vP7f+/87LuT7/6vz3v8f1f8fkP5/mv5/A/2//l//7/1/tmpu/X/u/qfGLU32PwAAAHSQu/9pcYv9DwAAAMtw+j87sPcfKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f8fW0j/7/3/g9L/T9P/b3Bh+/8jg/b/Rwfr/6/f78fPof+/Uv/PzOzq/2899e0Xqv/P3f/MuKXJ/gcAAIAOcvc/K26x/wEAAGAYufufHbfY/wAAADCM3P3XxS1N9v+h9//H9/9s/f996v8v1v/r//X/nd7/1/8flP5/mv5/A+//e//f+//6f7ZqV/9/mgvV/+fuf07c0mT/AwAAQAe5+58bt9j/AAAAMIzc/dfHLfY/AAAADCN3//Pilib7f0v9/3XXXP3X3v/fw/v/+v+9Pz/0//p//f/h0/9P0/9voP/X/+v/9f9s1dz6/9z9z49bmux/AAAA6CB3/wviFvsfAAAAhpG7/4Vxi/0PAAAAw8jd/6K4pcn+P/T3/yd06P/z2/X/+v+V/l//r/8/L9r2/0fW/ZHoTPv0/7f/24l/2P0t+n/9v/5f/6//Zwtm0f+fPPVnl7n7Xxy3NNn/AAAA0EHu/pfELfY/AAAADCN3/0vjFvsfAAAAhpG7/2VxyyD7/9iG79f/e/9f/6//1/+v/3z9/zK17f8PyPv/G+j/9f/6f/0/WzWL/v+0f5+7/+VxyyD7HwAAAFjV7n9F3GL/AwAAwDBy978ybrH/AQAAYBi5+18VtzTZ//p//b/+X/+v/1//+fr/ZdL/T9P/b6D/1//r//X/bNXc+v/c/TfELU32PwAAAHSQu//VcYv9DwAAAMPI3f+auMX+BwAAgGHk7n9t3NJk/+v/9f/6f/2//n/95+v/l0n/P03/v1qtbpz4Atb1/yf/TP+v/9f/6/85R3Pr/3P3vy5uabL/AQAAoIPc/TfGLfY/AAAADCN3/01xi/0PAAAAw8jd//q4pcn+1//r//X/+n/9//rP1/8vk/5/mv5/A+//6//1//p/tmpu/X/u/jfELU32PwAAAHSQu//muMX+BwAAgGHk7n9j3GL/AwAAwDBy998StzTZ//p//b/+X/+v/1//+fr/ZTq8/n+l/9f/6/830P/r//X/7DW3/j93/5vilib7HwAAADrI3f/muMX+BwAAgGHk7n9L3GL/AwAAwDBy9781bmmy//X/1dz95Ur/r//X/+/67fT/+v8l8v7/NP3/Bvp//b/+X//PVs2t/8/d/7a4pcn+BwAAgA5y998at9j/AAAAMIzc/W+PW+x/AAAAGEbu/nfELU32v/7f+/+7+//VSv+v/9f/7zgP/f+xlf5/6/T/0/T/G+j/D9LPnzx5cv2fbM22//+T1UD9//F9f7z+nzmaW/+fu/+dcUuT/Q8AAAAd5O5/V9xi/wMAAMAwcve/O26x/wEAAGAYufvfE7c02f/6f/2/9//1//r/9Z/v/f9l0v9P0/9voP/3/v/s+//96f+Zo7n1/7n73xu3NNn/AAAA0EHu/vfFLfY/AAAADCN3//vjFvsfAAAAhpG7/wM799RfAGiy//X/+n/9v/5/b/9/YqX/X+n/F0v/P03/v4H+X/+v/9f/s1Vz6/9j968+GLc02f8AAADQQe7+2+IW+x8AAACGkbv/9rjF/gcAAIBh5O7/UNzSZP/r//X/+v9l9v/HvP+v/9f/rzWX/v+yy/7+Dv2//l//r//X/+v/u5tb/5+7/8NxS5P9DwAAAB3k7v9I3GL/AwAAwDBy9380brH/AQAAYBi5+z8WtzTZ/2f2/xetdgrVHev6/2jU9P+n0f/v/vr1/+t/fizl/X/9/w79/zLNpf/3/v+5ff36f/3/kr/+s+r/Lz3zxx9m//+7A/x/Qf/PYZhb/5+7/464pcn+BwAAgA5y9388brH/AQAAYBi5+z8Rt9j/AAAAMIzc/XfGLU32v/f/9f/6f/3/dvr/E/U/o/5/Pf3/+aH/n6b/30D/r//3/v/l//Kn+n+2Z279f+7+T8YtTfY/AAAAdJC7/1Nxi/0PAAAAw8jd/+m4xf4HAACAYeTu/0zc0mT/6//1//p//b/3/9d/vv5/mfT/0/T/G+j/9f/6f+//s1Vz6/9z9382bmmy/wEAAKCD3P2fi1vsfwAAABhG7v7Pxy32PwAAAAwjd/8X4pYm+3/7/f+l+v+g/59L///P+v89n6//1/+PbCb9f/60uiD9/0UT36f/30D/r//X/+v/2aq59f+5+++KW5rsfwAAAOggd/8X4xb7HwAAAIaRu/9LcYv9DwAAAMPI3f/luKXJ/vf+f6/+/8iqY//v/X/9v/6/k5n0/97/1//r//X/+n/9PzPs/3P3fyVuabL/AQAAYKn+8a/+/a6D/ra5+78at9j/AAAAMIzc/V+LW+x/AAAAGEbu/q/HLU32v/6/V//f8/1//b/+X//fif5/mv5/A/2//l//r/9nq+bW/+fu/0bcctrwO3rW/y0BAACAOcnd/824pcnf/wcAAIAOcvd/K245Y/+fPOA/1Q4AAADMTe7+b8ctTf7+v/5/5v3/avz+/+6V/l//v0P/r//fBv3/tPvY/588ov/X/0/Q/+v/9f/sNbf+P3f/d+KWJvsfAAAABrXrryjk7v9u3GL/AwAAwDBy938vbrH/AQAAYBi5+78ftzTZ//r/mff/5/T+//H6V0vo/73/f4j9/7XH1n6+/l//PzL9/zTv/2+g/19w/5+/Kuv/9f/Mydz6/9z9d8ctTfY/AAAAdJC7/wdxi/0PAAAAw8jd/8O4xf4HAACAYeTu/1Hc0mT/6/8vWP//x9/hh9P/L+v9f/2/9//Pvf//80tO3PZP/3rTDfp/Tjmf/X/+XND/6//1/zu8/6//1/+z19z6/9z9P45bmux/AAAA6CB3/z1xi/0PAAAAw8jd/5O4xf4HAACAYeTu/2nc0mT/6/9HfP9/mf1//r6+AP3/ieX1/9kUd+//vf+v/z+T9/+n6f830P/r//X/+n+2am79f+7+n8UtTfY/AAAAdJC7/+dxi/0PAAAAw8jd/4u4xf4HAACAYeTu/2Xc0mT/r+//L67v1/8fjP5/99fv/f/1Pz+8/6//1/8fPv3/NP3/Bvp//b/+X//PVs2t/8/d/6u4pcn+BwAAgA5y998bt9j/AAAAMIzc/b+OW+x/AAAAGEbu/t/ELU32v/f/9f/6f/2//n/95+v/l0n/P03/v4H+X/+v/9f/s1Vz6/9z9/8+AAD//z/ddNg=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 4m15.783194881s ago: executing program 8 (id=2714): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xfffffffffffffffc, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) 4m14.432437447s ago: executing program 8 (id=2732): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) 4m14.196093363s ago: executing program 37 (id=2732): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) 3m40.311053635s ago: executing program 2 (id=3102): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f00000010c0)=[{0x1, 0x8001, 0x1000}, {0x2, 0x5b7a, 0x2000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) 3m40.09886867s ago: executing program 2 (id=3106): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145042, 0x1ca) unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m39.109791896s ago: executing program 2 (id=3113): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x9, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 3m38.19108894s ago: executing program 0 (id=3127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620520000000070058000b4804000300640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 3m38.037237224s ago: executing program 0 (id=3128): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3m37.964090586s ago: executing program 2 (id=3130): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1000, 0x0) 3m37.869086499s ago: executing program 2 (id=3132): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]]}, 0x34}}, 0x0) 3m37.07101769s ago: executing program 0 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5}]}]}, 0x28}}, 0x0) 3m36.950652373s ago: executing program 0 (id=3146): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17b, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f0000000040)='./file0/file1\x00') 3m36.182657093s ago: executing program 0 (id=3155): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0x8}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r2}]}, 0x40}}, 0x40040d0) 3m36.068871926s ago: executing program 2 (id=3158): r0 = epoll_create(0x487) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000005}) poll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x9b1) 3m35.890236761s ago: executing program 38 (id=3158): r0 = epoll_create(0x487) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10000005}) poll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x9b1) 3m34.931215166s ago: executing program 0 (id=3167): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x6f) keyctl$clear(0x7, r0) 3m34.677132593s ago: executing program 39 (id=3167): r0 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x6f) keyctl$clear(0x7, r0) 2m18.788697369s ago: executing program 3 (id=3812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d04, 0x0, 0x3}]}) 2m18.424418409s ago: executing program 3 (id=3819): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10140, 0x0) 2m18.225494934s ago: executing program 3 (id=3820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 2m17.99828156s ago: executing program 3 (id=3822): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17b, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f0000000040)='./file0/file1\x00') 2m17.290374979s ago: executing program 3 (id=3831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) 2m16.353916564s ago: executing program 3 (id=3842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="3c6b65726e656c3e202f6e65775f646f6d61696e0a26696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3ebf2e0000656c3e202f6e65775f646f6d61696e0a", 0x65) 2m16.128101929s ago: executing program 40 (id=3842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)="3c6b65726e656c3e202f6e65775f646f6d61696e0a26696c652072656164202f6574632f706173737764207461736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3ebf2e0000656c3e202f6e65775f646f6d61696e0a", 0x65) 17.289590776s ago: executing program 4 (id=4938): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 16.921690276s ago: executing program 4 (id=4942): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) 3.352300933s ago: executing program 1 (id=5035): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xe914}, {0x6}]}, 0x10) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2.910198384s ago: executing program 1 (id=5041): r0 = syz_clone3(&(0x7f0000000000)={0x180801400, &(0x7f0000000080)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x21, 0x0, 0x0) process_mrelease(r1, 0x0) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/157, 0x9d}], 0x1, 0x0) 2.628910201s ago: executing program 1 (id=5044): r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) r1 = dup(r0) write$cgroup_int(r1, &(0x7f0000000cc0)=0xfffffffffffffff8, 0x12) 2.389338138s ago: executing program 1 (id=5046): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="014b00004000000000f70100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.135325525s ago: executing program 5 (id=5049): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x2, 0x18a, &(0x7f0000000200)="$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") chdir(&(0x7f0000000240)='./file0\x00') capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 2.095803976s ago: executing program 1 (id=5050): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8e) unlinkat(r1, &(0x7f0000000040)='./bus\x00', 0x200) 1.868022342s ago: executing program 4 (id=4942): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) 1.831324972s ago: executing program 7 (id=5053): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000089170800"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.797989454s ago: executing program 9 (id=5054): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 1.714306336s ago: executing program 1 (id=5055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) 1.651189748s ago: executing program 9 (id=5056): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x31, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20) 1.5410706s ago: executing program 5 (id=5057): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0], 0xfb, 0x6b5, &(0x7f0000001440)="$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") mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x4) unlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.491780921s ago: executing program 9 (id=5058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 1.289133847s ago: executing program 9 (id=5059): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.242505448s ago: executing program 7 (id=5060): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/17, 0x11}}], 0x1, 0x0, 0x0) 1.098796752s ago: executing program 9 (id=5061): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000140)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656b2c00a67a1879b7c4a3138ff26d17b7e34153cc93fa2598658de36b50d00f96c3aed5ddd5d9fe1a6d5eaafbb20000d96f65b54b9b3f7e65fb2ba9761fb59f829f4a9c2d76e50de77493f6e0755787ab7b17a4aef305968dedc0d1b48db2738dce551c4f28ed040d8d3cc7b9"], 0x1, 0x33a, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x4012011, r0, 0x2000) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 1.047861393s ago: executing program 4 (id=5062): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0xffff7fff, 0xc, 0x9, 0x101}) write$cgroup_pid(r0, 0x0, 0x0) 965.541455ms ago: executing program 7 (id=5063): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0 1234567890123456789012345678901234567890123456789012345678901234567890\n\x00', 0x49) 898.707847ms ago: executing program 5 (id=5064): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/64, 0x40) 752.955231ms ago: executing program 7 (id=5065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 495.985598ms ago: executing program 9 (id=5066): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unlink(&(0x7f0000000040)='./file1\x00') ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 495.479058ms ago: executing program 5 (id=5076): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x2) r1 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1000000d}) pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x0, 0x9, 0x804}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 479.149818ms ago: executing program 4 (id=5067): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX], 0xf9, 0x2b3, &(0x7f0000000500)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 469.882228ms ago: executing program 7 (id=5068): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x10800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x2, 0x18a, &(0x7f0000000200)="$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") chdir(&(0x7f0000000240)='./file0\x00') capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) llistxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 322.140572ms ago: executing program 5 (id=5069): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure', 0x7) 91.935848ms ago: executing program 4 (id=5070): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@nombcache}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@orlov}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0xfe37, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) 87.264308ms ago: executing program 5 (id=5071): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000089170800"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 0s ago: executing program 7 (id=5072): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x255fdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x170bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff1}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xc}}, @TCA_FW_MASK={0x8, 0x5, 0x856}, @TCA_FW_INDEV={0x14, 0x3, 'vcan0\x00'}, @TCA_FW_MASK={0xfffffffffffffc62, 0x5, 0x10000}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) kernel console output (not intermixed with test programs): 512 failed [ 428.024603][T17520] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 428.076595][T17520] UDF-fs: Scanning with blocksize 1024 failed [ 428.115096][ T6823] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.188575][T17520] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 428.243775][T17520] UDF-fs: Scanning with blocksize 2048 failed [ 428.278562][T17520] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 428.342427][T17520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.476008][ T5541] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 428.508612][ T6823] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 428.555003][ T6823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.598099][ T6823] usb 6-1: config 0 descriptor?? [ 428.674756][T17540] loop4: detected capacity change from 0 to 32768 [ 428.728097][T17540] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4104 (17540) [ 428.740809][ T5541] usb 10-1: Using ep0 maxpacket: 32 [ 428.799128][T17540] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 428.848919][T17540] BTRFS info (device loop4): using free space tree [ 428.868426][ T5541] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 428.887881][T17540] BTRFS info (device loop4): has skinny extents [ 428.899865][ T5541] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.942654][ T5541] usb 10-1: config 0 descriptor?? [ 429.008923][T17540] BTRFS info (device loop4): enabling ssd optimizations [ 429.104438][ T6823] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f [ 429.124675][ T6823] hackrf 6-1:0.0: Could not detect board [ 429.158938][ T6823] hackrf: probe of 6-1:0.0 failed with error -71 [ 429.181924][ T6823] usb 6-1: USB disconnect, device number 6 [ 429.226422][ T5541] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 429.243228][ T5541] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.295250][ T5541] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 429.302539][ T5541] usb 10-1: media controller created [ 429.364030][ T5541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 429.455311][ T5541] az6027: usb out operation failed. (-71) [ 429.478701][ T5541] az6027: usb out operation failed. (-71) [ 429.484792][ T5541] stb0899_attach: Driver disabled by Kconfig [ 429.499438][ T5541] az6027: no front-end attached [ 429.499438][ T5541] [ 429.535322][ T5541] az6027: usb out operation failed. (-71) [ 429.549950][ T5541] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 429.578637][ T5541] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input32 [ 429.659683][ T5541] dvb-usb: schedule remote query interval to 400 msecs. [ 429.693548][T17596] loop5: detected capacity change from 0 to 1024 [ 429.704967][ T5541] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 429.778864][ T5541] usb 10-1: USB disconnect, device number 13 [ 429.804801][T17596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 429.883933][T17596] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.645964][ T5541] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 430.988757][ T9] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 431.078463][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 431.147821][T17616] loop7: detected capacity change from 0 to 32768 [ 431.164465][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 431.164465][ T9] [ 431.242979][ T9] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 431.294655][T17616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.4113 (17616) [ 431.393559][ T9] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 431.470921][ T9] EXT4-fs (loop5): This should not happen!! Data will be lost [ 431.470921][ T9] [ 431.495812][T17616] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 431.599190][T17616] BTRFS info (device loop7): setting nodatasum [ 431.641050][T17637] loop4: detected capacity change from 0 to 32768 [ 431.662785][T17616] BTRFS info (device loop7): force zlib compression, level 3 [ 431.714024][T17637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.4116 (17637) [ 431.755102][T17616] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 431.891162][T17616] BTRFS info (device loop7): use lzo compression, level 0 [ 431.937897][T17637] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 431.986633][T17616] BTRFS info (device loop7): turning on flush-on-commit [ 432.013512][T17637] BTRFS info (device loop4): setting nodatacow, compression disabled [ 432.062427][T17616] BTRFS info (device loop7): enabling auto defrag [ 432.070229][T17637] BTRFS info (device loop4): setting datasum, datacow enabled [ 432.131749][T17637] BTRFS info (device loop4): force clearing of disk cache [ 432.145141][T17616] BTRFS info (device loop7): max_inline at 4096 [ 432.188501][T17637] BTRFS info (device loop4): enabling ssd optimizations [ 432.230948][T17616] BTRFS info (device loop7): using free space tree [ 432.258920][T17637] BTRFS info (device loop4): using spread ssd allocation scheme [ 432.290652][T17616] BTRFS info (device loop7): has skinny extents [ 432.354181][T17637] BTRFS info (device loop4): turning on sync discard [ 432.392309][T17637] BTRFS info (device loop4): turning on flush-on-commit [ 432.435221][T17637] BTRFS info (device loop4): not using ssd optimizations [ 432.502265][T17637] BTRFS info (device loop4): not using spread ssd allocation scheme [ 432.540934][T17616] BTRFS info (device loop7): enabling ssd optimizations [ 432.557906][T17637] BTRFS info (device loop4): using free space tree [ 432.616586][T17637] BTRFS info (device loop4): has skinny extents [ 432.722170][T17667] loop5: detected capacity change from 0 to 32768 [ 432.776111][T17637] BTRFS info (device loop4): clearing free space tree [ 432.828280][T17637] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 432.838615][T17667] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4125 (17667) [ 432.948492][T17637] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 433.054448][T17727] loop9: detected capacity change from 0 to 2048 [ 433.064040][T17637] BTRFS info (device loop4): creating free space tree [ 433.095583][T17637] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 433.150834][T17727] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 433.195351][ T4178] udevd[4178]: incorrect nilfs2 checksum on /dev/loop9 [ 433.203105][T17637] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 433.275000][T17732] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.384308][T17727] NILFS (loop9): DAT doesn't have a block to manage vblocknr = 3044605952 [ 433.488380][T17727] NILFS error (device loop9): nilfs_bmap_truncate: broken bmap (inode number=15) [ 433.548084][T17727] Remounting filesystem read-only [ 433.553210][T17727] NILFS (loop9): error -5 truncating bmap (ino=15) [ 433.724120][T17667] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 433.831085][T17667] BTRFS info (device loop5): using free space tree [ 433.892378][T17747] loop9: detected capacity change from 0 to 1024 [ 433.918882][T17667] BTRFS info (device loop5): has skinny extents [ 434.054520][T17747] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 434.145254][T17667] BTRFS info (device loop5): enabling ssd optimizations [ 434.158457][T17747] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.044422][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4133'. [ 435.078787][ T8633] EXT4-fs error (device loop9): ext4_map_blocks:741: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 435.123002][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4133'. [ 435.166141][ T8633] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 435.254198][ T8633] EXT4-fs (loop9): This should not happen!! Data will be lost [ 435.254198][ T8633] [ 435.321285][ T8633] EXT4-fs error (device loop9): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 435.425827][ T8633] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 435.502609][ T8633] EXT4-fs (loop9): This should not happen!! Data will be lost [ 435.502609][ T8633] [ 435.848750][T17814] atomic_op ffff8880631ed198 conn xmit_atomic 0000000000000000 [ 436.269061][T17830] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 436.537167][T17843] loop7: detected capacity change from 0 to 1024 [ 436.650160][T17843] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 436.727137][T17843] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.031467][T17864] kvm [17863]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0xcd [ 437.588438][T17891] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 437.879723][ T417] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 437.906169][T17899] kvm [17898]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x400003 [ 437.951871][ T417] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 438.056672][ T417] EXT4-fs (loop7): This should not happen!! Data will be lost [ 438.056672][ T417] [ 438.069578][T17909] loop9: detected capacity change from 0 to 256 [ 438.153007][ T417] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 438.194611][T17912] loop5: detected capacity change from 0 to 8 [ 438.201835][T17909] exfat: Deprecated parameter 'namecase' [ 438.261280][T17909] exfat: Deprecated parameter 'utf8' [ 438.291029][T17909] exfat: Deprecated parameter 'namecase' [ 438.305605][ T417] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 438.374385][T17909] exfat: Deprecated parameter 'utf8' [ 438.460987][ T417] EXT4-fs (loop7): This should not happen!! Data will be lost [ 438.460987][ T417] [ 438.489187][T17909] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 438.990075][T17942] loop5: detected capacity change from 0 to 1024 [ 439.149541][T17942] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 439.250719][T17942] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.440466][T17961] loop1: detected capacity change from 0 to 512 [ 439.527096][T17966] loop4: detected capacity change from 0 to 256 [ 439.571985][T17961] EXT4-fs (loop1): Ignoring removed bh option [ 439.679036][T17966] FAT-fs (loop4): Directory bread(block 64) failed [ 439.734831][T17961] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4181: invalid indirect mapped block 256 (level 2) [ 439.772456][T17966] FAT-fs (loop4): Directory bread(block 65) failed [ 439.835142][T17966] FAT-fs (loop4): Directory bread(block 66) failed [ 439.841681][T17966] FAT-fs (loop4): Directory bread(block 67) failed [ 439.852117][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.974667][T17961] EXT4-fs (loop1): 2 truncates cleaned up [ 439.989643][T17966] FAT-fs (loop4): Directory bread(block 68) failed [ 440.049265][T17961] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,bh,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 440.079770][T17966] FAT-fs (loop4): Directory bread(block 69) failed [ 440.090522][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4185'. [ 440.133751][T17966] FAT-fs (loop4): Directory bread(block 70) failed [ 440.165198][T17966] FAT-fs (loop4): Directory bread(block 71) failed [ 440.206408][T17966] FAT-fs (loop4): Directory bread(block 72) failed [ 440.260727][ T417] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 440.307709][T17966] FAT-fs (loop4): Directory bread(block 73) failed [ 440.346002][T17961] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes [ 440.381548][ T417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 440.476869][ T417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 440.476869][ T417] [ 440.543620][ T417] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 440.646455][ T417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 440.678395][ T417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 440.678395][ T417] [ 440.951216][T18004] nbd2: detected capacity change from 0 to 549764202496 [ 440.969229][ T4199] block nbd2: Receive control failed (result -104) [ 441.130736][ T150] block nbd1: Possible stuck request ffff888020970000: control (read@0,4096B). Runtime 30 seconds [ 441.342914][T18025] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.351868][T18025] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.360582][T18025] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.369274][T18025] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.575491][ T25] audit: type=1800 audit(1788885662.277:129): pid=18035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4203" name="addr_trsvcid" dev="configfs" ino=79211 res=0 errno=0 [ 441.972081][T18014] loop9: detected capacity change from 0 to 32768 [ 441.984741][T18053] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 442.023561][T18056] loop7: detected capacity change from 0 to 256 [ 442.068174][T18014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.4191 (18014) [ 442.277499][T18014] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 442.395109][T18014] BTRFS info (device loop9): using free space tree [ 442.401635][T18014] BTRFS info (device loop9): has skinny extents [ 442.474474][ T25] audit: type=1800 audit(1788885663.167:130): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4215" name="addr_trsvcid" dev="configfs" ino=79302 res=0 errno=0 [ 442.701394][T18089] loop5: detected capacity change from 0 to 512 [ 442.754388][T18014] BTRFS info (device loop9): enabling ssd optimizations [ 442.912456][T18089] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,noblock_validity,usrquota,. Quota mode: writeback. [ 443.044152][T18089] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.432043][T18064] loop1: detected capacity change from 0 to 32768 [ 443.506981][T18064] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.4211 (18064) [ 443.814419][T18064] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 443.943637][T18132] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 443.995278][T18064] BTRFS info (device loop1): using free space tree [ 443.995293][T18064] BTRFS info (device loop1): has skinny extents [ 444.173232][T18157] loop5: detected capacity change from 0 to 256 [ 444.188238][T18064] BTRFS info (device loop1): enabling ssd optimizations [ 444.516475][T18169] loop7: detected capacity change from 0 to 512 [ 445.020243][ T25] audit: type=1400 audit(1788885665.717:131): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=18188 comm="syz.5.4237" name="unknown" offset=16 [ 445.080862][T18187] loop4: detected capacity change from 0 to 4096 [ 445.148539][T18193] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.506456][T18169] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 445.525469][T18203] loop9: detected capacity change from 0 to 512 [ 445.616493][T18203] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.631715][T13978] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 445.677149][T13978] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 445.728410][T18169] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.760273][T18203] EXT4-fs warning (device loop9): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 445.778213][T13978] Remounting filesystem read-only [ 445.797445][T13978] NILFS (loop4): error -5 truncating bmap (ino=12) [ 445.864223][T13978] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 446.104611][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4240'. [ 446.199029][T18218] device erspan0 entered promiscuous mode [ 446.218507][T18221] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4242'. [ 446.513683][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4245'. [ 446.608014][T18239] loop5: detected capacity change from 0 to 16 [ 446.640027][T18237] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.4246'. [ 446.683432][T18239] erofs: (device loop5): mounted with root inode @ nid 36. [ 446.873866][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4253'. [ 447.101005][T18257] loop7: detected capacity change from 0 to 512 [ 447.170268][T18257] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 447.185124][ T5541] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 447.320703][T18257] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 447.465068][ T5541] usb 6-1: Using ep0 maxpacket: 16 [ 447.511517][ T5177] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 447.600408][ T5541] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 447.650416][ T5541] usb 6-1: config 0 has no interface number 0 [ 447.673235][T18281] loop9: detected capacity change from 0 to 512 [ 447.697652][ T5541] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.755379][T18281] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 447.784641][ T5541] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 447.860540][T18281] EXT4-fs error (device loop9): ext4_orphan_get:1436: comm syz.9.4265: bad orphan inode 15 [ 447.898517][T18281] ext4_test_bit(bit=14, block=18) = 1 [ 447.912736][T18281] is_bad_inode(inode)=0 [ 447.955121][ T5541] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 447.983832][T18281] NEXT_ORPHAN(inode)=1023 [ 447.993150][T18291] loop7: detected capacity change from 0 to 8 [ 448.003971][ T5541] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 448.018677][T18281] max_ino=32 [ 448.021881][T18281] i_nlink=0 [ 448.064326][T18281] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4265: bg 0: block 161: padding at end of block bitmap is not set [ 448.082377][ T5541] usb 6-1: Product: syz [ 448.099300][ T5541] usb 6-1: SerialNumber: syz [ 448.148608][ T5541] usb 6-1: config 0 descriptor?? [ 448.154075][T18291] SQUASHFS error: Failed to read block 0x6e6: -5 [ 448.209822][T18281] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 448.221912][ T5541] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 448.254755][T18291] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 448.273389][ T5541] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input33 [ 448.287928][T18281] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,nolazytime,,errors=continue. Quota mode: none. [ 448.323482][T18291] SQUASHFS error: Unable to read directory block [631:26] [ 448.378299][T18281] ext2 filesystem being mounted at /511/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 448.403340][T18303] program syz.4.4276 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.505010][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.524998][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.544525][ T5541] usb 6-1: USB disconnect, device number 7 [ 448.550427][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 448.550480][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 448.623771][T18308] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 448.630216][T18308] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 448.695737][ T5541] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 448.950534][T18317] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4292'. [ 449.041539][T18321] loop1: detected capacity change from 0 to 512 [ 449.084324][T18324] loop5: detected capacity change from 0 to 256 [ 449.119011][T18321] EXT4-fs (loop1): Ignoring removed oldalloc option [ 449.181433][T18324] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 449.209121][T18321] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 449.245066][T14852] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 449.273456][T18324] overlayfs: filesystem on './file0' not supported [ 449.498220][T18331] netlink: 'syz.4.4285': attribute type 3 has an invalid length. [ 449.564524][T18331] netlink: 768 bytes leftover after parsing attributes in process `syz.4.4285'. [ 449.603841][T18336] program syz.1.4299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.625257][T14852] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 449.681659][T14852] usb 8-1: config 0 interface 0 has no altsetting 0 [ 449.712375][T14852] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 449.795240][T14852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.876212][T14852] usb 8-1: config 0 descriptor?? [ 449.925767][T18319] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 449.943527][T18350] loop5: detected capacity change from 0 to 16 [ 449.989644][T18350] erofs: (device loop5): mounted with root inode @ nid 36. [ 450.094626][T18350] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 450.166708][T18350] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 450.188984][T18357] loop1: detected capacity change from 0 to 2048 [ 450.230532][T18350] attempt to access beyond end of device [ 450.230532][T18350] loop5: rw=524288, want=34359738368, limit=16 [ 450.260566][T18365] loop4: detected capacity change from 0 to 128 [ 450.293421][T18319] udc-core: couldn't find an available UDC or it's busy [ 450.323082][T18357] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 450.376221][T18350] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 89 [ 450.408450][T18319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 450.445467][T18350] erofs: (device loop5): z_erofs_readpage: failed to read, err [-117] [ 450.455442][ T25] audit: type=1800 audit(1788885671.157:132): pid=18365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4303" name="file1" dev="loop4" ino=1048881 res=0 errno=0 [ 450.476355][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.512054][T18365] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 450.548698][T18370] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.571812][T18365] FAT-fs (loop4): Filesystem has been set read-only [ 450.649740][ T25] audit: type=1800 audit(1788885671.247:133): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4295" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 450.670404][T18365] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 450.825516][T14852] hid (null): unknown global tag 0xe [ 450.848721][T14852] hid (null): usage index exceeded [ 450.882165][T14852] hid (null): usage index exceeded [ 450.908124][T14852] hid-generic 0003:1044:7A4D.0015: unexpected long global item [ 450.926164][T14852] hid-generic: probe of 0003:1044:7A4D.0015 failed with error -22 [ 451.465159][T18383] loop4: detected capacity change from 0 to 131072 [ 451.517363][T18383] F2FS-fs (loop4): invalid crc value [ 451.565222][ T6693] usb 8-1: USB disconnect, device number 15 [ 451.610470][T18383] F2FS-fs (loop4): Found nat_bits in checkpoint [ 451.637486][T18383] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 451.656645][T18383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 451.998283][T18400] loop9: detected capacity change from 0 to 40427 [ 452.045843][T18400] F2FS-fs (loop9): Fix alignment : done, start(4096) end(16896) block(12288) [ 452.057146][T18400] F2FS-fs (loop9): invalid crc value [ 452.062631][T18400] F2FS-fs (loop9): invalid crc value [ 452.068016][T18400] F2FS-fs (loop9): Failed to get valid F2FS checkpoint [ 452.510118][T18381] loop1: detected capacity change from 0 to 32768 [ 452.679708][T18418] loop9: detected capacity change from 0 to 64 [ 453.192306][T18429] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.199434][T18429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.206899][T18429] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.213918][T18429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.474181][T18429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 453.536329][T18429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.656542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.828830][T18436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 453.899205][T18436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.923092][T18454] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 454.197975][T18463] program syz.7.4337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.474702][ T25] audit: type=1326 audit(1788885675.167:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 454.691843][ T25] audit: type=1326 audit(1788885675.237:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 454.870271][ T25] audit: type=1326 audit(1788885675.237:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 454.949300][T18462] loop4: detected capacity change from 0 to 32768 [ 455.043366][T18462] XFS (loop4): Mounting V5 Filesystem [ 455.052017][ T25] audit: type=1326 audit(1788885675.237:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 455.180387][T18462] XFS (loop4): Ending clean mount [ 455.279985][ T25] audit: type=1326 audit(1788885675.237:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 455.336078][T13978] XFS (loop4): Unmounting Filesystem [ 455.458406][ T25] audit: type=1326 audit(1788885675.237:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 455.648463][ T25] audit: type=1326 audit(1788885675.237:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 455.849228][ T25] audit: type=1326 audit(1788885675.237:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 456.021290][ T5540] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 456.059643][ T5540] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 456.072901][ T25] audit: type=1326 audit(1788885675.237:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 456.265694][ T25] audit: type=1326 audit(1788885675.237:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.7.4345" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93c35d159 code=0x7ffc0000 [ 456.499466][T18538] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0002' [ 456.579636][T18538] CPU: 0 PID: 18538 Comm: syz.4.4365 Not tainted syzkaller #0 [ 456.587099][T18538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.597141][T18538] Call Trace: [ 456.600408][T18538] [ 456.603322][T18538] dump_stack_lvl+0x188/0x250 [ 456.608005][T18538] ? show_regs_print_info+0x20/0x20 [ 456.613191][T18538] ? load_image+0x410/0x410 [ 456.617681][T18538] sysfs_create_dir_ns+0x26a/0x290 [ 456.622774][T18538] ? sysfs_warn_dup+0xa0/0xa0 [ 456.627450][T18538] ? do_raw_spin_unlock+0x11d/0x230 [ 456.632636][T18538] kobject_add_internal+0x5ba/0xcd0 [ 456.637825][T18538] kobject_add+0x160/0x230 [ 456.642221][T18538] ? kobject_init+0x1c0/0x1c0 [ 456.646879][T18538] ? __raw_spin_lock_init+0x41/0x100 [ 456.652142][T18538] ? klist_children_get+0x50/0x50 [ 456.657144][T18538] ? get_device_parent+0xa5/0x3e0 [ 456.662143][T18538] device_add+0x470/0x1050 [ 456.666536][T18538] ? device_initialize+0x2a5/0x4d0 [ 456.671640][T18538] i2c_new_client_device+0x96d/0xef0 [ 456.676909][T18538] ? i2c_dev_irq_from_resources+0x230/0x230 [ 456.682776][T18538] ? __mutex_lock_common+0x435/0x2400 [ 456.688127][T18538] ? new_device_store+0x10b/0x4d0 [ 456.693144][T18538] new_device_store+0x224/0x4d0 [ 456.697991][T18538] ? __i2c_check_addr_busy+0x150/0x150 [ 456.703431][T18538] ? sysfs_kf_write+0x183/0x2a0 [ 456.708277][T18538] ? sysfs_kf_read+0x350/0x350 [ 456.713025][T18538] kernfs_fop_write_iter+0x3a8/0x500 [ 456.718306][T18538] vfs_write+0x748/0xd70 [ 456.722543][T18538] ? file_end_write+0x250/0x250 [ 456.727408][T18538] ? mutex_lock_nested+0x17/0x20 [ 456.732344][T18538] ? __fdget_pos+0x2bf/0x370 [ 456.736922][T18538] ? ksys_write+0x70/0x260 [ 456.741318][T18538] ksys_write+0x153/0x260 [ 456.745629][T18538] ? __ia32_sys_read+0x80/0x80 [ 456.750394][T18538] ? lockdep_hardirqs_on+0x94/0x140 [ 456.755583][T18538] do_syscall_64+0x4c/0xa0 [ 456.759995][T18538] ? clear_bhb_loop+0x30/0x80 [ 456.764657][T18538] ? clear_bhb_loop+0x30/0x80 [ 456.769313][T18538] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 456.775182][T18538] RIP: 0033:0x7efc345e6159 [ 456.779586][T18538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.799173][T18538] RSP: 002b:00007efc3283e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.807579][T18538] RAX: ffffffffffffffda RBX: 00007efc3486dfa0 RCX: 00007efc345e6159 [ 456.815528][T18538] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000003 [ 456.823493][T18538] RBP: 00007efc3467d03b R08: 0000000000000000 R09: 0000000000000000 [ 456.831960][T18538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.839908][T18538] R13: 00007efc3486e038 R14: 00007efc3486dfa0 R15: 00007ffebca57ad8 [ 456.847866][T18538] [ 456.953151][T18535] loop7: detected capacity change from 0 to 8192 [ 457.289800][ T5540] Bluetooth: hci4: command 0x0406 tx timeout [ 457.532765][T18559] loop5: detected capacity change from 0 to 512 [ 457.640494][T18559] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 457.704268][T18559] EXT4-fs (loop5): 1 truncate cleaned up [ 457.738485][T18559] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 458.232637][T18583] loop5: detected capacity change from 0 to 2048 [ 458.315641][T18589] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.348152][ T25] audit: type=1400 audit(1788885679.047:144): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=18587 comm="syz.1.4376" name="unknown" offset=16 [ 458.599388][T18594] loop1: detected capacity change from 0 to 1024 [ 458.771967][T18602] loop7: detected capacity change from 0 to 2048 [ 458.859050][ T25] audit: type=1800 audit(1788885679.557:145): pid=18594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4388" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 458.904274][T18608] hfsplus: extend alloc file! (16384,256,150995124) [ 458.935917][T18538] kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.949970][T18607] bond0: option arp_interval: invalid value (\A¯è/U#Ô]ðÌ®¡¤Ó´¶&Zý;-£4Y¤Ûäw’ÔQÁÈÀÉWù³8@ì;’ŸF·$ÊYLt1´tµÛ?õ6¿teÎUÉ-Ùî=æ§FzvǵçÓ†³¤Âºö‡¾U=µÕqÁV…ˆÜ—îèk7ªN3ÆŸK[(ZgÍt“';wÞÕ¢ÿm™\n §ìæ#|[8},ê) [ 459.003728][T18608] hfsplus: failed to extend attributes file [ 459.125713][T18594] hfsplus: extend alloc file! (16384,256,150995124) [ 459.132328][T18594] hfsplus: failed to extend attributes file [ 459.151358][T18607] bond0: option arp_interval: allowed values 0 - 2147483647 [ 459.177776][T18538] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 459.319089][T18618] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4385'. [ 460.093428][T18656] program syz.5.4399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.308580][T18664] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.606219][T18673] netlink: 'syz.9.4415': attribute type 3 has an invalid length. [ 460.680684][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4415'. [ 460.770537][T18636] loop1: detected capacity change from 0 to 32768 [ 460.864652][T18683] loop9: detected capacity change from 0 to 1024 [ 460.965112][ T6695] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 460.993495][T18644] loop7: detected capacity change from 0 to 32768 [ 461.013923][T18683] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 461.047653][T18636] XFS (loop1): Mounting V5 Filesystem [ 461.094222][T18683] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 461.159916][T18683] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 461.196837][T18636] XFS (loop1): Ending clean mount [ 461.360874][T18674] loop4: detected capacity change from 0 to 32768 [ 461.387791][ T6695] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 461.436885][ T6695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.501962][T18674] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 461.527105][ T6695] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 461.555478][ T25] audit: type=1400 audit(1788885682.257:146): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=18699 comm="syz.7.4406" name="p" offset=92 [ 461.626130][ T6695] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.760526][T11856] XFS (loop1): Unmounting Filesystem [ 461.798165][T13978] ocfs2: Unmounting device (7,4) on (node local) [ 461.815337][ T6695] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 461.824369][ T6695] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 461.926920][ T6695] usb 6-1: Product: syz [ 461.961468][ T6695] usb 6-1: Manufacturer: syz [ 462.025657][ T6695] cdc_wdm 6-1:1.0: skipping garbage [ 462.041059][ T6695] cdc_wdm 6-1:1.0: skipping garbage [ 462.082329][ T6695] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 462.135219][ T6695] cdc_wdm 6-1:1.0: Unknown control protocol [ 462.204547][T18724] loop7: detected capacity change from 0 to 512 [ 462.273306][T18724] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 462.401625][ T5540] usb 6-1: USB disconnect, device number 8 [ 462.415996][T18724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 462.440700][T18732] loop9: detected capacity change from 0 to 64 [ 462.525463][T18724] System zones: 1-12 [ 462.579407][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4416'. [ 462.597339][T18724] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.4412: bad orphan inode 131072 [ 462.703954][T18724] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 463.361535][T18768] kAFS: bad VL server IP address [ 463.858996][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4433'. [ 463.997263][T18798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4436'. [ 464.221908][T18807] rnbd_client L211: map_device: Parameters missing [ 464.517044][T18812] loop4: detected capacity change from 0 to 4096 [ 464.582244][T18812] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 464.684749][T18793] loop9: detected capacity change from 0 to 32768 [ 464.862471][T18793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.4435 (18793) [ 465.009567][T18793] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 465.078394][T18793] BTRFS info (device loop9): enabling auto defrag [ 465.085146][T14852] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 465.148600][T18793] BTRFS info (device loop9): max_inline at 4096 [ 465.154870][T18793] BTRFS info (device loop9): using free space tree [ 465.197081][T18812] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 465.239634][T18793] BTRFS info (device loop9): has skinny extents [ 465.299056][ T417] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 465.339397][T13978] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 465.362756][T13978] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 465.438317][T18793] BTRFS info (device loop9): enabling ssd optimizations [ 465.451845][T13978] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 465.458720][T14852] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.505120][ T5177] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 465.514458][T13978] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 465.539058][T14852] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 465.568327][T13978] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 465.585024][T14852] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 465.599633][T18856] loop5: detected capacity change from 0 to 4096 [ 465.614410][T18814] loop1: detected capacity change from 0 to 32768 [ 465.625233][T14852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.720001][T14852] usb 8-1: config 0 descriptor?? [ 465.734521][T18856] ntfs: volume version 3.1. [ 465.859814][T18814] JBD2: Ignoring recovery information on journal [ 466.058600][T18867] loop4: detected capacity change from 0 to 2048 [ 466.109000][T18814] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 466.211643][T18870] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 466.250964][T14852] Bluetooth: Can't get state to change to load configuration err [ 466.322140][T14852] Bluetooth: Loading sysconfig file failed [ 466.362549][T14852] ath3k: probe of 8-1:0.0 failed with error -16 [ 466.405653][T14852] usb 8-1: USB disconnect, device number 16 [ 466.462507][T18814] overlayfs: upper fs does not support tmpfile. [ 466.489506][T18814] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 466.540409][T18814] overlayfs: failed to set xattr on upper [ 466.578165][T18814] overlayfs: ...falling back to index=off,metacopy=off. [ 466.613599][T18814] overlayfs: upper fs missing required features. [ 466.779514][T18874] loop9: detected capacity change from 0 to 512 [ 466.844544][T18874] EXT4-fs (loop9): Ignoring removed bh option [ 466.959062][T18874] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 466.992186][T11856] ocfs2: Unmounting device (7,1) on (node local) [ 467.050697][T18874] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 467.123710][T18887] loop4: detected capacity change from 0 to 2048 [ 467.157404][T18874] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.4447: Corrupt directory, running e2fsck is recommended [ 467.263594][T18874] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 467.278788][T18887] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 467.320740][ T4803] udevd[4803]: incorrect nilfs2 checksum on /dev/loop4 [ 467.357280][T18887] NILFS (loop4): mounting unchecked fs [ 467.363144][T18874] EXT4-fs error (device loop9): ext4_iget_extra_inode:4573: inode #15: comm syz.9.4447: corrupted in-inode xattr [ 467.431233][T18887] NILFS (loop4): recovery complete [ 467.446898][T18874] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.4447: couldn't read orphan inode 15 (err -117) [ 467.485046][T18899] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.579897][T18874] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,jqfmt=vfsold,nolazytime,grpjquota=.errors=continue,resuid=0x0000000000000000,bh,noload,,,errors=continue. Quota mode: writeback. [ 468.184308][T18903] loop7: detected capacity change from 0 to 32768 [ 468.221525][T18903] XFS (loop7): Invalid device [./bus], error=-16 [ 468.983317][T18928] debugfs: Directory 'netdev:wlan0' with parent 'phy33' already present! [ 469.348070][T18918] loop9: detected capacity change from 0 to 32768 [ 469.422356][T18918] (syz.9.4466,18918,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 469.473229][T18918] (syz.9.4466,18918,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 469.540453][T18918] JBD2: Ignoring recovery information on journal [ 469.612968][T18918] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 469.640467][T18918] (syz.9.4466,18918,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 469.848960][ T9450] ocfs2: Unmounting device (7,9) on (node local) [ 470.518077][T18964] debugfs: Directory 'netdev:wlan0' with parent 'phy23' already present! [ 470.873785][T18980] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0002' [ 470.902613][T18980] CPU: 0 PID: 18980 Comm: syz.5.4492 Not tainted syzkaller #0 [ 470.910092][T18980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 470.920191][T18980] Call Trace: [ 470.923495][T18980] [ 470.926460][T18980] dump_stack_lvl+0x188/0x250 [ 470.931217][T18980] ? show_regs_print_info+0x20/0x20 [ 470.936428][T18980] ? load_image+0x410/0x410 [ 470.940973][T18980] sysfs_create_dir_ns+0x26a/0x290 [ 470.946135][T18980] ? sysfs_warn_dup+0xa0/0xa0 [ 470.950788][T18980] ? do_raw_spin_unlock+0x11d/0x230 [ 470.956011][T18980] kobject_add_internal+0x5ba/0xcd0 [ 470.961260][T18980] kobject_add+0x160/0x230 [ 470.965660][T18980] ? kobject_init+0x1c0/0x1c0 [ 470.970321][T18980] ? __raw_spin_lock_init+0x41/0x100 [ 470.975581][T18980] ? klist_children_get+0x50/0x50 [ 470.980640][T18980] ? get_device_parent+0xa5/0x3e0 [ 470.985658][T18980] device_add+0x470/0x1050 [ 470.990060][T18980] ? device_initialize+0x2a5/0x4d0 [ 470.995153][T18980] i2c_new_client_device+0x96d/0xef0 [ 471.000498][T18980] ? i2c_dev_irq_from_resources+0x230/0x230 [ 471.006364][T18980] ? __mutex_lock_common+0x435/0x2400 [ 471.011767][T18980] ? new_device_store+0x10b/0x4d0 [ 471.016768][T18980] new_device_store+0x224/0x4d0 [ 471.021600][T18980] ? __i2c_check_addr_busy+0x150/0x150 [ 471.027041][T18980] ? sysfs_kf_write+0x183/0x2a0 [ 471.031886][T18980] ? sysfs_kf_read+0x350/0x350 [ 471.036624][T18980] kernfs_fop_write_iter+0x3a8/0x500 [ 471.041911][T18980] vfs_write+0x748/0xd70 [ 471.046184][T18980] ? file_end_write+0x250/0x250 [ 471.051035][T18980] ? mutex_lock_nested+0x17/0x20 [ 471.055948][T18980] ? __fdget_pos+0x2bf/0x370 [ 471.060536][T18980] ? ksys_write+0x70/0x260 [ 471.064930][T18980] ksys_write+0x153/0x260 [ 471.069260][T18980] ? __ia32_sys_read+0x80/0x80 [ 471.074001][T18980] ? lockdep_hardirqs_on+0x94/0x140 [ 471.079250][T18980] do_syscall_64+0x4c/0xa0 [ 471.083645][T18980] ? clear_bhb_loop+0x30/0x80 [ 471.088346][T18980] ? clear_bhb_loop+0x30/0x80 [ 471.093022][T18980] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 471.098907][T18980] RIP: 0033:0x7f1c0d00f159 [ 471.103377][T18980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.122991][T18980] RSP: 002b:00007f1c0b267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.131490][T18980] RAX: ffffffffffffffda RBX: 00007f1c0d296fa0 RCX: 00007f1c0d00f159 [ 471.139438][T18980] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000003 [ 471.147387][T18980] RBP: 00007f1c0d0a603b R08: 0000000000000000 R09: 0000000000000000 [ 471.155354][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.163321][T18980] R13: 00007f1c0d297038 R14: 00007f1c0d296fa0 R15: 00007ffd6707d398 [ 471.171381][T18980] [ 471.205452][ T150] block nbd2: Possible stuck request ffff8880209e0000: control (read@0,4096B). Runtime 30 seconds [ 471.216871][ T150] block nbd1: Possible stuck request ffff888020970000: control (read@0,4096B). Runtime 60 seconds [ 471.254407][T18980] kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 471.271171][T18980] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 471.632937][T18986] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 471.666641][T18990] netlink: 'syz.4.4497': attribute type 62 has an invalid length. [ 471.712129][T18986] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 471.731242][T18990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4497'. [ 472.000997][T19001] MPTCP: kernel_bind error, err=-99 [ 472.002611][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4502'. [ 472.325504][T18934] block2mtd: error: cannot open device /dev/l [ 472.484791][T19017] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0002' [ 472.565747][T19017] CPU: 0 PID: 19017 Comm: syz.9.4507 Not tainted syzkaller #0 [ 472.573226][T19017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.583259][T19017] Call Trace: [ 472.586521][T19017] [ 472.589433][T19017] dump_stack_lvl+0x188/0x250 [ 472.594101][T19017] ? show_regs_print_info+0x20/0x20 [ 472.599281][T19017] ? load_image+0x410/0x410 [ 472.603769][T19017] sysfs_create_dir_ns+0x26a/0x290 [ 472.608860][T19017] ? sysfs_warn_dup+0xa0/0xa0 [ 472.613512][T19017] ? do_raw_spin_unlock+0x11d/0x230 [ 472.618690][T19017] kobject_add_internal+0x5ba/0xcd0 [ 472.623869][T19017] kobject_add+0x160/0x230 [ 472.628265][T19017] ? kobject_init+0x1c0/0x1c0 [ 472.632921][T19017] ? __raw_spin_lock_init+0x41/0x100 [ 472.638180][T19017] ? klist_children_get+0x50/0x50 [ 472.643178][T19017] ? get_device_parent+0xa5/0x3e0 [ 472.648178][T19017] device_add+0x470/0x1050 [ 472.652569][T19017] ? device_initialize+0x2a5/0x4d0 [ 472.657655][T19017] i2c_new_client_device+0x96d/0xef0 [ 472.662926][T19017] ? i2c_dev_irq_from_resources+0x230/0x230 [ 472.668793][T19017] ? __mutex_lock_common+0x435/0x2400 [ 472.674142][T19017] ? new_device_store+0x10b/0x4d0 [ 472.679147][T19017] new_device_store+0x224/0x4d0 [ 472.683977][T19017] ? __i2c_check_addr_busy+0x150/0x150 [ 472.689421][T19017] ? sysfs_kf_write+0x183/0x2a0 [ 472.694250][T19017] ? sysfs_kf_read+0x350/0x350 [ 472.698988][T19017] kernfs_fop_write_iter+0x3a8/0x500 [ 472.704251][T19017] vfs_write+0x748/0xd70 [ 472.708476][T19017] ? file_end_write+0x250/0x250 [ 472.713311][T19017] ? mutex_lock_nested+0x17/0x20 [ 472.718225][T19017] ? __fdget_pos+0x2bf/0x370 [ 472.722787][T19017] ? ksys_write+0x70/0x260 [ 472.727180][T19017] ksys_write+0x153/0x260 [ 472.731484][T19017] ? __ia32_sys_read+0x80/0x80 [ 472.736222][T19017] ? lockdep_hardirqs_on+0x94/0x140 [ 472.741403][T19017] do_syscall_64+0x4c/0xa0 [ 472.745797][T19017] ? clear_bhb_loop+0x30/0x80 [ 472.750457][T19017] ? clear_bhb_loop+0x30/0x80 [ 472.755110][T19017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 472.760979][T19017] RIP: 0033:0x7f4ca57f8159 [ 472.765370][T19017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.784953][T19017] RSP: 002b:00007f4ca3a50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 472.793346][T19017] RAX: ffffffffffffffda RBX: 00007f4ca5a7ffa0 RCX: 00007f4ca57f8159 [ 472.801305][T19017] RDX: 000000000000000b RSI: 0000200000000100 RDI: 0000000000000003 [ 472.809251][T19017] RBP: 00007f4ca588f03b R08: 0000000000000000 R09: 0000000000000000 [ 472.817196][T19017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.825157][T19017] R13: 00007f4ca5a80038 R14: 00007f4ca5a7ffa0 R15: 00007ffc5636bf98 [ 472.833115][T19017] [ 473.259855][T19041] loop5: detected capacity change from 0 to 256 [ 473.352308][T19041] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 473.618352][ T5540] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 473.851341][T19035] loop7: detected capacity change from 0 to 32768 [ 473.888333][ T5540] usb 5-1: Using ep0 maxpacket: 32 [ 473.971908][T19059] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 474.010019][ T5540] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 474.028290][ T5540] usb 5-1: config 2 has no interface number 0 [ 474.044109][ T5540] usb 5-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 474.084705][ T5540] usb 5-1: config 2 interface 88 has no altsetting 0 [ 474.112132][T19035] XFS (loop7): Mounting V5 Filesystem [ 474.252203][T19035] XFS (loop7): Ending clean mount [ 474.260881][ T5540] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 474.285031][ T5540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 474.327755][ T5540] usb 5-1: Product: syz [ 474.344068][T19035] XFS (loop7): Quotacheck needed: Please wait. [ 474.350362][ T5540] usb 5-1: Manufacturer: syz [ 474.373778][ T5540] usb 5-1: SerialNumber: syz [ 474.418018][T19017] kobject_add_internal failed for 0-0002 with -EEXIST, don't try to register things with the same name in the same directory. [ 474.431824][T19044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.588756][T19035] XFS (loop7): Quotacheck: Done. [ 474.601831][T19017] i2c i2c-0: Failed to register i2c client isp1301 at 0x02 (-17) [ 474.692974][T19044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 474.842750][ T8435] XFS (loop7): Unmounting Filesystem [ 474.852508][T19088] i2c i2c-0: delete_device: Extra parameters [ 475.106889][ T6693] kernel read not supported for file /dsp1 (pid: 6693 comm: kworker/0:17) [ 475.408144][ T5540] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 475.436110][ T5540] asix: probe of 5-1:2.88 failed with error -71 [ 475.458252][ T5540] usb 5-1: USB disconnect, device number 10 [ 475.559406][T19106] loop5: detected capacity change from 0 to 22 [ 475.593942][T19106] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 475.660927][T19106] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 475.781289][T19112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4547'. [ 475.868719][T19112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 475.900039][T19112] netlink: 'syz.1.4547': attribute type 18 has an invalid length. [ 475.933365][T19112] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.942171][T19112] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.950959][T19112] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.959658][T19112] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.219759][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4547'. [ 476.301231][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 476.387953][T19116] loop5: detected capacity change from 0 to 32768 [ 476.413701][T19117] netlink: 'syz.1.4547': attribute type 18 has an invalid length. [ 476.532393][T19116] XFS (loop5): Mounting V5 Filesystem [ 476.592825][T19134] loop4: detected capacity change from 0 to 4096 [ 476.702774][T19116] XFS (loop5): Ending clean mount [ 476.721027][T19143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.745357][T19116] XFS (loop5): Quotacheck needed: Please wait. [ 476.919201][T19116] XFS (loop5): Quotacheck: Done. [ 477.034506][T16566] XFS (loop5): Unmounting Filesystem [ 477.122785][T19151] loop1: detected capacity change from 0 to 2048 [ 477.192512][T19153] loop4: detected capacity change from 0 to 64 [ 477.323536][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'. [ 477.334659][T19151] Alternate GPT is invalid, using primary GPT. [ 477.419505][T19151] loop1: p2 p3 p7 [ 477.602192][ T25] audit: type=1400 audit(1788885698.297:147): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=19164 comm="syz.4.4570" [ 477.662096][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.695979][T19165] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4571'. [ 478.444450][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 478.455721][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 478.467101][ T4803] udevd[4803]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 478.595448][T19178] netlink: 'syz.7.4578': attribute type 3 has an invalid length. [ 479.104489][T19174] loop4: detected capacity change from 0 to 32768 [ 479.398279][ T4229] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 479.646395][ T4229] usb 8-1: Using ep0 maxpacket: 16 [ 479.797329][ T4229] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 479.851260][ T4229] usb 8-1: config 0 has no interface number 0 [ 479.874031][ T4229] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.888624][ T5544] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 479.917970][ T4229] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.075134][ T4229] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 480.104454][ T4229] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 480.131192][T19217] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 480.148651][ T4229] usb 8-1: Product: syz [ 480.178339][ T4229] usb 8-1: SerialNumber: syz [ 480.218133][ T4229] usb 8-1: config 0 descriptor?? [ 480.265649][ T5544] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.285172][ T4229] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 480.332793][ T4229] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input35 [ 480.347722][ T5544] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 480.391227][ T5544] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 480.515966][ T5544] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.564173][ T5544] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 480.598963][ T5544] usb 10-1: SerialNumber: syz [ 480.641784][ T4229] usb 8-1: USB disconnect, device number 17 [ 480.647838][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 480.647853][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 480.665259][ T5544] hub 10-1:1.0: bad descriptor, ignoring hub [ 480.671238][ T5544] hub: probe of 10-1:1.0 failed with error -5 [ 480.693732][T19230] team0: Device gtp0 is of different type [ 480.710111][ T5544] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 480.727879][ T5544] cdc_acm: probe of 10-1:1.0 failed with error -12 [ 480.766634][ T4229] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 480.831072][T19215] loop1: detected capacity change from 0 to 32768 [ 481.085015][ T5544] usb 10-1: USB disconnect, device number 14 [ 481.249489][T19239] loop5: detected capacity change from 0 to 2048 [ 481.323660][T19239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.569413][T19245] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4606'. [ 481.611297][T19248] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 481.798181][T19255] loop1: detected capacity change from 0 to 512 [ 482.018967][T19255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 482.132670][T19255] System zones: 1-12 [ 482.193101][T19255] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.4611: Directory hole found for htree index block 0 [ 482.310465][T19277] loop4: detected capacity change from 0 to 512 [ 482.336329][T19255] EXT4-fs (loop1): Remounting filesystem read-only [ 482.378816][T19279] loop9: detected capacity change from 0 to 1024 [ 482.409476][T19277] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 482.427321][T19255] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 482.491365][T19277] ext4 filesystem being mounted at /359/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.525034][T19255] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.4611: Directory hole found for htree index block 0 [ 482.685280][T19255] EXT4-fs (loop1): Remounting filesystem read-only [ 482.753678][T19255] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 482.785189][T19262] loop5: detected capacity change from 0 to 32768 [ 482.844198][T19255] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 483.133157][T19255] EXT4-fs (loop1): shut down requested (2) [ 483.325059][ T6693] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 483.484838][T19301] loop5: detected capacity change from 0 to 512 [ 483.579397][T19303] loop7: detected capacity change from 0 to 512 [ 483.722770][T19303] EXT4-fs (loop7): 1 orphan inode deleted [ 483.735507][ T6693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 483.801072][ T6693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 483.831272][T19303] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 483.876068][ T6693] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 483.911878][T19292] loop9: detected capacity change from 0 to 32768 [ 483.940149][T19303] ext4 filesystem being mounted at /606/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.995416][ T6693] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 484.029381][ T6693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 484.091039][ T6693] usb 5-1: SerialNumber: syz [ 484.099240][T19292] ERROR: (device loop9): dbAlloc: the hint is outside the map [ 484.099240][T19292] [ 484.118186][T19303] EXT4-fs (loop7): shut down requested (1) [ 484.165628][ T6693] hub 5-1:1.0: bad descriptor, ignoring hub [ 484.189510][T19292] ERROR: (device loop9): remounting filesystem as read-only [ 484.206717][ T6693] hub: probe of 5-1:1.0 failed with error -5 [ 484.229877][ T6693] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 484.241820][T19292] ERROR: (device loop9): diWrite: ixpxd invalid [ 484.241820][T19292] [ 484.271855][ T6693] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 484.282348][T19292] ERROR: (device loop9): txCommit: [ 484.282348][T19292] [ 484.318779][T19292] attempt to access beyond end of device [ 484.318779][T19292] loop9: rw=2049, want=2621800, limit=32768 [ 484.592198][ T5544] usb 5-1: USB disconnect, device number 11 [ 484.904831][T19314] loop1: detected capacity change from 0 to 32768 [ 485.049355][T19314] XFS (loop1): Mounting V5 Filesystem [ 485.162203][T19314] XFS (loop1): Ending clean mount [ 485.287462][T19320] loop7: detected capacity change from 0 to 32768 [ 485.332015][T19341] loop4: detected capacity change from 0 to 512 [ 485.379144][T19320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.4634 (19320) [ 485.434639][T19314] XFS (loop1): User initiated shutdown received. [ 485.499992][T19314] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 485.578484][T19320] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 485.670144][T19314] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 485.695277][T19320] BTRFS info (device loop7): using free space tree [ 485.775181][T19320] BTRFS info (device loop7): has skinny extents [ 485.808924][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4643'. [ 485.843123][T11856] XFS (loop1): Unmounting Filesystem [ 485.872450][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4643'. [ 486.042868][T19320] BTRFS info (device loop7): enabling ssd optimizations [ 486.298255][ T5544] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 486.522552][T19384] loop5: detected capacity change from 0 to 16 [ 486.563728][T19384] erofs: (device loop5): mounted with root inode @ nid 36. [ 486.685191][ T5544] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.697433][ T5544] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.719795][ T5544] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.742194][ T5544] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.879040][ T5544] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.906673][ T5544] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.926355][ T5544] usb 5-1: Product: syz [ 486.930701][ T5544] usb 5-1: Manufacturer: syz [ 487.005852][ T5544] cdc_wdm 5-1:1.0: skipping garbage [ 487.014111][ T5544] cdc_wdm 5-1:1.0: skipping garbage [ 487.033238][ T5544] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 487.048526][ T5544] cdc_wdm 5-1:1.0: Unknown control protocol [ 487.290051][T19397] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 487.312134][ T5544] usb 5-1: USB disconnect, device number 12 [ 487.640026][T19393] loop9: detected capacity change from 0 to 32768 [ 487.720598][T19393] XFS (loop9): Mounting V5 Filesystem [ 487.731661][T19400] jffs2: notice: (19400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 487.835963][T19393] XFS (loop9): Ending clean mount [ 487.966756][T19393] XFS (loop9): User initiated shutdown received. [ 488.027221][T19393] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485). Shutting down filesystem. [ 488.126957][T19393] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 488.162180][T19419] loop1: detected capacity change from 0 to 512 [ 488.278951][T19419] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.4662: bad orphan inode 15 [ 488.307212][ T9450] XFS (loop9): Unmounting Filesystem [ 488.399675][T19419] ext4_test_bit(bit=14, block=5) = 0 [ 488.456610][T19419] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 488.492090][T19410] loop5: detected capacity change from 0 to 32768 [ 488.551488][T19414] loop4: detected capacity change from 0 to 32768 [ 488.639415][T19414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4661 (19414) [ 488.749279][T19414] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 488.759765][T19410] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 488.759765][T19410] [ 488.793368][T19419] EXT4-fs error (device loop1): __ext4_new_inode:1084: comm syz.1.4662: reserved inode found cleared - inode=1 [ 488.827900][T19414] BTRFS info (device loop4): using free space tree [ 488.867023][T19410] ERROR: (device loop5): remounting filesystem as read-only [ 488.874460][T19410] ERROR: (device loop5): diWrite: ixpxd invalid [ 488.874460][T19410] [ 488.890295][T19414] BTRFS info (device loop4): has skinny extents [ 488.921289][T19419] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 488.965266][T19410] ERROR: (device loop5): txCommit: [ 488.965266][T19410] [ 489.020694][T19410] attempt to access beyond end of device [ 489.020694][T19410] loop5: rw=2049, want=2621800, limit=32768 [ 489.085349][T19414] BTRFS info (device loop4): enabling ssd optimizations [ 489.480357][T19448] loop5: detected capacity change from 0 to 512 [ 489.571560][T19448] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.607514][T19448] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.384423][T19466] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 491.132606][T19484] loop4: detected capacity change from 0 to 256 [ 491.456826][T19471] loop9: detected capacity change from 0 to 32768 [ 491.522548][T19471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.4675 (19471) [ 491.614028][T19473] loop5: detected capacity change from 0 to 32768 [ 491.677711][T19471] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 491.724252][T19473] XFS (loop5): Mounting V5 Filesystem [ 491.750949][T19471] BTRFS info (device loop9): setting nodatasum [ 491.783006][T19494] loop4: detected capacity change from 0 to 8192 [ 491.808207][T19471] BTRFS info (device loop9): force zlib compression, level 3 [ 491.858662][T19473] XFS (loop5): Ending clean mount [ 491.864590][T19471] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8) [ 491.887845][T19494] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 491.965017][T19471] BTRFS info (device loop9): use lzo compression, level 0 [ 492.005524][ T25] audit: type=1800 audit(1788885712.707:148): pid=19494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4685" name="file2" dev="loop4" ino=1048902 res=0 errno=0 [ 492.028346][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.053504][T19471] BTRFS info (device loop9): turning on flush-on-commit [ 492.081228][T16566] XFS (loop5): Unmounting Filesystem [ 492.087027][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.104037][T19494] FAT-fs (loop4): Filesystem has been set read-only [ 492.112033][T19471] BTRFS info (device loop9): enabling auto defrag [ 492.167669][T19471] BTRFS info (device loop9): max_inline at 4096 [ 492.173938][T19471] BTRFS info (device loop9): using free space tree [ 492.182563][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.249648][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.299021][T19471] BTRFS info (device loop9): has skinny extents [ 492.318342][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.362444][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.419010][T19471] BTRFS info (device loop9): enabling ssd optimizations [ 492.426412][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.473734][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.513382][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.584634][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 492.628133][T19494] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 493.445042][ T4189] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 493.457506][ T5544] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 493.599830][T19548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.607119][T19548] IPv6: NLM_F_CREATE should be set when creating new route [ 493.614323][T19548] IPv6: NLM_F_CREATE should be set when creating new route [ 493.621542][T19548] IPv6: NLM_F_CREATE should be set when creating new route [ 493.641540][T19548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 493.875302][ T5544] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 493.888387][ T5544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.901579][ T5544] usb 5-1: config 0 descriptor?? [ 494.065076][T15126] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 494.173304][T19558] ubi31: attaching mtd0 [ 494.180030][T19558] ubi31 error: ubi_attach_mtd_dev: bad VID header (49152) or data offsets (49216) [ 494.385070][ T5544] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 494.392210][ T5544] hackrf 5-1:0.0: Could not detect board [ 494.428390][ T5544] hackrf: probe of 5-1:0.0 failed with error -71 [ 494.438563][T15126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.490933][ T5544] usb 5-1: USB disconnect, device number 13 [ 494.500999][T15126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.530419][T15126] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 494.543413][T15126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.561035][T15126] usb 8-1: config 0 descriptor?? [ 495.066325][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.097293][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.144764][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.198510][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.241606][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.248949][T19595] loop5: detected capacity change from 0 to 256 [ 495.261225][T19573] loop9: detected capacity change from 0 to 32768 [ 495.284603][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.314597][T19595] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 495.336928][T15126] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 495.358124][T19573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.4709 (19573) [ 495.387138][T15126] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.7-1/input0 [ 495.453989][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.498373][T19573] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 495.562126][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.618997][T19573] BTRFS info (device loop9): setting nodatasum [ 495.630213][T19604] loop1: detected capacity change from 0 to 256 [ 495.667707][T19573] BTRFS info (device loop9): force zlib compression, level 3 [ 495.759005][T19604] exfat: Deprecated parameter 'utf8' [ 495.791006][T19573] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8) [ 495.842253][ T5544] usb 8-1: USB disconnect, device number 18 [ 495.890001][T19604] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 495.905213][T19573] BTRFS info (device loop9): use lzo compression, level 0 [ 495.912544][T19573] BTRFS info (device loop9): turning on flush-on-commit [ 495.988511][T19613] netlink: 'syz.5.4727': attribute type 83 has an invalid length. [ 496.043959][T19573] BTRFS info (device loop9): enabling auto defrag [ 496.109440][T19573] BTRFS info (device loop9): max_inline at 4096 [ 496.124615][T19616] loop4: detected capacity change from 0 to 1024 [ 496.165517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.192699][T19573] BTRFS info (device loop9): using free space tree [ 496.254564][T19573] BTRFS info (device loop9): has skinny extents [ 496.268248][T19616] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 496.367123][T19616] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 496.412908][T19616] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 496.463350][T19636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4731'. [ 496.478496][T19573] BTRFS info (device loop9): enabling ssd optimizations [ 496.560502][T19616] EXT4-fs warning (device loop4): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 496.574101][T19629] loop5: detected capacity change from 0 to 4096 [ 496.604146][T19636] netem: unknown loss type 0 [ 496.659256][T19636] netem: change failed [ 496.705047][T19646] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 496.720874][T19629] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 496.843111][T19629] ntfs3: loop5: failed to convert "256c" to koi8-ru [ 497.627693][T19670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.634963][T19670] IPv6: NLM_F_CREATE should be set when creating new route [ 497.642180][T19670] IPv6: NLM_F_CREATE should be set when creating new route [ 497.649431][T19670] IPv6: NLM_F_CREATE should be set when creating new route [ 497.852661][T19670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.943407][T19681] netlink: 'syz.1.4746': attribute type 2 has an invalid length. [ 498.082431][T19687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.346215][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.414009][T19697] loop1: detected capacity change from 0 to 1024 [ 498.475715][T19676] loop4: detected capacity change from 0 to 32768 [ 498.489831][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.559207][T19676] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4745 (19676) [ 498.645366][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.679822][T19676] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 498.772207][T19676] BTRFS info (device loop4): setting nodatasum [ 498.811560][T19676] BTRFS info (device loop4): force zlib compression, level 3 [ 498.883647][T19706] loop1: detected capacity change from 0 to 1024 [ 498.907621][T19676] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 498.977431][T19676] BTRFS info (device loop4): use lzo compression, level 0 [ 498.984836][T19676] BTRFS info (device loop4): turning on flush-on-commit [ 499.114183][T19676] BTRFS info (device loop4): enabling auto defrag [ 499.185244][T19676] BTRFS info (device loop4): max_inline at 4096 [ 499.219456][T19676] BTRFS info (device loop4): using free space tree [ 499.245850][ T5177] hfsplus: bad catalog file entry [ 499.271325][T19676] BTRFS info (device loop4): has skinny extents [ 499.317354][ T5177] hfsplus: b-tree write err: -5, ino 3 [ 499.414636][ T6897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.512963][T19676] BTRFS info (device loop4): enabling ssd optimizations [ 499.806551][T19751] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4768'. [ 500.052374][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4772'. [ 500.078544][T19756] loop1: detected capacity change from 0 to 16 [ 500.152739][T19754] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4772'. [ 500.172717][T19756] erofs: (device loop1): mounted with root inode @ nid 36. [ 500.245887][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4772'. [ 500.487253][T19759] netlink: 616 bytes leftover after parsing attributes in process `syz.7.4774'. [ 500.699454][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.799269][T19769] loop5: detected capacity change from 0 to 128 [ 500.886658][T19769] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 501.288743][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.295319][ T9532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.305697][ T150] block nbd2: Possible stuck request ffff8880209e0000: control (read@0,4096B). Runtime 60 seconds [ 501.316329][ T150] block nbd1: Possible stuck request ffff888020970000: control (read@0,4096B). Runtime 90 seconds [ 501.470889][T19780] loop4: detected capacity change from 0 to 32768 [ 501.527493][T15123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.558365][T19780] JBD2: Ignoring recovery information on journal [ 501.600116][T19780] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 501.651520][T19780] JBD2: bad block at offset 32 [ 501.689401][T15123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.773241][T19780] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 501.789821][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.801307][T19778] loop7: detected capacity change from 0 to 32768 [ 501.921965][T19778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.4781 (19778) [ 502.026344][T13978] ocfs2: Unmounting device (7,4) on (node local) [ 502.068717][T19782] loop1: detected capacity change from 0 to 32768 [ 502.185373][T19778] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 502.252710][T19782] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.4782 (19782) [ 502.335048][T19778] BTRFS info (device loop7): setting nodatasum [ 502.341224][T19778] BTRFS info (device loop7): force zlib compression, level 3 [ 502.409876][ T4803] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4803) [ 502.460851][T19797] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4785'. [ 502.488629][T19778] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 502.643417][T19778] BTRFS info (device loop7): use lzo compression, level 0 [ 502.677626][T19805] loop9: detected capacity change from 0 to 128 [ 502.735796][T19778] BTRFS info (device loop7): turning on flush-on-commit [ 502.781485][T19805] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 502.830025][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.853543][T19778] BTRFS info (device loop7): enabling auto defrag [ 502.909150][T19805] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 502.965800][T19778] BTRFS info (device loop7): max_inline at 4096 [ 503.052407][T19778] BTRFS info (device loop7): using free space tree [ 503.123094][T19778] BTRFS info (device loop7): has skinny extents [ 503.200608][ T9532] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 503.322504][T19778] BTRFS info (device loop7): enabling ssd optimizations [ 503.487828][T19806] loop5: detected capacity change from 0 to 32768 [ 503.815116][T19839] sd 0:0:1:0: PR command failed: 2 [ 503.852668][T19839] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 503.910658][T19839] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 504.141371][T19841] loop5: detected capacity change from 0 to 1024 [ 504.227211][T19841] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 504.292656][T19841] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 504.335252][T19841] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 504.452351][T19841] EXT4-fs warning (device loop5): empty_inline_dir:1870: bad inline directory (dir #12) - no `..' [ 504.631105][T19849] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.664539][T19853] netlink: 27 bytes leftover after parsing attributes in process `syz.9.4802'. [ 504.752096][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.764367][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.772851][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.790819][T19841] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 505.057238][T19868] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4810'. [ 505.068541][T19869] loop7: detected capacity change from 0 to 256 [ 505.133203][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.153919][T19869] exfat: Deprecated parameter 'utf8' [ 505.258825][T19869] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 505.294190][T19878] dyndbg: expected <4096 bytes into control [ 505.339867][T19882] netlink: 'syz.9.4816': attribute type 2 has an invalid length. [ 505.534269][T19887] loop5: detected capacity change from 0 to 512 [ 505.631562][T19894] program syz.4.4822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.671468][T19887] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 505.758354][T19887] EXT4-fs (loop5): 1 truncate cleaned up [ 505.765734][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.836001][T19887] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum,. Quota mode: writeback. [ 506.146318][ T4189] Bluetooth: hci2: link tx timeout [ 506.151956][ T4189] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 506.394633][T19924] loop4: detected capacity change from 0 to 256 [ 506.412416][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.477384][T19924] exfat: Deprecated parameter 'utf8' [ 506.547842][T19924] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d) [ 506.614247][T19933] loop5: detected capacity change from 0 to 256 [ 506.682889][T19928] loop7: detected capacity change from 0 to 4096 [ 506.713862][T19933] FAT-fs (loop5): Directory bread(block 64) failed [ 506.744034][T19933] FAT-fs (loop5): Directory bread(block 65) failed [ 506.817140][T19933] FAT-fs (loop5): Directory bread(block 66) failed [ 506.832389][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.871200][T19928] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 506.881050][T19933] FAT-fs (loop5): Directory bread(block 67) failed [ 506.913358][T19933] FAT-fs (loop5): Directory bread(block 68) failed [ 506.953646][T19933] FAT-fs (loop5): Directory bread(block 69) failed [ 507.003072][T19933] FAT-fs (loop5): Directory bread(block 70) failed [ 507.060450][T19933] FAT-fs (loop5): Directory bread(block 71) failed [ 507.093771][T19933] FAT-fs (loop5): Directory bread(block 72) failed [ 507.102235][T19928] ntfs3: loop7: failed to convert "256c" to koi8-ru [ 507.123006][T19933] FAT-fs (loop5): Directory bread(block 73) failed [ 507.208684][T19941] loop1: detected capacity change from 0 to 256 [ 507.295033][ T7] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 507.306078][T19941] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 507.616509][T19951] ip_tables: iptables: counters copy to user failed while replacing table [ 507.735085][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.754358][T19955] loop9: detected capacity change from 0 to 2048 [ 507.820257][T19958] loop5: detected capacity change from 0 to 256 [ 507.826975][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 507.859949][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.871572][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.880263][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.989140][T19953] loop7: detected capacity change from 0 to 8192 [ 508.017914][T19958] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 508.080516][T19955] overlayfs: unrecognized mount option "/õ÷ÚgãÕ±+/ÍÞœ›ŸZX˜šlŒÏ´¯ÍNNÝóv[«Áê4n¾vkòúõ…Æ™çÎnÚ|{à½þ'Ž\" or missing value [ 508.105155][ T7] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 508.141736][ T25] audit: type=1800 audit(1788885728.837:149): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4846" name="file1" dev="loop7" ino=1048909 res=0 errno=0 [ 508.176797][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.223617][ T7] usb 5-1: Product: syz [ 508.231033][ T7] usb 5-1: Manufacturer: syz [ 508.242333][ T7] usb 5-1: SerialNumber: syz [ 508.260708][ T5537] Bluetooth: hci2: command 0x0406 tx timeout [ 508.557109][T19967] loop9: detected capacity change from 0 to 4096 [ 508.649779][ T7] usb 5-1: USB disconnect, device number 14 [ 508.887402][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.946798][T19976] udevd[19976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.992776][T19967] ntfs3: loop9: MFT: r=1b, expect seq=1 instead of 0! [ 509.329971][T19971] loop5: detected capacity change from 0 to 32768 [ 509.479553][T19971] JBD2: Ignoring recovery information on journal [ 509.548523][T19971] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 509.575958][T20001] program syz.1.4870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.632832][T19971] JBD2: bad block at offset 32 [ 509.703711][T19971] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 509.911565][T16566] ocfs2: Unmounting device (7,5) on (node local) [ 509.925509][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.087167][T20018] sd 0:0:1:0: PR command failed: 2 [ 510.109026][T20018] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 510.164635][T20018] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 510.309027][ T4189] Bluetooth: hci2: link tx timeout [ 510.314153][ T4189] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 510.350859][T20024] netlink: 'syz.4.4879': attribute type 2 has an invalid length. [ 510.885399][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.894623][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.965497][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.268716][T20060] loop7: detected capacity change from 0 to 256 [ 511.369634][T20062] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4894'. [ 511.392346][T20060] FAT-fs (loop7): Directory bread(block 64) failed [ 511.463502][T20060] FAT-fs (loop7): Directory bread(block 65) failed [ 511.551445][T20060] FAT-fs (loop7): Directory bread(block 66) failed [ 511.597152][T20060] FAT-fs (loop7): Directory bread(block 67) failed [ 511.617531][T20064] loop9: detected capacity change from 0 to 8192 [ 511.637181][T20060] FAT-fs (loop7): Directory bread(block 68) failed [ 511.643720][T20060] FAT-fs (loop7): Directory bread(block 69) failed [ 511.670553][T20064] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 511.689279][T20066] loop5: detected capacity change from 0 to 8192 [ 511.738040][T20064] REISERFS (device loop9): using ordered data mode [ 511.751657][T20066] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 511.786264][T20064] reiserfs: using flush barriers [ 511.791758][T20060] FAT-fs (loop7): Directory bread(block 70) failed [ 511.811890][T20066] REISERFS (device loop5): using ordered data mode [ 511.831678][T20064] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 511.867800][T20066] reiserfs: using flush barriers [ 511.873018][T20060] FAT-fs (loop7): Directory bread(block 71) failed [ 511.888148][T20066] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 511.928491][T20060] FAT-fs (loop7): Directory bread(block 72) failed [ 511.935508][T20064] REISERFS (device loop9): checking transaction log (loop9) [ 511.942852][T20060] FAT-fs (loop7): Directory bread(block 73) failed [ 511.960909][T20066] REISERFS (device loop5): checking transaction log (loop5) [ 511.995908][T20066] REISERFS (device loop5): Using r5 hash to sort names [ 512.055053][T20066] REISERFS (device loop5): using 3.5.x disk format [ 512.082467][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.108979][T20066] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 512.160863][T20064] REISERFS (device loop9): Using tea hash to sort names [ 512.168157][ T9532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.221402][T20064] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 512.621469][ T4189] Bluetooth: hci2: link tx timeout [ 512.626705][ T4189] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 512.727713][T20080] loop7: detected capacity change from 0 to 4096 [ 512.890503][T20087] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 513.065949][T20092] loop5: detected capacity change from 0 to 1024 [ 513.219411][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.575900][T20108] block2mtd: too many arguments [ 513.925306][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.935260][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.137985][ T4189] Bluetooth: hci2: link tx timeout [ 514.143140][ T4189] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 514.193748][T20143] loop5: detected capacity change from 0 to 2048 [ 514.241704][T20149] program syz.4.4931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.254657][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.321665][T20143] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 514.391912][T20143] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.447377][T20157] block2mtd: too many arguments [ 514.627453][T20162] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4928: bg 0: block 345: padding at end of block bitmap is not set [ 514.759220][T20162] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 215 with error 117 [ 514.801736][ T6694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.826808][T15126] infiniband s`z1: ib_query_port failed (-19) [ 514.838310][T20162] EXT4-fs (loop5): This should not happen!! Data will be lost [ 514.838310][T20162] [ 515.085849][ T144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 515.111533][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.172802][ T144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 515.172802][ T144] [ 515.248416][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.291504][ T144] EXT4-fs (loop5): Total free blocks count 0 [ 515.328157][ T144] EXT4-fs (loop5): Free/Dirty block details [ 515.397185][ T144] EXT4-fs (loop5): free_blocks=0 [ 515.442259][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.455327][ T144] EXT4-fs (loop5): dirty_blocks=32 [ 515.460441][ T144] EXT4-fs (loop5): Block reservation details [ 515.523262][ T144] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 515.558317][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.615076][T15126] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 515.724185][T20197] loop7: detected capacity change from 0 to 512 [ 515.874605][T20197] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.015268][T15126] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 516.048416][T15126] usb 10-1: config 0 has no interface number 0 [ 516.199741][T20197] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 516.246501][T15126] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 516.305337][T20198] chnl_net:caif_netlink_parms(): no params data found [ 516.323751][T15126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.369415][T15126] usb 10-1: Product: syz [ 516.394129][T15126] usb 10-1: Manufacturer: syz [ 516.422270][T15126] usb 10-1: SerialNumber: syz [ 516.454543][T15126] usb 10-1: config 0 descriptor?? [ 516.492997][T20198] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.509236][ T5542] net_ratelimit: 1 callbacks suppressed [ 516.509313][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.596610][T20198] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.652255][T20198] device bridge_slave_0 entered promiscuous mode [ 516.765262][T20198] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.792067][T20198] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.883268][T20198] device bridge_slave_1 entered promiscuous mode [ 516.911851][ T5537] FS-Cache: Duplicate cookie detected [ 516.918027][ T5537] FS-Cache: O-cookie c=00000007 [p=00000006 fl=222 nc=0 na=1] [ 516.925563][ T5537] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff88807a00d800 [ 516.933604][ T5537] FS-Cache: O-key=[2] '7379' [ 516.938221][ T5537] FS-Cache: N-cookie c=00000008 [p=00000006 fl=2 nc=0 na=1] [ 516.945509][ T5537] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff888026f63000 [ 516.953547][ T5537] FS-Cache: N-key=[2] '7379' [ 517.019515][T20198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.081157][T20198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.197207][T15126] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 517.246712][T20198] team0: Port device team_slave_0 added [ 517.261840][T15126] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 517.285453][ T417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.295896][T20198] team0: Port device team_slave_1 added [ 517.325473][T15126] asix: probe of 10-1:0.251 failed with error -71 [ 517.360592][T20198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.382192][T15126] usb 10-1: USB disconnect, device number 15 [ 517.406616][T20198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.448322][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.456633][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.575935][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.623442][T20198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.649969][T20212] loop1: detected capacity change from 0 to 40427 [ 517.730665][T20254] loop5: detected capacity change from 0 to 24 [ 517.742501][T20198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.812135][T20212] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 517.834280][T20198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.887108][T20257] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 517.930021][T15126] Bluetooth: hci4: command 0x0409 tx timeout [ 518.071389][T20212] F2FS-fs (loop1): invalid crc value [ 518.115167][T20198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.127466][T20268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4966'. [ 518.169835][T20212] F2FS-fs (loop1): Found nat_bits in checkpoint [ 518.218407][T20268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4966'. [ 518.311775][T20273] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4966'. [ 518.397792][T20198] device hsr_slave_0 entered promiscuous mode [ 518.443297][T20198] device hsr_slave_1 entered promiscuous mode [ 518.455767][T20212] F2FS-fs (loop1): recover fsync data on readonly fs [ 518.478588][T20283] loop7: detected capacity change from 0 to 2048 [ 518.490847][T20198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.516165][T20198] Cannot create hsr debugfs directory [ 518.558240][T20278] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4966'. [ 518.574396][T20212] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 518.597749][T20283] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 518.645391][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.789403][T20283] ext4 filesystem being mounted at /667/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.812125][T20291] program syz.9.4972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.078684][T20298] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 519.291319][T20302] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.4969: bg 0: block 345: padding at end of block bitmap is not set [ 519.339186][T20306] loop5: detected capacity change from 0 to 736 [ 519.633288][T20302] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 460 with error 117 [ 519.682607][ T6694] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 519.726595][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.805194][T20302] EXT4-fs (loop7): This should not happen!! Data will be lost [ 519.805194][T20302] [ 519.947040][ T9] device hsr_slave_0 left promiscuous mode [ 519.958905][ T6694] usb 10-1: Using ep0 maxpacket: 8 [ 519.998112][ T9] device hsr_slave_1 left promiscuous mode [ 520.005122][T15126] Bluetooth: hci4: command 0x041b tx timeout [ 520.036898][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.053691][T20321] loop5: detected capacity change from 0 to 8192 [ 520.078640][ T417] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 520.095137][ T6694] usb 10-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 520.116217][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.152167][ T6694] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.178286][ T417] EXT4-fs (loop7): This should not happen!! Data will be lost [ 520.178286][ T417] [ 520.232456][T20321] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 520.265176][ T6694] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 520.284704][ T417] EXT4-fs (loop7): Total free blocks count 0 [ 520.301559][T20321] FAT-fs (loop5): Filesystem has been set read-only [ 520.311185][ T417] EXT4-fs (loop7): Free/Dirty block details [ 520.334351][ T417] EXT4-fs (loop7): free_blocks=0 [ 520.341939][ T6694] usb 10-1: config 0 interface 0 has no altsetting 0 [ 520.367932][ T417] EXT4-fs (loop7): dirty_blocks=32 [ 520.379460][ T6694] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 520.397025][ T417] EXT4-fs (loop7): Block reservation details [ 520.413172][ T417] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 520.420401][ T6694] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.443022][ T6694] usb 10-1: config 0 descriptor?? [ 520.454420][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.510076][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.640807][T20341] program syz.5.4985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.661485][ T5542] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.670339][ T9] device bridge_slave_1 left promiscuous mode [ 520.681066][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.693405][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.721659][ T9] device bridge_slave_0 left promiscuous mode [ 520.771029][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.809938][T20345] [ 520.811927][T20344] loop1: detected capacity change from 0 to 512 [ 520.827842][ T9] device veth1_macvtap left promiscuous mode [ 520.843887][ T9] device veth0_macvtap left promiscuous mode [ 520.891963][ T9] device veth1_vlan left promiscuous mode [ 520.903616][T20344] EXT4-fs (loop1): Test dummy encryption mode enabled [ 520.923514][ T9] device veth0_vlan left promiscuous mode [ 520.938503][T20344] EXT4-fs (loop1): Test dummy encryption mode enabled [ 520.962153][T20344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 521.012157][T20344] EXT4-fs (loop1): 1 truncate cleaned up [ 521.032353][T20344] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nojournal_checksum,nogrpid,debug_want_extra_isize=0x0000000000000080,dioread_nolock,jqfmt=vfsv1,test_dummy_encryption,nodioread_nolock,,errors=continue. Quota mode: none. [ 521.138115][ T6694] hid-alps 0003:044E:120C.0018: failed to read command (-71) [ 521.166845][ T6694] hid-alps 0003:044E:120C.0018: failed T4_PRM_ID_CONFIG_3 (-71) [ 521.209846][ T6694] hid-alps 0003:044E:120C.0018: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.9-1/input0 [ 521.248352][ T6694] usb 10-1: USB disconnect, device number 16 [ 521.322806][ T9] team0 (unregistering): Port device team_slave_1 removed [ 521.399935][T20351] fido_id[20351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 521.433506][ T9] team0 (unregistering): Port device team_slave_0 removed [ 521.458766][T20353] loop1: detected capacity change from 0 to 1024 [ 521.468676][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.543119][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.680678][ T9] bond0 (unregistering): Released all slaves [ 521.745034][T20355] tipc: Started in network mode [ 521.750444][T20355] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 521.765399][ C0] net_ratelimit: 1 callbacks suppressed [ 521.765409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.845341][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.035569][T20367] loop9: detected capacity change from 0 to 2048 [ 522.090137][ T5539] Bluetooth: hci4: command 0x040f tx timeout [ 522.129481][T20367] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.171992][T20367] ext4 filesystem being mounted at /652/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.194850][T20198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 522.245427][T20198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 522.265066][ T5539] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 522.380218][T20198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 522.405318][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.443000][T20198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 522.495545][T20379] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4993: bg 0: block 345: padding at end of block bitmap is not set [ 522.535121][ T5539] usb 6-1: Using ep0 maxpacket: 8 [ 522.619240][T20379] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 261 with error 117 [ 522.655275][ T5539] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 522.679978][T20378] loop1: detected capacity change from 0 to 8192 [ 522.713578][ T5539] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.752784][T20379] EXT4-fs (loop9): This should not happen!! Data will be lost [ 522.752784][T20379] [ 522.776023][ T5539] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 522.803190][T20378] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 522.882081][ T5539] usb 6-1: config 0 interface 0 has no altsetting 0 [ 522.911791][T20378] REISERFS (device loop1): using ordered data mode [ 522.924059][ T5539] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 522.953692][ T5539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.966662][T20378] reiserfs: using flush barriers [ 523.000350][ T5539] usb 6-1: config 0 descriptor?? [ 523.006931][T20378] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 523.083762][T20198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.107897][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.155366][ T8633] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 523.183314][T20198] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.209583][T20378] REISERFS (device loop1): checking transaction log (loop1) [ 523.237393][ T8633] EXT4-fs (loop9): This should not happen!! Data will be lost [ 523.237393][ T8633] [ 523.268470][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.300487][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.324502][ T8633] EXT4-fs (loop9): Total free blocks count 0 [ 523.355275][ T8633] EXT4-fs (loop9): Free/Dirty block details [ 523.403330][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.423469][ T8633] EXT4-fs (loop9): free_blocks=0 [ 523.455710][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.469239][ T8633] EXT4-fs (loop9): dirty_blocks=32 [ 523.474367][ T8633] EXT4-fs (loop9): Block reservation details [ 523.512408][T20405] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 523.531803][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.538884][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.572596][ T8633] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 523.619545][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.655431][T20378] REISERFS (device loop1): Using tea hash to sort names [ 523.710354][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.725218][ T5539] hid-alps 0003:044E:120C.0019: failed to read command (-71) [ 523.739080][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.765299][T20378] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 523.774411][ T5539] hid-alps 0003:044E:120C.0019: failed T4_PRM_ID_CONFIG_3 (-71) [ 523.792705][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.799794][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.815397][T20408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.831395][ T5545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.840182][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.853892][ T5539] hid-alps 0003:044E:120C.0019: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.5-1/input0 [ 523.908858][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.959506][ T5539] usb 6-1: USB disconnect, device number 9 [ 524.021533][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.111735][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.158833][T20411] fido_id[20411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 524.173513][ T6694] Bluetooth: hci4: command 0x0419 tx timeout [ 524.185518][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.220325][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.267163][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.326636][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.355322][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.436324][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.514483][T20198] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.620679][T20198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.702014][T20419] tipc: Started in network mode [ 524.732666][T20419] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 524.758614][T20434] loop5: detected capacity change from 0 to 512 [ 524.791516][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.829795][T20434] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 524.880687][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.926740][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.006040][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.039275][T20434] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 525.080773][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.238303][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.664093][T20462] loop1: detected capacity change from 0 to 2048 [ 525.709003][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 525.735397][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 525.795673][T20198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.935443][T20462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 525.959754][T20473] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5019'. [ 526.020302][T20473] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5019'. [ 526.071131][T20462] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.408571][T20489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5013: bg 0: block 345: padding at end of block bitmap is not set [ 526.568653][T20457] loop5: detected capacity change from 0 to 40427 [ 526.590077][T20489] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 108 with error 117 [ 526.610563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.669753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.684678][T20457] F2FS-fs (loop5): invalid crc value [ 526.763509][T20457] F2FS-fs (loop5): Found nat_bits in checkpoint [ 526.815300][T20495] net_ratelimit: 84 callbacks suppressed [ 526.815313][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.833321][T20198] device veth0_vlan entered promiscuous mode [ 526.888381][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.897234][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.913505][T20489] EXT4-fs (loop1): This should not happen!! Data will be lost [ 526.913505][T20489] [ 526.929739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.964576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.979031][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.015024][T20457] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 527.038907][T20198] device veth1_vlan entered promiscuous mode [ 527.058348][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.130083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 527.167252][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.179370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 527.243555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 527.251901][ T417] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 527.268138][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.325697][T20497] attempt to access beyond end of device [ 527.325697][T20497] loop5: rw=2049, want=40976, limit=40427 [ 527.354781][T20198] device veth0_macvtap entered promiscuous mode [ 527.371100][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.382844][ T417] EXT4-fs (loop1): This should not happen!! Data will be lost [ 527.382844][ T417] [ 527.407088][T20495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.449315][ T5544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.460989][ T417] EXT4-fs (loop1): Total free blocks count 0 [ 527.472262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 527.494549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.504081][ T417] EXT4-fs (loop1): Free/Dirty block details [ 527.542510][ T417] EXT4-fs (loop1): free_blocks=0 [ 527.556158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.569679][ T417] EXT4-fs (loop1): dirty_blocks=32 [ 527.574774][ T417] EXT4-fs (loop1): Block reservation details [ 527.626458][T20198] device veth1_macvtap entered promiscuous mode [ 527.639494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 527.696345][ T417] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 527.703966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.808914][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.944479][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.987238][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.001736][T20521] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5025'. [ 528.023157][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.044997][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.069223][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.094397][T20198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.141567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.188613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.220039][T20508] loop7: detected capacity change from 0 to 32768 [ 528.274514][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.345213][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.431344][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.534874][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.596196][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.680521][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.740514][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.787145][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.809149][T20198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.821199][T20198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.860919][T20198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.916015][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.946161][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.016587][T20198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.094732][T20198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.178285][T20198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.228847][T20198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.299128][T20551] loop5: detected capacity change from 0 to 4096 [ 529.402655][T20551] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 529.503222][T20561] sch_tbf: burst 7 is lower than device bond_slave_1 mtu (1514) ! [ 529.559796][T20551] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 529.620106][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.664254][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.744697][ T5177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.788062][T20568] Line length is too long: Should be less than 4094 [ 529.806410][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.832872][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.911831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.065990][T20578] loop5: detected capacity change from 0 to 8 [ 530.224136][T20578] SQUASHFS error: Failed to read block 0x2d7: -5 [ 530.250992][T20583] loop7: detected capacity change from 0 to 16 [ 530.284318][T20578] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 530.373840][T20583] erofs: (device loop7): mounted with root inode @ nid 36. [ 530.620122][T20596] loop5: detected capacity change from 0 to 1024 [ 530.941352][T20605] loop9: detected capacity change from 0 to 64 [ 530.948499][ T25] audit: type=1800 audit(1788886007.646:150): pid=20596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5057" name="file1" dev="loop5" ino=1 res=0 errno=0 [ 531.014469][T20607] loop4: detected capacity change from 0 to 1024 [ 531.150589][ T25] audit: type=1800 audit(1788886007.846:151): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5061" name="file2" dev="loop9" ino=21 res=0 errno=0 [ 531.181881][T20607] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 531.255108][T20607] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.368483][ T150] block nbd2: Possible stuck request ffff8880209e0000: control (read@0,4096B). Runtime 90 seconds [ 531.379178][ T150] block nbd1: Possible stuck request ffff888020970000: control (read@0,4096B). Runtime 120 seconds [ 531.411820][ T25] audit: type=1800 audit(1788886008.106:152): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5062" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 531.618882][T20626] loop4: detected capacity change from 0 to 128 [ 531.626454][T20627] loop7: detected capacity change from 0 to 8 [ 531.739715][ T25] audit: type=1807 audit(1788886008.436:153): action=measure res=1 [ 531.759663][T20628] ima: policy update completed [ 531.808468][ T25] audit: type=1802 audit(1788886008.456:154): pid=20628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.5069" res=1 errno=0 [ 531.977437][T20632] loop5: detected capacity change from 0 to 16 [ 531.983790][ T25] audit: type=1800 audit(1788886008.576:155): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 532.032139][T20634] loop4: detected capacity change from 0 to 512 [ 532.039914][ T8435] [ 532.042233][ T8435] ====================================================== [ 532.049220][ T8435] WARNING: possible circular locking dependency detected [ 532.056265][ T8435] syzkaller #0 Not tainted [ 532.060652][ T8435] ------------------------------------------------------ [ 532.067637][ T8435] syz-executor/8435 is trying to acquire lock: [ 532.073757][ T8435] ffff888078a3e938 ((wq_completion)loop7){+.+.}-{0:0}, at: flush_workqueue+0x14e/0x1390 [ 532.083519][ T8435] [ 532.083519][ T8435] but task is already holding lock: [ 532.090851][ T8435] ffff8880203cf468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 532.099631][ T8435] [ 532.099631][ T8435] which lock already depends on the new lock. [ 532.099631][ T8435] [ 532.110026][ T8435] [ 532.110026][ T8435] the existing dependency chain (in reverse order) is: [ 532.119013][ T8435] [ 532.119013][ T8435] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 532.126450][ T8435] __mutex_lock_common+0x1e5/0x2400 [ 532.132176][ T8435] mutex_lock_killable_nested+0x17/0x20 [ 532.138225][ T8435] lo_open+0x6a/0x100 [ 532.142716][ T8435] blkdev_get_whole+0x90/0x390 [ 532.148067][ T8435] blkdev_get_by_dev+0x2da/0xa50 [ 532.153506][ T8435] blkdev_open+0x128/0x2c0 [ 532.158418][ T8435] do_dentry_open+0x7f7/0xf90 [ 532.163586][ T8435] path_openat+0x2718/0x2fb0 [ 532.168774][ T8435] do_filp_open+0x1df/0x400 [ 532.173789][ T8435] do_sys_openat2+0x14b/0x500 [ 532.178970][ T8435] __x64_sys_openat+0x135/0x160 [ 532.184320][ T8435] do_syscall_64+0x4c/0xa0 [ 532.189235][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.195627][ T8435] [ 532.195627][ T8435] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 532.203409][ T8435] __mutex_lock_common+0x1e5/0x2400 [ 532.209100][ T8435] mutex_lock_nested+0x17/0x20 [ 532.214355][ T8435] reset_store+0x17e/0x3c0 [ 532.219329][ T8435] kernfs_fop_write_iter+0x3a8/0x500 [ 532.225113][ T8435] vfs_write+0x748/0xd70 [ 532.229850][ T8435] ksys_write+0x153/0x260 [ 532.234697][ T8435] do_syscall_64+0x4c/0xa0 [ 532.239611][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.245995][ T8435] [ 532.245995][ T8435] -> #5 (&of->mutex){+.+.}-{3:3}: [ 532.253171][ T8435] __mutex_lock_common+0x1e5/0x2400 [ 532.258874][ T8435] mutex_lock_nested+0x17/0x20 [ 532.264129][ T8435] kernfs_seq_start+0x55/0x3c0 [ 532.269388][ T8435] seq_read_iter+0x387/0xc50 [ 532.274469][ T8435] vfs_read+0x75e/0xd50 [ 532.279114][ T8435] ksys_read+0x153/0x260 [ 532.283849][ T8435] do_syscall_64+0x4c/0xa0 [ 532.288756][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.295260][ T8435] [ 532.295260][ T8435] -> #4 (&p->lock){+.+.}-{3:3}: [ 532.302271][ T8435] __mutex_lock_common+0x1e5/0x2400 [ 532.307971][ T8435] mutex_lock_nested+0x17/0x20 [ 532.313240][ T8435] seq_read_iter+0x9d/0xc50 [ 532.318247][ T8435] __kernel_read+0x51d/0x980 [ 532.323330][ T8435] integrity_kernel_read+0x86/0xd0 [ 532.329011][ T8435] ima_calc_file_hash+0x946/0x1940 [ 532.334619][ T8435] ima_collect_measurement+0x335/0x7e0 [ 532.340573][ T8435] process_measurement+0x1185/0x1c20 [ 532.346348][ T8435] ima_file_check+0xc7/0x110 [ 532.351430][ T8435] path_openat+0x27cf/0x2fb0 [ 532.356511][ T8435] do_filp_open+0x1df/0x400 [ 532.361649][ T8435] do_sys_openat2+0x14b/0x500 [ 532.366833][ T8435] __x64_sys_openat+0x135/0x160 [ 532.372182][ T8435] do_syscall_64+0x4c/0xa0 [ 532.377107][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.383505][ T8435] [ 532.383505][ T8435] -> #3 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 532.391752][ T8435] __mutex_lock_common+0x1e5/0x2400 [ 532.397453][ T8435] mutex_lock_nested+0x17/0x20 [ 532.402799][ T8435] process_measurement+0x724/0x1c20 [ 532.408507][ T8435] ima_file_check+0xc7/0x110 [ 532.413590][ T8435] path_openat+0x27cf/0x2fb0 [ 532.418680][ T8435] do_filp_open+0x1df/0x400 [ 532.423673][ T8435] do_sys_openat2+0x14b/0x500 [ 532.428841][ T8435] __x64_sys_openat+0x135/0x160 [ 532.434183][ T8435] do_syscall_64+0x4c/0xa0 [ 532.439092][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.445477][ T8435] [ 532.445477][ T8435] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 532.452825][ T8435] lo_write_bvec+0x194/0x780 [ 532.457908][ T8435] loop_process_work+0x1b66/0x24c0 [ 532.463513][ T8435] process_one_work+0x867/0xff0 [ 532.468854][ T8435] worker_thread+0xad7/0x12a0 [ 532.474032][ T8435] kthread+0x42e/0x520 [ 532.478655][ T8435] ret_from_fork+0x1f/0x30 [ 532.483607][ T8435] [ 532.483607][ T8435] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 532.492951][ T8435] process_one_work+0x7ba/0xff0 [ 532.498307][ T8435] worker_thread+0xad7/0x12a0 [ 532.503473][ T8435] kthread+0x42e/0x520 [ 532.508035][ T8435] ret_from_fork+0x1f/0x30 [ 532.513030][ T8435] [ 532.513030][ T8435] -> #0 ((wq_completion)loop7){+.+.}-{0:0}: [ 532.521084][ T8435] __lock_acquire+0x2c66/0x7b50 [ 532.526571][ T8435] lock_acquire+0x19e/0x400 [ 532.531565][ T8435] flush_workqueue+0x16a/0x1390 [ 532.536917][ T8435] drain_workqueue+0xca/0x370 [ 532.542098][ T8435] destroy_workqueue+0x7b/0xb20 [ 532.547437][ T8435] __loop_clr_fd+0x22f/0xb50 [ 532.552519][ T8435] blkdev_put+0x52b/0x780 [ 532.557340][ T8435] deactivate_locked_super+0x93/0xf0 [ 532.563117][ T8435] cleanup_mnt+0x426/0x4d0 [ 532.568026][ T8435] task_work_run+0x125/0x1a0 [ 532.573108][ T8435] exit_to_user_mode_loop+0x10f/0x130 [ 532.579025][ T8435] exit_to_user_mode_prepare+0xee/0x180 [ 532.585060][ T8435] syscall_exit_to_user_mode+0x16/0x40 [ 532.591017][ T8435] do_syscall_64+0x58/0xa0 [ 532.595923][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.602307][ T8435] [ 532.602307][ T8435] other info that might help us debug this: [ 532.602307][ T8435] [ 532.612501][ T8435] Chain exists of: [ 532.612501][ T8435] (wq_completion)loop7 --> &disk->open_mutex --> &lo->lo_mutex [ 532.612501][ T8435] [ 532.625936][ T8435] Possible unsafe locking scenario: [ 532.625936][ T8435] [ 532.633366][ T8435] CPU0 CPU1 [ 532.638706][ T8435] ---- ---- [ 532.644045][ T8435] lock(&lo->lo_mutex); [ 532.648262][ T8435] lock(&disk->open_mutex); [ 532.655341][ T8435] lock(&lo->lo_mutex); [ 532.662071][ T8435] lock((wq_completion)loop7); [ 532.666895][ T8435] [ 532.666895][ T8435] *** DEADLOCK *** [ 532.666895][ T8435] [ 532.675007][ T8435] 2 locks held by syz-executor/8435: [ 532.680278][ T8435] #0: ffff888020208518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780 [ 532.689554][ T8435] #1: ffff8880203cf468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50 [ 532.698741][ T8435] [ 532.698741][ T8435] stack backtrace: [ 532.704614][ T8435] CPU: 0 PID: 8435 Comm: syz-executor Not tainted syzkaller #0 [ 532.712126][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.722152][ T8435] Call Trace: [ 532.725422][ T8435] [ 532.728331][ T8435] dump_stack_lvl+0x188/0x250 [ 532.732984][ T8435] ? load_image+0x410/0x410 [ 532.737464][ T8435] ? show_regs_print_info+0x20/0x20 [ 532.742635][ T8435] ? print_circular_bug+0x12b/0x1a0 [ 532.747805][ T8435] check_noncircular+0x296/0x330 [ 532.752715][ T8435] ? add_chain_block+0x9b0/0x9b0 [ 532.757624][ T8435] ? lockdep_lock+0xf1/0x1f0 [ 532.762190][ T8435] ? mark_lock+0x94/0x320 [ 532.766486][ T8435] ? _find_first_zero_bit+0xd1/0xf0 [ 532.771682][ T8435] __lock_acquire+0x2c66/0x7b50 [ 532.776508][ T8435] ? verify_lock_unused+0x140/0x140 [ 532.781696][ T8435] ? verify_lock_unused+0x140/0x140 [ 532.786866][ T8435] ? verify_lock_unused+0x140/0x140 [ 532.792055][ T8435] ? verify_lock_unused+0x140/0x140 [ 532.797224][ T8435] ? verify_lock_unused+0x140/0x140 [ 532.802395][ T8435] ? memset+0x1e/0x40 [ 532.806442][ T8435] lock_acquire+0x19e/0x400 [ 532.810926][ T8435] ? flush_workqueue+0x14e/0x1390 [ 532.815922][ T8435] ? __mutex_trylock_common+0x15c/0x260 [ 532.821454][ T8435] ? read_lock_is_recursive+0x10/0x10 [ 532.826800][ T8435] ? __init_swait_queue_head+0xa4/0x140 [ 532.832358][ T8435] flush_workqueue+0x16a/0x1390 [ 532.837181][ T8435] ? flush_workqueue+0x14e/0x1390 [ 532.842176][ T8435] ? lock_chain_count+0x20/0x20 [ 532.847005][ T8435] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 532.852439][ T8435] ? lockdep_hardirqs_off+0x70/0x100 [ 532.857697][ T8435] ? drain_workqueue+0x2f/0x370 [ 532.862519][ T8435] ? rcu_work_rcufn+0x120/0x120 [ 532.867338][ T8435] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 532.872942][ T8435] ? finish_wait+0xc3/0x1c0 [ 532.877421][ T8435] drain_workqueue+0xca/0x370 [ 532.882086][ T8435] destroy_workqueue+0x7b/0xb20 [ 532.886908][ T8435] __loop_clr_fd+0x22f/0xb50 [ 532.891472][ T8435] ? bdev_evict_inode+0x30/0x30 [ 532.896295][ T8435] ? lo_release+0x15e/0x1f0 [ 532.900772][ T8435] ? lo_open+0x100/0x100 [ 532.904983][ T8435] blkdev_put+0x52b/0x780 [ 532.909285][ T8435] deactivate_locked_super+0x93/0xf0 [ 532.914546][ T8435] cleanup_mnt+0x426/0x4d0 [ 532.918938][ T8435] task_work_run+0x125/0x1a0 [ 532.923503][ T8435] exit_to_user_mode_loop+0x10f/0x130 [ 532.928846][ T8435] exit_to_user_mode_prepare+0xee/0x180 [ 532.934359][ T8435] syscall_exit_to_user_mode+0x16/0x40 [ 532.939792][ T8435] do_syscall_64+0x58/0xa0 [ 532.944178][ T8435] ? clear_bhb_loop+0x30/0x80 [ 532.948826][ T8435] ? clear_bhb_loop+0x30/0x80 [ 532.953476][ T8435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.959339][ T8435] RIP: 0033:0x7fa93c35e397 [ 532.963730][ T8435] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 532.983305][ T8435] RSP: 002b:00007ffccea322b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 532.991691][ T8435] RAX: 0000000000000000 RBX: 00007fa93c3f348b RCX: 00007fa93c35e397 [ 532.999636][ T8435] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccea32370 [ 533.007580][ T8435] RBP: 00007ffccea32370 R08: 00007ffccea33370 R09: 00000000ffffffff [ 533.015520][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccea33400 [ 533.023470][ T8435] R13: 00007fa93c3f348b R14: 0000000000081d7c R15: 00007ffccea33440 [ 533.031416][ T8435] [ 533.049547][ T5539] net_ratelimit: 120 callbacks suppressed [ 533.049559][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.064175][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.072410][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.107771][ T25] audit: type=1800 audit(1788886008.616:156): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 533.131488][T20632] erofs: (device loop5): mounted with root inode @ nid 36. [ 533.138939][T20634] EXT4-fs (loop4): Ignoring removed orlov option [ 533.177988][T20634] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 533.231209][T20634] EXT4-fs (loop4): 1 truncate cleaned up [ 533.260960][ T25] audit: type=1800 audit(1788886008.646:157): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 533.290251][T20634] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 533.346355][T20624] loop9: detected capacity change from 0 to 40427 [ 533.357289][ T25] audit: type=1800 audit(1788886008.646:158): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35618 res=0 errno=0 [ 533.401719][T20624] F2FS-fs (loop9): invalid crc value [ 533.428760][T20624] F2FS-fs (loop9): Found nat_bits in checkpoint [ 533.448154][ T25] audit: type=1800 audit(1788886009.846:159): pid=3557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35724 res=0 errno=0 [ 533.504731][T20624] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 533.558387][T20638] attempt to access beyond end of device [ 533.558387][T20638] loop9: rw=2049, want=40976, limit=40427 [ 533.668771][T20643] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5072'. [ 533.928405][ T5177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.086714][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.126482][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.845762][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.085201][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.093373][T15126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.167189][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.729482][ T3557] udevd[3557]: worker [4174] /devices/virtual/block/nbd2 is taking a long time [ 536.740965][ T3557] udevd[3557]: worker [4799] /devices/virtual/block/nbd1 is taking a long time [ 538.246313][ T7] net_ratelimit: 2 callbacks suppressed [ 538.246326][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.125038][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.286584][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.686455][ T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.165070][ T5537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.328039][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.366427][ T5539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.606758][ T5177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog