last executing test programs: 2m35.576261279s ago: executing program 4 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2m35.429508199s ago: executing program 4 (id=275): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x14}, {0x4}, {0xfe9e}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) 2m35.274590179s ago: executing program 4 (id=277): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x5, 0x7ff}) 2m35.217451819s ago: executing program 4 (id=278): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@overriderock}, {@overriderock, 0x0}, {@unhide}, {@overriderock}, {@map_normal}, {@check_strict, 0x41}, {@cruft}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x0, 0x62c, &(0x7f00000050c0)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2m34.92327242s ago: executing program 4 (id=280): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x414e, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m34.165932652s ago: executing program 4 (id=285): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 2m33.983478932s ago: executing program 32 (id=285): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 33.455258398s ago: executing program 5 (id=1694): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x4472, &(0x7f0000008c00)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x126) lseek(r0, 0x0, 0x1) 32.481913951s ago: executing program 5 (id=1699): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)="c839c9ea412e09ba48bd144209c5de0a320262504786ccda4067277dbb2ea022758076ca7863d593ff050aca068ab0cce648b720b0b71b708d0097b649e5eab87d0e", 0x42, 0xc000, 0x0, 0x0) 32.095596511s ago: executing program 5 (id=1703): prctl$PR_SET_SECUREBITS(0x1c, 0x2f) setresuid(0xee01, 0x0, 0x0) r0 = getuid() setfsuid(r0) 32.021669022s ago: executing program 5 (id=1704): open(&(0x7f0000000240)='./bus\x00', 0x141b42, 0x0) mount$nfs4(&(0x7f0000000140)='/\x00', &(0x7f0000000440)='.\x00', 0x0, 0x500e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000015c0)='./file0\x00', 0xd, &(0x7f0000000500)={[{@device={'device', 0x3d, './bus'}}, {@rescan_uuid_tree}, {@flushoncommit}]}, 0x10, 0x559e, &(0x7f0000005680)="$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") 30.747077535s ago: executing program 5 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x176, 0x0, 0x401}]}) 30.273786176s ago: executing program 5 (id=1716): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 30.106315827s ago: executing program 33 (id=1716): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, 0x0, 0x0) 25.855358287s ago: executing program 0 (id=1749): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}}, 0x0) 25.585266228s ago: executing program 0 (id=1753): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@data_writeback}, {@sysvgroups}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@noblock_validity}], [{@fowner_lt}, {@euid_eq}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x0, 0x4bb, &(0x7f0000002c40)="$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") ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0) 25.052289799s ago: executing program 0 (id=1757): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 24.862186649s ago: executing program 0 (id=1758): open(&(0x7f0000000240)='./bus\x00', 0x141b42, 0x0) mount$nfs4(&(0x7f0000000140)='/\x00', &(0x7f0000000440)='.\x00', 0x0, 0x500e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000015c0)='./file0\x00', 0xd, &(0x7f0000000500)={[{@device={'device', 0x3d, './bus'}}, {@rescan_uuid_tree}, {@flushoncommit}]}, 0x10, 0x559e, &(0x7f0000005680)="$eJzs3W+MVNXdB/A7uyxswGfZp3SB8oIAMRgkQdq0sQTFwRhoi43DCgq1IhCVGFzBTbSFknWRpKkx6MJWBBuRkGhSI0jxhYIp0hShNOVPW9sYSReUlU2TtqCmG0uMNjtzz+zMHWZ3pNa1+vmQ3XvP/O45c+bmvpjvsOdOBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFEUHUnNfHdKx4tHh9Z9+f5//Hjso2t/Mnr73o2Hbrlv3f1zzg65aeu0Rd2rJ7XMXrO26Ujr03tm3BpFqWy/VNz/tmu/1Xjnjbd9tzYMuHhubltfX+4pc11P5RqD84/Gx9cX/yyJoqgmMUB1vH013qkqnFDvbnPpgH16p31edPf4WeN2nHhq1IL03M7Sl06P2oGewECJr6vO3mspnf1dlTgi3y649FJFl2iuf/KC+1ReBADwsUzNZDf5t6PxW9x8uzVZT7TTiXZboh3eIbQVNi5GbtzB5eY5LlkfoHmmc1FhSNl5Jurx+c+3M8n+iXYianyMeRYfGkea2nLzXJmoD9Q8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5LRh4/umLJjkd23vfL/XVH3n1/xpUPfGn/4R3zTw69euHSLSsm/HTaou7Vk1pmr1nbdKT16T0zbo2i+my/VK576mTb5b/NjJzdsXvUG83bn6vrro7HDdtBBQdHr4edacOjaGlBpTMM+9e6KMoUF7LNaEtp4a7szrdDAQAAgM+Tr2R/V+XbuThYU9ROZdNkKvsvyIXFd9rnRXePnzVux4mnRi1Iz+28+PEyZcZLX3C8fLu+9ydVEIxD/E2O11sPhzaXjNO35IjJPH/piBFvvzW+cfzXJ8184oZnhnWc+L8np2zI/LGh7oUrru9qfPa6kvxf33f+D2dO/gcAAOA/If8nx+lbf/n/joUTN7z+i0HLft3e9MSBxi1/bv/OM1vnne684UfdL09M3/7o1SX5f1zRU5bk/zDjkP+roovL/wAAAPBZ9t/O/+mScfrWX/5vOts9/QcHXmvY//cZ83f+6qEr5p8787fZp7dvG7zijrbVDQ9dWZL/p1aW/wcVTjs8+Lsw4eXDo2hq5ScVAAAAKBL+3733o4WQ13OfHCTz+rX/vKp1z80ffPMbD97zpzff/s2xfdPHrdrcMPXAyzc1flj9vc0dJfk/XVn+r/l0Xi4AAABQgeePLp0563jn+cfPvXDi1OHtXaemPHl2VUv3mfZL2pYvW3fstZL8n6ks/w8ZmJcDAAAAXMC9dz63ZP2rL3U/sPeukRM6q65qviR1y6YtE1vGfHTw0q7LN28syf+LK8v/Q+NtvPIh1+lg+CuE9uFRVNuzszJXOBS1XZMvAAAAAJ+QkNM3frBk0citI7tGHz/zWN2hNw5P/8vKgzPWXtNR07H+4KLmy0ruFxASe7n7/4c7HYT1/0X3/ytZ/19QyN31b7obAwAAAPBFVLqeP9weP/fNBeW+f7/S9f8LGsaeTO14671lXz2/7/yIOXu/f/26VY1dXfeMeen3P/zD5I9qS/J/a2X5v7pw+0l+/x8AAABchP+17/9bWDJO3/q7/39LVXfTslW7Jy/fsHLD3NSifbWnH1y++/05K/418ebnW+qu21eS/9sqy/9hO6zw5e0P52fd8Cga3bMT303w52G6yxOFXTUFhdyJT/S4MfSIC7uGFBSyViZ6fG14FI3v2WlNFP4/FNoShXN1cWFbonAsFOLrIV/YmSjsD1faprp4usnCi6EQL7DYFVZQDMsviUj0eK9cj57CBXucyD85AADAF0oIz3GWrSluRskouyvV3wFD+zugqr8Dqvs7YFDigOSB5R6PFhcXwuO3H3xkzbqmCelXHp752M/efLZ5zJ7HL2voWv/hK5vuHbt1ctvEkvy/rbL8H07F4Nym3Pr/KKz/j7/XML/+f3Eo1CcKu0Ihk7xjQCY8Ry7sPhyeoz4T9zg3Ol8AAACAz7XwuUD1AM8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Dd79x4nVXUnCPx00w+6aZo2TkQzTtJRA5qRprE1DIOjqDEaFWlm1XGT0UCgQaQRwmMVRG1AnXGIn/G1s2aiIyiI7KofYlwNBiNxETPqJIqJD8DHOrqu63tUYjQT9tN96xRVt7rsQkBp5/v9o+tU/c7z1qPr3HvrXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+I/h3oNfPmnowtn/8GHDuZesrpq66H90jL7sD1d964tP/eOyRf8W5v9ixJlb5h104XHzF0z7l47lq484I4TWrnJlSfGy56746kOtex337B0DN8688db6LVWZejPx0K/zT3nmzsWx1Rf7h3B3WQgV6cCQuiRQmblfF+vbty6EPcK2QLZEW21SIt1weKAmhCVhWyBb1eqaEOpyAqdsuP++yzsT19SE8JUQQnW6jWeqkzZq0oFBVUmgNh2YXpEEfrs1kQ38pDwJwA6Lb4bsi35Va36Ghu7LFXn9Ve60jn260sPrExMNxfO9ftQu7lSOqvQDrTv0tBVUxy5R8PZY693WC95tBdv5Ck9b7hepzDeUrdtC1aF8Ytuk8XPaZ8dHykNTU59iNe2i5/npt+dP2J50r3kdxg407JTX4aWPrZjeb9noS6/e/KsxG86qOWBHu/lUzibNTe9q1SHzmus1z2M0yudJL3j7FXxLavSlK4Sw9dyzZ3x9zsSzj+hzy5PrXn3wwbotZ89Z8IszJ5636OKTN/z7/JcK5v8NHz3/jy/neFuelzu2+mF9MjePj9TFxJv1ydwcAAAAeo3esNd05fmv/9Xr31/bOnPR6d9+6+BzP9yr9dcj7h9QdcAb65paz9/4+VcK5v+NpR3/j4f863JHuzaEUV2JRQNC2Lvr8SSwMnbnuwNC+HJXqjU/cFQqsDaEfboSB2WrSpXoG0s0pgIv12cCo1KB9THQmgosj4ErUoGLY2BVKjAhBtamAkfHQJiSP46v1mfGUXKgJgbGJRtxVTwL4Z362FpqW23KVgUAALCTZGaHlfl3c8512NEMcXq5qqanDPEM7KIZqlM1pGew2WlV0RoqeqqhvKcasuPu+OjhF9Rc1lPNBadhlOVnuHHNX9636MXDvjB2r4mfXzz0gik/Gx/Oevvuqsebl7z41r5H3LyuYP7f/NHz/+puOlJWcPw/hLFdf2Pu8kykPRsf15qXAQAAANgBF/3xX+xR+/KQAxo2vV927/y1Tzy64peb9zjl9PfHHf/6Dw+vaby3YP4/qrTz/+M+kT45mcMjcTfE1AEhNOcHkmpHFgaSo979MgEAAADoDbLH47PHwqdkbpNTtNPz6cL8rduZPx74H9Vt/t/f8z9r79j6ry+WXfDdc0fUDFj6T692TDjh5KNvOf5b7+xTccAvywvm/62lnf9fm3+bdGJ97MXVA0LomxN4MPayM9ClMQaePzI/kBn/+rgBFseqMicmZKtaHEuMi4HmVGBJsRKPZkvsnR/IPFnZxhdlxzElUyInAAAAAJ+4uDsgHpeP5/+3nDHitL/+3qy/XfjKg+etvuCSvxreMX/kSfc//WHD3CuXhk1vHlEw/x+3fef/d82DC07vb+8XwtCKEPqkfxjwSG2yMGAM1JVlEvfWJnX1SVe1sDaEkZ0DS1f1Qmb9/4r0GoOP1yRVxcDe+93y9qDOxLKaEIbmBp749tLDOhNzUoFs46fVhPClztGmG7+rb9J4Zbrxa/uG8MWcQLaqCX1D6GysKl3V/6rOXMcgXdWq6hD2zAlkqxpeHcLcAEBvFf+XTsx9cNbceVPHt7e3zdyFibgTvyZMmtLe1jRhevvE6iJ9mpjqc946RgsKx1TqpW82ZdYoWrxycmUp6ewPBZtz28rsyC84czBzP34Zquwa5yGVeXdb0kM+cP/CJkLOV6liQy7fxUOuza1k25NYUH/MXxX6hb5zZrXNbDpv/OzZM4clf0vNfkjyNx5nSrbVsPS2qu2ubyW8PIoul5XycbfVoNxKhs6eNmPorLnzhkyZNn5y2+S2c1oO/bOWEcOHf23E0M5BNSd/exjpoO5qTo1069ISh7UTR/qFipxKPokPDQkJid6W2O+/bH549J7rz7n+Z6/9+Px+3zzt3r2PnPnDQ6+a+lD1vocvvn3IgQXz/xkfPf+Pnzrxgz+zPkOx4/8N8TB/8vi2w/zjYmBJqcf/G4odzc+eGNCYCnTEQIfD/AAAAHw2xN2RcW9m3Cm9+Zb16zYuaZn7g4Z3Wm5d0770ppvuO/Undw484UuDw14brjvhcwXz/47Sfv+/k9b/zy5df0KxZf4PiiWai63/n17mP7v+f0ex9f/Ty/xn1/9f8ims/z8nG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2e/3/NQ/+9Veq+o25409aflN/yWt/d89hrUeu2zzzT760df3E+64be8uagvn/FaXN/y3cDwAAALuP/3zZNRVHn333HS3rpm4c9+bgd598a8mgPh9UHP1w+8gXBr5x63kF8/8lpc3/P/n1/0Kx8/8biwVaiy0MaP0/AAAAeqli6//dM7Sl8Q9j+v/h6WG/Wf7gzaN/+sjPf798v5+f+LPyfRYc+/zMyyYVzP9XlTb/j6ddlOfljr35sD5Z0y6k17R7sz77kwEAAADoHcpDU1NliXnzFkY96uO3+XRmKdCPSuf63ivXnr35henHPX76ur+rOWHwnhOmXbCq8W+GH3jn50ddsufSTacWzP/Xljb/z/tdxqWPrZjeb9noSz+8evOvxmw4q+aAbcf/AQAAgF2n1P0SAAAAAAAAAAAAAADAp+/cjsUXPrLs2Pe+eftf7H/EklcH33bXgb8b0u+lK656YNKqN86c/PWC3/+HsV3liv3+P173L/6+4I/ycsdWe17/L3P/lBNvn9u1ZOEj9SHsnxuYunDqHiFzbf7BuYH7zjhoYGdiYbrEmmePfqkz8Z104Pghn9vSmTg8FRgXF0ncJx2IV1Xc0j8ViMsrPp4OxO2xKh2oygQu65+Moyy9rV6pS7ZVWXpbbawLYUBOILut7q5L2ihLD/CaVCA7wO+lA3GAJ2cC5ele3d4v6VUM1MWiN/RLegUAwG4rfgusDJOmtLc1x6/w8fYLFfm3Ud6SZQsKqy0rsflNmaXJFq+cXFlKuk/6u+i2a41XhurOIQwr+Lqam6Wsa5Q7p5YeNt0fFRlyT6u9lRcpl7a9m66q+IhqkhE1TZjePrGyx4G39JzlkIoeswwrmOzkZinv2qQl1FJCX0oYUYnbpoQux/vloampTyrXn8dgQ8jT0yui1N/r567zV+xVkJvntkOvfOvLx/z0uQ/++fNP9P/GaTW3z/r+uyf++vX7DzzkiOsmNK3ZUjD/byht/l+dO64tmYsBdMQr640cEMK4EkcEAAAAn323XXTrHadPX//KpLUVTz722NTyMadXbp1/5/x5l2y8d/Hxlx28Ykfjh5312+//ZvD+//bsVS/9dOQ+D9xw8/958rDH//z3D//ooXfqVvYZ+17B/L+xtPl/3IOVORSc7O1YG6//v2hACF2X1m9IAivjcL87IIQvd6VaY4nkgvonxBLNSWBl3GFyUCwxrjW/qr4xsCoVeLk+E1ibCqyPgcxeiltCZlfOlfUhHNaVGptfYkYs0ZAKjImBxlSgKQaaU4H+MTAqFXitfybQmgo8HANhSv62+nH/zLYCAADYHpl5VmX+3ZCe562q6ClDWU8ZanvKUN5ThuqeMhQbRbx/R8xQmTp5pSwnU2W61ppULQUZ4sXwt7tfBRnCo/k50wULmo7nH2TPNyjLz3DlD549df3g6Q+t3nzM1wbe9o9D9jy4eXrdewtueOq3Y8657vk/HVQw/28ubf5fm3+btL4+zv+3Xf8vCTwYu3d1PHW8MQaePzI/kNkxsD5Odhdnq2rNlMhM2hfHEqNioDEVmBEDo1KBcWMzgSUD8wOZmXa28UXZxqdkSuQEAAAA4BMXdxDE3TRx/n/jUT+4+v0BE7csmzfz/rEtT5w8+htX3/Wje/dfdue7KwYPGPfedwrm/6NKm//H9vrlNnZx7M2L/UO4u2xbb7KBIXVJIO7HqIs/j9+3LoQ9cnZwZEu01SYlqlINhwdqkl+oV6WrWl2TrDEQ75+y4f77Lu9MXFMTwldy9r5k23imOmmjJh0YVJUEatOB6RVJIO75yQZ+Up4EYIdl9wrGF1TmVJeshu7LFXn9fVauCZoeXsE+0G7ydfebq12lOv1AZp9q1vY9bQXVsUsUvD3Werf1xndbg3db7hepzDeUrdtC1aF8Ytuk8XPaZ8dHcn/JWmAXPc+5v1ItJb0TXocdH7+3PatOd6A59fHR3H257l+HZbG6Sx9bMb3fstGXXr35V2M2nFVzQMndKCL+UPhHW/535VM5m3dXqw6Z11yv+zxp9XnSG/8NNHraQgiXXX/Mvkve/fV+z93w3Knrym4c++pfzrpn0/K/qTx81Lr3nxw6+vKC+X9rafP/itRtl9/FjTlrQAgH5mzcR+LmP2ZA8jmYE0g+JfcsDCSH3P+1vugnJwAAAOxs2d0d2f0FUzK3yQnh6XlyYf7W7cwf91eM6jZ/qf0+dt3GlScNfeO6A/72ghPf+PtrD3/qoesvK1u3/L+P/WD1mssXv/dEwfx/3EfP//umuun4v+P/7CKO/3drd98V3Tf9QMcO7YouqI5dwvH/bu3u7zbH/7vl+L/j/91x/L8Hjv93a3d/2gq+Jc3wpatzEnz9nT//3cSbPpjbuN/BJz31zKETr/unq1ruvuuUV/7buedNe+1bmwvm/zNKm/9b/6/7Rfuy6/+NK7b+34xi6/91WP8PAADYpYosNJee5xWs3leQIb16X0GGHhcI7HGJQev/bff6fwtH/vtFF/7w+ZZr37lz3OVrNh175qtPr1v9zKwVx517/lutd93VWjD/7yht/h9fDv1yW+8t6/81ji1S1RUxMMPCgAAAAOyOiu0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NN16GnvvH/J1/+hbdAvVtz897f+v//7bO3aB775jZuG/3LKn55RtmbDNSPO3DLvoAuPm79g2r90LF99xBkhTOkqV5YUL3vuiq8+1LrXcc/eMXDjzBtvrd9Snam3MnP7x3m5Y6sf1oewJOeRuph4s77zzrbAKSfePreiM/FIfQj75wamLpy6R2dieX0Ig3MD951x0MDOxMJ0iTXPHv1SZ+I76cDxQz63pTNxeCZQlu7udf2T7palu3t5/xAG5ASy3T27f35V2TaOywTK022sqEvaiIG6WPTauqSNGGiPJab0DWFoRQh90lX9c3VSVZ90VfdUJ1X1SVd1UXUII0MIFemqnqtKqqpIj/zRqqSqGNh7v1veHtSZWFoVwtDcwBPfXnpYZ2JmKpBt/D9VhfClzpdMuvEfVyaNV6Yb/6+VIXwxhFCVLvFeRVKiKl3ihYoQ9swJbNuIFSHMDXw2xE+fibkPzpo7b+r49va2mbswUZVpqyZMmtLe1jRhevvE6lSfiinLSW9d8PHHvunt+RM6bxevnFxZSroiU66yq8uHVObdbdndex/7VZtbybbno6D+mL8q9At958xqm9l03vjZs2cOS/6Wmv2Q5G+fTDTZVsN6y7YalFvJ0NnTZgydNXfekCnTxk9um9x2Tsuhf9YyYvjwr40Y2jmo5uTvzhjp0k9+pF+oyKnkk3j/S0hI9LZEed6nW/Pu/jle8EV/W0crQ3XXB3TBtCI3S1nXKHfGoI/6mCP+OF9TehzRsIKJQ0GWQ3rO0lIwmdiWpSbJ0vW1rmBymFtTedcmjffLQ1NTn2LboSH/bu7mfX0HNu/TmU1XahoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6zB6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASwEAAP//BckZoQ==") 23.354905443s ago: executing program 0 (id=1762): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x220000, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0xff, 0x290, &(0x7f0000000780)="$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") ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000080)={0x0}) 22.397893105s ago: executing program 0 (id=1770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0xc060400) getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) 22.204894886s ago: executing program 34 (id=1770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unshare(0xc060400) getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, 0x0) 8.31916289s ago: executing program 6 (id=1869): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan0\x00'}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502) 8.010989641s ago: executing program 6 (id=1873): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000500)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ff1000/0xf000)=nil, 0xf000}) 7.821478131s ago: executing program 6 (id=1876): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="02030003130000000000000000000000010009000000000005000600000000000a004e21fffffffd00000000000000000000000000000001000000000000000002000100000000000000000b0100000005000500000000000a00000000000c6dfe80000000000000000000000000000000000000000000000400eb20"], 0x98}, 0x1, 0x7}, 0x0) 7.677356111s ago: executing program 6 (id=1879): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f0000000200)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 7.527926572s ago: executing program 6 (id=1886): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 6.916854834s ago: executing program 6 (id=1892): unshare(0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000140)=0x3, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f00000000c0)) 6.615160894s ago: executing program 2 (id=1896): openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 6.421730245s ago: executing program 2 (id=1897): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000005800)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x6}}, {@user_xattr}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c40)=""/58, 0x3a) 6.421605485s ago: executing program 3 (id=1898): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='pids.current\x00', &(0x7f0000000240)='pids.current\x00', 0x0) 6.330296725s ago: executing program 3 (id=1899): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x105042, 0x1db) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000021c0)={0x0, 0x106}) 5.708424506s ago: executing program 7 (id=1902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000106}]}) 5.322507087s ago: executing program 7 (id=1903): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000240)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}) write$ppp(r0, &(0x7f0000000480)='\x00\x00', 0x2) 4.969609928s ago: executing program 7 (id=1904): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private2, @private2}}}}}}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2140, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1}, 0xda}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x10060, 0x0) 4.887081208s ago: executing program 7 (id=1905): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 4.716588349s ago: executing program 7 (id=1907): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_usb_connect(0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000000109022f00010000000009040000000e0100000524", @ANYRES16=r0], 0x0) 4.2756248s ago: executing program 2 (id=1908): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000800)={[{@norecovery}, {@test_dummy_encryption}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 4.22727855s ago: executing program 3 (id=1909): writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000240)="563c991923e0546cead305d0f28e9d18e72b6e7c", 0x14}], 0x1) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1503, &(0x7f0000002a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 3.046681363s ago: executing program 2 (id=1910): r0 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='pids.current\x00', &(0x7f0000000240)='pids.current\x00', 0x0) 2.740626673s ago: executing program 3 (id=1911): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1895, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800000}) close_range(r0, 0xffffffffffffffff, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) 2.713629304s ago: executing program 2 (id=1913): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f00000003c0)='./file1\x00', 0x810, &(0x7f0000000100)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@space_cache_v2}, {@compress_force}, {@nossd_spread}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x1f, 0x67, 0x37, 0x74, 0x65, 0x78]}}]}, 0xfd, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001"]) 2.347913404s ago: executing program 3 (id=1914): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.621187996s ago: executing program 3 (id=1916): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0001"], 0x20}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0xf00}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.600715226s ago: executing program 7 (id=1917): name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a000009050502000000000009058b6e"], 0x0) 527.333369ms ago: executing program 1 (id=1922): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x4000, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x30b3, 0x7}) 396.791999ms ago: executing program 1 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 287.401939ms ago: executing program 2 (id=1924): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 282.563939ms ago: executing program 1 (id=1925): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x20, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(0x0) kcmp(r1, r2, 0x0, r0, r0) 205.47942ms ago: executing program 1 (id=1926): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 120.59494ms ago: executing program 1 (id=1927): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8054000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 0s ago: executing program 1 (id=1928): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) kernel console output (not intermixed with test programs): l, usb_ep_enable returned -22 [ 171.883868][ T4959] usb 2-1: config 0 has no interfaces? [ 171.889516][ T4959] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.905135][ T4959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.928700][ T7706] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 171.935539][ T4959] usb 2-1: config 0 descriptor?? [ 171.959040][ T7706] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.196357][ T4923] usb 2-1: USB disconnect, device number 9 [ 172.202612][ T7723] vhci_hcd: connection closed [ 172.235874][ T154] vhci_hcd: stop threads [ 172.254480][ T154] vhci_hcd: release socket [ 172.264895][ T4832] vhci_hcd: vhci_device speed not set [ 172.278586][ T154] vhci_hcd: disconnect device [ 172.344335][ T4832] usb 35-1: device descriptor read/64, error -71 [ 172.444418][ T4216] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 172.554312][ T4832] vhci_hcd: vhci_device speed not set [ 172.680348][ T4216] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 172.751716][ T4216] usb 6-1: USB disconnect, device number 5 [ 172.835030][ T7776] loop2: detected capacity change from 0 to 8 [ 172.857636][ T7756] loop3: detected capacity change from 0 to 32768 [ 172.922551][ T7756] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1084 (7756) [ 173.011094][ T7756] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 173.040407][ T7756] BTRFS info (device loop3): disabling tree log [ 173.062576][ T7776] SQUASHFS error: zstd decompression error: 2 [ 173.070329][ T7756] BTRFS info (device loop3): metadata ratio 65537 [ 173.083543][ T7776] SQUASHFS error: zstd decompression failed, data probably corrupt [ 173.104578][ T7756] BTRFS info (device loop3): metadata ratio 64 [ 173.110795][ T7756] BTRFS info (device loop3): using free space tree [ 173.127728][ T7776] SQUASHFS error: Failed to read block 0x62b: -5 [ 173.140413][ T7782] loop0: detected capacity change from 0 to 8192 [ 173.147031][ T7756] BTRFS info (device loop3): has skinny extents [ 173.156492][ T7789] SQUASHFS error: Unable to read metadata cache entry [629] [ 173.165043][ T7776] SQUASHFS error: Unable to read metadata cache entry [629] [ 173.172380][ T7776] SQUASHFS error: Unable to read directory block [629:ff26] [ 173.182040][ T7789] SQUASHFS error: Unable to read directory block [629:ff26] [ 173.246730][ T7782] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 173.316935][ T7782] REISERFS (device loop0): using ordered data mode [ 173.326157][ T7782] reiserfs: using flush barriers [ 173.421281][ T7756] BTRFS info (device loop3): enabling ssd optimizations [ 173.428742][ T7782] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.503564][ T7817] loop2: detected capacity change from 0 to 512 [ 173.534488][ T7782] REISERFS (device loop0): checking transaction log (loop0) [ 173.618235][ T7817] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1091: inode #1: comm syz.2.1091: iget: illegal inode # [ 173.696615][ T7817] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1091: error while reading EA inode 1 err=-117 [ 173.720786][ T7817] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1091: inode #1: comm syz.2.1091: iget: illegal inode # [ 173.740071][ T7817] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1091: error while reading EA inode 1 err=-117 [ 173.765041][ T7817] EXT4-fs (loop2): 1 orphan inode deleted [ 173.771641][ T7817] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 173.878964][ T7817] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1091: invalid indirect mapped block 234881024 (level 0) [ 174.005574][ T7782] REISERFS (device loop0): Using tea hash to sort names [ 174.012846][ T7782] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 174.316324][ T7842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 174.528861][ T7850] loop2: detected capacity change from 0 to 512 [ 174.615703][ T7850] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 174.629387][ T7850] EXT4-fs (loop2): orphan cleanup on readonly fs [ 174.640142][ T7850] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #16: comm syz.2.1105: casefold flag without casefold feature [ 174.656553][ T7850] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1105: couldn't read orphan inode 16 (err -117) [ 174.669890][ T7850] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.813833][ T7863] "syz.2.1109" (7863) uses obsolete ecb(arc4) skcipher [ 174.917164][ T7870] loop5: detected capacity change from 0 to 128 [ 175.453860][ T7887] netlink: 'syz.5.1119': attribute type 1 has an invalid length. [ 175.496892][ T7887] netlink: 'syz.5.1119': attribute type 2 has an invalid length. [ 175.597707][ T7859] loop3: detected capacity change from 0 to 32768 [ 175.733224][ T7907] loop5: detected capacity change from 0 to 256 [ 175.744364][ T7859] XFS (loop3): Mounting V5 Filesystem [ 175.761609][ T7907] FAT-fs (loop5): Directory bread(block 1285) failed [ 175.781531][ T7907] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 175.895571][ T7859] XFS (loop3): Ending clean mount [ 175.952775][ T4923] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 [ 176.003344][ T4923] XFS (loop3): Unmount and run xfs_repair [ 176.044081][ T4923] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 176.051519][ T4923] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 176.108560][ T4923] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 176.154023][ T4923] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 176.162953][ T4923] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03 ................ [ 176.207157][ T4923] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 176.222146][ T7931] loop0: detected capacity change from 0 to 256 [ 176.253807][ T4923] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.262719][ T4923] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.280472][ T4923] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.298257][ T7859] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74 [ 176.326921][ T7931] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 176.371038][ T7859] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 176.423027][ T7859] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 176.514689][ T4180] XFS (loop3): Unmounting Filesystem [ 176.718874][ T7944] loop0: detected capacity change from 0 to 164 [ 176.764556][ T7946] input: syz1 as /devices/virtual/input/input11 [ 177.042599][ T7954] device gretap0 entered promiscuous mode [ 177.075413][ T7954] device erspan0 entered promiscuous mode [ 177.098643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 177.142660][ T7956] loop0: detected capacity change from 0 to 1764 [ 177.385775][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 177.566422][ T7974] loop2: detected capacity change from 0 to 2048 [ 177.609768][ T7977] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 177.629378][ T7940] loop5: detected capacity change from 0 to 32768 [ 177.698189][ T7974] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 177.722756][ T7983] loop3: detected capacity change from 0 to 164 [ 177.732864][ T7974] NILFS (loop2): mounting unchecked fs [ 177.766126][ T7974] NILFS (loop2): recovery complete [ 177.791699][ T7986] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.055978][ T7992] loop1: detected capacity change from 0 to 16 [ 178.154752][ T7992] erofs: (device loop1): mounted with root inode @ nid 36. [ 178.480846][ T7969] loop0: detected capacity change from 0 to 32768 [ 178.563891][ T7969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1149 (7969) [ 178.642982][ T7969] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 178.659309][ T7969] BTRFS info (device loop0): using free space tree [ 178.669130][ T7969] BTRFS info (device loop0): has skinny extents [ 178.837218][ T8019] loop3: detected capacity change from 0 to 512 [ 179.013055][ T8019] loop3: detected capacity change from 0 to 4096 [ 179.137066][ T8019] NILFS (loop3): invalid segment: Checksum error in segment payload [ 179.159346][ T8019] NILFS (loop3): trying rollback from an earlier position [ 179.167261][ T7969] BTRFS info (device loop0): enabling ssd optimizations [ 179.199982][ T8041] loop2: detected capacity change from 0 to 1024 [ 179.208391][ T8019] NILFS (loop3): recovery complete [ 179.250721][ T8043] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 179.280196][ T8037] ODEBUG: Out of memory. ODEBUG disabled [ 179.367877][ T8041] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 179.438319][ T8051] loop3: detected capacity change from 0 to 128 [ 180.059277][ T8067] loop0: detected capacity change from 0 to 128 [ 180.093166][ T8070] loop3: detected capacity change from 0 to 256 [ 180.184545][ T8070] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 180.461483][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1194'. [ 180.584848][ T8095] loop0: detected capacity change from 0 to 64 [ 180.733788][ T4923] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.094034][ T4923] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 181.103124][ T4923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.132955][ T4923] usb 3-1: config 0 descriptor?? [ 181.199655][ T8092] loop3: detected capacity change from 0 to 32768 [ 181.260603][ T8092] (syz.3.1195,8092,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.292972][ T8092] (syz.3.1195,8092,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.349124][ T8092] JBD2: Ignoring recovery information on journal [ 181.407685][ T8092] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.490696][ T4180] ocfs2: Unmounting device (7,3) on (node local) [ 181.653063][ T8122] ipt_CLUSTERIP: Please specify destination IP [ 181.703943][ T4923] [drm:udl_init] *ERROR* Selecting channel failed [ 181.727886][ T4923] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 181.743982][ T4923] [drm] Initialized udl on minor 2 [ 181.773843][ T4923] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.804133][ T4923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 181.830875][ T4923] usb 3-1: USB disconnect, device number 7 [ 181.863565][ T8124] loop3: detected capacity change from 0 to 512 [ 181.962039][ T8124] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 181.980073][ T8124] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 182.025935][ T8124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 182.041503][ T8124] System zones: 1-12 [ 182.048289][ T8116] loop1: detected capacity change from 0 to 40427 [ 182.056792][ T8124] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1206: corrupted in-inode xattr [ 182.070060][ T8124] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1206: couldn't read orphan inode 15 (err -117) [ 182.084394][ T8124] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 182.110142][ T8116] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 182.117567][ T8116] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 182.159991][ T8116] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.238093][ T8116] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 182.258199][ T8116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.360131][ T8116] attempt to access beyond end of device [ 182.360131][ T8116] loop1: rw=2049, want=53256, limit=40427 [ 182.463204][ T8140] loop2: detected capacity change from 0 to 128 [ 182.488266][ T8142] loop3: detected capacity change from 0 to 512 [ 182.534334][ T4167] attempt to access beyond end of device [ 182.534334][ T4167] loop1: rw=2049, want=45104, limit=40427 [ 182.593121][ T4832] kernel write not supported for file /snd/seq (pid: 4832 comm: kworker/0:15) [ 182.644469][ T8142] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.676837][ T8142] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.825443][ T26] audit: type=1800 audit(1733796878.493:31): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1215" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 182.859108][ T8150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1220'. [ 182.886578][ T26] audit: type=1800 audit(1733796878.493:32): pid=8142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1215" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 182.995242][ T8134] loop5: detected capacity change from 0 to 32768 [ 183.366031][ T8163] loop3: detected capacity change from 0 to 256 [ 183.475785][ T8163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 183.738940][ T8152] loop2: detected capacity change from 0 to 32768 [ 183.820547][ T8180] loop1: detected capacity change from 0 to 1024 [ 183.843157][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 184.040694][ T8177] loop3: detected capacity change from 0 to 32768 [ 184.082780][ T8152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1221 (8152) [ 184.115439][ T8180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.154843][ T8188] netlink: 'syz.0.1237': attribute type 3 has an invalid length. [ 184.199492][ T8177] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.207784][ T8177] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.219846][ T8177] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 184.248743][ T8152] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 184.259587][ T8152] BTRFS info (device loop2): setting nodatacow, compression disabled [ 184.269840][ T8152] BTRFS info (device loop2): max_inline at 0 [ 184.283435][ T8177] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 184.286013][ T8152] BTRFS info (device loop2): enabling disk space caching [ 184.300553][ T8152] BTRFS info (device loop2): turning off barriers [ 184.374205][ T8152] BTRFS info (device loop2): turning on flush-on-commit [ 184.381219][ T8152] BTRFS info (device loop2): doing ref verification [ 184.389585][ T8152] BTRFS info (device loop2): force clearing of disk cache [ 184.397376][ T8152] BTRFS info (device loop2): enabling ssd optimizations [ 184.423811][ T8152] BTRFS info (device loop2): max_inline at 4096 [ 184.430202][ T8152] BTRFS info (device loop2): disk space caching is enabled [ 184.450256][ T8152] BTRFS info (device loop2): has skinny extents [ 184.798066][ T8152] BTRFS info (device loop2): clearing free space tree [ 184.813878][ T8152] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.823554][ T8152] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.901284][ T8227] loop5: detected capacity change from 0 to 512 [ 184.921776][ T8200] loop1: detected capacity change from 0 to 8192 [ 185.092547][ T8223] loop0: detected capacity change from 0 to 8192 [ 185.094772][ T8227] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 185.113955][ T8227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 185.122062][ T8227] System zones: 0-1, 15-15, 18-18, 34-34 [ 185.169674][ T8227] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.176470][ T8227] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 185.187342][ T8227] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 185.202460][ T8227] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 185.209592][ T8227] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1246: bad orphan inode 16 [ 185.225231][ T8227] ext4_test_bit(bit=15, block=18) = 1 [ 185.231844][ T8227] is_bad_inode(inode)=0 [ 185.236541][ T8227] NEXT_ORPHAN(inode)=0 [ 185.241039][ T8227] max_ino=32 [ 185.244761][ T8227] i_nlink=2 [ 185.247981][ T8227] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.298090][ T8223] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 185.314614][ T8223] REISERFS (device loop0): using journaled data mode [ 185.345447][ T8223] reiserfs: using flush barriers [ 185.365613][ T8223] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.393345][ T8223] REISERFS (device loop0): checking transaction log (loop0) [ 185.457678][ T8223] REISERFS (device loop0): Using r5 hash to sort names [ 185.480017][ T8223] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 185.502252][ T8223] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 185.668396][ T8243] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 185.984199][ T4832] Bluetooth: hci2: command 0x0406 tx timeout [ 186.008522][ T4832] Bluetooth: hci0: command 0x0406 tx timeout [ 186.039186][ T4832] Bluetooth: hci4: command 0x0406 tx timeout [ 186.064061][ T4832] Bluetooth: hci1: command 0x0406 tx timeout [ 186.151053][ T8252] loop2: detected capacity change from 0 to 512 [ 186.217504][ T8252] EXT4-fs (loop2): inline encryption not supported [ 186.264396][ T8256] ALSA: mixer_oss: invalid OSS volume '' [ 186.277824][ T8252] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 186.348724][ T8252] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.458611][ T8252] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1249: corrupted inode contents [ 186.525555][ T8252] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #2: comm syz.2.1249: mark_inode_dirty error [ 186.565603][ T8252] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #2: comm syz.2.1249: corrupted inode contents [ 186.671467][ T8252] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1249: mark_inode_dirty error [ 186.712285][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1270'. [ 186.729313][ T8284] loop5: detected capacity change from 0 to 4096 [ 186.740540][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 186.760732][ T8252] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #18: comm syz.2.1249: directory missing '.' [ 186.905010][ T8284] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.027945][ T8284] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 187.038085][ T8303] loop0: detected capacity change from 0 to 512 [ 187.106862][ T8303] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 187.142990][ T6607] kernel read not supported for file /bus/input/devices (pid: 6607 comm: kworker/1:21) [ 187.144182][ T8303] UDF-fs: Scanning with blocksize 512 failed [ 187.227559][ T8303] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 187.281065][ T8303] UDF-fs: Scanning with blocksize 1024 failed [ 187.331050][ T8303] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 187.332094][ T8311] loop2: detected capacity change from 0 to 1024 [ 187.363843][ T8303] UDF-fs: Scanning with blocksize 2048 failed [ 187.392037][ T8315] loop3: detected capacity change from 0 to 1024 [ 187.412654][ T8303] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 187.446794][ T8303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.500404][ T8315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.555357][ T5059] hfsplus: b-tree write err: -5, ino 4 [ 187.805503][ T8321] loop3: detected capacity change from 0 to 4096 [ 187.921749][ T8321] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.991519][ T8308] loop1: detected capacity change from 0 to 32768 [ 188.001893][ T26] audit: type=1800 audit(1733796883.673:33): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1288" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 188.097289][ T8308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1280 (8308) [ 188.177216][ T8308] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 188.190161][ T8340] siw: device registration error -23 [ 188.207700][ T8344] loop2: detected capacity change from 0 to 128 [ 188.216465][ T8308] BTRFS info (device loop1): using free space tree [ 188.256594][ T8308] BTRFS info (device loop1): has skinny extents [ 188.344817][ T8344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.366632][ T8344] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.477479][ T8308] BTRFS info (device loop1): enabling ssd optimizations [ 188.520143][ T8366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.528845][ T8366] bond0: (slave bond2): Enslaving as an active interface with an up link [ 189.104251][ T8380] loop5: detected capacity change from 0 to 256 [ 189.126502][ T8381] loop3: detected capacity change from 0 to 1024 [ 189.181175][ T8381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.222790][ T8380] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 189.279858][ T8386] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1304'. [ 189.331207][ T8373] loop0: detected capacity change from 0 to 32768 [ 189.349139][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1304'. [ 189.454879][ T8390] loop3: detected capacity change from 0 to 512 [ 189.546084][ T8398] tipc: Enabling of bearer rejected, already enabled [ 189.581698][ T8394] loop2: detected capacity change from 0 to 4096 [ 189.672929][ T8394] NILFS (loop2): invalid segment: Checksum error in segment payload [ 189.715028][ T8390] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1305: corrupted inode contents [ 189.728436][ T8406] loop1: detected capacity change from 0 to 512 [ 189.734916][ T8404] program syz.5.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.734922][ T8394] NILFS (loop2): trying rollback from an earlier position [ 189.794291][ T8390] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.1305: mark_inode_dirty error [ 189.822212][ T8394] NILFS (loop2): recovery complete [ 189.881932][ T8406] EXT4-fs (loop1): 1 orphan inode deleted [ 189.904984][ T8390] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1305: corrupted inode contents [ 189.928414][ T8406] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 189.951374][ T8390] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.1305: mark_inode_dirty error [ 189.963590][ T8406] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.984121][ T8413] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.011753][ T8390] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1305: corrupted inode contents [ 190.086759][ T8406] EXT4-fs (loop1): shut down requested (2) [ 190.092697][ T8390] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 190.143312][ T8390] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1305: corrupted inode contents [ 190.187462][ T8419] loop5: detected capacity change from 0 to 1024 [ 190.211223][ T8390] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.1305: mark_inode_dirty error [ 190.242852][ T8390] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 190.317848][ T8419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.361601][ T8390] EXT4-fs (loop3): 1 truncate cleaned up [ 190.388541][ T8423] loop2: detected capacity change from 0 to 256 [ 190.393327][ T8421] loop1: detected capacity change from 0 to 2048 [ 190.408342][ T8390] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 190.444278][ T8390] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.535708][ T8421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.692584][ T8430] loop0: detected capacity change from 0 to 1024 [ 190.775483][ T8430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.974213][ T8442] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 191.119010][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 191.408040][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1335'. [ 191.476408][ T8463] loop3: detected capacity change from 0 to 256 [ 191.527879][ T8466] loop2: detected capacity change from 0 to 256 [ 191.698538][ T8466] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 191.737737][ T8440] loop1: detected capacity change from 0 to 32768 [ 191.822695][ T8478] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.873443][ T8440] JBD2: Ignoring recovery information on journal [ 191.922036][ T8484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 191.982451][ T8440] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 192.001292][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1346'. [ 192.047864][ T4167] ocfs2: Unmounting device (7,1) on (node local) [ 192.120148][ T8491] loop5: detected capacity change from 0 to 512 [ 192.275637][ T8491] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 192.356172][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1354'. [ 192.607023][ T8510] siw: device registration error -23 [ 192.660406][ T8488] loop2: detected capacity change from 0 to 32768 [ 192.774606][ T8516] loop5: detected capacity change from 0 to 4096 [ 192.790778][ T8488] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1347 (8488) [ 192.842033][ T8488] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 192.859959][ T8488] BTRFS info (device loop2): disabling tree log [ 192.873969][ T8488] BTRFS info (device loop2): metadata ratio 65537 [ 192.880615][ T8488] BTRFS info (device loop2): metadata ratio 64 [ 192.887722][ T6607] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 192.906843][ T8488] BTRFS info (device loop2): using free space tree [ 192.910113][ T8516] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 192.913533][ T8488] BTRFS info (device loop2): has skinny extents [ 193.040544][ T26] audit: type=1800 audit(1733796888.703:34): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1361" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 193.333920][ T6607] usb 2-1: config 0 has no interfaces? [ 193.339959][ T6607] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.350385][ T6607] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.362404][ T6607] usb 2-1: config 0 descriptor?? [ 193.368678][ T8488] BTRFS info (device loop2): enabling ssd optimizations [ 193.622162][ T4923] usb 2-1: USB disconnect, device number 10 [ 193.869405][ T8518] loop0: detected capacity change from 0 to 32768 [ 193.921762][ T8530] loop3: detected capacity change from 0 to 32768 [ 193.969303][ T8518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1360 (8518) [ 194.128408][ T8518] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 194.155445][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161823][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.198742][ T8518] BTRFS info (device loop0): setting nodatacow, compression disabled [ 194.235373][ T8518] BTRFS info (device loop0): max_inline at 0 [ 194.248350][ T8518] BTRFS info (device loop0): enabling disk space caching [ 194.275185][ T8518] BTRFS info (device loop0): turning off barriers [ 194.288700][ T8518] BTRFS info (device loop0): turning on flush-on-commit [ 194.311196][ T8518] BTRFS info (device loop0): doing ref verification [ 194.353853][ T8518] BTRFS info (device loop0): force clearing of disk cache [ 194.397543][ T8518] BTRFS info (device loop0): enabling ssd optimizations [ 194.443947][ T8518] BTRFS info (device loop0): max_inline at 4096 [ 194.450242][ T8518] BTRFS info (device loop0): disk space caching is enabled [ 194.483900][ T8518] BTRFS info (device loop0): has skinny extents [ 194.587276][ T8562] loop5: detected capacity change from 0 to 512 [ 194.711760][ T8562] EXT4-fs (loop5): orphan cleanup on readonly fs [ 194.729782][ T8562] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present [ 194.805279][ T8562] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 194.873465][ T8562] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1371: Failed to acquire dquot type 1 [ 194.910852][ T8518] BTRFS info (device loop0): clearing free space tree [ 194.920595][ T8553] loop2: detected capacity change from 0 to 32768 [ 194.923975][ T8518] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.944156][ T8562] EXT4-fs (loop5): 1 truncate cleaned up [ 194.974515][ T8562] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 195.013951][ T8518] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.094583][ T8562] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 195.159396][ T8562] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8 [ 195.268603][ T8591] loop3: detected capacity change from 0 to 2048 [ 195.456495][ T8591] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.511312][ T26] audit: type=1800 audit(1733796891.173:35): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1376" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 196.157337][ T8609] bridge0: port 2(syz_tun) entered blocking state [ 196.184175][ T8609] bridge0: port 2(syz_tun) entered disabled state [ 196.192428][ T8609] device syz_tun entered promiscuous mode [ 196.272910][ T8558] loop1: detected capacity change from 0 to 65536 [ 196.390076][ T8558] XFS (loop1): Mounting V5 Filesystem [ 196.481630][ T8558] XFS (loop1): Ending clean mount [ 196.560112][ T8612] loop0: detected capacity change from 0 to 32768 [ 196.575178][ T8558] XFS (loop1): Quotacheck needed: Please wait. [ 196.637750][ T8600] loop2: detected capacity change from 0 to 32768 [ 196.672446][ T8558] XFS (loop1): Quotacheck: Done. [ 196.698056][ T8600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1381 (8600) [ 196.710474][ T26] audit: type=1800 audit(1733796892.363:36): pid=8558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1370" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=42 res=0 errno=0 [ 196.767546][ T8624] loop3: detected capacity change from 0 to 4096 [ 196.810434][ T8600] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 196.829493][ T8600] BTRFS info (device loop2): using free space tree [ 196.841067][ T8600] BTRFS info (device loop2): has skinny extents [ 196.847610][ T4167] XFS (loop1): Unmounting Filesystem [ 196.877832][ T8624] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 197.122978][ T8624] ntfs: (device loop3): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 197.170148][ T8624] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 197.181477][ T8624] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 197.201241][ T8624] ntfs: volume version 3.1. [ 197.225620][ T8600] BTRFS info (device loop2): enabling ssd optimizations [ 197.356137][ T8624] Process accounting resumed [ 197.954014][ T5182] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.131957][ T8656] loop0: detected capacity change from 0 to 32768 [ 198.197579][ T8656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1389 (8656) [ 198.257253][ T8656] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 198.284007][ T8656] BTRFS info (device loop0): setting nodatacow, compression disabled [ 198.294450][ T8656] BTRFS info (device loop0): force clearing of disk cache [ 198.313883][ T8656] BTRFS info (device loop0): setting datacow [ 198.326315][ T8656] BTRFS info (device loop0): doing ref verification [ 198.344379][ T5182] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.353460][ T5182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.380949][ T8656] BTRFS info (device loop0): disabling free space tree [ 198.394009][ T8656] BTRFS info (device loop0): trying to use backup root at mount time [ 198.411685][ T8656] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 198.422466][ T5182] usb 6-1: config 0 descriptor?? [ 198.434612][ T8656] BTRFS info (device loop0): use zstd compression, level 3 [ 198.466863][ T8656] BTRFS info (device loop0): force zstd compression, level 3 [ 198.475310][ T8656] BTRFS info (device loop0): has skinny extents [ 198.485287][ T5182] cp210x 6-1:0.0: cp210x converter detected [ 198.542593][ T8681] loop3: detected capacity change from 0 to 1024 [ 198.633974][ T8664] loop1: detected capacity change from 0 to 32768 [ 198.692215][ T8664] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1390 (8664) [ 198.701542][ T8656] BTRFS info (device loop0): clearing free space tree [ 198.732814][ T8681] hfsplus: bad catalog entry type [ 198.766270][ T8656] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.786800][ T8656] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.802225][ T4220] hfsplus: b-tree write err: -5, ino 4 [ 198.824218][ T8664] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 198.832981][ T8664] BTRFS info (device loop1): setting nodatacow, compression disabled [ 198.880830][ T8700] loop3: detected capacity change from 0 to 256 [ 198.932989][ T8664] BTRFS info (device loop1): max_inline at 0 [ 198.947192][ T5182] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 198.984078][ T8664] BTRFS info (device loop1): enabling disk space caching [ 198.991163][ T8664] BTRFS info (device loop1): turning off barriers [ 199.009128][ T5182] usb 6-1: cp210x converter now attached to ttyUSB0 [ 199.019666][ T8664] BTRFS info (device loop1): turning on flush-on-commit [ 199.040875][ T8664] BTRFS info (device loop1): doing ref verification [ 199.085214][ T8700] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 199.104053][ T8664] BTRFS info (device loop1): force clearing of disk cache [ 199.111248][ T8664] BTRFS info (device loop1): enabling ssd optimizations [ 199.179913][ T8664] BTRFS info (device loop1): max_inline at 4096 [ 199.208624][ T8664] BTRFS info (device loop1): disk space caching is enabled [ 199.247474][ T26] audit: type=1800 audit(1733796894.913:37): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1403" name="file1" dev="loop3" ino=1048626 res=0 errno=0 [ 199.284792][ T8664] BTRFS info (device loop1): has skinny extents [ 199.529327][ T5184] usb 6-1: USB disconnect, device number 6 [ 199.584690][ T5184] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 199.636818][ T8664] BTRFS info (device loop1): clearing free space tree [ 199.665073][ T8664] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 199.691287][ T5184] cp210x 6-1:0.0: device disconnected [ 199.693791][ T4214] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 199.715311][ T8664] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.084031][ T4214] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.114491][ T4214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.213580][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1416'. [ 200.233960][ T4214] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.253843][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1417'. [ 200.262015][ T4214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.281180][ T4214] usb 3-1: SerialNumber: syz [ 200.476160][ T8757] loop0: detected capacity change from 0 to 256 [ 200.596527][ T4214] usb 3-1: 0:2 : does not exist [ 200.618306][ T8757] FAT-fs (loop0): Directory bread(block 1285) failed [ 200.658419][ T8757] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 200.796908][ T4214] usb 3-1: USB disconnect, device number 8 [ 201.126310][ T4244] udevd[4244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.341108][ T8792] netlink: 'syz.0.1436': attribute type 9 has an invalid length. [ 201.387794][ T8755] loop3: detected capacity change from 0 to 40427 [ 201.481260][ T8755] F2FS-fs (loop3): invalid crc value [ 201.511324][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x293/0x700 [ 201.554388][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4d1/0xb70 [ 201.611514][ T8755] F2FS-fs (loop3): Found nat_bits in checkpoint [ 201.740440][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4d1/0xb70 [ 201.787927][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4d1/0xb70 [ 201.823312][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x293/0x700 [ 201.906879][ T8755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 202.019403][ T8828] loop5: detected capacity change from 0 to 1024 [ 202.022218][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xef/0x6b0 [ 202.050415][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1a2/0xa80 [ 202.096036][ T8755] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1a2/0xa80 [ 202.129671][ T8828] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 202.203845][ T4180] attempt to access beyond end of device [ 202.203845][ T4180] loop3: rw=2049, want=40976, limit=40427 [ 202.216413][ T8828] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,resuid=0x0000000000000000,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,acl,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 202.603427][ T8810] loop0: detected capacity change from 0 to 32768 [ 202.635571][ T8846] loop5: detected capacity change from 0 to 256 [ 202.697741][ T8846] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 202.716385][ T8810] JBD2: Ignoring recovery information on journal [ 202.782509][ T8810] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 202.803741][ T8601] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 202.866680][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 202.912771][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 202.933561][ T26] audit: type=1800 audit(1733796898.593:38): pid=8810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1444" name="file0" dev="loop0" ino=16946 res=0 errno=0 [ 203.060823][ T4166] ocfs2: Unmounting device (7,0) on (node local) [ 203.167050][ T8601] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 203.214056][ T8601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.222124][ T8867] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.252431][ T8601] usb 2-1: config 0 descriptor?? [ 203.306276][ T8601] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 203.316220][ T8863] loop5: detected capacity change from 0 to 4096 [ 203.417968][ T8863] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 203.964074][ T8601] gspca_cpia1: usb_control_msg 01, error -71 [ 203.983789][ T8601] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 204.040331][ T8601] usb 2-1: USB disconnect, device number 11 [ 204.065122][ T8871] loop0: detected capacity change from 0 to 32768 [ 204.180032][ T8871] XFS (loop0): Mounting V5 Filesystem [ 204.281927][ T8883] loop2: detected capacity change from 0 to 32768 [ 204.291619][ T8871] XFS (loop0): Ending clean mount [ 204.297067][ T5051] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.330059][ T8903] loop5: detected capacity change from 0 to 4096 [ 204.339425][ T26] audit: type=1800 audit(1733796900.003:39): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1469" name="file1" dev="loop0" ino=7430 res=0 errno=0 [ 204.359952][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.373086][ T4166] XFS (loop0): Unmounting Filesystem [ 204.405320][ T8903] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 204.544538][ T8903] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 204.632235][ T8907] loop1: detected capacity change from 0 to 512 [ 204.764079][ T5051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.765679][ T5260] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 204.780642][ T5051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.798771][ T5051] usb 4-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 204.808255][ T5051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.818724][ T5051] usb 4-1: config 0 descriptor?? [ 204.868451][ T8907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.904315][ T8907] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.932283][ T5260] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 204.972639][ T8912] Falling back ldisc for ptm0. [ 204.983636][ T8907] Quota error (device loop1): write_blk: dquota write failed [ 205.058690][ T8907] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 205.101369][ T8907] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1486: Failed to acquire dquot type 1 [ 205.297943][ T5051] wacom 0003:056A:032A.0006: unknown main item tag 0x4 [ 205.356937][ T5051] wacom 0003:056A:032A.0006: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.3-1/input0 [ 205.500457][ T4664] usb 4-1: USB disconnect, device number 8 [ 205.684400][ T8931] loop1: detected capacity change from 0 to 128 [ 205.788759][ T8931] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.874605][ T8931] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.048737][ T8937] loop2: detected capacity change from 0 to 8 [ 206.080491][ T8939] loop1: detected capacity change from 0 to 512 [ 206.104615][ T8937] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 206.150181][ T8939] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 206.177407][ T8914] loop5: detected capacity change from 0 to 40427 [ 206.202038][ T8939] EXT4-fs (loop1): 1 truncate cleaned up [ 206.214414][ T8939] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 206.258256][ T8944] loop3: detected capacity change from 0 to 256 [ 206.363972][ T8914] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 206.373857][ T8914] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 206.386045][ T8944] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 206.386578][ T8914] F2FS-fs (loop5): invalid crc value [ 206.442866][ T8914] F2FS-fs (loop5): Found nat_bits in checkpoint [ 206.626870][ T8914] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 206.646686][ T8914] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 206.818589][ T5260] attempt to access beyond end of device [ 206.818589][ T5260] loop5: rw=2049, want=45104, limit=40427 [ 207.257656][ T8970] loop0: detected capacity change from 0 to 2048 [ 207.322692][ T8970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.467111][ T8958] loop1: detected capacity change from 0 to 32768 [ 207.583068][ T8958] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.1505 (8958) [ 207.627612][ T8958] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 207.656963][ T8958] BTRFS info (device loop1): disabling tree log [ 207.660633][ T8964] loop3: detected capacity change from 0 to 40427 [ 207.663361][ T8958] BTRFS info (device loop1): metadata ratio 65537 [ 207.743052][ T8966] loop2: detected capacity change from 0 to 32768 [ 207.761507][ T8958] BTRFS info (device loop1): metadata ratio 64 [ 207.772780][ T8958] BTRFS info (device loop1): using free space tree [ 207.780090][ T8958] BTRFS info (device loop1): has skinny extents [ 207.787624][ T8964] F2FS-fs (loop3): invalid crc value [ 207.839599][ T8964] F2FS-fs (loop3): Found nat_bits in checkpoint [ 207.893380][ T8958] BTRFS info (device loop1): enabling ssd optimizations [ 207.931805][ T9000] loop0: detected capacity change from 0 to 256 [ 208.095922][ T9000] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 208.129171][ T8978] loop5: detected capacity change from 0 to 32768 [ 208.194518][ T8964] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 208.224801][ T8964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 208.282254][ T8978] ERROR: (device loop5): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 208.282254][ T8978] [ 208.313967][ T26] audit: type=1800 audit(1733796903.973:40): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1512" name="file1" dev="loop0" ino=1048629 res=0 errno=0 [ 208.322247][ T9000] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930443) [ 208.322247][ T9000] [ 208.379703][ T8978] ERROR: (device loop5): remounting filesystem as read-only [ 208.394522][ T8978] ERROR: (device loop5): jfs_rename: [ 208.394522][ T8978] [ 208.412756][ T9000] exFAT-fs (loop0): Filesystem has been set read-only [ 208.431066][ T9000] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805a8c4260 iblock : 8, err : -5) [ 208.495607][ T4180] attempt to access beyond end of device [ 208.495607][ T4180] loop3: rw=2049, want=45104, limit=40427 [ 208.974114][ T5260] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 208.974114][ T5260] [ 209.175502][ T9015] loop0: detected capacity change from 0 to 1764 [ 209.470329][ T9021] loop5: detected capacity change from 0 to 4096 [ 209.513860][ T8601] kernel write not supported for file /input/mice (pid: 8601 comm: kworker/0:21) [ 209.551191][ T9021] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 209.651732][ T9028] loop0: detected capacity change from 0 to 4096 [ 209.706442][ T9021] ntfs3: loop5: failed to convert "c46c" to cp775 [ 209.757213][ T9028] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 210.111456][ T9037] loop3: detected capacity change from 0 to 2048 [ 210.255013][ T9037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.441406][ T26] audit: type=1326 audit(1733796906.103:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.503624][ T9033] loop2: detected capacity change from 0 to 32768 [ 210.511334][ T26] audit: type=1326 audit(1733796906.103:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.555608][ T26] audit: type=1326 audit(1733796906.163:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.577807][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.612104][ T26] audit: type=1326 audit(1733796906.173:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.641026][ T9057] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1540'. [ 210.650361][ T26] audit: type=1326 audit(1733796906.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.703168][ T9033] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1527 (9033) [ 210.751196][ T9061] netlink: 'syz.5.1542': attribute type 10 has an invalid length. [ 210.767604][ T9033] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 210.778713][ T26] audit: type=1326 audit(1733796906.193:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.815331][ T9033] BTRFS info (device loop2): setting nodatacow, compression disabled [ 210.825607][ T9063] sctp: [Deprecated]: syz.3.1539 (pid 9063) Use of int in max_burst socket option deprecated. [ 210.825607][ T9063] Use struct sctp_assoc_value instead [ 210.861595][ T9033] BTRFS info (device loop2): force clearing of disk cache [ 210.884273][ T9033] BTRFS info (device loop2): setting datacow [ 210.894507][ T26] audit: type=1326 audit(1733796906.193:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 210.921600][ T9033] BTRFS info (device loop2): doing ref verification [ 210.950292][ T9033] BTRFS info (device loop2): disabling free space tree [ 210.971657][ T9033] BTRFS info (device loop2): trying to use backup root at mount time [ 210.994703][ T26] audit: type=1326 audit(1733796906.193:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 211.024012][ T9033] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 211.087342][ T9033] BTRFS info (device loop2): use zstd compression, level 3 [ 211.106046][ T9075] mmap: syz.1.1547 (9075) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 211.112511][ T26] audit: type=1326 audit(1733796906.193:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 211.145371][ T9033] BTRFS info (device loop2): force zstd compression, level 3 [ 211.178166][ T9033] BTRFS info (device loop2): has skinny extents [ 211.227108][ T9080] loop3: detected capacity change from 0 to 2048 [ 211.251814][ T26] audit: type=1326 audit(1733796906.193:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3419feff19 code=0x7ffc0000 [ 211.426514][ T9098] loop1: detected capacity change from 0 to 128 [ 211.461906][ T9080] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.485055][ T9080] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.489340][ T9109] loop0: detected capacity change from 0 to 512 [ 211.551139][ T9109] EXT4-fs (loop0): inline encryption not supported [ 211.567746][ T9080] fs-verity: sha512 using implementation "sha512-avx2" [ 211.676409][ T9033] BTRFS info (device loop2): clearing free space tree [ 211.684837][ T9033] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 211.698966][ T9109] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 211.703977][ T9033] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 211.712467][ T9109] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.892629][ T9109] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #2: comm syz.0.1556: corrupted inode contents [ 211.994658][ T9109] EXT4-fs error (device loop0): ext4_dirty_inode:6010: inode #2: comm syz.0.1556: mark_inode_dirty error [ 212.016898][ T9137] loop3: detected capacity change from 0 to 256 [ 212.092476][ T9109] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #2: comm syz.0.1556: corrupted inode contents [ 212.165934][ T9109] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1556: mark_inode_dirty error [ 212.201730][ T9109] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #18: comm syz.0.1556: directory missing '.' [ 212.527065][ T9148] loop1: detected capacity change from 0 to 4096 [ 212.775816][ T9148] ntfs3: loop1: failed to convert "0000" to cp949 [ 213.099867][ T9166] loop2: detected capacity change from 0 to 256 [ 213.112127][ T9164] loop1: detected capacity change from 0 to 512 [ 213.187732][ T9166] exfat: Deprecated parameter 'namecase' [ 213.220629][ T9166] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 213.244291][ T9164] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.259272][ T9164] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1575: bg 0: block 248: padding at end of block bitmap is not set [ 213.362805][ T9178] netlink: 'syz.3.1582': attribute type 21 has an invalid length. [ 213.371199][ T9178] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 213.403026][ T9164] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1575: Failed to acquire dquot type 1 [ 213.475882][ T9164] EXT4-fs (loop1): 1 truncate cleaned up [ 213.502057][ T9164] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.555200][ T9164] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 213.604124][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1587'. [ 213.625782][ T9164] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 213.657834][ T9190] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1575: Failed to acquire dquot type 1 [ 213.704109][ T5184] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 213.931220][ T9194] loop1: detected capacity change from 0 to 512 [ 213.963943][ T5184] usb 4-1: Using ep0 maxpacket: 8 [ 214.004963][ T9194] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.074110][ T9194] EXT4-fs (loop1): 1 truncate cleaned up [ 214.079851][ T9194] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,nombcache,block_validity,,errors=continue. Quota mode: none. [ 214.096348][ T9177] loop0: detected capacity change from 0 to 32768 [ 214.106544][ T5184] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.114700][ T5184] usb 4-1: config 0 has no interface number 0 [ 214.120813][ T5184] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.132136][ T5184] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 214.141526][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.152673][ T5184] usb 4-1: config 0 descriptor?? [ 214.179346][ T9194] EXT4-fs warning (device loop1): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 214.197478][ T5184] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 214.244467][ T9177] XFS (loop0): Mounting V5 Filesystem [ 214.310170][ T9184] loop2: detected capacity change from 0 to 32768 [ 214.352264][ T9177] XFS (loop0): Ending clean mount [ 214.359195][ T9177] XFS (loop0): Quotacheck needed: Please wait. [ 214.364459][ T9184] XFS: attr2 mount option is deprecated. [ 214.371123][ T9184] XFS: ikeep mount option is deprecated. [ 214.389785][ T9184] XFS: noikeep mount option is deprecated. [ 214.444416][ T6606] usb 4-1: USB disconnect, device number 9 [ 214.502123][ T6606] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 214.523508][ T9177] XFS (loop0): Quotacheck: Done. [ 214.569000][ T9184] XFS (loop2): Mounting V5 Filesystem [ 214.665797][ T4166] XFS (loop0): Unmounting Filesystem [ 214.687894][ T9184] XFS (loop2): Ending clean mount [ 214.701878][ T9222] loop5: detected capacity change from 0 to 2048 [ 214.706014][ T9184] XFS (loop2): Quotacheck needed: Please wait. [ 214.809335][ T9222] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.825143][ T4432] udevd[4432]: incorrect nilfs2 checksum on /dev/loop5 [ 214.864498][ T4244] udevd[4244]: incorrect nilfs2 checksum on /dev/loop5 [ 214.933968][ T9225] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.962990][ T9227] loop1: detected capacity change from 0 to 64 [ 214.972499][ T9184] XFS (loop2): Quotacheck: Done. [ 215.118255][ T9227] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 215.136467][ T4168] XFS (loop2): Unmounting Filesystem [ 215.783171][ T9245] loop1: detected capacity change from 0 to 8192 [ 216.035103][ T9263] loop2: detected capacity change from 0 to 1024 [ 216.121740][ T9263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.236438][ T9270] loop1: detected capacity change from 0 to 256 [ 216.323413][ T9239] loop3: detected capacity change from 0 to 32768 [ 216.338666][ T9270] FAT-fs (loop1): bogus sectors per cluster 255 [ 216.354149][ T9270] FAT-fs (loop1): Can't find a valid FAT filesystem [ 216.398706][ T9277] loop0: detected capacity change from 0 to 512 [ 216.525117][ T9239] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 216.556238][ T9277] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.1619: iget: bogus i_mode (0) [ 216.583240][ T9277] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1619: couldn't read orphan inode 17 (err -117) [ 216.606109][ T9277] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.643711][ T21] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 216.732404][ T9277] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1619: bg 0: block 7: invalid block bitmap [ 216.844219][ T4180] ocfs2: Unmounting device (7,3) on (node local) [ 216.914819][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 217.039420][ T9301] pim6reg1: tun_chr_ioctl cmd 2148553947 [ 217.054324][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 217.062367][ T21] usb 6-1: config 0 has no interface number 0 [ 217.091266][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.107882][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.124516][ T21] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 217.134637][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.146269][ T21] usb 6-1: config 0 descriptor?? [ 217.243681][ T9309] device team0 entered promiscuous mode [ 217.259596][ T9309] device team_slave_0 entered promiscuous mode [ 217.292199][ T9309] device team_slave_1 entered promiscuous mode [ 217.308072][ T9308] device team0 left promiscuous mode [ 217.352039][ T9308] device team_slave_0 left promiscuous mode [ 217.381893][ T9308] device team_slave_1 left promiscuous mode [ 217.623028][ T9307] loop0: detected capacity change from 0 to 32768 [ 217.714112][ T8601] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.731748][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 217.731764][ T26] audit: type=1800 audit(1733796913.393:51): pid=9307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1631" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 217.758195][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.777874][ T9322] program syz.1.1636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.846414][ T9325] netlink: 'syz.1.1637': attribute type 4 has an invalid length. [ 217.854088][ T21] uclogic 0003:28BD:0094.0007: pen parameters not found [ 217.861146][ T21] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 218.102692][ T21] usb 6-1: USB disconnect, device number 7 [ 218.133999][ T8601] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 218.161071][ T8601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.191335][ T8601] usb 4-1: config 0 descriptor?? [ 218.354625][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'. [ 218.460143][ T9350] loop2: detected capacity change from 0 to 764 [ 218.555925][ T9350] rock: directory entry would overflow storage [ 218.562162][ T9350] rock: sig=0x4654, size=5, remaining=4 [ 218.698060][ T8601] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 218.862933][ T9367] loop5: detected capacity change from 0 to 256 [ 218.910776][ T8601] playstation 0003:054C:0DF2.0008: Invalid reportID received, expected 9 got 210 [ 218.928224][ T8601] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 218.947864][ T8601] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 218.967272][ T8601] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 219.000434][ T9367] FAT-fs (loop5): Directory bread(block 64) failed [ 219.005531][ T8601] playstation: probe of 0003:054C:0DF2.0008 failed with error -22 [ 219.020681][ T9367] FAT-fs (loop5): Directory bread(block 65) failed [ 219.042588][ T9367] FAT-fs (loop5): Directory bread(block 66) failed [ 219.062792][ T9367] FAT-fs (loop5): Directory bread(block 67) failed [ 219.080118][ T9367] FAT-fs (loop5): Directory bread(block 68) failed [ 219.140857][ T8601] usb 4-1: USB disconnect, device number 10 [ 219.149921][ T9367] FAT-fs (loop5): Directory bread(block 69) failed [ 219.168634][ T9367] FAT-fs (loop5): Directory bread(block 70) failed [ 219.202104][ T9367] FAT-fs (loop5): Directory bread(block 71) failed [ 219.208113][ T9377] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 219.219805][ T9377] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 219.229927][ T9367] FAT-fs (loop5): Directory bread(block 72) failed [ 219.230021][ T9367] FAT-fs (loop5): Directory bread(block 73) failed [ 219.445733][ T9382] attempt to access beyond end of device [ 219.445733][ T9382] loop5: rw=524288, want=1196, limit=256 [ 219.484764][ T9382] attempt to access beyond end of device [ 219.484764][ T9382] loop5: rw=0, want=1196, limit=256 [ 219.499188][ T9357] loop1: detected capacity change from 0 to 32768 [ 219.525988][ T26] audit: type=1800 audit(1733796915.183:52): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1659" name="cpu.stat" dev="loop5" ino=1048636 res=0 errno=0 [ 219.557584][ T9388] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1669'. [ 219.595273][ T9357] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 219.595273][ T9357] [ 219.787504][ T9395] loop3: detected capacity change from 0 to 256 [ 219.922854][ T9395] CUSE: info not properly terminated [ 220.893607][ T9416] loop1: detected capacity change from 0 to 40427 [ 220.951216][ T9416] F2FS-fs (loop1): invalid crc value [ 220.975661][ T9416] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.039882][ T9416] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.079275][ T26] audit: type=1800 audit(1733796916.743:53): pid=9416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1682" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 221.144294][ T4167] attempt to access beyond end of device [ 221.144294][ T4167] loop1: rw=2049, want=45104, limit=40427 [ 221.187236][ T9435] loop2: detected capacity change from 0 to 32768 [ 221.331643][ T9435] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 221.500270][ T4168] ocfs2: Unmounting device (7,2) on (node local) [ 221.697836][ T9450] loop1: detected capacity change from 0 to 4096 [ 221.764053][ T9450] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 221.891302][ T9450] ntfs3: loop1: ino=1e, "file1" encrypted i/o not supported [ 221.914648][ T26] audit: type=1800 audit(1733796917.583:54): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1693" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 221.916977][ T9450] ntfs3: loop1: ino=1e, encrypted i/o not supported [ 221.944348][ T9442] loop5: detected capacity change from 0 to 32768 [ 222.070820][ T9442] JBD2: Ignoring recovery information on journal [ 222.090353][ T9456] loop1: detected capacity change from 0 to 64 [ 222.097148][ T4534] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 222.133586][ T9442] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 222.151634][ T26] audit: type=1800 audit(1733796917.813:55): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1694" name="file0" dev="loop5" ino=16946 res=0 errno=0 [ 222.219952][ T5260] ocfs2: Unmounting device (7,5) on (node local) [ 222.484094][ T4534] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 222.513356][ T9459] loop1: detected capacity change from 0 to 8192 [ 222.519972][ T4534] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 222.531466][ T4534] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 222.577232][ T9459] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 222.611815][ T9466] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 222.621210][ T4534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 222.643876][ T9459] REISERFS (device loop1): using ordered data mode [ 222.650425][ T9459] reiserfs: using flush barriers [ 222.691637][ T4534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 222.728659][ T9459] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.764087][ T9459] REISERFS (device loop1): checking transaction log (loop1) [ 222.791586][ T9459] REISERFS (device loop1): Using r5 hash to sort names [ 222.832957][ T9459] reiserfs: enabling write barrier flush mode [ 222.855939][ T9459] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 222.887849][ T4534] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 222.901964][ T4534] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 222.913241][ T4534] usb 3-1: Product: syz [ 222.918077][ T4534] usb 3-1: Manufacturer: syz [ 222.985279][ T4534] cdc_wdm 3-1:1.0: skipping garbage [ 222.990597][ T4534] cdc_wdm 3-1:1.0: skipping garbage [ 223.014308][ T9476] loop3: detected capacity change from 0 to 256 [ 223.027257][ T4534] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 223.043055][ T4534] cdc_wdm 3-1:1.0: Unknown control protocol [ 223.062992][ T9470] loop5: detected capacity change from 0 to 32768 [ 223.133318][ T9470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.5.1704 (9470) [ 223.158280][ T9476] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe40551cd, utbl_chksum : 0xe619d30d) [ 223.211494][ T26] audit: type=1800 audit(1733796918.873:56): pid=9476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1707" name="file1" dev="loop3" ino=1048637 res=0 errno=0 [ 223.253983][ T9470] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 223.294397][ T9470] BTRFS error (device loop5): superblock checksum mismatch [ 223.387577][ T9482] loop3: detected capacity change from 0 to 256 [ 223.445227][ T9470] BTRFS error (device loop5): open_ctree failed [ 223.486228][ T9482] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 223.554741][ T9482] exFAT-fs (loop3): hint_cluster is invalid (17) [ 223.863782][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 223.879134][ T9480] loop1: detected capacity change from 0 to 32768 [ 223.884661][ T4667] usb 3-1: USB disconnect, device number 9 [ 223.947317][ T9480] XFS: noikeep mount option is deprecated. [ 224.178467][ T9485] loop0: detected capacity change from 0 to 40427 [ 224.206169][ T9480] XFS (loop1): Mounting V5 Filesystem [ 224.237645][ T9485] F2FS-fs (loop0): invalid crc value [ 224.299314][ T9480] XFS (loop1): Ending clean mount [ 224.308477][ T9485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 224.310422][ T9480] XFS (loop1): Quotacheck needed: Please wait. [ 224.372401][ T4540] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.425663][ T9480] XFS (loop1): Quotacheck: Done. [ 224.426147][ T9485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.521543][ T4540] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.556043][ T4167] XFS (loop1): Unmounting Filesystem [ 224.699260][ T4540] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.765780][ T5051] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.008175][ T4540] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.157372][ T5051] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.189990][ T5051] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.215580][ T5051] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.254492][ T5051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.314616][ T9505] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.501874][ T9525] loop0: detected capacity change from 0 to 2048 [ 225.588138][ T9525] EXT4-fs (loop0): Ignoring removed nobh option [ 225.601499][ T4667] usb 3-1: USB disconnect, device number 10 [ 225.602876][ T4540] tipc: Disabling bearer [ 225.639638][ T4540] tipc: Left network mode [ 225.685291][ T9529] device batadv0 entered promiscuous mode [ 225.703583][ T9529] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 225.775830][ T9525] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,nodelalloc,abort,,errors=continue. Quota mode: writeback. [ 225.794351][ T9538] loop3: detected capacity change from 0 to 2048 [ 225.827730][ T9525] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.862351][ T9507] chnl_net:caif_netlink_parms(): no params data found [ 225.870931][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.888497][ T4244] udevd[4244]: incorrect nilfs2 checksum on /dev/loop3 [ 225.888512][ T9538] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 226.020569][ T9546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.244313][ T21] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.433533][ T9565] loop2: detected capacity change from 0 to 2048 [ 226.444309][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.452199][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.472726][ T9507] device bridge_slave_0 entered promiscuous mode [ 226.507961][ T9565] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 226.544706][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.552189][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.559484][ T9570] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 226.560996][ T9565] attempt to access beyond end of device [ 226.560996][ T9565] loop2: rw=524288, want=33554432, limit=2048 [ 226.584759][ T9507] device bridge_slave_1 entered promiscuous mode [ 226.635845][ T21] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.675505][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.709576][ T21] usb 2-1: config 0 descriptor?? [ 226.716227][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.737652][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.919506][ T9507] team0: Port device team_slave_0 added [ 226.942832][ T9507] team0: Port device team_slave_1 added [ 226.949407][ T4214] Bluetooth: hci3: command 0x0409 tx timeout [ 226.981956][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.999903][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.054708][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.074618][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.081594][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.124135][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.190767][ T8601] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.225612][ T21] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 227.237789][ T21] [drm] Initialized udl on minor 2 [ 227.297963][ T9507] device hsr_slave_0 entered promiscuous mode [ 227.313547][ T9507] device hsr_slave_1 entered promiscuous mode [ 227.344925][ T9507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.363919][ T9507] Cannot create hsr debugfs directory [ 227.434906][ T8601] usb 4-1: Using ep0 maxpacket: 32 [ 227.554218][ T8601] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.696523][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 227.706172][ T21] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 227.727389][ T8601] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.733819][ T6606] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.745794][ T8601] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.755365][ T8601] usb 4-1: Product: syz [ 227.759722][ T8601] usb 4-1: Manufacturer: syz [ 227.765239][ T8601] usb 4-1: SerialNumber: syz [ 227.769283][ T21] usb 2-1: USB disconnect, device number 12 [ 227.780902][ T6606] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 227.805281][ T8601] usb 4-1: config 0 descriptor?? [ 227.818848][ T6606] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 227.824338][ T9563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 227.833385][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1742'. [ 227.846244][ T9604] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1742'. [ 227.855933][ T9604] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1742'. [ 227.917158][ T4540] device hsr_slave_0 left promiscuous mode [ 227.961320][ T4540] device hsr_slave_1 left promiscuous mode [ 227.977571][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.989215][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.998758][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.006916][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.025356][ T4540] device bridge_slave_1 left promiscuous mode [ 228.031623][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.046770][ T4540] device bridge_slave_0 left promiscuous mode [ 228.062558][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.123058][ T4540] device veth1_macvtap left promiscuous mode [ 228.135904][ T4540] device veth0_macvtap left promiscuous mode [ 228.142076][ T4540] device veth1_vlan left promiscuous mode [ 228.148296][ T4540] device veth0_vlan left promiscuous mode [ 228.171615][ T21] usb 4-1: USB disconnect, device number 11 [ 228.278724][ T9614] loop2: detected capacity change from 0 to 64 [ 228.529015][ T4540] team0 (unregistering): Port device team_slave_1 removed [ 228.543384][ T4540] team0 (unregistering): Port device team_slave_0 removed [ 228.557958][ T4540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.566163][ T4211] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 228.582305][ T4540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.687937][ T4540] bond0 (unregistering): Released all slaves [ 228.820485][ T4211] usb 2-1: Using ep0 maxpacket: 32 [ 228.984038][ T4211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.024064][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 229.050713][ T9507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.074152][ T4211] usb 2-1: config 127 has an invalid interface number: 25 but max is 0 [ 229.103585][ T9507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.114094][ T4211] usb 2-1: config 127 has no interface number 0 [ 229.141232][ T4211] usb 2-1: config 127 interface 25 has no altsetting 0 [ 229.177714][ T9507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.209563][ T9507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.224608][ T9634] loop0: detected capacity change from 0 to 512 [ 229.325194][ T4211] usb 2-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 229.334463][ T4214] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.342190][ T9634] EXT4-fs (loop0): Invalid log block size: 3607101440 [ 229.364116][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.372315][ T4211] usb 2-1: Product: syz [ 229.391258][ T4211] usb 2-1: Manufacturer: syz [ 229.410299][ T4211] usb 2-1: SerialNumber: syz [ 229.522273][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.573918][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 229.588785][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.606820][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.669877][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.696409][ T4214] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.712262][ T4211] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 229.724059][ T5051] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.744204][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.753368][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.762059][ T4214] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 229.789393][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.796573][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.813834][ T4214] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 229.854111][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.882345][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.907972][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.915155][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.943810][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.962958][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.984068][ T5051] usb 3-1: Using ep0 maxpacket: 16 [ 229.993376][ T4214] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.997179][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.024138][ T4214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.025042][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.032156][ T4214] usb 4-1: Product: syz [ 230.032177][ T4214] usb 4-1: Manufacturer: 碐鑪驗⇞᭢৶ [ 230.032195][ T4214] usb 4-1: SerialNumber: syz [ 230.095552][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.114809][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.125578][ T5051] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 230.143689][ T5051] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 230.155292][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.173788][ T5051] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.183776][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.192292][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.207783][ T9507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.241557][ T4211] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 230.274661][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.303991][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.314264][ T4211] usb 2-1: device reset changed ep0 maxpacket size! [ 230.322242][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.346264][ T4211] ueagle-atm 2-1:127.25: usbatm_usb_probe: bind failed: -19! [ 230.351593][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.393916][ T4214] cdc_ncm 4-1:1.0: bind() failure [ 230.394342][ T5051] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.402361][ T4211] usb 2-1: USB disconnect, device number 13 [ 230.420422][ T4214] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 230.428605][ T5051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.453868][ T4214] cdc_ncm 4-1:1.1: bind() failure [ 230.460730][ T5051] usb 3-1: Product: syz [ 230.476211][ T9659] loop0: detected capacity change from 0 to 32768 [ 230.493326][ T5051] usb 3-1: Manufacturer: syz [ 230.506597][ T4214] usb 4-1: USB disconnect, device number 12 [ 230.523487][ T5051] usb 3-1: SerialNumber: syz [ 230.563284][ T9659] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.0.1758 (9659) [ 230.626332][ T4211] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 230.634325][ T9659] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 230.652304][ T9659] BTRFS error (device loop0): superblock checksum mismatch [ 230.705390][ T9659] BTRFS error (device loop0): open_ctree failed [ 230.758833][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.811046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.829589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.873824][ T4211] usb 2-1: Using ep0 maxpacket: 16 [ 230.884107][ T5051] usb 3-1: 0:2 : does not exist [ 230.947246][ T5051] usb 3-1: USB disconnect, device number 11 [ 231.073935][ T4211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 231.103747][ T4829] Bluetooth: hci3: command 0x040f tx timeout [ 231.133765][ T4211] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 231.141395][ T4211] usb 2-1: can't read configurations, error -71 [ 231.296863][ T4244] udevd[4244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.449363][ T9691] device bond3 entered promiscuous mode [ 231.466944][ T9691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.535935][ T9691] bond3 (unregistering): Released all slaves [ 231.653510][ T26] audit: type=1400 audit(1733796927.313:57): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 231.853526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.971140][ T9712] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1767'. [ 232.186271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.256529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.280721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.347163][ T9507] device veth0_vlan entered promiscuous mode [ 232.364611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.382851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.420907][ T9507] device veth1_vlan entered promiscuous mode [ 232.506733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.525273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.559328][ T9724] loop3: detected capacity change from 0 to 2048 [ 232.569547][ T9507] device veth0_macvtap entered promiscuous mode [ 232.587963][ T9507] device veth1_macvtap entered promiscuous mode [ 232.674389][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.686107][ T9724] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.786970][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.812882][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.852536][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.881875][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.898438][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.924079][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.940259][ T9703] loop2: detected capacity change from 0 to 40427 [ 232.955940][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.018543][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.031794][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.044553][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.054851][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.077130][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.120460][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.151915][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.182974][ T9507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.184783][ T4923] Bluetooth: hci3: command 0x0419 tx timeout [ 233.214413][ T9719] loop1: detected capacity change from 0 to 32768 [ 233.220991][ T9507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.240685][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.252465][ T9507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.274983][ T9507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.288849][ T9507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.298228][ T9507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.332048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.341039][ T9703] F2FS-fs (loop2): invalid crc value [ 233.388178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.404790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.414166][ T9719] XFS (loop1): Mounting V5 Filesystem [ 233.426100][ T9703] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.427994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.443018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.452658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.664397][ T9703] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.674123][ T9719] XFS (loop1): Ending clean mount [ 233.729727][ T9552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.764014][ T9552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.820110][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.840938][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 233.849145][ T4167] XFS (loop1): Unmounting Filesystem [ 233.849276][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.957502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 234.019455][ T4540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.233479][ T4540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.341616][ T4540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.416357][ T9729] chnl_net:caif_netlink_parms(): no params data found [ 234.555932][ T4540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.717713][ T9776] loop2: detected capacity change from 0 to 4096 [ 234.755003][ T9755] loop3: detected capacity change from 0 to 40427 [ 234.791954][ T9783] loop1: detected capacity change from 0 to 4096 [ 234.832564][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.840123][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.851201][ T9729] device bridge_slave_0 entered promiscuous mode [ 234.861367][ T9755] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 234.869451][ T9755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 234.873502][ T9776] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 234.908393][ T9783] NILFS (loop1): invalid segment: Checksum error in segment payload [ 234.919150][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.928776][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.937358][ T9755] F2FS-fs (loop3): invalid crc value [ 234.944394][ T9783] NILFS (loop1): trying rollback from an earlier position [ 234.952832][ T9729] device bridge_slave_1 entered promiscuous mode [ 234.983122][ T9776] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 235.016064][ T9755] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.024318][ T4211] Bluetooth: hci0: command 0x0409 tx timeout [ 235.027238][ T9783] NILFS (loop1): recovery complete [ 235.055365][ T9788] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.203395][ T9729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.215693][ T9729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.215894][ T9755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 235.241427][ T9755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 235.381907][ T9792] loop1: detected capacity change from 0 to 512 [ 235.415904][ T9729] team0: Port device team_slave_0 added [ 235.488995][ T9792] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.509649][ T9729] team0: Port device team_slave_1 added [ 235.509736][ T4180] attempt to access beyond end of device [ 235.509736][ T4180] loop3: rw=2049, want=45104, limit=40427 [ 235.556766][ T9792] EXT4-fs (loop1): orphan cleanup on readonly fs [ 235.563211][ T9792] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.1779: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 235.623597][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.630847][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.657438][ T9729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.704918][ T9802] netem: change failed [ 235.710589][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.716683][ T9792] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.1779: Bad quota inode: 3, type: 0 [ 235.723174][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.756930][ T9729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.828363][ T9792] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 235.882837][ T9792] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 235.904157][ T9729] device hsr_slave_0 entered promiscuous mode [ 235.912606][ T9729] device hsr_slave_1 entered promiscuous mode [ 235.923782][ T9792] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.935385][ T9729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.983869][ T9729] Cannot create hsr debugfs directory [ 236.184637][ T5051] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 236.277258][ T9815] loop1: detected capacity change from 0 to 2048 [ 236.412287][ T9825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.454067][ T5051] usb 7-1: Using ep0 maxpacket: 32 [ 236.595067][ T9729] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 236.614209][ T5051] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 236.661733][ T9729] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 236.701994][ T9839] loop1: detected capacity change from 0 to 128 [ 236.730774][ T9729] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.755601][ T9729] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.769859][ T9839] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 236.824377][ T5051] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 236.849976][ T5051] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 236.864363][ T5051] usb 7-1: Product: syz [ 236.884624][ T5051] usb 7-1: Manufacturer: syz [ 236.894507][ T5051] usb 7-1: SerialNumber: syz [ 236.915227][ T4167] sysv_free_block: trying to free block not in datazone [ 236.937336][ T5051] usb 7-1: config 0 descriptor?? [ 236.964889][ T9806] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 236.973931][ T4167] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 237.104083][ T8601] Bluetooth: hci0: command 0x041b tx timeout [ 237.153396][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.161353][ T9849] loop2: detected capacity change from 0 to 4096 [ 237.216476][ T9849] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 237.228184][ T21] usb 7-1: USB disconnect, device number 2 [ 237.241443][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.273881][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.331121][ T9729] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.333495][ T9849] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 237.374436][ T9856] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 237.377763][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.382225][ T9856] netlink: 9284 bytes leftover after parsing attributes in process `syz.1.1800'. [ 237.382262][ T9856] netlink: 'syz.1.1800': attribute type 1 has an invalid length. [ 237.441387][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.451284][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.458423][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.493140][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.564712][ T26] audit: type=1800 audit(1733796933.233:58): pid=9849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1798" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 237.594200][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.613454][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.640558][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.647748][ T9552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.657828][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.729192][ T4540] device hsr_slave_0 left promiscuous mode [ 237.767160][ T4540] device hsr_slave_1 left promiscuous mode [ 237.783826][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.793910][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.804274][ T21] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 237.827481][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.843745][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.883733][ T4540] device bridge_slave_0 left promiscuous mode [ 237.893589][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.976504][ T4540] device veth1_macvtap left promiscuous mode [ 237.984120][ T4540] device veth1_vlan left promiscuous mode [ 237.996365][ T4540] device veth0_vlan left promiscuous mode [ 238.051951][ T9876] loop6: detected capacity change from 0 to 512 [ 238.073999][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 238.141704][ T9876] EXT4-fs (loop6): Ignoring removed bh option [ 238.194127][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.213141][ T9876] EXT4-fs (loop6): mounted filesystem without journal. Opts: bh,bsddf,init_itable=0x0000000000000009,errors=remount-ro,quota,. Quota mode: writeback. [ 238.223719][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.240462][ T9876] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.312323][ T21] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.340044][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.362692][ T9876] EXT4-fs error (device loop6): ext4_rename:3873: inode #16: comm syz.6.1804: target of rename is already freed [ 238.365422][ T9862] loop1: detected capacity change from 0 to 32768 [ 238.396786][ T9876] EXT4-fs (loop6): Remounting filesystem read-only [ 238.410254][ T21] usb 4-1: config 0 descriptor?? [ 238.416143][ T4540] bond0 (unregistering): (slave bond1): Releasing backup interface [ 238.434470][ T9862] XFS: ikeep mount option is deprecated. [ 238.444470][ T4540] bond1 (unregistering): Released all slaves [ 238.450862][ T9862] XFS: ikeep mount option is deprecated. [ 238.511738][ T9862] XFS (loop1): Mounting V5 Filesystem [ 238.616651][ T9862] XFS (loop1): Ending clean mount [ 238.623916][ T9862] XFS (loop1): Quotacheck needed: Please wait. [ 238.659001][ T4540] team0 (unregistering): Port device team_slave_1 removed [ 238.688195][ T4540] team0 (unregistering): Port device team_slave_0 removed [ 238.690106][ T9862] XFS (loop1): Quotacheck: Done. [ 238.741400][ T4540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.766372][ T4540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.797410][ T4167] XFS (loop1): Unmounting Filesystem [ 238.927534][ T21] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input16 [ 238.961134][ T4540] bond0 (unregistering): Released all slaves [ 239.049464][ T21] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 239.093464][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.119013][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.138687][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.156290][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.177361][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.183912][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 239.233313][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.244151][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.252883][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.287553][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.357501][ T9552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.372227][ T9729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.405786][ T4211] usb 4-1: USB disconnect, device number 13 [ 239.425627][ T9898] loop6: detected capacity change from 0 to 16 [ 239.480324][ T9904] loop1: detected capacity change from 0 to 2048 [ 239.522811][ T9898] erofs: (device loop6): mounted with root inode @ nid 36. [ 239.596742][ T146] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 239.603260][ T9909] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.636165][ T9898] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 239.660747][ T26] audit: type=1800 audit(1733796935.323:59): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1809" name="file3" dev="loop6" ino=89 res=0 errno=0 [ 239.723886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.732436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.797337][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.539322][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.570148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.651392][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.697167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.735186][ T9729] device veth0_vlan entered promiscuous mode [ 240.756152][ T9951] netlink: 'syz.3.1820': attribute type 1 has an invalid length. [ 240.764175][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.799331][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.813404][ T9900] loop2: detected capacity change from 0 to 32768 [ 240.848610][ T9729] device veth1_vlan entered promiscuous mode [ 240.922364][ T9900] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1808 (9900) [ 240.974642][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.999289][ T9900] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 241.015434][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.043917][ T9900] BTRFS info (device loop2): enabling disk space caching [ 241.050997][ T9900] BTRFS info (device loop2): enabling auto defrag [ 241.058026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.108350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.117389][ T9900] BTRFS info (device loop2): doing ref verification [ 241.143768][ T9900] BTRFS info (device loop2): use no compression [ 241.153372][ T9729] device veth0_macvtap entered promiscuous mode [ 241.173686][ T9900] BTRFS info (device loop2): force clearing of disk cache [ 241.180937][ T9900] BTRFS info (device loop2): disabling disk space caching [ 241.189714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.221278][ T9729] device veth1_macvtap entered promiscuous mode [ 241.223708][ T9900] BTRFS info (device loop2): has skinny extents [ 241.285008][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 241.347060][ T9968] loop6: detected capacity change from 0 to 512 [ 241.360198][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.431665][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.445227][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.456151][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.457837][ T9968] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 241.466009][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.466031][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.466060][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.466075][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.467794][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.528587][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.539958][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.552060][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.564424][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.575241][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.599092][ T9942] loop1: detected capacity change from 0 to 32768 [ 241.604011][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.623703][ T9729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.650056][ T9729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.669725][ T9968] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 241.680462][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.697042][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.729460][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.738445][ T9900] BTRFS info (device loop2): enabling ssd optimizations [ 241.761118][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.765325][ T9968] EXT4-fs (loop6): 1 truncate cleaned up [ 241.781595][ T9900] BTRFS info (device loop2): clearing free space tree [ 241.785074][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.820018][ T9942] XFS (loop1): Mounting V5 Filesystem [ 241.823819][ T9900] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.827791][ T9968] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.839418][ T9729] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.889108][ T9900] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.905702][ T9729] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.914624][ T9729] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.923348][ T9729] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.067821][ T9942] XFS (loop1): Ending clean mount [ 242.143242][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.160023][ T26] audit: type=1800 audit(1733796937.823:60): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1808" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 242.205617][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.262329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.315516][ T4167] XFS (loop1): Unmounting Filesystem [ 242.459524][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.511502][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.594774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.359713][T10043] loop3: detected capacity change from 0 to 2048 [ 243.495916][T10043] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.551296][T10051] loop2: detected capacity change from 0 to 1024 [ 243.668190][T10021] loop6: detected capacity change from 0 to 40427 [ 243.725687][T10051] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.759690][T10021] F2FS-fs (loop6): invalid crc value [ 243.828109][T10051] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.858267][T10021] F2FS-fs (loop6): Found nat_bits in checkpoint [ 244.033425][T10051] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1831: inode #262275072: comm syz.2.1831: iget: illegal inode # [ 244.123405][T10051] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1831: error while reading EA inode 262275072 err=-117 [ 244.174153][T10021] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 244.466785][ T9507] attempt to access beyond end of device [ 244.466785][ T9507] loop6: rw=2049, want=45104, limit=40427 [ 244.520295][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 244.596084][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 244.843762][ T4534] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 245.076239][T10108] kernel read not supported for file /eth0 (pid: 10108 comm: syz.1.1855) [ 245.142695][T10110] 9pnet: Insufficient options for proto=fd [ 245.148931][ T26] audit: type=1800 audit(1733796940.803:61): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1855" name="eth0" dev="mqueue" ino=50591 res=0 errno=0 [ 245.223941][ T4534] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 245.273785][ T4534] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 245.333804][ T4534] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.543913][ T4534] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.553040][ T4534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.614553][ T4534] usb 3-1: Product: syz [ 245.624234][ T4534] usb 3-1: Manufacturer: syz [ 245.629099][ T4534] usb 3-1: SerialNumber: syz [ 245.931090][T10096] loop7: detected capacity change from 0 to 32768 [ 245.976318][T10140] loop6: detected capacity change from 0 to 2048 [ 246.022883][T10145] loop1: detected capacity change from 0 to 128 [ 246.077308][T10145] EXT4-fs (loop1): Test dummy encryption mode enabled [ 246.127740][T10145] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,,errors=continue. Quota mode: none. [ 246.159243][T10140] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.168334][T10145] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.170275][ T4534] usb 3-1: 0:2 : does not exist [ 246.279340][T10122] loop3: detected capacity change from 0 to 40427 [ 246.351447][T10122] F2FS-fs (loop3): invalid crc value [ 246.386809][T10122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 246.411781][ T4211] usb 3-1: USB disconnect, device number 12 [ 246.676826][ T4244] udevd[4244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.699784][T10122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 247.007209][ T4180] attempt to access beyond end of device [ 247.007209][ T4180] loop3: rw=2049, want=45104, limit=40427 [ 247.320345][T10198] loop6: detected capacity change from 0 to 4096 [ 247.491715][T10213] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.927762][T10229] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1882'. [ 248.044158][ T6606] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 248.307957][ T6606] usb 2-1: Using ep0 maxpacket: 8 [ 248.424460][ T6606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 248.464219][ T6606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 248.526945][ T6606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.573331][T10254] loop7: detected capacity change from 0 to 1024 [ 248.574030][ T6606] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.613685][ T6606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 248.623464][ T6606] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 248.717015][T10254] EXT4-fs (loop7): Test dummy encryption mode enabled [ 248.721371][ T6606] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 248.734579][ T6606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.748621][T10254] EXT4-fs (loop7): Ignoring removed orlov option [ 248.773427][ T6606] usb 2-1: config 0 descriptor?? [ 248.814914][T10254] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 248.821272][T10223] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.875627][T10254] EXT4-fs (loop7): shut down requested (2) [ 249.058086][ T146] Bluetooth: hci5: urb ffff888143fb4500 submission failed (90) [ 249.321295][ T4211] usb 2-1: USB disconnect, device number 16 [ 249.543576][T10251] loop3: detected capacity change from 0 to 32768 [ 249.625440][T10251] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1899 (10251) [ 249.681301][T10246] loop2: detected capacity change from 0 to 40427 [ 249.717934][T10251] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 249.744143][T10251] BTRFS info (device loop3): setting nodatasum [ 249.770953][T10251] BTRFS info (device loop3): using free space tree [ 249.783452][T10251] BTRFS info (device loop3): has skinny extents [ 249.823809][T10246] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 249.830809][T10246] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 249.884535][T10288] loop1: detected capacity change from 0 to 256 [ 249.903998][T10246] F2FS-fs (loop2): invalid crc value [ 249.968324][T10246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 249.985010][T10288] exfat: Deprecated parameter 'namecase' [ 250.066406][T10288] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 250.136929][T10288] exFAT-fs (loop1): failed to load alloc-bitmap [ 250.148326][T10288] exFAT-fs (loop1): failed to recognize exfat type [ 250.180259][T10251] BTRFS info (device loop3): enabling ssd optimizations [ 250.236423][T10246] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 250.266959][ T26] audit: type=1800 audit(1733796945.933:62): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1899" name="file0" dev="loop3" ino=258 res=0 errno=0 [ 250.267241][T10246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.448386][ T4168] attempt to access beyond end of device [ 250.448386][ T4168] loop2: rw=2049, want=45104, limit=40427 [ 251.025784][T10321] loop1: detected capacity change from 0 to 32768 [ 251.150189][T10321] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1918 (10321) [ 251.244331][T10321] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 251.295180][T10321] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 251.337540][T10334] loop2: detected capacity change from 0 to 128 [ 251.354061][T10321] BTRFS info (device loop1): use zstd compression, level 3 [ 251.363917][T10321] BTRFS info (device loop1): using free space tree [ 251.380334][T10321] BTRFS info (device loop1): has skinny extents [ 251.422007][T10334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 251.517944][T10334] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,,errors=continue. Quota mode: none. [ 251.545810][T10344] loop3: detected capacity change from 0 to 256 [ 251.555436][T10334] ext4 filesystem being mounted at /370/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.594380][T10344] exfat: Deprecated parameter 'namecase' [ 251.606217][T10344] exfat: Deprecated parameter 'namecase' [ 251.709968][T10344] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 251.726920][T10321] BTRFS info (device loop1): enabling ssd optimizations [ 252.583270][T10378] loop3: detected capacity change from 0 to 4096 [ 252.745936][T10388] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.781764][T10386] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 253.060694][T10370] loop2: detected capacity change from 0 to 32768 [ 253.078202][T10393] loop1: detected capacity change from 0 to 2048 [ 253.227358][T10370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1913 (10370) [ 253.334438][T10370] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 253.365591][T10393] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 253.381635][T10370] BTRFS info (device loop2): metadata ratio 2 [ 253.387745][T10393] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.454046][T10393] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1915: bg 0: block 345: padding at end of block bitmap is not set [ 253.533740][T10370] BTRFS info (device loop2): force zlib compression, level 3 [ 253.541362][T10370] BTRFS info (device loop2): use zlib compression, level 3 [ 253.564649][T10393] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0 [ 253.578164][T10370] BTRFS info (device loop2): enabling auto defrag [ 253.595845][T10370] BTRFS info (device loop2): max_inline at 0 [ 253.612096][T10393] fs-verity (loop1, inode 13): Error -117 building Merkle tree [ 253.618939][T10370] BTRFS info (device loop2): using free space tree [ 253.657812][T10370] BTRFS info (device loop2): has skinny extents [ 253.889635][T10412] netlink: 'syz.1.1919': attribute type 6 has an invalid length. [ 253.969975][T10370] BTRFS info (device loop2): enabling ssd optimizations [ 254.884980][T10444] [ 254.887348][T10444] ====================================================== [ 254.894378][T10444] WARNING: possible circular locking dependency detected [ 254.901405][T10444] 5.15.173-syzkaller #0 Not tainted [ 254.906607][T10444] ------------------------------------------------------ [ 254.913650][T10444] syz.1.1928/10444 is trying to acquire lock: [ 254.919735][T10444] ffff88805fddc918 (&disk->open_mutex){+.+.}-{3:3}, at: bd_register_pending_holders+0x33/0x320 [ 254.930128][T10444] [ 254.930128][T10444] but task is already holding lock: [ 254.937499][T10444] ffffffff8d1077e8 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x2f/0x1a0 [ 254.947029][T10444] [ 254.947029][T10444] which lock already depends on the new lock. [ 254.947029][T10444] [ 254.957443][T10444] [ 254.957443][T10444] the existing dependency chain (in reverse order) is: [ 254.966476][T10444] [ 254.966476][T10444] -> #8 (major_names_lock){+.+.}-{3:3}: [ 254.974235][T10444] lock_acquire+0x1db/0x4f0 [ 254.979275][T10444] __mutex_lock_common+0x1da/0x25a0 [ 254.985013][T10444] mutex_lock_nested+0x17/0x20 [ 254.990319][T10444] blk_request_module+0x2f/0x1a0 [ 254.995803][T10444] blkdev_get_no_open+0x39/0x190 [ 255.001281][T10444] blkdev_get_by_dev+0x89/0xa50 [ 255.006682][T10444] swsusp_check+0xb1/0x2c0 [ 255.011642][T10444] software_resume+0xc6/0x3c0 [ 255.016872][T10444] resume_store+0xe3/0x130 [ 255.021828][T10444] kernfs_fop_write_iter+0x3a2/0x4f0 [ 255.027649][T10444] vfs_write+0xacd/0xe50 [ 255.032569][T10444] ksys_write+0x1a2/0x2c0 [ 255.037438][T10444] do_syscall_64+0x3b/0xb0 [ 255.042412][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.048881][T10444] [ 255.048881][T10444] -> #7 (system_transition_mutex/1){+.+.}-{3:3}: [ 255.057429][T10444] lock_acquire+0x1db/0x4f0 [ 255.062480][T10444] __mutex_lock_common+0x1da/0x25a0 [ 255.068226][T10444] mutex_lock_nested+0x17/0x20 [ 255.073538][T10444] software_resume+0x7c/0x3c0 [ 255.078759][T10444] resume_store+0xe3/0x130 [ 255.083739][T10444] kernfs_fop_write_iter+0x3a2/0x4f0 [ 255.089566][T10444] vfs_write+0xacd/0xe50 [ 255.094345][T10444] ksys_write+0x1a2/0x2c0 [ 255.099212][T10444] do_syscall_64+0x3b/0xb0 [ 255.104174][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.110610][T10444] [ 255.110610][T10444] -> #6 (&of->mutex){+.+.}-{3:3}: [ 255.117864][T10444] lock_acquire+0x1db/0x4f0 [ 255.122913][T10444] __mutex_lock_common+0x1da/0x25a0 [ 255.128654][T10444] mutex_lock_nested+0x17/0x20 [ 255.133975][T10444] kernfs_seq_start+0x50/0x3b0 [ 255.139285][T10444] seq_read_iter+0x3d0/0xd10 [ 255.144419][T10444] vfs_read+0xa93/0xe10 [ 255.149111][T10444] ksys_read+0x1a2/0x2c0 [ 255.153874][T10444] do_syscall_64+0x3b/0xb0 [ 255.158816][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.165260][T10444] [ 255.165260][T10444] -> #5 (&p->lock){+.+.}-{3:3}: [ 255.172308][T10444] lock_acquire+0x1db/0x4f0 [ 255.177362][T10444] __mutex_lock_common+0x1da/0x25a0 [ 255.183096][T10444] mutex_lock_nested+0x17/0x20 [ 255.188385][T10444] seq_read_iter+0xae/0xd10 [ 255.193409][T10444] generic_file_splice_read+0x4ad/0x790 [ 255.199482][T10444] splice_direct_to_actor+0x448/0xc10 [ 255.205371][T10444] do_splice_direct+0x285/0x3d0 [ 255.210740][T10444] do_sendfile+0x622/0x1000 [ 255.215760][T10444] __se_sys_sendfile64+0x178/0x1e0 [ 255.221411][T10444] do_syscall_64+0x3b/0xb0 [ 255.226339][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.232750][T10444] [ 255.232750][T10444] -> #4 (sb_writers#3){.+.+}-{0:0}: [ 255.240131][T10444] lock_acquire+0x1db/0x4f0 [ 255.245148][T10444] lo_write_bvec+0x1a3/0x740 [ 255.250274][T10444] loop_process_work+0x2309/0x2af0 [ 255.256004][T10444] process_one_work+0x8a1/0x10c0 [ 255.261475][T10444] worker_thread+0xaca/0x1280 [ 255.266679][T10444] kthread+0x3f6/0x4f0 [ 255.271271][T10444] ret_from_fork+0x1f/0x30 [ 255.276297][T10444] [ 255.276297][T10444] -> #3 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 255.285414][T10444] lock_acquire+0x1db/0x4f0 [ 255.290431][T10444] process_one_work+0x7f1/0x10c0 [ 255.295880][T10444] worker_thread+0xaca/0x1280 [ 255.301071][T10444] kthread+0x3f6/0x4f0 [ 255.305652][T10444] ret_from_fork+0x1f/0x30 [ 255.310581][T10444] [ 255.310581][T10444] -> #2 ((null)){+.+.}-{0:0}: [ 255.317444][T10444] lock_acquire+0x1db/0x4f0 [ 255.322461][T10444] flush_workqueue+0x170/0x1610 [ 255.327827][T10444] drain_workqueue+0xc5/0x390 [ 255.333019][T10444] destroy_workqueue+0x7b/0xae0 [ 255.338482][T10444] __loop_clr_fd+0x241/0xbe0 [ 255.343590][T10444] blkdev_put+0x455/0x790 [ 255.348439][T10444] close_fs_devices+0x45e/0x8e0 [ 255.353934][T10444] btrfs_close_devices+0xc4/0x5c0 [ 255.359494][T10444] close_ctree+0x759/0x8b0 [ 255.364457][T10444] generic_shutdown_super+0x130/0x310 [ 255.370346][T10444] kill_anon_super+0x37/0x60 [ 255.375461][T10444] btrfs_kill_super+0x3d/0x50 [ 255.380660][T10444] deactivate_locked_super+0xa0/0x110 [ 255.386549][T10444] cleanup_mnt+0x44e/0x500 [ 255.391568][T10444] task_work_run+0x129/0x1a0 [ 255.396674][T10444] exit_to_user_mode_loop+0x106/0x130 [ 255.402564][T10444] exit_to_user_mode_prepare+0xb1/0x140 [ 255.408619][T10444] syscall_exit_to_user_mode+0x5d/0x240 [ 255.414677][T10444] do_syscall_64+0x47/0xb0 [ 255.419606][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.426015][T10444] [ 255.426015][T10444] -> #1 (&lo->lo_mutex){+.+.}-{3:3}: [ 255.433477][T10444] lock_acquire+0x1db/0x4f0 [ 255.438488][T10444] __mutex_lock_common+0x1da/0x25a0 [ 255.444198][T10444] mutex_lock_killable_nested+0x17/0x20 [ 255.450254][T10444] lo_open+0x68/0x100 [ 255.454833][T10444] blkdev_get_whole+0x94/0x390 [ 255.460111][T10444] blkdev_get_by_dev+0x2bc/0xa50 [ 255.465565][T10444] blkdev_open+0x138/0x2d0 [ 255.470495][T10444] do_dentry_open+0x807/0xfb0 [ 255.475693][T10444] path_openat+0x2705/0x2f20 [ 255.480796][T10444] do_filp_open+0x21c/0x460 [ 255.485807][T10444] do_sys_openat2+0x13b/0x4f0 [ 255.490999][T10444] __x64_sys_openat+0x243/0x290 [ 255.496364][T10444] do_syscall_64+0x3b/0xb0 [ 255.501290][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.507698][T10444] [ 255.507698][T10444] -> #0 (&disk->open_mutex){+.+.}-{3:3}: [ 255.515509][T10444] validate_chain+0x1649/0x5930 [ 255.520872][T10444] __lock_acquire+0x1295/0x1ff0 [ 255.526229][T10444] lock_acquire+0x1db/0x4f0 [ 255.531237][T10444] __mutex_lock_common+0x1da/0x25a0 [ 255.536959][T10444] mutex_lock_nested+0x17/0x20 [ 255.542231][T10444] bd_register_pending_holders+0x33/0x320 [ 255.548478][T10444] device_add_disk+0x59f/0xd10 [ 255.553752][T10444] brd_alloc+0x4e6/0x720 [ 255.558505][T10444] blk_request_module+0x181/0x1a0 [ 255.564049][T10444] blkdev_get_no_open+0x39/0x190 [ 255.569497][T10444] blkdev_get_by_dev+0x89/0xa50 [ 255.574872][T10444] swsusp_check+0xb1/0x2c0 [ 255.579797][T10444] software_resume+0xc6/0x3c0 [ 255.584983][T10444] resume_store+0xe3/0x130 [ 255.589910][T10444] kernfs_fop_write_iter+0x3a2/0x4f0 [ 255.595706][T10444] vfs_write+0xacd/0xe50 [ 255.600465][T10444] ksys_write+0x1a2/0x2c0 [ 255.605306][T10444] do_syscall_64+0x3b/0xb0 [ 255.610239][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.616648][T10444] [ 255.616648][T10444] other info that might help us debug this: [ 255.616648][T10444] [ 255.626859][T10444] Chain exists of: [ 255.626859][T10444] &disk->open_mutex --> system_transition_mutex/1 --> major_names_lock [ 255.626859][T10444] [ 255.641015][T10444] Possible unsafe locking scenario: [ 255.641015][T10444] [ 255.648449][T10444] CPU0 CPU1 [ 255.653796][T10444] ---- ---- [ 255.659144][T10444] lock(major_names_lock); [ 255.663679][T10444] lock(system_transition_mutex/1); [ 255.671590][T10444] lock(major_names_lock); [ 255.678623][T10444] lock(&disk->open_mutex); [ 255.683220][T10444] [ 255.683220][T10444] *** DEADLOCK *** [ 255.683220][T10444] [ 255.691354][T10444] 6 locks held by syz.1.1928/10444: [ 255.696542][T10444] #0: ffff8880780e3770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 255.705775][T10444] #1: ffff88807f20e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 255.714652][T10444] #2: ffff88805f638888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 255.724498][T10444] #3: ffff88813fed1830 (kn->active#819){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 255.734604][T10444] #4: ffffffff8c9d8788 (system_transition_mutex/1){+.+.}-{3:3}, at: software_resume+0x7c/0x3c0 [ 255.745048][T10444] #5: ffffffff8d1077e8 (major_names_lock){+.+.}-{3:3}, at: blk_request_module+0x2f/0x1a0 [ 255.754960][T10444] [ 255.754960][T10444] stack backtrace: [ 255.760834][T10444] CPU: 1 PID: 10444 Comm: syz.1.1928 Not tainted 5.15.173-syzkaller #0 [ 255.769071][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.779127][T10444] Call Trace: [ 255.782425][T10444] [ 255.785351][T10444] dump_stack_lvl+0x1e3/0x2d0 [ 255.790026][T10444] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 255.795659][T10444] ? print_circular_bug+0x12b/0x1a0 [ 255.800852][T10444] check_noncircular+0x2f8/0x3b0 [ 255.805782][T10444] ? add_chain_block+0x850/0x850 [ 255.810713][T10444] ? lockdep_lock+0x11f/0x2a0 [ 255.815399][T10444] ? reacquire_held_locks+0x660/0x660 [ 255.820785][T10444] validate_chain+0x1649/0x5930 [ 255.825648][T10444] ? mark_lock+0x98/0x340 [ 255.829979][T10444] ? reacquire_held_locks+0x660/0x660 [ 255.835346][T10444] ? __lock_acquire+0x1295/0x1ff0 [ 255.840373][T10444] ? look_up_lock_class+0x77/0x120 [ 255.845482][T10444] ? register_lock_class+0x100/0x9a0 [ 255.850760][T10444] ? kernfs_add_one+0x4f3/0x640 [ 255.855604][T10444] ? __lock_acquire+0x1ff0/0x1ff0 [ 255.860620][T10444] ? is_dynamic_key+0x1f0/0x1f0 [ 255.865464][T10444] ? mark_lock+0x98/0x340 [ 255.869796][T10444] __lock_acquire+0x1295/0x1ff0 [ 255.874645][T10444] lock_acquire+0x1db/0x4f0 [ 255.879142][T10444] ? bd_register_pending_holders+0x33/0x320 [ 255.885035][T10444] ? read_lock_is_recursive+0x10/0x10 [ 255.890399][T10444] ? __might_sleep+0xc0/0xc0 [ 255.894989][T10444] ? sysfs_create_dir_ns+0x185/0x390 [ 255.900269][T10444] ? sysfs_create_dir_ns+0x1cb/0x390 [ 255.905554][T10444] ? swsusp_check+0xb1/0x2c0 [ 255.910136][T10444] ? sysfs_warn_dup+0xa0/0xa0 [ 255.914824][T10444] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.920897][T10444] __mutex_lock_common+0x1da/0x25a0 [ 255.926087][T10444] ? bd_register_pending_holders+0x33/0x320 [ 255.931976][T10444] ? kobject_add_internal+0xa0b/0xe00 [ 255.937342][T10444] ? bd_register_pending_holders+0x33/0x320 [ 255.943231][T10444] ? kobject_add+0x14e/0x210 [ 255.947817][T10444] ? mutex_lock_io_nested+0x60/0x60 [ 255.953019][T10444] ? kobject_init+0x1d0/0x1d0 [ 255.957696][T10444] mutex_lock_nested+0x17/0x20 [ 255.962460][T10444] bd_register_pending_holders+0x33/0x320 [ 255.968186][T10444] ? kobject_create_and_add+0x176/0x230 [ 255.973725][T10444] device_add_disk+0x59f/0xd10 [ 255.978484][T10444] ? do_raw_spin_unlock+0x137/0x8b0 [ 255.983682][T10444] brd_alloc+0x4e6/0x720 [ 255.987917][T10444] ? brd_probe+0x20/0x20 [ 255.992154][T10444] ? do_raw_spin_unlock+0x137/0x8b0 [ 255.997348][T10444] ? brd_del_one+0x500/0x500 [ 256.001931][T10444] blk_request_module+0x181/0x1a0 [ 256.006950][T10444] blkdev_get_no_open+0x39/0x190 [ 256.011888][T10444] blkdev_get_by_dev+0x89/0xa50 [ 256.016735][T10444] ? __pm_pr_dbg+0xc5/0x1b0 [ 256.021239][T10444] ? software_resume+0x7c/0x3c0 [ 256.026091][T10444] ? __pm_pr_dbg+0xc5/0x1b0 [ 256.030588][T10444] ? __pm_pr_dbg+0xbc/0x1b0 [ 256.035113][T10444] swsusp_check+0xb1/0x2c0 [ 256.039525][T10444] ? swap_read_page+0x320/0x320 [ 256.044366][T10444] ? resume_store+0xa1/0x130 [ 256.048951][T10444] software_resume+0xc6/0x3c0 [ 256.053633][T10444] resume_store+0xe3/0x130 [ 256.058066][T10444] ? sysfs_kf_read+0x300/0x300 [ 256.062837][T10444] kernfs_fop_write_iter+0x3a2/0x4f0 [ 256.068132][T10444] vfs_write+0xacd/0xe50 [ 256.072388][T10444] ? file_end_write+0x250/0x250 [ 256.077240][T10444] ? __fget_files+0x413/0x480 [ 256.081921][T10444] ? mutex_lock_nested+0x17/0x20 [ 256.086856][T10444] ? __fdget_pos+0x2cb/0x380 [ 256.091438][T10444] ? ksys_write+0x77/0x2c0 [ 256.095848][T10444] ksys_write+0x1a2/0x2c0 [ 256.100175][T10444] ? print_irqtrace_events+0x210/0x210 [ 256.105626][T10444] ? __ia32_sys_read+0x80/0x80 [ 256.110386][T10444] ? syscall_enter_from_user_mode+0x2e/0x240 [ 256.116378][T10444] ? lockdep_hardirqs_on+0x94/0x130 [ 256.121678][T10444] ? syscall_enter_from_user_mode+0x2e/0x240 [ 256.127668][T10444] do_syscall_64+0x3b/0xb0 [ 256.132082][T10444] ? clear_bhb_loop+0x15/0x70 [ 256.136760][T10444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 256.142663][T10444] RIP: 0033:0x7f1df85dcf19 [ 256.147086][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.166711][T10444] RSP: 002b:00007f1df6453058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.175130][T10444] RAX: ffffffffffffffda RBX: 00007f1df87a2fa0 RCX: 00007f1df85dcf19 [ 256.183263][T10444] RDX: 0000000000000012 RSI: 0000000020000040 RDI: 0000000000000005 [ 256.191238][T10444] RBP: 00007f1df8650cc8 R08: 0000000000000000 R09: 0000000000000000 [ 256.199212][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.207179][T10444] R13: 0000000000000000 R14: 00007f1df87a2fa0 R15: 00007ffd9fe48bf8 [ 256.215157][T10444] [ 256.231399][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.241183][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.260880][T10444] PM: Image not found (code -22)