last executing test programs: 3m56.625832642s ago: executing program 32 (id=13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6, 0x4, "2a000c000100"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCFLSH(r0, 0x540b, 0x0) 3m39.819040843s ago: executing program 2 (id=62): socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000040)={0xe, @raw_data="02ca3c81462e38d9533ffce6e3f48d3a42583b334f479695af1f0baaa9121d5adf5f551b5b32416a781f2a7bee04ac730c2d4bd49aceb27e169ab830ae49d132dea21361dfb6de0098e37bd2d5bf4857cc86cb6366b5c467920fdafdffab927a7480a3e820d7faef90eb4176f40854002a98800be5253b0f7645aa8084878bf040820480e6feb2e8a801eddf3baf089a0a3f96d0786b2ca4d0229b3a44b09af97b75a7446bd32892c615c5b0534331140402a1c492ef46d90deb6b742dd28b7e7cd729955e77c905"}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3m33.51113807s ago: executing program 2 (id=71): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000280)={0x20, 0x21, 0x3b, {0x3b, 0x22, "6b60d53a965ee66bc06f886c9e1e05a1e9dce5fcd77af3408ee6799a9f92730f68e658ce994b17d2aeb836082d0726abab9364786381e773a7"}}, &(0x7f0000000400)={0x0, 0x3, 0x22, @string={0x22, 0x3, "b27d87dccb24a9746469390d739791f2cce18ca23aed2f2015f74680459df20a"}}, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "72a2a925"}, @main=@item_4={0x3, 0x0, 0x9, "03971168"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x400, 0x67, 0x1, {0x22, 0x9d4}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x20, 0x16}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x2a, "f73ec45bf9f5420b1ffe20733f39756c44399064fc99b63bf54a13a2e64b6e138007962c8ffeebbba93e"}, 0x0}) 3m29.804109478s ago: executing program 2 (id=76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x5, 0x1, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000009004d564b0000000001"]) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000fe6000/0x4000)=nil}) 3m28.811096397s ago: executing program 2 (id=79): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.857639335s ago: executing program 2 (id=89): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0xfffffff5}, {0x1, 0x6}], r0}, 0x18, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d) 3m23.396979893s ago: executing program 2 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 3m7.37910443s ago: executing program 33 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1m26.389617837s ago: executing program 3 (id=528): mkdir(&(0x7f0000000080)='./file0\x00', 0x26) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000580)='./file0/../file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7f66de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x1, 0xfffffdfffffffff1, 0x0, 0x9, 0xbd, {0x6, 0xfff, 0x3, 0x6, 0xe3, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x1000, 0x7fffffff, r2, 0x0, 0x40, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m25.559580963s ago: executing program 5 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0xb, 0x200004, 0x200, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.084588332s ago: executing program 5 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x29, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x26}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m24.945878593s ago: executing program 3 (id=535): r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x5}, 0x11, 0x7, 0x8127, 0x200, 0x1f, 'syz0\x00', "e78a37d9f99719302d956edc198573e14da368e210af1567d74687e0cf0d93d4", "3dc7b6a2054b7e4e3d7debf5161972f52b127cfb6afffab087b18d76bb6f4f2e", [{0x50, 0x0, {0x1, 0x5}}, {0x6d, 0xfff, {0x2, 0x5}}, {0x2, 0x40, {0x1, 0x6}}, {0x9, 0x5028, {0x2, 0x5}}, {0x0, 0x7, {0x3, 0x9}}, {0x7, 0x4, {0x2, 0xff}}, {0xff01, 0x5, {0x0, 0x7b9}}, {0x6, 0x3, {0x2, 0x8}}, {0x8001, 0x5, {0x0, 0x3}}, {0x1, 0x3, {0x1, 0x6}}, {0x7f, 0x16, {0x3, 0x5}}, {0x9, 0x5, {0x1, 0x7fff}}, {0x2, 0x5, {0x2, 0x80}}, {0x8, 0x0, {0x2, 0xe3}}, {0x3, 0xbbd, {0x3, 0x200}}, {0x7, 0x78cd, {0x1, 0x20000}}, {0xfacd, 0xee2, {0x3, 0x3}}, {0x1, 0x2, {0x2, 0x9}}, {0x4, 0x800, {0x3, 0x5}}, {0x231, 0x0, {0x0, 0x722d}}, {0x0, 0x2, {0x6507cb3e35af0005}}, {0x8001, 0x1, {0x3, 0x1}}, {0x9aaa, 0x3, {0x2, 0xfffffffc}}, {0xcf58, 0x200, {0x0, 0x401}}, {0x7, 0x3, {0x0, 0x2}}, {0xfffd, 0x0, {0x2, 0x4}}, {0x6219, 0x3, {0x1, 0xfffffffc}}, {0x4, 0xdf0, {0x0, 0x85d}}, {0xe0d, 0x6, {0x3, 0x3}}, {0x6, 0x4, {0x0, 0xc}}, {0xc839, 0x8001, {0x1, 0xfffffff2}}, {0x7, 0x7ff, {0x0, 0x2}}, {0x101, 0xfff, {0x0, 0x1ff}}, {0x8, 0x92, {0x0, 0x7}}, {0x6, 0x7, {0x1, 0x2}}, {0x5, 0x316d, {0x1, 0x10}}, {0x400, 0x7, {0x3, 0x6}}, {0x7, 0x5b46, {0x1, 0x9}}, {0x8, 0x6, {0x0, 0xf}}, {0xffd3, 0xb880, {0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m24.890852087s ago: executing program 5 (id=537): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200000) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x13, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000003c0)='rpc_pipefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x10000000]}) syz_usb_connect(0x6, 0x1f3, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0xb8, 0x0, 0x51, 0x8, 0x1410, 0xa007, 0x3e68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e1, 0x3, 0xe, 0x0, 0x30, 0x3, [{{0x9, 0x4, 0x3, 0x9, 0x2, 0x7f, 0x54, 0xcc, 0x0, [], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x4, 0x4, 0x3, [@generic={0x80, 0x1, "09661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0x5b, 0x6, 0xb, 0x31, 0x71, 0x35, 0x6, [], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x0, 0xd3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x80, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x9, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0xab, 0x0, 0x5}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x6, 0xd, 0xd, [@generic={0x48, 0x66, "42bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x1, 0xa9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x32, 0xbf6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x15ac}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x8, 0x5, 0x80}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x2, 0xae, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0xfb, 0xff}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xc, 0x4, 0x200, 0x3, 0xd, 0x7, [@generic={0x41, 0xf, "8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x1, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xf5, 0x1, 0x0, 0xf, 0xd4, 0xdf, 0x3}}]}}]}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m20.684598395s ago: executing program 3 (id=540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1m19.786295998s ago: executing program 5 (id=542): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f000000df00)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) lstat(&(0x7f0000000200)='./file3\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m19.545170317s ago: executing program 3 (id=545): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x81040a, 0x0, 0x1, 0x0, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000000)='./file0\x00', 0x1012076, &(0x7f0000000240)=ANY=[@ANYBLOB="626172726965722c646973636172642c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d05006e742d726f2c6e6f626172726965722c6f726465723d7374726963742c6572726f72733d636f6e74696e75652c6f726465723d72656c617865642c2c"], 0x2, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/54, 0x36) 1m18.980051622s ago: executing program 3 (id=549): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 1m18.542548887s ago: executing program 3 (id=552): syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340), 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r5, r3, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1m18.400169319s ago: executing program 34 (id=552): syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340), 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x601, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r5, r3, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1m18.288346708s ago: executing program 5 (id=555): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0038cecbad8dce0a24359e05a65a4ab28df7afe07fb47d7e2b67b9a0ea16c9d97278ebd7fec38ad0526fba402ecf"], 0x1, 0x516, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161042, 0x91) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) read(r1, &(0x7f0000001400)=""/4096, 0x1000) 1m16.807366697s ago: executing program 5 (id=561): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000700)) 1m16.497317052s ago: executing program 35 (id=561): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000700)) 1m13.553050769s ago: executing program 1 (id=576): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1837, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0xf9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x800, 0x20, 0x1, {0x22, 0x883}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0x0, 0x35}}}}}]}}]}}, 0x0) 1m10.393086723s ago: executing program 1 (id=584): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0xa1c406, &(0x7f0000000480)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES32, @ANYRESDEC], 0x4, 0x2a5, &(0x7f00000000c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000002000)={0x8, {"488085fddf7e1378d3ad4adb6e165913c1f7ae15c9b4ed75d7413838ff0d9381cead5adbe8228d9ba29fe815a6f64afca949ca64011b9d8c93b4272d6428962fe017b1cb68796b7b800b25eb3013496be2e3e973309e6842f2df0e5309a233d16ced2bc26cd6f7db616268621fe160c1644afc707a535571e0a936469f5dd6d60c6962109cd8de336fc0938bcd412788f01c1d84e33d5eaa3e140944ddefde0366395044cf0f095786b3f1fd27c0eaf2d0df657acf52c9220297bc28779a85ac06d4f14c31cbfced5519b61ddf599c08c7f10e385e4a6637e44ce117631e6d561c5118ad8e21bba948e572e54c67516e0f2a504f05f23e00d9b04160dac7e52d6caacf617d94e200e9c97771d56fe7b2ad6b69247904463f36b11e74b41ea9e63e77ded5af1406fe0f01f2350e756fd41c94f9dee22f611720853d7f8fd755903f1c3e044bd704bd4255c570cc0c82cacec7b9b7720cd6d5b2cd96e583ff1ddb0ad39155daa2f29a4f61298b44ea802bbac9b1f552cf0279f52ff200178468b94b293f7052817d89adb9130a3eaec5ceeeb386a31a7d9807f069ad07e3488e99a0b7f7f92fc2a63226175432a93ae4dc820e702d21bdec10a773c7b3de3f0ec4b5f8af60a159aaa4231ed4e79883acf5d2eed3a0fd3445d46d7fbbd47f2c610d96d6435293b103db15b8e7383e63e9d672410f5248183d4e608e7aee4d9dbfd040fb3fae39faec3cc0f5410d0d479bc1b7addd255ba502a52fa858eb6574530fd16c01e1138b19258e1c40b9a29a8672f418159f663bc8fe634e3a0d23dde1ced471cfb1decc1a9464667771b795229b1906651e9e5e4402c7e75182b1432acb4b54c499358585aa83fca804fbdd12dfd3b9e95b0ac718cadb879a2898d86c4ed914a59918df6ba519de4599f662811202158e418cef0d103ed4e77833d4dea6e59f7fef1c86f818121655dd1b2cb3717c892a289797049911356b5dd5dc0c50caadd0dd0318994d730fd6e6953e01730fb2682ab3f7ca8b4d596574456f59b95f34ff6f79db68b495010b8816a7b55229b35a2790f25c42ef1efcc5271c66500fc285de61516fc401518ba1ae388f90b0a5760e01031ceed37d1eb8a792f4a196a9fa0ff1579358bfe5c63744027d1a01e0a4602c79c2fe727034a4d810f0a2c30dc5a4c122e510e4d6348774754bf1f924c1d5a31dccf345a6c752389cc38e46e968e3b2815e2ecc3e5827f198f5d836b5783e9d7cc5bc5ba1715d23a4c35157b28e997010c627cbcebda89d08ac88e3d2f387c87af78b2a565dd5704bf3c12e4019d91890ad4f660345b384b59fad6d9f56f1fcf35babe5a9fbd8dd3908be450edf05ca8a3154fb3ac1af485508c61a7ba322ac06928e7d660fee6bfef74c9c4f22bbab318077446163a3230a3d486ce6d71aed12e2581e4208eed1a540560921ac89e9372482594351a5ff0cf9e95e80f0a69c4d621638c9056ae0bdfc44895f061767aba8400da865b73b5488c690694af744372c00d87bba4664a60f13f1453337113055d7b659a87208c1e663e4d35f0ebcfe70459f5ec5812434468cec38d3fbcf90598de986b3d49ad45e7b3b230fc389b5278ed6242abe9c44a8c74438968cc9b7a253d89c5b14f7a917b86a6d51f5d5380f2a7606dbe1867fd781fab284d153e20f5bf1a2c8156b93e60dc8945eb8385d937537b785f6f6af81ea0131398c77819ddea78eadf600f019db772e69e9cde3540ddc95625987b4a4e1dbbf15bc0217abac6cc3ff0650ed11fa612b90afaab842be4c2bd9967702b023e8ecd5f4a0e62af56f7320241a8516bcdf344a4421eed035b8c5a126820c5dc3962f5df4bf369bd6260eb09aa8e1310bf6f28aba0e3236f699721daa26950de7fa8fd8c3d2adebc101e304d0ed1af839c74b6cc42a6d7244f6b31ed08f6f12f62569b2c0602cc371962bff74b9b3c5f6326247d4ffec7f2d0a073e5a678e76f4243533001b1c0de6739c5c6ec0195fa9a8e898c2068bb614c40c403324e84cdbc530121217ba49f300aa8d5056d170d0a6bc8827ee20d55401b9f401b12e212cf630781139978b5fb38fdf768fec87b79f7a70d6083c3df98019ebd09b7941708e06c8d9fa930a1fdb993e0061343c87b4cf47dd36f9a3d603ca986f5144af403b7b04a93f5808a8c192df5e4c17af1ec23eddd1e7fc91109e6a4cfe5e23435bcabf3915ce5242cb6f7974e97c8ad3773e3a510afa52c4193c36fd1b99a02ece5b19ad35eb8fa97b57fd1641b463de79cdd2aac5d5b4060a040ad1d5752d70015b74d556fb4ef0cc8747591edc8858707616104f0ec342fb3a9b95df31b6f84e56387aae80a72d8dd670be7aaeef54065d6e2d7837481ce5622ee3c115d02d50efdb20aaf25b636d6d6c7e49f50a4b30ae243ecf1187ffe851c52bb1849c5e5c0979b758b747aebfdab58d8fd60faa5d5005f401c661256183dd4e7cba38b4ccf03506398eab901595dc2de27ab231abdddffc9d120abd8025b77ac47f39b6373a38a09bc045559578ccdf0402385177d499333d06d2cd3f604689d50dcd01b04ffbcb545385da389e4b6102ee77febb8a34a906f822601e61d2d3fc9e206caf3753f65422a5ff31dc3b3c4d09aa9a90f9ebc858ee2e4df6a730948e436586c665a3c64aab00aa757d252eec5b8bea5035a5b9f644cb84a991286edc2a394cef9fd40ad085aa99680aea363dc163c2ef40e0f289e0b79dc600f31ae510bbd74f963632ff25230a1ec866fed0db0d0af59c5b9f4a18659f5a218c3d0db80700719a61e59efbd5f996145139e5654a9290bf504eb7453775b8c6190ff51d4c04ce9384060f1dd34799fee04c0f951ae15cb589f80dc544c05421d60f51cbc78df7dceff213575bfebe2bb307d196ef0a5cf3c2608fbb969a574e6dce9132246447a84cab6dd4923281cf40bc19c29585a02bc0d2d491907e5b528a1cfc7b2fe88dc2520ea49903423cb7a0d23530daa7217e7f312d4ec67c02fc74ab8d91b8ead50bfe9508b0f7d70e88868ee1a5f38349054374ae463d1148e0ca238c0f9fe7b40f6fba87498697f3220612ea66feb18a29f1df04234ac3d69e0706d0deef321d09ee16de188a32f4c41635cf48ee35a42140fc08b42c2e0e289a3c73fd4b0e656a72b29b99093127a17aaa199610787787abb0f4613dd03332a9306b9b5e98e9c839ffce5e72c44b288593bee47253613dc0fc3e583ab9aac7e1a161dfc36bd038d533eb6829b22dc1a01f055c16f83c1b1abe049b5744508456658c6df44c13d6ab1a18d76a55740cdcfca4a1dd81b54d9c4e71cef9f4b55f1ebc7751766175d631f9607f22a613377f6d96afaddbc66cbeef20ae578468f33265516ee711e2591e1af272a35bf5cedc78aec6e330bf6f3f3b9cdb7d373754125c9caea6a4d344d098c7332175b09441cc11040e5b71e9b975b2aaaaa5f8c5f502b00ad3ade9de204602aa227c9f11da55107b79802c09d246050c6580d92559a47935cfb59b47e88aa8095ea1ac34578697ffe89c440a2369f6661db2c24f1056d553e200184b927b359efba5db1e69e7f2cf5e4dd9c9bbc3e085fc38c43f436aa47abcc1e9986fc0226262588110c5b27c6fe9b8072cd8204c500883d3b9feaed80d5d87929d01b9bad995ed58a1be3ccad600840c6424625f4f4c221c8e1cd11af1a5ac153954ac6b441692f296ac2d529233d317fecf3fbfa53f77c8ea47d1385e3ca4b8b55fd2467cac15af1bfa04fb41784305a4b9aed6880cfba9629d6dabd22b2bd90c1aad0f2e0dff0777112b1e313447cf9417a52a58b17cc73ab03d4841ec9b1dc3f75d0fb5ece65c99982b338bb2f42b68104d94c826247814bd68e7c9664e8b2a9fdaf7fde4730960b43a496cb818badfbc97d1e51aa7817657e49536e69cacb3c4abb27dfe10d5c962fabdd3056d290a2b969e7f61d144e22539c5e2027b57c8e099db6ab8f0fdda7412b393af60e3299478744e9071801c4c39b0c87d4f237ade73b955812f254e641844e985d40f3e4df51bf7a9c81f02d22ad8296fe94d4664f3c0d113974ba222dab68c4407e9d5359205a5fec059d4370e0d15fd040ced32baa7e8586d38680a4c2e4e5679c0d374636e9dc0fd9a06808671f08e8c19b0bed18540de8107855f410f8954e078755a8c7b0822c25e2534887c9593aa1e008e78244cfec5b347a847ecf61cb207dcb2170b663a54d98ffeea991a9d944e4a8302bf37231bf3558c6b2fcaf925becb663bb574341bc81bbc50e9f0108c5d8a7783caf25bcb3bc24368e8a4915785652877555d22f7d6cbcb12049180ee4c49502d41c0fb00e31f3835b53e622e85290ee5a641eb9215567fed4782484ba8ccb43d81d3ef3ca5d8a2e3389864c15946e3d5dad607447f35a5396c27e99e20a1b98393169d85e788e9c4f9367649b308094479bc0ad8d68f0dc655724e2d9f599557f567fe7fd11f87b37df7ce0530e40d7e0ab06c2b273716e2598bd6e816c18c2e3c038b199e58424a5d121e21d263fa0f24577a32b4356919cc22c5d1929b15590a53861aaf68aaa9ed404d1e64c3c6b0fa19e0a5299bd46867aff993b87ce96fd493fa2b125ea23907f95992cc33cd7e90c2383d5af5d232d979766ac2743c93d947db811d38df20742fa1db7c6f2306ec008ca9d53faf1a7cc2372d42437f906ef6ff9db785ac575c97e4f568e57414a0881ffe1b8dee59240305e28ab5f4f2c990c959009b022a656386229c7a71b3fcbc381a1f3511751ef19653d8e7dd0de12f630c719413a84b385802f5e8e2680cc2afa7fbb1cd1193a1e5af32ad07b24ba1c05904d3325634d10aa685d97f9c1d58377cfa46f17f0f57c7d48ce0917a8b4f5bccdf60e52764b7a826e6ccab1b70821a74cc5cc2e15532d3ef346aaf9c31fe0e0776bb1e3f4f5f276bcf53f5ea9018609b18b47497dba8e73676d2fc2fba47472ffba25ba7ddca1e9754b516eff05a05eaba9e7752f8d97f99684e3a53ded2d2c1913a6e488c65f57f8d85d261c762c37015c756e0aeed54edda41236bae33ed83c688478bcd94ce9e67971c0f8e588f1a3a4cd3f7da5e571c1984d9c9a10bb7eaf8414cbabf5fb97a17a67d10ae1a7ab96a8df88da1e82e797e67b534f765a5dcac76bb769d9547f375cfbea8d9f434f48d60e05df8797919fef5cb01a04177ed092a37f71f7948279bc4c35e3239e943a1507cff0b7152dd95c27e573e0191cfe1bc9f3862e5329ddcd160c61fc5bb82b57d8086e1e74abfc36bb43404357c50eb150fcaea9aac90fa0c413ea9f8538055a45b77d5a7548f6a4f2414714495576a1de459a55ab298a2a2fa33459da0d205e4b91d340c0721226e546f323bb878605590b66516fa51fd635e5eaa580486f6fb543b6b5236871aa3dedcb44e7d73d9bf704420fc0bb9b1a0f21e848ed9161e9bf1ae3bc628861b5007f0a38884a178dc85dbf034e9234fe603698cda4811dfcb73253335ca7cee533957578a9b97f149ae6dbd43c4aae8a16da135830f7a1c5b913838d5c28936f45f2d9ed991ec7a3ab83df4dd6fe2ff720a6b8abf40927bf8835bfa25effb92eadea47ae1629193ee5707767b13771cb105f231be2af8380a85b9de42f682d22d17c926ccbe39ea3fa7a5d3c0f6b3dc7802b927a36cd04ade3e02bf8ce06a52585388fb8f49df4dda68e9eb426da9c0909d5b9cf4b16c2e3f78331c8683a1698033ea0b1ed4dd33edeecd89c4f14caf84d52336e500", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) 1m9.981583305s ago: executing program 1 (id=585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='erofs_lookup\x00', r0}, 0x18) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000000000)={[{@dax_never}, {@noacl}, {@noacl}, {}, {@nouser_xattr}]}, 0x1, 0x177, &(0x7f0000000240)="$eJzslL9KA0EQxr/diwkROztBLAwYi1zuLio2IsEXCPgPO6M5Q/RiQnKCiZXY+gC2tr5CGsEXUSsRUlpH9naTWyV/RNAgzq+Y+/Z2dm52Dj4QBPFveX56e7x+bV0YAKaQQEy9fzHCHK7ln+XiB9OpjbvWzcPVenW20q9mp/P170cA3GcN+L2zH08n1HMLvKe3wbGo9C4YTKX3wbGjtAuGPaWPNV0R+aZ5VPJc87DiFYSwRLBFcETIfO6vfclQ0Ppj2n690TzJe55b+0Exan7tLMea1p/+v7qzsbT52eCwlc6AYVPpVcS6s5Ej0e4/EwnrG798fxIkSPw1EfpT55ZhQfOniOYfab9cTdcbzVSpnC+6RffUcTIr1pJlLTvpwIhkHOJ/8cCfJrX6EwNyoyyK87zv12wZe2tHxn6OywP/40jOy7Xw/ujAbuQ+U+dYoJLGkHSCIIixMQcWeOYInNy4GyUIgiAIgiAIgiAI4tu8BwAA//9iEXZY") bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x10}, 0x18) 1m9.508713764s ago: executing program 1 (id=586): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/uts\x00') 1m7.868400386s ago: executing program 1 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1m6.965854888s ago: executing program 1 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 51.828048415s ago: executing program 36 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 26.593251263s ago: executing program 7 (id=728): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 23.755032761s ago: executing program 7 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 23.594500664s ago: executing program 7 (id=744): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0xfffffffd, 0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}]}]}, 0x40}}, 0x4000080) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) 21.695428607s ago: executing program 7 (id=755): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x967}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@usrquota}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x8}}, {@usrjquota}]}, 0x1, 0x46a, &(0x7f0000000940)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x88000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 21.336492315s ago: executing program 7 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x19, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.603087504s ago: executing program 7 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x7, 0x1, {0x8f6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x10e, 0x2, 0x8001}, {0x3, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x48e7, 0x0, 0xe3e3}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 20.395890551s ago: executing program 37 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x7, 0x1, {0x8f6}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x10e, 0x2, 0x8001}, {0x3, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x48e7, 0x0, 0xe3e3}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 10.70789498s ago: executing program 9 (id=792): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f00000000c0), 0x4, 0x97d7, &(0x7f0000012d80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x104) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x81fd) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x1f, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 9.21455329s ago: executing program 9 (id=793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, 0x0}], 0x1, 0x10, &(0x7f0000000380)=[@cstype0={0x4, 0xe}, @cr0={0x0, 0x60040020}], 0x2) 7.749870137s ago: executing program 0 (id=798): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x42, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 7.658997525s ago: executing program 8 (id=799): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/ [ 234.228616][ T4352] dump_stack_lvl+0x168/0x230 [ 234.233342][ T4352] ? show_regs_print_info+0x20/0x20 [ 234.238574][ T4352] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 234.244509][ T4352] ? __se_sys_getdents64+0xe5/0x260 [ 234.249734][ T4352] ? unlock_page+0x17c/0x1f0 [ 234.254354][ T4352] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 234.259755][ T4352] f2fs_map_blocks+0xbd0/0x3310 [ 234.264680][ T4352] ? f2fs_force_buffered_io+0x680/0x680 [ 234.270265][ T4352] ? xa_load+0x286/0x2a0 [ 234.274538][ T4352] f2fs_mpage_readpages+0xc53/0x21f0 [ 234.279873][ T4352] ? dquot_release_reservation_block+0xa0/0xa0 [ 234.286072][ T4352] ? f2fs_is_compress_backend_ready+0x99/0x120 [ 234.292234][ T6817] ksmbd: Unknown IPC event: 6, ignore. [ 234.297745][ T4352] ? f2fs_readahead+0x163/0x2f0 [ 234.297823][ T4352] ? f2fs_set_data_page_dirty+0xad0/0xad0 [ 234.297850][ T4352] read_pages+0x165/0x920 [ 234.297882][ T4352] ? page_cache_ra_unbounded+0x930/0x930 [ 234.318827][ T4352] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 234.324328][ T4352] page_cache_ra_unbounded+0x830/0x930 [ 234.329837][ T4352] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 234.336387][ T4352] f2fs_readdir+0x471/0xd40 [ 234.340946][ T4352] ? f2fs_fill_dentries+0xce0/0xce0 [ 234.344483][ T6850] netlink: 9 bytes leftover after parsing attributes in process `syz.1.554'. [ 234.346175][ T4352] ? end_current_label_crit_section+0x14b/0x170 [ 234.346208][ T4352] ? preempt_count_add+0x8d/0x190 [ 234.346233][ T4352] ? down_read_killable+0x1ce/0x340 [ 234.358319][ T4225] peak_usb 7-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 234.361327][ T4352] ? fsnotify_perm+0x254/0x560 [ 234.384623][ T4352] iterate_dir+0x218/0x560 [ 234.389078][ T4352] ? f2fs_fill_dentries+0xce0/0xce0 [ 234.394324][ T4352] __se_sys_getdents64+0xe5/0x260 [ 234.399440][ T4352] ? __x64_sys_getdents64+0x80/0x80 [ 234.404754][ T4352] ? filldir+0x720/0x720 [ 234.409032][ T4352] ? vtime_user_exit+0x2dc/0x400 [ 234.414031][ T4352] ? lockdep_hardirqs_on+0x94/0x140 [ 234.419269][ T4352] do_syscall_64+0x4c/0xa0 [ 234.423818][ T4352] ? clear_bhb_loop+0x30/0x80 [ 234.428621][ T4352] ? clear_bhb_loop+0x30/0x80 [ 234.433333][ T4352] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.439267][ T4352] RIP: 0033:0x7f10a7d10553 [ 234.443702][ T4352] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 234.463311][ T4352] RSP: 002b:00007fff7a001d28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 234.471751][ T4352] RAX: ffffffffffffffda RBX: 000055557e237600 RCX: 00007f10a7d10553 [ 234.479726][ T4352] RDX: 0000000000008000 RSI: 000055557e237600 RDI: 0000000000000005 [ 234.487785][ T4352] RBP: 000055557e2375d4 R08: 0000000000000000 R09: 0000000000000000 [ 234.495761][ T4352] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 234.503735][ T4352] R13: 0000000000000010 R14: 000055557e2375d0 R15: 00007fff7a003fe0 [ 234.511722][ T4352] [ 234.514788][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.524173][ T4352] attempt to access beyond end of device [ 234.524173][ T4352] loop5: rw=524288, want=45072, limit=40427 [ 234.542359][ T4352] attempt to access beyond end of device [ 234.542359][ T4352] loop5: rw=0, want=45072, limit=40427 [ 234.604081][ T4904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.643936][ T4225] peak_usb 7-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 234.670194][ T4312] attempt to access beyond end of device [ 234.670194][ T4312] loop5: rw=2049, want=40992, limit=40427 [ 234.671896][ T4225] peak_usb 7-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 234.871549][ T4904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.967936][ T4225] peak_usb: probe of 7-1:0.56 failed with error -71 [ 234.995001][ T4225] usb 7-1: USB disconnect, device number 15 [ 235.140083][ T4904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.258637][ T6862] loop1: detected capacity change from 0 to 32768 [ 235.350612][ T6862] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.558 (6862) [ 235.460023][ T6862] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 235.498861][ T6862] BTRFS info (device loop1): turning on sync discard [ 235.505606][ T6862] BTRFS info (device loop1): doing ref verification [ 235.518043][ T6851] chnl_net:caif_netlink_parms(): no params data found [ 235.523696][ T6862] BTRFS info (device loop1): disabling tree log [ 235.563071][ T6862] BTRFS info (device loop1): enabling ssd optimizations [ 235.606318][ T6862] BTRFS info (device loop1): using spread ssd allocation scheme [ 235.630695][ T6862] BTRFS info (device loop1): not using ssd optimizations [ 235.647331][ T6862] BTRFS info (device loop1): not using spread ssd allocation scheme [ 235.684720][ T6862] BTRFS info (device loop1): using free space tree [ 235.726245][ T6862] BTRFS info (device loop1): has skinny extents [ 235.931548][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.946476][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.954673][ T6851] device bridge_slave_0 entered promiscuous mode [ 235.984902][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.026655][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.034849][ T6851] device bridge_slave_1 entered promiscuous mode [ 236.329297][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.353765][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.400900][ T4737] Bluetooth: hci0: command 0x0409 tx timeout [ 236.492069][ T6851] team0: Port device team_slave_0 added [ 236.682395][ T6851] team0: Port device team_slave_1 added [ 236.759210][ T6923] loop6: detected capacity change from 0 to 32768 [ 236.922421][ T6923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.566 (6923) [ 236.968397][ T6899] loop0: detected capacity change from 0 to 32768 [ 237.235687][ T6923] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 237.244585][ T6923] BTRFS info (device loop6): enabling disk space caching [ 237.252003][ T6923] BTRFS info (device loop6): disabling tree log [ 237.258461][ T6923] BTRFS info (device loop6): setting nodatasum [ 237.264644][ T6923] BTRFS info (device loop6): turning off barriers [ 237.271185][ T6923] BTRFS info (device loop6): doing ref verification [ 237.278035][ T6923] BTRFS info (device loop6): force clearing of disk cache [ 237.285206][ T6923] BTRFS info (device loop6): turning on flush-on-commit [ 237.292259][ T6923] BTRFS info (device loop6): enabling ssd optimizations [ 237.299395][ T6923] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 237.308685][ T6923] BTRFS info (device loop6): use lzo compression, level 0 [ 237.315837][ T6923] BTRFS info (device loop6): disk space caching is enabled [ 237.323095][ T6923] BTRFS info (device loop6): has skinny extents [ 237.323261][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.427004][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.453115][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.460000][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.547322][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.554494][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.643015][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.652472][ T6923] BTRFS info (device loop6): clearing free space tree [ 237.660684][ T6923] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 237.670418][ T6923] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 237.747118][ T6851] device hsr_slave_0 entered promiscuous mode [ 237.755174][ T6923] fs-verity: sha512 using implementation "sha512-avx2" [ 237.773831][ T6923] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4) [ 237.787493][ T6851] device hsr_slave_1 entered promiscuous mode [ 237.807841][ T6851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.888799][ T6851] Cannot create hsr debugfs directory [ 238.076340][ T6932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop6 scanned by udevd (6932) [ 238.238730][ T6979] loop1: detected capacity change from 0 to 64 [ 238.323534][ T4232] Bluetooth: hci3: command 0x0409 tx timeout [ 238.504870][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 238.644675][ T6911] chnl_net:caif_netlink_parms(): no params data found [ 239.051028][ T4904] device hsr_slave_0 left promiscuous mode [ 239.089253][ T4904] device hsr_slave_1 left promiscuous mode [ 239.099920][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.116374][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.141181][ T6984] loop6: detected capacity change from 0 to 32768 [ 239.157290][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.164807][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.173184][ T4904] device bridge_slave_1 left promiscuous mode [ 239.179844][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.199215][ T4904] device bridge_slave_0 left promiscuous mode [ 239.205497][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.235988][ T4904] device veth1_macvtap left promiscuous mode [ 239.250494][ T4904] device veth0_macvtap left promiscuous mode [ 239.258985][ T4904] device veth1_vlan left promiscuous mode [ 239.264849][ T4904] device veth0_vlan left promiscuous mode [ 239.275973][ T6984] XFS (loop6): Mounting V5 Filesystem [ 239.286508][ T4232] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 239.357895][ T6984] XFS (loop6): Ending clean mount [ 239.359768][ T6988] loop0: detected capacity change from 0 to 32768 [ 239.381443][ T6984] XFS (loop6): Quotacheck needed: Please wait. [ 239.399386][ T6988] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.574 (6988) [ 239.453718][ T6988] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 239.469338][ T6988] BTRFS info (device loop0): turning on sync discard [ 239.476889][ T6984] XFS (loop6): Quotacheck: Done. [ 239.498397][ T6988] BTRFS info (device loop0): doing ref verification [ 239.506339][ T6988] BTRFS info (device loop0): disabling tree log [ 239.516035][ T6988] BTRFS info (device loop0): enabling ssd optimizations [ 239.527945][ T6988] BTRFS info (device loop0): using spread ssd allocation scheme [ 239.559922][ T6988] BTRFS info (device loop0): not using ssd optimizations [ 239.567367][ T4232] usb 2-1: Using ep0 maxpacket: 16 [ 239.591686][ T6988] BTRFS info (device loop0): not using spread ssd allocation scheme [ 239.624499][ T6988] BTRFS info (device loop0): using free space tree [ 239.642572][ T6988] BTRFS info (device loop0): has skinny extents [ 239.663765][ T4950] XFS (loop6): Unmounting Filesystem [ 239.724468][ T4904] team0 (unregistering): Port device team_slave_1 removed [ 239.727631][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.762172][ T4904] team0 (unregistering): Port device team_slave_0 removed [ 239.789270][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.803923][ T4232] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 239.814001][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.829235][ T4904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.856545][ T4232] usb 2-1: config 0 descriptor?? [ 239.905836][ T4904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.154296][ T7024] loop6: detected capacity change from 0 to 256 [ 240.203462][ T4904] bond0 (unregistering): Released all slaves [ 240.260773][ T7024] FAT-fs (loop6): Unrecognized mount option "rodirªvŠN3ʯ*Ù" or missing value [ 240.387779][ T4232] sony 0003:054C:05C4.000F: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 240.402010][ T4232] sony 0003:054C:05C4.000F: failed to claim input [ 240.520156][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 240.561867][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 240.713877][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.752380][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.792285][ T6911] device bridge_slave_0 entered promiscuous mode [ 240.846865][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.898376][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.924734][ T6911] device bridge_slave_1 entered promiscuous mode [ 240.956498][ T7042] udc-core: couldn't find an available UDC or it's busy [ 240.971679][ T7042] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 241.031795][ T6911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.069549][ T6911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.117017][ T6851] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.174996][ T6851] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.226279][ T6911] team0: Port device team_slave_0 added [ 241.233410][ T6851] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.254348][ T6911] team0: Port device team_slave_1 added [ 241.293792][ T6851] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.373425][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.382722][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.410042][ T6911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.477447][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.493440][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.535774][ T6911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.699676][ T6911] device hsr_slave_0 entered promiscuous mode [ 241.718833][ T6911] device hsr_slave_1 entered promiscuous mode [ 241.741602][ T6911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.765922][ T6911] Cannot create hsr debugfs directory [ 241.889620][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.958541][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.986127][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.001590][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.006468][ T4225] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 242.049699][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.070918][ T5170] usb 2-1: USB disconnect, device number 15 [ 242.100164][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.150715][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.157892][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.177118][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.179071][ T7074] loop1: detected capacity change from 0 to 128 [ 242.194225][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.205027][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.212368][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.229453][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.279534][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.317701][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.418289][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.436619][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.454486][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.469317][ T4225] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.506209][ T4225] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.523724][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.541645][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.555582][ T7045] loop6: detected capacity change from 0 to 65536 [ 242.560855][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.576415][ T4225] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.585499][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.612947][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.633802][ T4225] usb 1-1: config 0 descriptor?? [ 242.647255][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.655614][ T4737] Bluetooth: hci3: command 0x040f tx timeout [ 242.681501][ T7083] loop1: detected capacity change from 0 to 16 [ 242.692423][ T6851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.729581][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.754417][ T7083] erofs: (device loop1): mounted with root inode @ nid 36. [ 242.762862][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 242.781848][ T7045] XFS (loop6): Mounting V5 Filesystem [ 242.782017][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.796133][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.935293][ T7045] XFS (loop6): Ending clean mount [ 242.963576][ T6911] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.994569][ T6911] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 243.009701][ T6911] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.052512][ T6911] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.149010][ T4225] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 243.247623][ T4225] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 243.290755][ T4950] XFS (loop6): Unmounting Filesystem [ 243.404340][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.444847][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.499671][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.575868][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.625328][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.642700][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.679185][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.718997][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.737019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.775735][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.783128][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.811201][ T5170] usb 1-1: USB disconnect, device number 8 [ 243.833881][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.893837][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.915493][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.954049][ T4312] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.961247][ T4312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.041000][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.067859][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.113291][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.144047][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.163658][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.184048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.217157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.284323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.302060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.347232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.373069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.428870][ T6911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.578826][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.622307][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.716651][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 244.723551][ T7137] loop1: detected capacity change from 0 to 512 [ 244.741454][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.757626][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.778949][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.794308][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.814427][ T6851] device veth0_vlan entered promiscuous mode [ 244.851307][ T7137] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.590: casefold flag without casefold feature [ 244.879223][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.589'. [ 244.991023][ T7137] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.590: couldn't read orphan inode 15 (err -117) [ 245.051992][ T7137] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.108908][ T6851] device veth1_vlan entered promiscuous mode [ 245.149577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.158309][ T7152] loop0: detected capacity change from 0 to 2048 [ 245.166927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.203127][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.234785][ T7152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.277557][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.304269][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.309373][ T26] audit: type=1800 audit(1756525691.289:26): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.592" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 245.367520][ T6851] device veth0_macvtap entered promiscuous mode [ 245.398661][ T6851] device veth1_macvtap entered promiscuous mode [ 245.476355][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.528012][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.547266][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.589271][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.606459][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.621698][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.646392][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.663777][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.680069][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.690341][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.701112][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.713296][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.725565][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.735624][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.753192][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.773520][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.790858][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.805062][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.872022][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.908549][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.936888][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.963519][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.985554][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.995440][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.023963][ T6851] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.042772][ T6851] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.053662][ T6851] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.069390][ T6851] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.311075][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.326983][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.363940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.405552][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.422962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.448975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.459302][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.525563][ T6911] device veth0_vlan entered promiscuous mode [ 246.550043][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.577516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.585996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.617946][ T6911] device veth1_vlan entered promiscuous mode [ 246.637816][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.676725][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.694341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.722542][ T4904] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.796964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.820204][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.847824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.890345][ T4312] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.902452][ T4904] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.938867][ T6911] device veth0_macvtap entered promiscuous mode [ 246.943031][ T7200] sctp: [Deprecated]: syz.6.599 (pid 7200) Use of int in max_burst socket option deprecated. [ 246.943031][ T7200] Use struct sctp_assoc_value instead [ 246.979131][ T6911] device veth1_macvtap entered promiscuous mode [ 247.000039][ T4904] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.039309][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.051039][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.073154][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.090948][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.101259][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.146849][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.176262][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.207703][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.246203][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.276575][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.315268][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.341497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.364258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.388419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.406970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.431974][ T7215] loop0: detected capacity change from 0 to 128 [ 247.448804][ T4904] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.465252][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.481442][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.491518][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.502221][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.512144][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.522693][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.536344][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.548000][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.560719][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.571473][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.582754][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.591916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.604957][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.630581][ T6911] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.641925][ T6911] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.651251][ T6911] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.667732][ T6911] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.709672][ T26] audit: type=1804 audit(1756525693.699:27): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.603" name="/newroot/150/bus/bus" dev="loop0" ino=1048640 res=1 errno=0 [ 247.905655][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.931051][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.970589][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.986735][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.994185][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.033079][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 248.173153][ T7222] loop8: detected capacity change from 0 to 256 [ 248.222115][ T7222] FAT-fs (loop8): "posix" option is obsolete, not supported now [ 249.328617][ T5049] Bluetooth: hci5: command 0x1003 tx timeout [ 250.043324][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 251.592933][ T4904] device hsr_slave_0 left promiscuous mode [ 252.076362][ T5049] Bluetooth: hci5: command 0x1001 tx timeout [ 252.085524][ T4194] Bluetooth: hci5: sending frame failed (-49) [ 253.291390][ T4904] device hsr_slave_1 left promiscuous mode [ 253.371222][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.438572][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.514149][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.577754][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.662722][ T4904] device bridge_slave_1 left promiscuous mode [ 253.717804][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.820313][ T4904] device bridge_slave_0 left promiscuous mode [ 253.875798][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.063883][ T4904] device veth1_macvtap left promiscuous mode [ 254.119313][ T4904] device veth0_macvtap left promiscuous mode [ 254.156611][ T4737] Bluetooth: hci5: command 0x1009 tx timeout [ 254.177941][ T4904] device veth1_vlan left promiscuous mode [ 254.232504][ T4904] device veth0_vlan left promiscuous mode [ 254.883916][ T7258] loop6: detected capacity change from 0 to 32768 [ 254.911487][ T4904] team0 (unregistering): Port device team_slave_1 removed [ 254.929956][ T4904] team0 (unregistering): Port device team_slave_0 removed [ 254.944296][ T4904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.971740][ T7258] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 254.984936][ T7258] BTRFS info (device loop6): enabling ssd optimizations [ 254.997130][ T4904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.006887][ T7258] BTRFS info (device loop6): force zlib compression, level 3 [ 255.014314][ T7258] BTRFS info (device loop6): setting nodatacow [ 255.037657][ T7258] BTRFS info (device loop6): setting datasum, datacow enabled [ 255.045205][ T7258] BTRFS info (device loop6): use no compression [ 255.077139][ T7258] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 255.110916][ T7258] BTRFS info (device loop6): use zstd compression, level 3 [ 255.118313][ T7258] BTRFS info (device loop6): using free space tree [ 255.125130][ T7258] BTRFS info (device loop6): has skinny extents [ 255.141765][ T4904] bond0 (unregistering): Released all slaves [ 255.302017][ T7281] loop0: detected capacity change from 0 to 256 [ 255.428256][ T7281] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 255.499477][ T7281] attempt to access beyond end of device [ 255.499477][ T7281] loop0: rw=524288, want=34359738496, limit=256 [ 255.522607][ T7281] attempt to access beyond end of device [ 255.522607][ T7281] loop0: rw=0, want=34359738496, limit=256 [ 255.577247][ T26] audit: type=1800 audit(1756525701.569:28): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.613" name="file1" dev="loop0" ino=1048643 res=0 errno=0 [ 255.681135][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.800849][ T7296] loop8: detected capacity change from 0 to 1024 [ 255.888439][ T7296] EXT4-fs (loop8): Ignoring removed nobh option [ 255.908284][ T7296] EXT4-fs (loop8): Ignoring removed bh option [ 255.914435][ T7296] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.070960][ T7296] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,init_itable=0x0000000000000be6,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,acl,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 256.182780][ T7296] EXT4-fs error (device loop8): ext4_ext_split:1146: inode #15: comm syz.8.616: eh_entries 0 != eh_max 84! [ 256.224476][ T7313] loop0: detected capacity change from 0 to 164 [ 256.268207][ T7296] EXT4-fs error (device loop8): mb_free_blocks:1860: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 256.584343][ T4314] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 256.606532][ T4314] EXT4-fs (loop8): This should not happen!! Data will be lost [ 256.606532][ T4314] [ 256.617158][ T4314] EXT4-fs (loop8): Total free blocks count 0 [ 256.623576][ T4314] EXT4-fs (loop8): Free/Dirty block details [ 256.629964][ T4314] EXT4-fs (loop8): free_blocks=16 [ 256.642191][ T4314] EXT4-fs (loop8): dirty_blocks=0 [ 256.657138][ T4314] EXT4-fs (loop8): Block reservation details [ 256.664840][ T4314] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 256.811208][ T7323] loop0: detected capacity change from 0 to 4096 [ 256.904951][ T7323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.919695][ T7324] loop6: detected capacity change from 0 to 2048 [ 257.060495][ T7324] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 257.060601][ T7324] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.155801][ T7324] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.623: bg 0: block 345: padding at end of block bitmap is not set [ 257.160303][ T7333] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.622: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 257.226481][ T7324] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 257.310144][ T7333] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.622: directory missing '..' [ 257.325221][ T7324] EXT4-fs (loop6): This should not happen!! Data will be lost [ 257.325221][ T7324] [ 258.252651][ T154] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 117 [ 258.372433][ T154] EXT4-fs (loop6): This should not happen!! Data will be lost [ 258.372433][ T154] [ 260.504920][ T7354] loop0: detected capacity change from 0 to 128 [ 261.621837][ T7382] loop0: detected capacity change from 0 to 4096 [ 262.086310][ T5049] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 262.206272][ T7378] chnl_net:caif_netlink_parms(): no params data found [ 262.336267][ T5049] usb 8-1: Using ep0 maxpacket: 32 [ 262.391919][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.402738][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.413410][ T7378] device bridge_slave_0 entered promiscuous mode [ 262.423122][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.430652][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.439672][ T7378] device bridge_slave_1 entered promiscuous mode [ 262.457867][ T5049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.486288][ T5049] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.506301][ T5049] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 262.535834][ T5049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.552309][ T5049] usb 8-1: config 0 descriptor?? [ 262.597712][ T5049] hub 8-1:0.0: USB hub found [ 262.618692][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.639507][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.769433][ T7378] team0: Port device team_slave_0 added [ 262.816493][ T5049] hub 8-1:0.0: 1 port detected [ 262.853351][ T7378] team0: Port device team_slave_1 added [ 262.940564][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.996392][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.057792][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.097485][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.124861][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.150946][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.173612][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.301702][ T7378] device hsr_slave_0 entered promiscuous mode [ 263.336730][ T7378] device hsr_slave_1 entered promiscuous mode [ 263.353942][ T7378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.362665][ T4244] Bluetooth: hci2: command 0x0409 tx timeout [ 263.392879][ T7378] Cannot create hsr debugfs directory [ 263.486403][ T4244] hub 8-1:0.0: activate --> -90 [ 263.500123][ T26] audit: type=1804 audit(1756525709.489:29): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.634" name="/newroot/160/bus/file1" dev="loop0" ino=33 res=1 errno=0 [ 263.784618][ T7424] loop6: detected capacity change from 0 to 128 [ 263.793055][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 263.810501][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 263.820061][ T4904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.923084][ T4904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.939931][ T4232] usb 8-1: USB disconnect, device number 2 [ 263.953356][ T26] audit: type=1800 audit(1756525709.939:30): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.639" name="bus" dev="loop6" ino=1048645 res=0 errno=0 [ 263.974732][ T4244] usb 8-1-port1: config error [ 264.147040][ T4904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.275713][ T4904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.472925][ T7378] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 264.536343][ T4232] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 264.575309][ T7378] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 264.638227][ T7378] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 264.734103][ T7378] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 264.896453][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.926408][ T4232] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 264.935525][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.977383][ T4232] usb 1-1: config 0 descriptor?? [ 265.052210][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.164419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.182081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.257726][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.312192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.327022][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.348175][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.355285][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.390736][ T7469] netlink: 96 bytes leftover after parsing attributes in process `syz.7.647'. [ 265.420963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.437591][ T1111] Bluetooth: hci2: command 0x041b tx timeout [ 265.458406][ T4232] petalynx 0003:18B1:0037.0011: item fetching failed at offset 0/2 [ 265.471453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.481325][ T4232] petalynx 0003:18B1:0037.0011: parse failed [ 265.487851][ T4232] petalynx: probe of 0003:18B1:0037.0011 failed with error -22 [ 265.497489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.506035][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.513199][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.521992][ T7349] Set syz1 is full, maxelem 65536 reached [ 265.560870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.589624][ T1111] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 265.639400][ T1111] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.714398][ T4244] usb 1-1: USB disconnect, device number 9 [ 265.801968][ T7484] loop7: detected capacity change from 0 to 512 [ 265.809409][ T7479] fido_id[7479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.810721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.852077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.869287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.885172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.895140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.936785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.026763][ T7484] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.040740][ T7484] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.103909][ T7378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.151944][ T26] audit: type=1804 audit(1756525712.139:31): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.653" name="/newroot/8/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 266.162254][ T7378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.189763][ T7484] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 266.219972][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.228315][ T7484] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 266.250457][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.263175][ T26] audit: type=1804 audit(1756525712.249:32): pid=7490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.653" name="/newroot/8/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 266.301474][ T7484] EXT4-fs (loop7): This should not happen!! Data will be lost [ 266.301474][ T7484] [ 266.313905][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.329505][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.341329][ T7484] EXT4-fs (loop7): Total free blocks count 0 [ 266.352061][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.363235][ T7484] EXT4-fs (loop7): Free/Dirty block details [ 266.376411][ T7484] EXT4-fs (loop7): free_blocks=65280 [ 266.384467][ T7484] EXT4-fs (loop7): dirty_blocks=22 [ 266.398958][ T7484] EXT4-fs (loop7): Block reservation details [ 266.405160][ T7484] EXT4-fs (loop7): i_reserved_data_blocks=22 [ 267.861148][ T7486] loop6: detected capacity change from 0 to 40427 [ 267.988846][ T7486] F2FS-fs (loop6): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 268.065123][ T4244] Bluetooth: hci2: command 0x040f tx timeout [ 268.090798][ T7486] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 268.172310][ T7486] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x6 [ 268.338791][ T7486] F2FS-fs (loop6): invalid crc value [ 268.423910][ T7486] F2FS-fs (loop6): Found nat_bits in checkpoint [ 269.035777][ T7486] F2FS-fs (loop6): Start checkpoint disabled! [ 269.705168][ T7508] loop8: detected capacity change from 0 to 128 [ 269.848596][ T26] audit: type=1804 audit(1756525715.839:33): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.658" name="/newroot/10/bus/bus" dev="loop8" ino=1048646 res=1 errno=0 [ 269.926995][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.937703][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.031109][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.374930][ T4904] device hsr_slave_0 left promiscuous mode [ 270.386394][ T5171] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 270.438455][ T4904] device hsr_slave_1 left promiscuous mode [ 270.462593][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.472929][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.525205][ T4904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.573640][ T4904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.619332][ T4904] device bridge_slave_1 left promiscuous mode [ 270.628663][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.636460][ T5171] usb 7-1: Using ep0 maxpacket: 16 [ 270.695835][ T4904] device bridge_slave_0 left promiscuous mode [ 270.713310][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.756563][ T5171] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.786872][ T5171] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 270.801959][ T4904] device veth1_macvtap left promiscuous mode [ 270.816301][ T5171] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 270.820113][ T4904] device veth0_macvtap left promiscuous mode [ 270.835040][ T5171] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.863729][ T5171] usb 7-1: config 0 descriptor?? [ 270.873876][ T4904] device veth1_vlan left promiscuous mode [ 270.882436][ T4904] device veth0_vlan left promiscuous mode [ 271.352395][ T5171] HID 045e:07da: Invalid code 65791 type 1 [ 271.372222][ T5049] Bluetooth: hci2: command 0x0419 tx timeout [ 271.387658][ T5171] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0013/input/input21 [ 271.444934][ T5171] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 271.651296][ T4904] team0 (unregistering): Port device team_slave_1 removed [ 271.722637][ T4904] team0 (unregistering): Port device team_slave_0 removed [ 271.770051][ T4904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.824163][ T4904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.841610][ T5171] usb 7-1: USB disconnect, device number 16 [ 272.098081][ T4904] bond0 (unregistering): Released all slaves [ 272.258019][ T7567] loop7: detected capacity change from 0 to 128 [ 272.398216][ T26] audit: type=1804 audit(1756525718.389:34): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.673" name="/newroot/15/bus/bus" dev="loop7" ino=1048647 res=1 errno=0 [ 272.816262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.825764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.855940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.909048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.944356][ T7378] device veth0_vlan entered promiscuous mode [ 272.962832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.003490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.066697][ T7378] device veth1_vlan entered promiscuous mode [ 273.134456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 273.151949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.164904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.188780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.236832][ T5171] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 273.238996][ T7378] device veth0_macvtap entered promiscuous mode [ 273.265182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.288294][ T7378] device veth1_macvtap entered promiscuous mode [ 273.378012][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.394222][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.409545][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.431090][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.451629][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.493815][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.509370][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.550668][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.588280][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.597319][ T5171] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.608003][ T4244] Bluetooth: hci0: command 0x201b tx timeout [ 273.617298][ T7573] loop0: detected capacity change from 0 to 32768 [ 273.629732][ T5171] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.667849][ T5171] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.703764][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.716259][ T5171] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.729865][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.778376][ T7592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 273.780074][ T7573] XFS (loop0): Mounting V5 Filesystem [ 273.797347][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.835250][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.970395][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.007724][ T7573] XFS (loop0): Ending clean mount [ 274.048966][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.085005][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.102651][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.118903][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.135772][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.147938][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.164135][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.187334][ T7585] loop8: detected capacity change from 0 to 32768 [ 274.204764][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.229745][ T7585] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 274.245236][ T7585] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 274.286014][ T7378] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.296838][ T7378] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.316012][ T7378] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.335853][ T7378] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.363830][ T4183] XFS (loop0): Unmounting Filesystem [ 274.454345][ T7585] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 274.592068][ T7320] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 274.602288][ T7320] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 274.747323][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.760791][ T7320] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 158ms [ 274.766294][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.790561][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 274.823536][ T7320] gfs2: fsid=syz:syz.0: jid=0: Done [ 274.842475][ T7585] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 274.924730][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.958565][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.037513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.268876][ T7632] loop9: detected capacity change from 0 to 256 [ 275.434530][ T7632] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 275.484047][ T7617] loop7: detected capacity change from 0 to 32768 [ 275.576345][ T7617] XFS: ikeep mount option is deprecated. [ 275.577402][ T7632] attempt to access beyond end of device [ 275.577402][ T7632] loop9: rw=524288, want=34359738496, limit=256 [ 275.637275][ T5171] usb 7-1: USB disconnect, device number 17 [ 275.651162][ T7632] attempt to access beyond end of device [ 275.651162][ T7632] loop9: rw=0, want=34359738496, limit=256 [ 275.711721][ T26] audit: type=1800 audit(1756525721.699:35): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.629" name="file1" dev="loop9" ino=1048650 res=0 errno=0 [ 275.848060][ T7617] XFS (loop7): Mounting V5 Filesystem [ 276.202275][ T7617] XFS (loop7): Ending clean mount [ 276.217971][ T7617] XFS (loop7): Quotacheck needed: Please wait. [ 276.395280][ T7659] loop6: detected capacity change from 0 to 512 [ 276.403034][ T7617] XFS (loop7): Quotacheck: Done. [ 276.426257][ T4244] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 276.546666][ T7659] EXT4-fs (loop6): Ignoring removed oldalloc option [ 276.566227][ T7659] EXT4-fs (loop6): Ignoring removed bh option [ 276.605915][ T6851] XFS (loop7): Unmounting Filesystem [ 276.643117][ T7659] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.686: corrupted in-inode xattr [ 276.699897][ T4244] usb 1-1: Using ep0 maxpacket: 16 [ 276.725888][ T7659] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.686: couldn't read orphan inode 15 (err -117) [ 276.846502][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.864257][ T7659] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,abort,nombcache,noload,jqfmt=vfsv0,max_batch_time=0x0000000000000001,oldalloc,inode_readahead_blks=0x0000000002000000,bsdgroups,bh,,errors=continue. Quota mode: none. [ 276.906215][ T4244] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.936896][ T4244] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 276.987447][ T4244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.040921][ T4244] usb 1-1: config 0 descriptor?? [ 277.113432][ T7659] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #2: block 12: comm syz.6.686: lblock 3 mapped to illegal pblock 12 (length 1) [ 277.470766][ T7656] loop9: detected capacity change from 0 to 32768 [ 277.498341][ T7656] XFS (loop9): Mounting V5 Filesystem [ 277.572403][ T4244] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 277.579879][ T4244] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 277.588015][ T4244] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 277.595462][ T4244] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 277.603650][ T4244] appleir 0003:05AC:8241.0014: unknown main item tag 0x0 [ 277.614024][ T4244] appleir 0003:05AC:8241.0014: No inputs registered, leaving [ 277.627494][ T4244] appleir 0003:05AC:8241.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 277.688424][ T7656] XFS (loop9): Ending clean mount [ 277.850735][ T5173] usb 1-1: USB disconnect, device number 10 [ 277.868262][ T7378] XFS (loop9): Unmounting Filesystem [ 278.126528][ T7665] loop8: detected capacity change from 0 to 32768 [ 278.196989][ T7665] gfs2: Unknown parameter '00000000000000000000003' [ 278.382814][ T7718] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 278.643279][ T7727] loop9: detected capacity change from 0 to 1024 [ 278.821158][ T7727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 278.938380][ T7727] EXT4-fs error (device loop9): ext4_free_blocks:6218: comm syz.9.690: Freeing blocks not in datazone - block = 0, count = 4096 [ 278.980300][ T7727] EXT4-fs (loop9): Remounting filesystem read-only [ 278.991235][ T7727] EXT4-fs (loop9): 1 orphan inode deleted [ 279.024326][ T7727] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro,. Quota mode: writeback. [ 282.203119][ T7769] loop0: detected capacity change from 0 to 2048 [ 282.438525][ T7769] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 282.462654][ T7769] UDF-fs: Scanning with blocksize 512 failed [ 282.518540][ T7769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.598634][ T7775] loop6: detected capacity change from 0 to 32768 [ 282.650828][ T7775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.703 (7775) [ 282.740573][ T7775] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 282.793440][ T7775] BTRFS info (device loop6): max_inline at 0 [ 282.802332][ T7775] BTRFS info (device loop6): enabling disk space caching [ 282.836291][ T7775] BTRFS info (device loop6): setting nodatacow, compression disabled [ 282.876503][ T7775] BTRFS info (device loop6): turning off barriers [ 282.882978][ T7775] BTRFS info (device loop6): turning on flush-on-commit [ 282.890602][ T4244] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 282.928528][ T7775] BTRFS info (device loop6): doing ref verification [ 282.954826][ T7775] BTRFS info (device loop6): force clearing of disk cache [ 282.980324][ T7775] BTRFS info (device loop6): enabling ssd optimizations [ 283.020369][ T7775] BTRFS info (device loop6): max_inline at 4096 [ 283.035890][ T7775] BTRFS info (device loop6): disk space caching is enabled [ 283.068467][ T7775] BTRFS info (device loop6): has skinny extents [ 283.146277][ T4244] usb 10-1: Using ep0 maxpacket: 32 [ 283.258062][ T7799] Falling back ldisc for ttyS3. [ 283.286714][ T4244] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 283.294863][ T4244] usb 10-1: config 0 has no interface number 0 [ 283.459831][ T7775] BTRFS info (device loop6): clearing free space tree [ 283.485693][ T7775] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 283.526412][ T4244] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 283.545608][ T4244] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.564608][ T4244] usb 10-1: Product: syz [ 283.569085][ T4244] usb 10-1: Manufacturer: syz [ 283.573824][ T4244] usb 10-1: SerialNumber: syz [ 283.584012][ T7775] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 283.585250][ T4244] usb 10-1: config 0 descriptor?? [ 283.648484][ T4244] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 283.658048][ T4244] usb 10-1: selecting invalid altsetting 1 [ 283.664091][ T4244] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 283.675546][ T4244] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 283.687372][ T4244] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 283.697311][ T4244] usb 10-1: media controller created [ 283.722210][ T4244] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.868668][ T26] audit: type=1804 audit(1756525729.849:36): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.703" name="/newroot/103/file1/file1" dev="loop6" ino=260 res=1 errno=0 [ 284.069876][ T7847] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 284.128484][ T7805] loop0: detected capacity change from 0 to 32768 [ 284.295167][ T26] audit: type=1800 audit(1756525730.279:37): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.711" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 284.327543][ T7805] attempt to access beyond end of device [ 284.327543][ T7805] loop0: rw=1, want=4680040, limit=32768 [ 284.368441][ T7805] metapage_write_end_io: I/O error [ 284.388761][ T7805] blkno = 8ed2c, nblocks = 1 [ 284.393417][ T7805] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 284.393417][ T7805] [ 284.438495][ T7805] ERROR: (device loop0): remounting filesystem as read-only [ 284.532004][ T7805] attempt to access beyond end of device [ 284.532004][ T7805] loop0: rw=34817, want=4680184, limit=32768 [ 284.544267][ T7805] blkno = 8ed30, nblocks = f [ 284.549363][ T7805] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 284.549363][ T7805] [ 284.619982][ T277] blkno = 8ed2c, nblocks = 4 [ 284.629223][ T277] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 284.629223][ T277] [ 284.710877][ T4183] attempt to access beyond end of device [ 284.710877][ T4183] loop0: rw=1, want=4680040, limit=32768 [ 284.746357][ T4183] metapage_write_end_io: I/O error [ 284.757759][ T4183] JFS: metapage_get_blocks failed [ 284.772922][ T4183] JFS: metapage_get_blocks failed [ 284.783818][ T4183] JFS: metapage_get_blocks failed [ 284.797924][ T4183] JFS: metapage_get_blocks failed [ 284.823598][ T7867] loop6: detected capacity change from 0 to 128 [ 284.891743][ T4244] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 284.901912][ T4244] zl10353_read_register: readreg error (reg=127, ret==-110) [ 284.936488][ T4244] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 284.945249][ T26] audit: type=1804 audit(1756525730.929:38): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.715" name="/newroot/104/bus/bus" dev="loop6" ino=1048651 res=1 errno=0 [ 285.024408][ T4244] usb 10-1: USB disconnect, device number 2 [ 285.848926][ T7898] loop8: detected capacity change from 0 to 256 [ 286.187530][ T7904] loop9: detected capacity change from 0 to 8192 [ 286.266368][ T4244] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 286.436329][ T7904] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 286.445736][ T7904] REISERFS (device loop9): using ordered data mode [ 286.450867][ T7880] loop0: detected capacity change from 0 to 32768 [ 286.496650][ T7904] reiserfs: using flush barriers [ 286.527258][ T7904] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.549502][ T7880] [ 286.549502][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.549502][ T7880] [ 286.602833][ T7904] REISERFS (device loop9): checking transaction log (loop9) [ 286.675275][ T7904] REISERFS (device loop9): Using r5 hash to sort names [ 286.706283][ T7880] [ 286.706283][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.706283][ T7880] [ 286.719487][ T4244] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.722888][ T7904] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 286.736216][ T4244] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.770993][ T7880] [ 286.770993][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.770993][ T7880] [ 286.812695][ T7880] [ 286.812695][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.812695][ T7880] [ 286.880813][ T7880] [ 286.880813][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.880813][ T7880] [ 286.893179][ T4244] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.903257][ T4244] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.911920][ T4244] usb 8-1: SerialNumber: syz [ 286.933259][ T7932] loop8: detected capacity change from 0 to 1024 [ 286.941840][ T7880] [ 286.941840][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.941840][ T7880] [ 286.942262][ T7880] [ 286.942262][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.942262][ T7880] [ 286.952907][ T277] [ 286.952907][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.952907][ T277] [ 286.959795][ T7880] [ 286.959795][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.959795][ T7880] [ 286.959928][ T7880] [ 286.959928][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.959928][ T7880] [ 286.959944][ T7880] [ 286.959944][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.959944][ T7880] [ 286.959959][ T7880] [ 286.959959][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.959959][ T7880] [ 287.010240][ T277] [ 287.010240][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.010240][ T277] [ 287.233721][ T7932] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.289353][ T4244] usb 8-1: 0:2 : does not exist [ 287.313032][ T4244] usb 8-1: USB disconnect, device number 3 [ 287.455393][ T7880] [ 287.455393][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.455393][ T7880] [ 287.472271][ T7880] [ 287.472271][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.472271][ T7880] [ 287.491518][ T7880] [ 287.491518][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.491518][ T7880] [ 287.521442][ T7880] [ 287.521442][ T7880] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.521442][ T7880] [ 287.577178][ T6822] udevd[6822]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.605228][ T277] [ 287.605228][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.605228][ T277] [ 287.656392][ T5166] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 287.734599][ T4183] [ 287.734599][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.734599][ T4183] [ 287.757974][ T4183] [ 287.757974][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 287.757974][ T4183] [ 287.916496][ T5166] usb 7-1: Using ep0 maxpacket: 8 [ 288.036591][ T5166] usb 7-1: config 150 has an invalid interface number: 204 but max is 1 [ 288.044996][ T5166] usb 7-1: config 150 has no interface number 0 [ 288.070632][ T5166] usb 7-1: config 150 interface 204 has no altsetting 0 [ 288.097942][ T5166] usb 7-1: config 150 interface 1 has no altsetting 0 [ 288.143282][ T7945] loop9: detected capacity change from 0 to 32768 [ 288.151432][ T7967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input22 [ 288.230740][ T7970] loop0: detected capacity change from 0 to 1024 [ 288.257784][ T5166] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 288.278810][ T7945] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 288.296624][ T5166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.388237][ T5166] usb 7-1: Product: syz [ 288.404764][ T5166] usb 7-1: Manufacturer: syz [ 288.437517][ T5166] usb 7-1: SerialNumber: syz [ 288.513569][ T7970] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.737898][ T5166] xr_serial 7-1:150.204: xr_serial converter detected [ 288.766003][ T7945] syz.9.736 (7945) used greatest stack depth: 18240 bytes left [ 288.853709][ T7994] loop8: detected capacity change from 0 to 4096 [ 288.891126][ T7378] ocfs2: Unmounting device (7,9) on (node local) [ 289.172853][ T8005] netlink: 'syz.0.746': attribute type 1 has an invalid length. [ 289.196573][ T5170] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 289.323079][ T8008] loop9: detected capacity change from 0 to 128 [ 289.446312][ T5170] usb 8-1: Using ep0 maxpacket: 8 [ 289.467603][ T26] audit: type=1804 audit(1756525735.459:39): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.741" name="/newroot/9/bus/bus" dev="loop9" ino=1048652 res=1 errno=0 [ 289.566493][ T5170] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.606779][ T5170] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.636756][ T5166] usb 7-1: xr_serial converter now attached to ttyUSB0 [ 289.654625][ T5170] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1 [ 289.710528][ T5170] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.730403][ T5170] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 289.742207][ T5170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.833097][ T5166] usb 7-1: USB disconnect, device number 18 [ 289.865373][ T5166] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 289.888274][ T5166] xr_serial 7-1:150.204: device disconnected [ 290.018027][ T5170] usb 8-1: GET_CAPABILITIES returned 0 [ 290.024218][ T5170] usbtmc 8-1:16.0: can't read capabilities [ 290.251969][ T5166] usb 8-1: USB disconnect, device number 4 [ 290.394993][ T8029] loop2: detected capacity change from 0 to 7 [ 290.424495][ T8029] Dev loop2: unable to read RDB block 7 [ 290.466326][ T8029] loop2: unable to read partition table [ 290.478967][ T8029] loop2: partition table beyond EOD, truncated [ 290.511326][ T8029] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 290.825935][ T8041] loop6: detected capacity change from 0 to 1024 [ 290.864157][ T8044] loop7: detected capacity change from 0 to 512 [ 291.000421][ T8041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 291.013106][ T8044] EXT4-fs error (device loop7): __ext4_iget:4894: inode #15: block 1803188595: comm syz.7.755: invalid block [ 291.026013][ T8044] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.755: couldn't read orphan inode 15 (err -117) [ 291.038513][ T8044] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000967,debug_want_extra_isize=0x000000000000005c,usrquota,nombcache,stripe=0x0000000000000008,usrjquota=,,errors=continue. Quota mode: writeback. [ 291.072877][ T8041] EXT4-fs error (device loop6): ext4_free_blocks:6218: comm syz.6.754: Freeing blocks not in datazone - block = 0, count = 4096 [ 291.146054][ T6851] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 291.166855][ T8041] EXT4-fs (loop6): Remounting filesystem read-only [ 291.196673][ T8041] EXT4-fs (loop6): 1 orphan inode deleted [ 291.202563][ T8041] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro,. Quota mode: writeback. [ 291.247073][ T6851] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 291.293119][ T6851] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 15 [ 291.559884][ T8071] loop9: detected capacity change from 0 to 128 [ 291.704341][ T8071] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.736337][ T8071] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 291.782466][ T4312] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.824737][ T8078] loop8: detected capacity change from 0 to 128 [ 291.889262][ T4312] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.908209][ T8071] EXT4-fs (loop9): shut down requested (1) [ 291.929509][ T8047] loop0: detected capacity change from 0 to 32768 [ 291.987722][ T4312] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.033542][ T26] audit: type=1804 audit(1756525738.019:40): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.765" name="/newroot/39/bus/bus" dev="loop8" ino=1048653 res=1 errno=0 [ 292.218628][ T8047] XFS (loop0): Mounting V5 Filesystem [ 292.351264][ T4312] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.377254][ T5166] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 292.430399][ T8047] XFS (loop0): Ending clean mount [ 292.486812][ T8047] XFS (loop0): Quotacheck needed: Please wait. [ 292.746241][ T5166] usb 7-1: config 0 has no interfaces? [ 292.751899][ T5166] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.782240][ T5166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.857177][ T5166] usb 7-1: config 0 descriptor?? [ 292.864742][ T8047] XFS (loop0): Quotacheck: Done. [ 293.028579][ T4183] XFS (loop0): Unmounting Filesystem [ 293.151157][ T4260] usb 7-1: USB disconnect, device number 19 [ 293.337745][ T8127] loop8: detected capacity change from 0 to 128 [ 293.447614][ T8127] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.475456][ T8125] loop9: detected capacity change from 0 to 32768 [ 293.520181][ T8127] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.579899][ T8127] EXT4-fs warning (device loop8): ext4_resize_begin:73: won't resize using backup superblock at 1 [ 293.613734][ T8125] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 293.726493][ T8131] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 14927927506383823856 in block_group 0 [ 293.965289][ T7378] ocfs2: Unmounting device (7,9) on (node local) [ 294.014140][ T8138] loop6: detected capacity change from 0 to 32768 [ 294.203934][ T8111] chnl_net:caif_netlink_parms(): no params data found [ 294.580651][ T8138] XFS (loop6): Mounting V5 Filesystem [ 294.709132][ T8138] XFS (loop6): Ending clean mount [ 294.719134][ T8138] XFS (loop6): Quotacheck needed: Please wait. [ 294.893976][ T4244] Bluetooth: hci0: command 0x0409 tx timeout [ 294.906935][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.914053][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.940763][ T8138] XFS (loop6): Quotacheck: Done. [ 294.946442][ T8111] device bridge_slave_0 entered promiscuous mode [ 295.020194][ T8141] loop8: detected capacity change from 0 to 32768 [ 295.042697][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.058635][ T4950] XFS (loop6): Unmounting Filesystem [ 295.070759][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.103238][ T8141] (syz.8.777,8141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.140544][ T8111] device bridge_slave_1 entered promiscuous mode [ 295.167746][ T8141] (syz.8.777,8141,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 295.265127][ T8166] loop9: detected capacity change from 0 to 128 [ 295.328189][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.345407][ T8141] JBD2: Ignoring recovery information on journal [ 295.399083][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.555248][ T8141] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 295.618432][ T8166] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 295.633367][ T26] audit: type=1800 audit(1756525741.609:41): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.781" name="file2" dev="loop9" ino=1048654 res=0 errno=0 [ 295.654469][ T8166] FAT-fs (loop9): Filesystem has been set read-only [ 295.705400][ T8166] attempt to access beyond end of device [ 295.705400][ T8166] loop9: rw=524288, want=2073, limit=128 [ 295.727135][ T8166] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 295.761488][ T8141] (syz.8.777,8141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 295.761789][ T8166] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 295.800855][ T8111] team0: Port device team_slave_0 added [ 295.850494][ T8111] team0: Port device team_slave_1 added [ 295.939753][ T8166] attempt to access beyond end of device [ 295.939753][ T8166] loop9: rw=0, want=2073, limit=128 [ 296.016386][ T8166] attempt to access beyond end of device [ 296.016386][ T8166] loop9: rw=0, want=2073, limit=128 [ 296.050912][ T8166] attempt to access beyond end of device [ 296.050912][ T8166] loop9: rw=524288, want=2073, limit=128 [ 296.088216][ T8166] attempt to access beyond end of device [ 296.088216][ T8166] loop9: rw=0, want=2073, limit=128 [ 296.111395][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.128842][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.136439][ T8141] (syz.8.777,8141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 296.188665][ T8166] attempt to access beyond end of device [ 296.188665][ T8166] loop9: rw=0, want=2073, limit=128 [ 296.250725][ T8141] (syz.8.777,8141,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 296.259449][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.303376][ T8141] (syz.8.777,8141,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 296.321817][ T4312] device hsr_slave_0 left promiscuous mode [ 296.340314][ T4312] device hsr_slave_1 left promiscuous mode [ 296.346886][ T8141] (syz.8.777,8141,1):ocfs2_quota_read:201 ERROR: status = -5 [ 296.381258][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.386255][ T8141] Quota error (device loop8): find_block_dqentry: Can't read quota tree block 6 [ 296.393347][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.425380][ T8141] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 296.435331][ T8141] (syz.8.777,8141,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 296.486931][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.537508][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.631640][ T4312] device bridge_slave_1 left promiscuous mode [ 296.728284][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.843973][ T4312] device bridge_slave_0 left promiscuous mode [ 296.921427][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.179557][ T6911] ocfs2: Unmounting device (7,8) on (node local) [ 297.192189][ T4312] device veth1_macvtap left promiscuous mode [ 297.283245][ T4312] device veth0_macvtap left promiscuous mode [ 297.309141][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 297.372087][ T4312] device veth1_vlan left promiscuous mode [ 297.445566][ T4312] device veth0_vlan left promiscuous mode [ 299.471957][ T4244] Bluetooth: hci0: command 0x040f tx timeout [ 299.824231][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 299.861190][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 299.884772][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.921473][ T8194] loop8: detected capacity change from 0 to 32768 [ 299.930061][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.980778][ T8194] XFS (loop8): Mounting V5 Filesystem [ 300.155515][ T8194] XFS (loop8): Ending clean mount [ 300.167068][ T8194] XFS (loop8): Quotacheck needed: Please wait. [ 300.199705][ T4312] bond0 (unregistering): Released all slaves [ 300.262081][ T8194] XFS (loop8): Quotacheck: Done. [ 300.324542][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.344307][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.393482][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.399620][ T6911] XFS (loop8): Unmounting Filesystem [ 300.625679][ T8213] loop9: detected capacity change from 0 to 64 [ 300.704851][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.797891][ T8213] attempt to access beyond end of device [ 300.797891][ T8213] loop9: rw=0, want=268435470, limit=64 [ 300.819455][ T8213] Buffer I/O error on dev loop9, logical block 134217734, async page read [ 300.855440][ T8111] device hsr_slave_0 entered promiscuous mode [ 300.863062][ T8213] attempt to access beyond end of device [ 300.863062][ T8213] loop9: rw=0, want=268435470, limit=64 [ 300.881921][ T8111] device hsr_slave_1 entered promiscuous mode [ 300.899592][ T8213] Buffer I/O error on dev loop9, logical block 134217734, async page read [ 301.516472][ T4570] Bluetooth: hci0: command 0x0419 tx timeout [ 301.604001][ T8149] Set syz1 is full, maxelem 65536 reached [ 301.817990][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.036506][ T4260] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 302.054718][ T8226] loop8: detected capacity change from 0 to 32768 [ 302.163179][ T8226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.785 (8226) [ 302.204876][ T8226] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 302.233329][ T8226] BTRFS info (device loop8): metadata ratio 2 [ 302.266680][ T8226] BTRFS info (device loop8): allowing degraded mounts [ 302.277981][ T4260] usb 1-1: Using ep0 maxpacket: 32 [ 302.307775][ T8226] BTRFS info (device loop8): force zlib compression, level 3 [ 302.315230][ T8226] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 302.380544][ T8226] BTRFS info (device loop8): use zstd compression, level 3 [ 302.406425][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.426320][ T8226] BTRFS info (device loop8): force clearing of disk cache [ 302.433777][ T4260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.454355][ T8226] BTRFS info (device loop8): max_inline at 0 [ 302.460752][ T4260] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.470440][ T8226] BTRFS info (device loop8): using free space tree [ 302.486219][ T8226] BTRFS info (device loop8): has skinny extents [ 302.492686][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.527869][ T4260] usb 1-1: config 0 descriptor?? [ 302.567411][ T4260] hub 1-1:0.0: USB hub found [ 302.586852][ T8240] loop9: detected capacity change from 0 to 32768 [ 302.649666][ T8240] XFS (loop9): Mounting V5 Filesystem [ 302.663900][ T8226] BTRFS info (device loop8): enabling ssd optimizations [ 302.688333][ T8226] BTRFS info (device loop8): clearing free space tree [ 302.713842][ T8226] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 302.768593][ T8226] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 302.790854][ T4260] hub 1-1:0.0: 1 port detected [ 302.827064][ T8226] BTRFS info (device loop8): creating free space tree [ 302.852309][ T8226] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 302.862118][ T8226] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 302.918285][ T8240] XFS (loop9): Ending clean mount [ 302.934485][ T8111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.943712][ T26] audit: type=1800 audit(1756525748.929:42): pid=8226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.785" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 303.059190][ T8111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.098895][ T8111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.126848][ T8111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.280289][ T7378] XFS (loop9): Unmounting Filesystem [ 303.436346][ T4260] hub 1-1:0.0: activate --> -90 [ 303.501274][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.533358][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.550825][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.624427][ T8111] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.651739][ T5171] usb 1-1: USB disconnect, device number 11 [ 303.666277][ T4260] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 303.708072][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.722589][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.735328][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.765858][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.773139][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.806316][ T5173] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 303.808776][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.871658][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.885101][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.913975][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.921475][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.945071][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.972016][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.014216][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.032005][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.068348][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.101951][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.110719][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.137123][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.146016][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.181217][ T5173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.198568][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.231170][ T8111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.256230][ T5173] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 304.270743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.292828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.316774][ T5173] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 304.373323][ T5173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.403815][ T5173] usb 7-1: config 0 descriptor?? [ 304.635686][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.660587][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.694828][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.919443][ T5173] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 304.950118][ T5173] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 304.978503][ T5173] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 304.985733][ T5173] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 305.019012][ T5173] kovaplus 0003:1E7D:2D50.0015: unknown main item tag 0x0 [ 305.055112][ T5173] kovaplus 0003:1E7D:2D50.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 305.080697][ T8307] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 305.110589][ T8307] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 305.150769][ T8310] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 305.166254][ T8310] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 305.196943][ T5171] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 305.386366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.403973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.448078][ T5171] usb 9-1: Using ep0 maxpacket: 32 [ 305.500797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.520958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.566422][ T5171] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.584689][ T5171] usb 9-1: config 0 has no interface number 0 [ 305.590966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.627192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.647760][ T8111] device veth0_vlan entered promiscuous mode [ 305.675068][ T8111] device veth1_vlan entered promiscuous mode [ 305.758168][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.768613][ T5171] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 305.773541][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.787398][ T5171] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.798505][ T8111] device veth0_macvtap entered promiscuous mode [ 305.816574][ T5171] usb 9-1: Product: syz [ 305.824194][ T8111] device veth1_macvtap entered promiscuous mode [ 305.830814][ T5171] usb 9-1: Manufacturer: syz [ 305.835447][ T5171] usb 9-1: SerialNumber: syz [ 305.874959][ T5171] usb 9-1: config 0 descriptor?? [ 305.897601][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.926841][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.948386][ T5171] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 305.959122][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.969759][ T5171] usb 9-1: selecting invalid altsetting 1 [ 305.975519][ T5171] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 305.986279][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.015108][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.031088][ T8313] loop0: detected capacity change from 0 to 32768 [ 306.039500][ T5171] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 306.045447][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.063954][ T5171] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 306.076364][ T5173] kovaplus 0003:1E7D:2D50.0015: couldn't init struct kovaplus_device [ 306.085636][ T5173] kovaplus 0003:1E7D:2D50.0015: couldn't install mouse [ 306.092659][ T5171] usb 9-1: media controller created [ 306.110488][ T5171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.123417][ T5173] kovaplus: probe of 0003:1E7D:2D50.0015 failed with error -71 [ 306.142438][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.143583][ T5173] usb 7-1: USB disconnect, device number 20 [ 306.209651][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.247064][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.276406][ T5171] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 306.285927][ T5171] zl10353_read_register: readreg error (reg=127, ret==-71) [ 306.306754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.315028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.326880][ T8323] fido_id[8323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 306.368396][ T8313] XFS (loop0): Mounting V5 Filesystem [ 306.386326][ T5171] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 306.395087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.429211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.476715][ T5171] usb 9-1: USB disconnect, device number 2 [ 306.486033][ T8313] XFS (loop0): Ending clean mount [ 306.494758][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.506508][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.516661][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.526778][ T8313] XFS (loop0): Quotacheck needed: Please wait. [ 306.527445][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.544366][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.555088][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.565180][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.581826][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.594419][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.616531][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.628283][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.674428][ T8111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.693489][ T8111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.727053][ T8111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.743722][ T8111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.755263][ T8313] XFS (loop0): Quotacheck: Done. [ 307.040113][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.071924][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.106601][ T4183] XFS (loop0): Unmounting Filesystem [ 307.117232][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.134412][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.182592][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.210439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.530871][ T8339] loop8: detected capacity change from 0 to 8192 [ 307.665721][ T8339] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 307.712527][ T8339] REISERFS (device loop8): using ordered data mode [ 307.754209][ T8339] reiserfs: using flush barriers [ 307.800857][ T8339] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 307.863936][ T8339] REISERFS (device loop8): checking transaction log (loop8) [ 307.899190][ T8339] REISERFS (device loop8): Using r5 hash to sort names [ 307.948858][ T8339] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 308.389379][ T8366] loop8: detected capacity change from 0 to 64 [ 308.589318][ T8366] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 309.267773][ T5595] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 309.276743][ T5171] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 309.306372][ T5595] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.568485][ T8407] loop6: detected capacity change from 0 to 256 [ 309.577848][ T8317] Set syz1 is full, maxelem 65536 reached [ 309.636042][ T8407] exfat: Deprecated parameter 'utf8' [ 309.642057][ T5171] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 309.670023][ T5171] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.709563][ T8407] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 309.738026][ T5171] usb 9-1: config 0 descriptor?? [ 310.359571][ T5170] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 310.392979][ T8441] loop6: detected capacity change from 0 to 1024 [ 310.562350][ T8441] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 310.616251][ T5170] usb 10-1: Using ep0 maxpacket: 32 [ 310.743714][ T5170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.776403][ T5170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.801763][ T5170] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.821833][ T5595] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 310.826282][ T5170] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.886357][ T5171] ath6kl: Failed to submit usb control message: -110 [ 310.893244][ T5171] ath6kl: unable to send the bmi data to the device: -110 [ 310.921993][ T5170] usb 10-1: config 0 descriptor?? [ 310.927429][ T5171] ath6kl: Unable to send get target info: -110 [ 310.959585][ T8463] loop6: detected capacity change from 0 to 128 [ 310.974232][ T5170] hub 10-1:0.0: USB hub found [ 311.069837][ T8463] EXT4-fs (loop6): Ignoring removed nobh option [ 311.089335][ T8463] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 311.110946][ T8382] loop8: detected capacity change from 0 to 32768 [ 311.133588][ T8463] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 311.144996][ T5595] usb 1-1: Using ep0 maxpacket: 32 [ 311.196453][ T5170] hub 10-1:0.0: 1 port detected [ 311.284444][ T5595] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 311.309066][ T5595] usb 1-1: config 0 has no interface number 0 [ 311.309241][ T8470] loop4: detected capacity change from 0 to 8192 [ 311.315218][ T5595] usb 1-1: config 0 interface 89 has no altsetting 0 [ 311.324521][ T8382] XFS (loop8): Mounting V5 Filesystem [ 311.496425][ T5595] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 311.508865][ T5595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.523428][ T5595] usb 1-1: Product: syz [ 311.548417][ T5595] usb 1-1: Manufacturer: syz [ 311.553073][ T5595] usb 1-1: SerialNumber: syz [ 311.592808][ T5595] usb 1-1: config 0 descriptor?? [ 311.615920][ T5171] ath6kl: Failed to init ath6kl core: -110 [ 311.678791][ T5595] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 311.698349][ T5595] em28xx 1-1:0.89: Video interface 89 found: bulk [ 311.781343][ T8494] loop4: detected capacity change from 0 to 512 [ 311.790262][ T5171] ath6kl_usb: probe of 9-1:0.0 failed with error -110 [ 311.825316][ T8382] XFS (loop8): Ending clean mount [ 311.836780][ T8494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 311.867938][ T5173] hub 10-1:0.0: activate --> -90 [ 311.919731][ T1325] usb 9-1: USB disconnect, device number 3 [ 311.930161][ T8494] EXT4-fs (loop4): 1 truncate cleaned up [ 311.935886][ T8494] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 312.074770][ T5171] usb 10-1: USB disconnect, device number 3 [ 312.091389][ T5173] hub 10-1:0.0: hub_ext_port_status failed (err = -71) [ 312.272628][ T8488] loop6: detected capacity change from 0 to 32768 [ 312.281278][ T8505] loop4: detected capacity change from 0 to 128 [ 312.302855][ T8505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.337655][ T8505] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.348468][ T5595] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 312.412360][ T8488] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 312.471830][ T8488] [ 312.474207][ T8488] ====================================================== [ 312.481275][ T8488] WARNING: possible circular locking dependency detected [ 312.488321][ T8488] syzkaller #0 Not tainted [ 312.492753][ T8488] ------------------------------------------------------ [ 312.499791][ T8488] syz.6.835/8488 is trying to acquire lock: [ 312.505701][ T8488] ffff888056ee9488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x1b5/0x760 [ 312.516688][ T8488] [ 312.516688][ T8488] but task is already holding lock: [ 312.524054][ T8488] ffff888054c94da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x8db/0x17a0 [ 312.535227][ T8488] [ 312.535227][ T8488] which lock already depends on the new lock. [ 312.535227][ T8488] [ 312.545719][ T8488] [ 312.545719][ T8488] the existing dependency chain (in reverse order) is: [ 312.554818][ T8488] [ 312.554818][ T8488] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 312.563606][ T8488] down_read+0x44/0x2e0 [ 312.568298][ T8488] ocfs2_read_virt_blocks+0x23f/0x8a0 [ 312.574211][ T8488] ocfs2_find_entry+0x3d1/0x1f90 [ 312.579676][ T8488] ocfs2_find_files_on_disk+0xdb/0x2f0 [ 312.585664][ T8488] ocfs2_lookup_ino_from_name+0x4f/0xf0 [ 312.591738][ T8488] ocfs2_get_system_file_inode+0x319/0x760 [ 312.598071][ T8488] ocfs2_init_global_system_inodes+0x316/0x650 [ 312.604750][ T8488] ocfs2_fill_super+0x3dbf/0x4d80 [ 312.610328][ T8488] mount_bdev+0x287/0x3c0 [ 312.615181][ T8488] legacy_get_tree+0xe6/0x180 [ 312.620391][ T8488] vfs_get_tree+0x88/0x270 [ 312.625457][ T8488] do_new_mount+0x24a/0xa40 [ 312.630488][ T8488] __se_sys_mount+0x2d6/0x3c0 [ 312.635715][ T8488] do_syscall_64+0x4c/0xa0 [ 312.640739][ T8488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.647158][ T8488] [ 312.647158][ T8488] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 312.655506][ T8488] __lock_acquire+0x2c33/0x7c60 [ 312.660887][ T8488] lock_acquire+0x197/0x3f0 [ 312.665924][ T8488] __mutex_lock_common+0x1eb/0x2390 [ 312.671645][ T8488] mutex_lock_nested+0x17/0x20 [ 312.676929][ T8488] ocfs2_get_system_file_inode+0x1b5/0x760 [ 312.683265][ T8488] ocfs2_reserve_local_alloc_bits+0xfc/0x24c0 [ 312.689862][ T8488] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 312.696718][ T8488] ocfs2_lock_allocators+0x2f7/0x5b0 [ 312.702532][ T8488] ocfs2_write_begin_nolock+0x2216/0x4180 [ 312.708867][ T8488] ocfs2_dio_wr_get_block+0xb6d/0x17a0 [ 312.714883][ T8488] __blockdev_direct_IO+0x146d/0x3c90 [ 312.720863][ T8488] ocfs2_direct_IO+0x23e/0x2b0 [ 312.726151][ T8488] generic_file_direct_write+0x22c/0x490 [ 312.732306][ T8488] __generic_file_write_iter+0x2b1/0x4e0 [ 312.738466][ T8488] ocfs2_file_write_iter+0x1578/0x1cf0 [ 312.744465][ T8488] do_iter_readv_writev+0x497/0x600 [ 312.750276][ T8488] do_iter_write+0x205/0x7b0 [ 312.755390][ T8488] iter_file_splice_write+0x65f/0xc40 [ 312.761287][ T8488] direct_splice_actor+0xe1/0x130 [ 312.766929][ T8488] splice_direct_to_actor+0x4dc/0xb50 [ 312.772832][ T8488] do_splice_direct+0x1b9/0x2c0 [ 312.778207][ T8488] do_sendfile+0x5d5/0xec0 [ 312.783169][ T8488] __se_sys_sendfile64+0x13b/0x190 [ 312.788809][ T8488] do_syscall_64+0x4c/0xa0 [ 312.793868][ T8488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.800390][ T8488] [ 312.800390][ T8488] other info that might help us debug this: [ 312.800390][ T8488] [ 312.810620][ T8488] Possible unsafe locking scenario: [ 312.810620][ T8488] [ 312.818070][ T8488] CPU0 CPU1 [ 312.823431][ T8488] ---- ---- [ 312.828799][ T8488] lock(&ocfs2_file_ip_alloc_sem_key); [ 312.834350][ T8488] lock(&osb->system_file_mutex); [ 312.841981][ T8488] lock(&ocfs2_file_ip_alloc_sem_key); [ 312.850048][ T8488] lock(&osb->system_file_mutex); [ 312.855158][ T8488] [ 312.855158][ T8488] *** DEADLOCK *** [ 312.855158][ T8488] [ 312.863294][ T8488] 3 locks held by syz.6.835/8488: [ 312.868316][ T8488] #0: ffff88805f344460 (sb_writers#31){.+.+}-{0:0}, at: do_sendfile+0x5b2/0xec0 [ 312.877463][ T8488] #1: ffff888054c95108 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x401/0x1cf0 [ 312.888795][ T8488] #2: ffff888054c94da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_wr_get_block+0x8db/0x17a0 [ 312.900289][ T8488] [ 312.900289][ T8488] stack backtrace: [ 312.906178][ T8488] CPU: 0 PID: 8488 Comm: syz.6.835 Not tainted syzkaller #0 [ 312.913468][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.923538][ T8488] Call Trace: [ 312.926825][ T8488] [ 312.929762][ T8488] dump_stack_lvl+0x168/0x230 [ 312.934533][ T8488] ? load_image+0x3b0/0x3b0 [ 312.939095][ T8488] ? show_regs_print_info+0x20/0x20 [ 312.944414][ T8488] ? print_circular_bug+0x12b/0x1a0 [ 312.949633][ T8488] check_noncircular+0x274/0x310 [ 312.954575][ T8488] ? add_chain_block+0x940/0x940 [ 312.959558][ T8488] ? lockdep_lock+0xdc/0x1e0 [ 312.964172][ T8488] ? __bfs+0x2a3/0x5c0 [ 312.968247][ T8488] ? mark_lock+0x94/0x320 [ 312.972584][ T8488] __lock_acquire+0x2c33/0x7c60 [ 312.977469][ T8488] ? mark_lock+0x94/0x320 [ 312.981819][ T8488] ? __lock_acquire+0x13ad/0x7c60 [ 312.986848][ T8488] ? verify_lock_unused+0x140/0x140 [ 312.992052][ T8488] ? mark_lock+0x94/0x320 [ 312.996390][ T8488] ? __lock_acquire+0x13ad/0x7c60 [ 313.001444][ T8488] lock_acquire+0x197/0x3f0 [ 313.005966][ T8488] ? ocfs2_get_system_file_inode+0x1b5/0x760 [ 313.011955][ T8488] ? __might_sleep+0xf0/0xf0 [ 313.016554][ T8488] ? read_lock_is_recursive+0x10/0x10 [ 313.021938][ T8488] ? ocfs2_get_system_file_inode+0x1b5/0x760 [ 313.027929][ T8488] __mutex_lock_common+0x1eb/0x2390 [ 313.033218][ T8488] ? ocfs2_get_system_file_inode+0x1b5/0x760 [ 313.039207][ T8488] ? ocfs2_get_system_file_inode+0x154/0x760 [ 313.045195][ T8488] ? mutex_lock_io_nested+0x60/0x60 [ 313.050398][ T8488] ? __rwlock_init+0x140/0x140 [ 313.055166][ T8488] ? do_raw_spin_unlock+0x11d/0x230 [ 313.060365][ T8488] mutex_lock_nested+0x17/0x20 [ 313.065134][ T8488] ocfs2_get_system_file_inode+0x1b5/0x760 [ 313.070953][ T8488] ? ocfs2_fast_symlink_readpage+0x3e0/0x3e0 [ 313.076940][ T8488] ? deref_stack_reg+0xd0/0x120 [ 313.081798][ T8488] ? mark_lock+0x94/0x320 [ 313.086138][ T8488] ? __lock_acquire+0x13ad/0x7c60 [ 313.091169][ T8488] ? __kernel_text_address+0x9a/0x100 [ 313.096549][ T8488] ocfs2_reserve_local_alloc_bits+0xfc/0x24c0 [ 313.102626][ T8488] ? stack_trace_save+0x98/0xe0 [ 313.107566][ T8488] ? verify_lock_unused+0x140/0x140 [ 313.112769][ T8488] ? lockdep_hardirqs_on+0x94/0x140 [ 313.117969][ T8488] ? ocfs2_complete_local_alloc_recovery+0x540/0x540 [ 313.124653][ T8488] ? __kasan_kmalloc+0xcc/0xf0 [ 313.129419][ T8488] ? __kasan_kmalloc+0xb5/0xf0 [ 313.134191][ T8488] ? ocfs2_reserve_clusters_with_limit+0xe7/0xba0 [ 313.140638][ T8488] ? ocfs2_lock_allocators+0x2f7/0x5b0 [ 313.146103][ T8488] ? ocfs2_write_begin_nolock+0x2216/0x4180 [ 313.152030][ T8488] ? ocfs2_dio_wr_get_block+0xb6d/0x17a0 [ 313.157679][ T8488] ? __blockdev_direct_IO+0x146d/0x3c90 [ 313.163227][ T8488] ? generic_file_direct_write+0x22c/0x490 [ 313.169041][ T8488] ? __generic_file_write_iter+0x2b1/0x4e0 [ 313.174868][ T8488] ? ocfs2_file_write_iter+0x1578/0x1cf0 [ 313.180504][ T8488] ? do_iter_readv_writev+0x497/0x600 [ 313.185890][ T8488] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 313.191961][ T8488] ? __lock_acquire+0x7c60/0x7c60 [ 313.197008][ T8488] ? do_raw_spin_lock+0x11d/0x280 [ 313.202152][ T8488] ? __rwlock_init+0x140/0x140 [ 313.206936][ T8488] ? do_raw_spin_unlock+0x11d/0x230 [ 313.212151][ T8488] ? _raw_spin_unlock+0x24/0x40 [ 313.217020][ T8488] ? ocfs2_alloc_should_use_local+0x13a/0x2d0 [ 313.223107][ T8488] ? ocfs2_reserve_clusters_with_limit+0x168/0xba0 [ 313.229624][ T8488] ocfs2_reserve_clusters_with_limit+0x1bb/0xba0 [ 313.235974][ T8488] ? ocfs2_reserve_clusters+0x30/0x30 [ 313.241355][ T8488] ? __kasan_kmalloc+0xcc/0xf0 [ 313.246126][ T8488] ? rcu_is_watching+0x11/0xa0 [ 313.250900][ T8488] ? ocfs2_num_free_extents+0x2de/0x5a0 [ 313.256452][ T8488] ? ocfs2_validate_extent_block+0x550/0x550 [ 313.262440][ T8488] ? do_splice_direct+0x1b9/0x2c0 [ 313.267471][ T8488] ? __se_sys_sendfile64+0x13b/0x190 [ 313.273016][ T8488] ? do_syscall_64+0x4c/0xa0 [ 313.277616][ T8488] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.283729][ T8488] ocfs2_lock_allocators+0x2f7/0x5b0 [ 313.289032][ T8488] ? _ocfs2_clear_bit+0x40/0x40 [ 313.293894][ T8488] ? do_raw_spin_lock+0x11d/0x280 [ 313.298930][ T8488] ? ocfs2_write_begin_nolock+0xf08/0x4180 [ 313.304742][ T8488] ? rcu_is_watching+0x11/0xa0 [ 313.309513][ T8488] ? ocfs2_write_begin_nolock+0xf08/0x4180 [ 313.315370][ T8488] ? kfree+0x4a/0x2a0 [ 313.319357][ T8488] ocfs2_write_begin_nolock+0x2216/0x4180 [ 313.325105][ T8488] ? ocfs2_size_fits_inline_data+0x90/0x90 [ 313.330921][ T8488] ? __lock_acquire+0x13ad/0x7c60 [ 313.335975][ T8488] ? ocfs2_read_inode_block+0x11a/0x180 [ 313.341543][ T8488] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 313.347543][ T8488] ? ocfs2_allocate_extend_trans+0x5b0/0x5b0 [ 313.353539][ T8488] ? __brelse+0x55/0x90 [ 313.357709][ T8488] ? ocfs2_add_inode_to_orphan+0x4c5/0x700 [ 313.363546][ T8488] ? ocfs2_orphan_add+0x1190/0x1190 [ 313.368774][ T8488] ? __might_sleep+0xf0/0xf0 [ 313.373386][ T8488] ? preempt_count_add+0x8d/0x190 [ 313.378413][ T8488] ? rwsem_write_trylock+0x12f/0x1b0 [ 313.383729][ T8488] ? clear_nonspinnable+0x60/0x60 [ 313.388783][ T8488] ocfs2_dio_wr_get_block+0xb6d/0x17a0 [ 313.394256][ T8488] ? ocfs2_lock_get_block+0x50/0x50 [ 313.399457][ T8488] ? lockdep_init_map_type+0x9d/0x850 [ 313.404859][ T8488] ? lockdep_softirqs_off+0x420/0x420 [ 313.410303][ T8488] ? slab_post_alloc_hook+0x68/0x380 [ 313.415598][ T8488] ? iov_iter_advance+0x2a2/0x390 [ 313.420630][ T8488] ? iov_iter_bvec_advance+0x160/0x220 [ 313.426100][ T8488] ? ocfs2_lock_get_block+0x50/0x50 [ 313.431314][ T8488] __blockdev_direct_IO+0x146d/0x3c90 [ 313.436702][ T8488] ? sb_init_dio_done_wq+0x80/0x80 [ 313.441823][ T8488] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 313.447816][ T8488] ? ocfs2_lock_get_block+0x50/0x50 [ 313.453026][ T8488] ? lockdep_hardirqs_on+0x94/0x140 [ 313.458255][ T8488] ? invalidate_mapping_pagevec+0x30/0x30 [ 313.463992][ T8488] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 313.470254][ T8488] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 313.476219][ T8488] ? filemap_write_and_wait_range+0x269/0x380 [ 313.482382][ T8488] ? __mark_inode_dirty+0x383/0xc60 [ 313.487592][ T8488] ? ocfs2_lock_get_block+0x50/0x50 [ 313.492815][ T8488] ocfs2_direct_IO+0x23e/0x2b0 [ 313.497586][ T8488] generic_file_direct_write+0x22c/0x490 [ 313.503242][ T8488] __generic_file_write_iter+0x2b1/0x4e0 [ 313.508889][ T8488] ? _raw_spin_unlock+0x24/0x40 [ 313.513749][ T8488] ? ocfs2_inode_unlock+0x11a/0x140 [ 313.518973][ T8488] ocfs2_file_write_iter+0x1578/0x1cf0 [ 313.524443][ T8488] ? ocfs2_file_read_iter+0xa20/0xa20 [ 313.529821][ T8488] ? rcu_lock_release+0x5/0x20 [ 313.534592][ T8488] ? __lock_acquire+0x7c60/0x7c60 [ 313.539630][ T8488] ? aa_file_perm+0x3a3/0xe20 [ 313.544310][ T8488] ? __kasan_kmalloc+0xb5/0xf0 [ 313.549077][ T8488] ? do_sendfile+0x5d5/0xec0 [ 313.553673][ T8488] do_iter_readv_writev+0x497/0x600 [ 313.558874][ T8488] ? generic_file_rw_checks+0x280/0x280 [ 313.564424][ T8488] ? common_file_perm+0x171/0x1c0 [ 313.569458][ T8488] ? fsnotify_perm+0x5d/0x560 [ 313.574138][ T8488] ? security_file_permission+0x75/0xa0 [ 313.579753][ T8488] do_iter_write+0x205/0x7b0 [ 313.584347][ T8488] ? memset+0x1e/0x40 [ 313.588340][ T8488] ? iov_iter_bvec+0xb4/0x170 [ 313.593044][ T8488] iter_file_splice_write+0x65f/0xc40 [ 313.598431][ T8488] ? splice_from_pipe+0x150/0x150 [ 313.603467][ T8488] ? generic_file_splice_read+0x415/0x590 [ 313.609196][ T8488] ? splice_shrink_spd+0xc0/0xc0 [ 313.614139][ T8488] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 313.620739][ T8488] ? splice_from_pipe+0x150/0x150 [ 313.625770][ T8488] direct_splice_actor+0xe1/0x130 [ 313.630797][ T8488] splice_direct_to_actor+0x4dc/0xb50 [ 313.636178][ T8488] ? do_splice_direct+0x2c0/0x2c0 [ 313.641208][ T8488] ? pipe_to_sendpage+0x310/0x310 [ 313.646257][ T8488] ? common_file_perm+0x171/0x1c0 [ 313.651285][ T8488] ? fsnotify_perm+0x5d/0x560 [ 313.655967][ T8488] ? security_file_permission+0x75/0xa0 [ 313.661530][ T8488] do_splice_direct+0x1b9/0x2c0 [ 313.666498][ T8488] ? splice_direct_to_actor+0xb50/0xb50 [ 313.672049][ T8488] ? rcu_read_lock_any_held+0xb0/0x120 [ 313.677512][ T8488] ? common_file_perm+0x171/0x1c0 [ 313.682544][ T8488] do_sendfile+0x5d5/0xec0 [ 313.686970][ T8488] ? do_pwritev+0x340/0x340 [ 313.691474][ T8488] ? __lock_acquire+0x7c60/0x7c60 [ 313.696508][ T8488] __se_sys_sendfile64+0x13b/0x190 [ 313.701623][ T8488] ? lock_chain_count+0x20/0x20 [ 313.706479][ T8488] ? __x64_sys_sendfile64+0xa0/0xa0 [ 313.711703][ T8488] ? lockdep_hardirqs_on+0x94/0x140 [ 313.716913][ T8488] do_syscall_64+0x4c/0xa0 [ 313.721328][ T8488] ? clear_bhb_loop+0x30/0x80 [ 313.726008][ T8488] ? clear_bhb_loop+0x30/0x80 [ 313.730691][ T8488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.736600][ T8488] RIP: 0033:0x7fd1e128cbe9 [ 313.741021][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.760630][ T8488] RSP: 002b:00007fd1df4f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 313.769048][ T8488] RAX: ffffffffffffffda RBX: 00007fd1e14c3fa0 RCX: 00007fd1e128cbe9 [ 313.777116][ T8488] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 313.785182][ T8488] RBP: 00007fd1e130fe19 R08: 0000000000000000 R09: 0000000000000000 [ 313.793186][ T8488] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 313.801168][ T8488] R13: 00007fd1e14c4038 R14: 00007fd1e14c3fa0 R15: 00007ffcd659c488 [ 313.809154][ T8488] [ 313.836390][ T6911] XFS (loop8): Unmounting Filesystem [ 313.956317][ T5595] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 313.964435][ T5595] em28xx 1-1:0.89: board has no eeprom [ 314.128067][ T4950] ocfs2: Unmounting device (7,6) on (node local) [ 314.136259][ T5595] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 314.143516][ T5595] em28xx 1-1:0.89: analog set to bulk mode. [ 314.172426][ T5595] usb 1-1: USB disconnect, device number 12 [ 314.179203][ T5595] em28xx 1-1:0.89: Disconnecting em28xx [ 314.254098][ T5057] em28xx 1-1:0.89: Registering V4L2 extension [ 314.298821][ T5057] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 314.305825][ T5057] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 314.316956][ T5057] em28xx 1-1:0.89: No AC97 audio processor [ 314.325025][ T5057] usb 1-1: Decoder not found [ 314.333650][ T5057] em28xx 1-1:0.89: failed to create media graph [ 314.340589][ T5057] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 314.348458][ T5057] em28xx 1-1:0.89: Registering snapshot button... [ 314.369730][ T5057] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input23 [ 314.384839][ T5057] em28xx 1-1:0.89: Remote control support is not available for this card. [ 314.393706][ T5595] em28xx 1-1:0.89: Closing input extension [ 314.399863][ T5595] em28xx 1-1:0.89: Deregistering snapshot button [ 314.414859][ T5595] em28xx 1-1:0.89: Freeing device [ 317.122161][ T1422] ieee802154 phy1 wpan1: encryption failed: -22