last executing test programs: 19.438886873s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000003600000000e64100"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 18.952175605s ago: executing program 1: syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 18.6107094s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000074020440fd07010099090000000109021b0001000000000904000001c5b3e30009050b"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/180, 0xb4}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}]}}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000800)=""/44, 0x2c}, {&(0x7f0000000940)=""/252, 0xfc}, {&(0x7f0000000a40)=""/91, 0x5b}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/222, 0xde}], 0xa, &(0x7f0000000c80)=""/60, 0x3c}, 0x8}], 0x3, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 15.340186415s ago: executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x54a1, &(0x7f00000022c0)) 15.092479176s ago: executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) faccessat(r1, &(0x7f0000000940)='./bus\x00', 0x103) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x9}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000500)=""/167, 0x34, 0xa7, 0x1, 0x9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000680)=""/137, 0x89, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/104, 0x4d) r5 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 14.832014941s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@norecovery}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 14.393539598s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 13.344377972s ago: executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000200)={[{@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@fat=@nocase}, {@shortname_winnt}, {@numtail}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}, {@fat=@uid}, {@shortname_mixed}]}, 0x25, 0x353, &(0x7f0000006280)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 13.176178098s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000003600000000e64100"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 12.34138555s ago: executing program 4: syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 11.818272482s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@norecovery}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 10.580323303s ago: executing program 4: prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) uname(&(0x7f0000001480)=""/168) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$inet6(r3, &(0x7f0000001fc0), 0x0, 0x0) r4 = gettid() tkill(r4, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0xf0, 0x3d8, 0x0, 0x0, 0x2a8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@ipv6={@private0, @private1, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) sched_getaffinity(r4, 0x8, &(0x7f0000000000)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000001c0)=0x8000005) r7 = dup(r6) read$FUSE(r7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngwLu4YQeZ31Jlso1KWHUmgg0J6bGFkxqWUrWHKIjWkTSqGXQlt6ay859+el9Nofh17a/6MkpK0TmtJDcRn9sJVYcuTElpLm84Gx3pt50nvfeaOZJ81YE8Bjazz9k4k4EhFvJRGj9flJRPRXU9mImVq52xvr+XRKYnPzhR+TaplbG+v5aHpO6lA98/eI+Or1iKOZnfWWV9cWZovFwnI9P1lZvDBZXl07dn5xdr4wX1g6MTU9ffzk/06e2L9Yf/5u7fD1t5/998czv772t0/e/DqJmThcX9Ycx34Zj/H6OulPV+Edntnvynrms1c6KNS0BWQPsjHsUdoxffVeORKj0bdb/wx3s2UAwEF5NSI22+lruwQAeKQlteP/U71uBwDQLY3vAW5trOcbU2+/keiuG09HxFAt/sb5zdqSbP2c3VD1POjIreSOMyNJRIztQ/3jEfH+5y99mE5xQOchAVq5fCUizo6N79z/JzuuWdir/3RQZvyuvP0fdM8X6fjn/63Gf5mt8U+0GP8Mtnjv3o97v/8z1/ahmrbS8d+TTde23W6Kv26sr577U3XM15+cO18spPu2P0fERPQPpvmpXeqYuPnbzXbLmsd/P73z8gdp/enjdonMtezgnc+Zm63MPkjMzW5cifhHtlX8yVb/J23Gv6c7rOO5J954r92yNP403sa0M/6DtXk14l8t+z/ZKpPsen3iZHVzmGxsFC18OhMj7eofz273fzql9Tc+C3RD2v8ju8c/ljRfr1nu+KW3rhb79urol+0KNW//reNvvf0PJC9W0wP1eZdmK5XlqYiB5Pmd849vP7eRb5RP45/4Z+v3/27bf/qZ8GyHKyJ7/YeP7j/+g5XGP7en/t9zIoZuL/S1q7+z/p+upibqczrZ/3XawAdZdwAAAAAAAAAAAAAAAAAAAAAAAADQqUxEHI4kk9tKZzK5XO0e3n+NkUyxVK4cPVdaWZqL6r2yx6I/0/ipy9Gm30Odqv8efiN//K78fyPiLxHx7uBwNZ/Ll4pzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoOtbn/f+r7wV63DgA4MEN9vW4BANBlSTbb6yYAAN02tKfSwwfWDgCge/Z2/AcA/ggc/wHg8XOP479/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBBnT51Kp02f9lYz6f5uYurKwuli8fmCuWF3OJKPpcvLV/IzZdK88VCLl9abPtCl2sPxVLpwnQsrVyarBTKlcny6tqZxdLKUuXM+cXZ+cKZQn/XIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzpVX1xZmi8XCskRPEgvf1PrhYWmPxN4ScbnWfw9Le/YvEQPbe4nh3uycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4BvwcAAP//JJMi3A==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)) 10.22889738s ago: executing program 3: r0 = socket$inet(0x2, 0x3, 0x8d) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000080)={0x2, {0x193de81}}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x0, 0x0, 0x3ff}}) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='|'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 9.402948916s ago: executing program 3: syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) 9.387965882s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 9.001995872s ago: executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f0000000300)={{@host}, {@hyper}, 0x400, "1a0b5dbeaad6e12581c3705615196659d1edfd3e937bb049a5b6150777cdfc3f662aaa33c62804d786b79e9434331a65305e1ca8b12f2ef78b51d868fcacb8c1ce634287005fa21eae9125b9b5f78afe5816253c1d8179a25109c92aca81cbefee8bfee6e64f7d09541b3b54b464b08cd356e1cb5c49e7deaccfce3d06dbdf2318dfb309890458cb7a7b2a217434ec8f1ad4a7cbea7ea1ed37d1bab65c1bf52f9b1559ea51ed0e07f0184f8b561e132a99d1248964ca540bf022b6977bfaca7f9fc8e1b6826807127484d9835b5a1b710478b2a67c3f68d4d065d59140309232f0b5884f1d1dc6a575f990d0685a0cd095f6b5b79d0cffdb57b0bac719e4a9f39ccdc79fa6aeafa3a71ed3f46987cc1fda18e3bc34e56a441eb3e7f47476c52a400597b01eaf894da3428b4027a6ce2657b267932e83053be08f450510a0df068e3907290e7d104a8f79838bdc762cfe081260ff54b6b2fb4670b89be06c40b3c4ba8387586f5b84d2547d75125356f478523b8604452d0898c94f6d0bc75d9a34f063c979d519e0379eec57aa7a48d2120ae28682229213017a2215e0755c3b71e56ebaf2c928d6cf53dbc0190864d0b6ea928e933474e58a193c880bd90bb39d3291142687e8f9a10c60887898a931e34dac504220200401a7b26973590621222a74aa843becaec07a70456dad98ab32c225872a699f7aa849a035b8d513c97198d5a790b85a14375bc00f0635db6eaf0741fb9ab5bfb72dde3c1992b0157a1a34933caf5fa679435f34a756e0366a4f7d604958e6ede55883ca9f11e3b7056612489528887a45d7f67588bae91ec6f4b28ac26ccdae64cc82948fe99b2002df2d93236faacccc629f41a6981fffbb640e60399c5fe7288112bba82046197ef850d9f225987a6022fef9ad89b4798dc92b7cb5a1e1d2c698f86c4f99317ba87530b874ac3bd7899dffd2393a1d93ddb5143678831d94aaa2bf4267bfffefb44ec03fadcae8e8d89617ed926ad635559a7cdf61e2638dc3d8c424403c8121ad89aec8277a64955cf090c187113f4484c30f6246643a9707a4ef15869e58fe86ba3ab33ed7646b21846bd4f754ccffac9a96223971e4c44a36eef33c09d1b57a3790bec363a2c7333b07629874ad2119f2ccca107b18347791fbe6ced7e9132720d7cd7e671f8b62dee95433fa1db34dfb1bcae6a22863d1f592be8f6c64dcbb93bc5131711c7156829f77fe17b5bbfb1ac2eac809daeeeb804994b61c5e4a40c1fcbe7ee925ac8a6b0c52e24eee6d713060e407752ad35aef68040a4e68ba07c6d0548b32b12b62401c8349c6c53084bad6300d2b5e371efa569bb3a67ad15797389b8fe8dfa267fe203555bb15f36807894643f3f7f081a1e584f959c7716a46fe455837fc44c561c41ccebb845434b86b354b4a0c7796d713a500"}, 0x418}) 8.552958465s ago: executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) faccessat(r1, &(0x7f0000000940)='./bus\x00', 0x103) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x9}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000500)=""/167, 0x33, 0xa7, 0x1, 0x9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000680)=""/137, 0x89, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/104, 0x4d) r5 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 7.922428307s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@norecovery}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 7.218924508s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x87, 0x1, r2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) 7.086996073s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6.771671605s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x408, &(0x7f0000000140)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@max_inline={'max_inline', 0x3d, [0x31, 0x33, 0x39, 0x38, 0x78, 0x38, 0x39]}}, {@discard}, {@noenospc_debug}, {@nobarrier}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000300)='_', 0x1, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r1, &(0x7f0000000140)="81", 0x1, 0x80000001) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r2, r0, 0x0, 0x400) 5.135934946s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000003600000000e6410095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 4.086735654s ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.64026026s ago: executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ee289f413bb90152f7d6d1ce5ca93c0f7c41499dc28ac63a01000000000000004faa2ad9c084a003ea00", "03bdbcef549ba19704007ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c20c62df7a8d5da5c00000000ff030000fff2ff008900"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) faccessat(r1, &(0x7f0000000940)='./bus\x00', 0x103) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r3, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x9}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000500)=""/167, 0x33, 0xa7, 0x1, 0x9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000680)=""/137, 0x89, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000040)=""/104, 0x4d) r5 = dup(r0) write$uinput_user_dev(r0, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 3.085289649s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 3.001725753s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@norecovery}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2.641343162s ago: executing program 0: syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x400000, &(0x7f0000000180)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$eJzs3U2MW0cBAOCxd73JJilxSkKXNLQJhbb8dNNslvATQVIlQiJqKsSlUsUlStMSEYJEkYCqEklO3GhVBYkTP+LUS1UQEr2gqCculWikCqmnwoEDURCVOEAgcRXvjNee2H22s+tnx98njcfz5j3PvOfn5/c7E4CpVW2+Li8vVEK4+PrLR//x4N/nbw451Bqj3nydbUvVQgiVmJ7NPu/dmZX4+nsvnOwWV8JS8zWlwxNXW9NuDiGcC7vDpVAPOy9efunNpcePnz92Yc9brxy8sj5zDwAA0+Xrlw4u7/jrn+/ddu3V+w6HDa3haf+8HtNb4n7/4bjjn/b/q6EzXWkL7eay8WZjqM53jjfTZbz2cmrZeLM9yp/Lyq/1GG9D+ODyZ9qGdZtvmGRpPa6HSnWxI12tLi6uHJOH5nH9XGXx7OkzzzxXUkWBNffv+0MIu9vCkQud6XELh8agDkOGxhjUYSLD4dGVda2xovR5HlFobC17CwSwIr9eeItz+ZmF29P6tNn+yr/6WLX79LAGRr3+D1T+XMnlB+X/5rwtDmvnTl2b0nyl39GWmM6vI+T3L/X+/eVXOjqH5tcjan3Ws9d1hEm5vtCrnjMjrsewetU/Xy/uVF+OcVoOX8ny238/+Xc6Kd8x0N1/8vP/giCMdwgd6drtfFaj5O0PML7y++Ya6fpolN/Xl+dvKMjfWJA/X5C/qSB/c0E+TLPfff+n4cXK6nF+fkw/6PnwdJ7trhh/aMD65OcjBy0/v+93ULdbfn4/MYyzP5x48tQXnn7q8sr9/5XW+n8jru/pcKMef1uX4gjpfGF+Xr1173+9s5xqj/HuzupzV5fxm++3d45X2b76OaFtO3NLPRY6p9vaa7xdnePVs/HmY9iY1TffP9mUTZf2P9J2NS2v2Wx+a9l8zGX1SNuVbTHO6wHDSOtjr/v/0/q5EGqVZ06fOfVoTKf19E8ztQ03h+8bcb2B29fv8z8LofP5ny2t4bVq+3Zh6+rwysp24bX4eZ3Dl1rldA7fH9Ppf+5bM/PN4Ysnv3vm6bWffZhqz/3o+W+fOHPm1Pe8GfrNV8ejGoO8SYct41Ifb8buTckbJmDd7f3xyk7AI6e/c+LZU8+eOrv/wIH9S0sHvrh/eW9zv35v+959u3Ml1BZYS6t/+mXXBAAAAAAAAAAAAOjXD44dvfz2G59/Z+X5/9Xn/9Lz/+nO3/T8/0+y5//z5+TTc/DpOcBtXfKb42QNrM5l49Vi+HBW3+1ZOTuy6T4S41Y/fvH5/1Rc3q5rqs892fBaj2TWnMAt7aXMZW2Q5P0FfjzGF2L86wAlqsx3Hxzjovat07qe2qdoa5eioX3gyZG+t7Q2pHZM0vPfXdt1avuyt42gjqy9UTxOWPY8At39c6ra//7X6oyXXhehd5gdbXk/n951otFzL73fHmwA1kbZ/X+m854pPvvHr228GdJoVx/r3F7m7ZfCIP7ydmd63PufXO/y8377Rl1+2fM/6v4/W/3f9b39y3rMqw9X7n9/ceWdtmLDzn7Lz+c/tQO9fbDyr8Xy09w8FPorv/GrrPz8glCf/peVv6nP8m+Z/13Dlf//WH5abA8/0G/5KzWuVDvrkZ83Ttf/8vPGyfVs/lPbnh9Q/jee7zb/Q3bUeCOWD9NsUvqZHVS2H9HaaR++/9/o3Nr2/9uqbLZZy+/D+FxMpw1xus8h7+9k0Pqn+yvS/8CO7PMrBf9v+v+dbF+KcdHvIfX/m9bHevzLb0s3l2VK17os2zt1WwOT6t2puv43EWHjGNRB6D80ZoaYrtVPXMn1bzQa63tCq0CphVP68i/7OKHs8ste/kXy/n/zffi8/988P+//N8/P+//N8+fjN9QrP+//N1+eef+/ef492efm/QMvFOR/tCB/Z/f81mH7vQXT7yrI/1hB/p5W/qGOMVL+fQXT31+Qf3dB/gMF+Z8oyP9kQf6DBfkPt+W39wGd8j9VMP2dLj2PMq3zD9Msfz7P7x+mR7r+0+v3v70gH5hcP3t135GnfvvN+srz/3Ot8yHpOt7hmK7F46cfxnR+3Tu0pW/mvRHTf8vyx/18B0yTvP2M/P/9oYJ8YHKl+7z8vmEKVTZ2Hxzjonareu3nM1k+HePPxPizMX4kxosx3hvjfTFeGlH9WB9HXvv9wRcrq8f7W7P8fu8nz58H6mgnKoSwv8/65OcHBr2fPW/Hb1C3W/6Qj4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACUptp8XV5eqIRw8fWXjz55/PTem0MOtcaoN19n21K11nQhPBrjmRj/Mr65/t4LJ9vjGzGuhKVQCZXW8PDE1VZJm0MI58LucCnUw86Ll196c+nx4+ePXdjz1isHr6zfEgAAAIA73/sBAAD//weuDxQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc178) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.360356154s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x87, 0x1, r2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) 1.316563973s ago: executing program 0: r0 = socket$inet(0x2, 0x3, 0x8d) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000080)={0x2, {0x193de81}}) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x0, 0x0, 0x3ff}}) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='|'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 0s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x408, &(0x7f0000000140)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@max_inline={'max_inline', 0x3d, [0x31, 0x33, 0x39, 0x38, 0x78, 0x38, 0x39]}}, {@discard}, {@noenospc_debug}, {@nobarrier}, {@nossd}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(0xffffffffffffffff, &(0x7f0000000300)='_', 0x1, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r1, &(0x7f0000000140)="81", 0x1, 0x80000001) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r2, r0, 0x0, 0x400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. 2024/05/29 13:53:22 fuzzer started 2024/05/29 13:53:23 dialing manager at 10.128.0.169:30024 [ 158.432110][ T5049] cgroup: Unknown subsys name 'net' [ 158.612573][ T5049] cgroup: Unknown subsys name 'rlimit' 2024/05/29 13:54:10 starting 5 executor processes [ 204.524026][ T5055] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 206.766872][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.779774][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.791081][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.810461][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.834594][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.845288][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.159551][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.169246][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.191010][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.211703][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.220869][ T5077] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.233898][ T5077] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.243250][ T5077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.260402][ T5077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.272683][ T5077] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.286165][ T5077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.305965][ T5077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.315672][ T5077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.357849][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.371070][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.382808][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.404514][ T4434] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.415714][ T4434] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.429650][ T4434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.513611][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.529392][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.560737][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.593615][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.606405][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.653224][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.051093][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 208.922706][ T5084] Bluetooth: hci0: command tx timeout [ 209.155070][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.162932][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.170690][ T5074] bridge_slave_0: entered allmulticast mode [ 209.179539][ T5074] bridge_slave_0: entered promiscuous mode [ 209.218982][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 209.238663][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.248683][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.256462][ T5074] bridge_slave_1: entered allmulticast mode [ 209.265513][ T5074] bridge_slave_1: entered promiscuous mode [ 209.275589][ T5079] chnl_net:caif_netlink_parms(): no params data found [ 209.295419][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 209.329268][ T5084] Bluetooth: hci1: command tx timeout [ 209.400547][ T5084] Bluetooth: hci2: command tx timeout [ 209.482723][ T5084] Bluetooth: hci3: command tx timeout [ 209.597753][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 209.624102][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.666797][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.800644][ T5084] Bluetooth: hci4: command tx timeout [ 209.899400][ T5074] team0: Port device team_slave_0 added [ 209.956427][ T5074] team0: Port device team_slave_1 added [ 210.180895][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.188046][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.214344][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.314539][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.322833][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.350475][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.365659][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.373619][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.381386][ T5079] bridge_slave_0: entered allmulticast mode [ 210.390246][ T5079] bridge_slave_0: entered promiscuous mode [ 210.434278][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.442227][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.449866][ T5079] bridge_slave_1: entered allmulticast mode [ 210.458978][ T5079] bridge_slave_1: entered promiscuous mode [ 210.629105][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.640944][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.649270][ T5086] bridge_slave_0: entered allmulticast mode [ 210.658127][ T5086] bridge_slave_0: entered promiscuous mode [ 210.716754][ T5079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.767746][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.776189][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.783869][ T5086] bridge_slave_1: entered allmulticast mode [ 210.792725][ T5086] bridge_slave_1: entered promiscuous mode [ 210.871623][ T5079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.892876][ T5074] hsr_slave_0: entered promiscuous mode [ 210.909077][ T5074] hsr_slave_1: entered promiscuous mode [ 211.002180][ T5084] Bluetooth: hci0: command tx timeout [ 211.059156][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.068340][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.077699][ T5082] bridge_slave_0: entered allmulticast mode [ 211.086969][ T5082] bridge_slave_0: entered promiscuous mode [ 211.185754][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.195855][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.203645][ T5088] bridge_slave_0: entered allmulticast mode [ 211.212491][ T5088] bridge_slave_0: entered promiscuous mode [ 211.232939][ T5079] team0: Port device team_slave_0 added [ 211.242769][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.252590][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.260386][ T5082] bridge_slave_1: entered allmulticast mode [ 211.269186][ T5082] bridge_slave_1: entered promiscuous mode [ 211.278386][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.286328][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.294062][ T5088] bridge_slave_1: entered allmulticast mode [ 211.302781][ T5088] bridge_slave_1: entered promiscuous mode [ 211.347104][ T5079] team0: Port device team_slave_1 added [ 211.363566][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.400472][ T5084] Bluetooth: hci1: command tx timeout [ 211.480332][ T5084] Bluetooth: hci2: command tx timeout [ 211.536694][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.549632][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.557690][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.560534][ T5084] Bluetooth: hci3: command tx timeout [ 211.583893][ T5079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.674925][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.716277][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.723941][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.750319][ T5079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.808197][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.824411][ T5086] team0: Port device team_slave_0 added [ 211.874246][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.880420][ T5084] Bluetooth: hci4: command tx timeout [ 211.922639][ T5086] team0: Port device team_slave_1 added [ 211.969667][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.167759][ T5082] team0: Port device team_slave_0 added [ 212.194972][ T5088] team0: Port device team_slave_0 added [ 212.225950][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.233184][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.259943][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.278295][ T5082] team0: Port device team_slave_1 added [ 212.292788][ T5088] team0: Port device team_slave_1 added [ 212.406269][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.413546][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.439829][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.529268][ T5079] hsr_slave_0: entered promiscuous mode [ 212.539835][ T5079] hsr_slave_1: entered promiscuous mode [ 212.547739][ T5079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.555639][ T5079] Cannot create hsr debugfs directory [ 212.661927][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.669077][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.695618][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.735298][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.742642][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.769065][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.783931][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.791224][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.817816][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.897220][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.905428][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.931936][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.105546][ T5084] Bluetooth: hci0: command tx timeout [ 213.161877][ T5086] hsr_slave_0: entered promiscuous mode [ 213.171320][ T5086] hsr_slave_1: entered promiscuous mode [ 213.179322][ T5086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.187953][ T5086] Cannot create hsr debugfs directory [ 213.346346][ T5082] hsr_slave_0: entered promiscuous mode [ 213.355194][ T5082] hsr_slave_1: entered promiscuous mode [ 213.364469][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.372350][ T5082] Cannot create hsr debugfs directory [ 213.482497][ T5084] Bluetooth: hci1: command tx timeout [ 213.530287][ T5088] hsr_slave_0: entered promiscuous mode [ 213.538781][ T5088] hsr_slave_1: entered promiscuous mode [ 213.548732][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.556577][ T5088] Cannot create hsr debugfs directory [ 213.560433][ T5084] Bluetooth: hci2: command tx timeout [ 213.666457][ T5084] Bluetooth: hci3: command tx timeout [ 213.836095][ T5074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.962071][ T5084] Bluetooth: hci4: command tx timeout [ 213.971061][ T5074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.007163][ T5074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.118518][ T5074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.269307][ T5079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.357844][ T5079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.455229][ T5079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.477015][ T5079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.710265][ T5086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.736510][ T5086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.758113][ T5086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.841697][ T5086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.108326][ T5082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.166023][ T5084] Bluetooth: hci0: command tx timeout [ 215.205286][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.227361][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.256109][ T5082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.283001][ T5082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.305750][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.338636][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.381350][ T5082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.560238][ T5084] Bluetooth: hci1: command tx timeout [ 215.642475][ T5084] Bluetooth: hci2: command tx timeout [ 215.720232][ T5084] Bluetooth: hci3: command tx timeout [ 216.021626][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.048158][ T5084] Bluetooth: hci4: command tx timeout [ 216.055517][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.140983][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.188085][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.294545][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.317921][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.371249][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.378916][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.457310][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.465093][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.480829][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.488308][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.504203][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.511922][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.556734][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.564577][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.580131][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.587781][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.848158][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.213684][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.379120][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.499770][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.574040][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.675261][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.683031][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.698441][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.706148][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.959737][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.967509][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.987951][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.995729][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.164272][ T5088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.176235][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.026065][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.115431][ T1220] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.123001][ T1220] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.271262][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.334086][ T5079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.766378][ T5086] veth0_vlan: entered promiscuous mode [ 219.901211][ T5086] veth1_vlan: entered promiscuous mode [ 219.927838][ T5074] veth0_vlan: entered promiscuous mode [ 219.986156][ T5079] veth0_vlan: entered promiscuous mode [ 220.108849][ T5074] veth1_vlan: entered promiscuous mode [ 220.130371][ T5079] veth1_vlan: entered promiscuous mode [ 220.243793][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.336033][ T5086] veth0_macvtap: entered promiscuous mode [ 220.452292][ T5086] veth1_macvtap: entered promiscuous mode [ 220.537651][ T5074] veth0_macvtap: entered promiscuous mode [ 220.582615][ T5079] veth0_macvtap: entered promiscuous mode [ 220.612154][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.629409][ T5074] veth1_macvtap: entered promiscuous mode [ 220.718440][ T5079] veth1_macvtap: entered promiscuous mode [ 220.839303][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.937271][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.996679][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.007897][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.022648][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.046543][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.058263][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.068525][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.079308][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.095385][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.138295][ T5088] veth0_vlan: entered promiscuous mode [ 221.158479][ T5086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.167748][ T5086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.176931][ T5086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.186742][ T5086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.228461][ T5079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.240779][ T5079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.259509][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.274269][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.285055][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.295768][ T5074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.306620][ T5074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.321194][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.353802][ T5088] veth1_vlan: entered promiscuous mode [ 221.392929][ T5079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.403867][ T5079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.413170][ T5079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.422253][ T5079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.469033][ T5074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.478938][ T5074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.489239][ T5074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.498438][ T5074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.800134][ T5088] veth0_macvtap: entered promiscuous mode [ 221.915534][ T5088] veth1_macvtap: entered promiscuous mode [ 222.158395][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.170720][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.180969][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.191714][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.203578][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.214814][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.230320][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.416528][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.427386][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.437622][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.448454][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.458645][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.469482][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.484508][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.648619][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.658394][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.667656][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.676790][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.344628][ T5082] veth0_vlan: entered promiscuous mode [ 223.466233][ T5082] veth1_vlan: entered promiscuous mode [ 223.832470][ T5082] veth0_macvtap: entered promiscuous mode [ 223.948938][ T5082] veth1_macvtap: entered promiscuous mode [ 224.184382][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.195144][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.206815][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.218526][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.228652][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.239363][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.249548][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.260277][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.275365][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.536889][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.547821][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.558017][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.568717][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.578946][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.589734][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.601075][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.613813][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.629363][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.740999][ T5082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.750224][ T5082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.759229][ T5082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.769886][ T5082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.015594][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.024486][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.314250][ T3206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.322671][ T3206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.378105][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.386315][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.511414][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.519472][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.644503][ T3206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.653541][ T3206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.768306][ T5134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.776611][ T5134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.443990][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.452809][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.640407][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 229.743276][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.751527][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.941524][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 230.101016][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 230.350760][ T25] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 230.360844][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.369113][ T25] usb 1-1: Product: syz [ 230.374320][ T25] usb 1-1: Manufacturer: syz [ 230.379165][ T25] usb 1-1: SerialNumber: syz [ 230.462866][ T25] usb 1-1: config 0 descriptor?? [ 230.544467][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 230.550747][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 230.566938][ T25] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 230.663551][ T25] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 230.801920][ T25] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 231.028252][ T5262] loop2: detected capacity change from 0 to 4096 [ 231.111535][ T779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 231.191871][ T5262] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 231.400453][ T779] usb 4-1: Using ep0 maxpacket: 32 [ 231.681858][ T5273] loop1: detected capacity change from 0 to 2048 [ 231.738929][ T779] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 231.748589][ T779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.757055][ T779] usb 4-1: Product: syz [ 231.761623][ T779] usb 4-1: Manufacturer: syz [ 231.766442][ T779] usb 4-1: SerialNumber: syz [ 231.811537][ T29] audit: type=1804 audit(1716990878.128:2): pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/1/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 231.837487][ T29] audit: type=1804 audit(1716990878.128:3): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/1/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 231.858931][ T779] usb 4-1: config 0 descriptor?? [ 231.877924][ T5262] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.998865][ T5262] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 232.026037][ T5273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.038747][ T5273] ext4 filesystem being mounted at /root/syzkaller-testdir3458758842/syzkaller.CO016I/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.069872][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.081777][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.264834][ T5130] usb 1-1: USB disconnect, device number 2 [ 232.314934][ T5273] fs-verity: sha512 using implementation "sha512-generic" [ 232.436079][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.445029][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.870613][ T779] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:2a:10:07:8c:17 [ 232.905564][ T779] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 232.971396][ T5273] syz-executor.1 (5273) used greatest stack depth: 5056 bytes left [ 233.094791][ T5285] ptrace attach of "/root/syz-executor.0 exec"[5079] was attempted by "/root/syz-executor.0 exec"[5285] [ 233.117151][ T779] usb 4-1: USB disconnect, device number 2 [ 233.516689][ T5088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.960814][ T5290] loop4: detected capacity change from 0 to 256 [ 234.375634][ T5298] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 234.887701][ T5298] loop2: detected capacity change from 0 to 2048 [ 235.028236][ T5298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.265054][ T5298] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 235.511265][ T5123] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 235.530556][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 235.670919][ T5315] loop4: detected capacity change from 0 to 2048 [ 235.679297][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 235.692123][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 235.692123][ T11] [ 235.705698][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 235.712190][ T11] EXT4-fs (loop2): Free/Dirty block details [ 235.718294][ T11] EXT4-fs (loop2): free_blocks=0 [ 235.730952][ T11] EXT4-fs (loop2): dirty_blocks=64 [ 235.736282][ T11] EXT4-fs (loop2): Block reservation details [ 235.744794][ T11] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 235.781809][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 235.801557][ T5123] usb 4-1: Using ep0 maxpacket: 32 [ 235.817309][ T5315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.830228][ T5315] ext4 filesystem being mounted at /root/syzkaller-testdir2651645827/syzkaller.Vx54nl/3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.934718][ T5123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 235.953895][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 235.967241][ T25] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 235.981304][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.983822][ T5317] loop1: detected capacity change from 0 to 4096 [ 236.026723][ T25] usb 1-1: config 0 descriptor?? [ 236.029740][ T5317] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 236.151021][ T5123] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 236.160561][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.168812][ T5123] usb 4-1: Product: syz [ 236.177352][ T5123] usb 4-1: Manufacturer: syz [ 236.183339][ T5123] usb 4-1: SerialNumber: syz [ 236.232461][ T5123] usb 4-1: config 0 descriptor?? [ 236.279276][ T5123] hub 4-1:0.0: bad descriptor, ignoring hub [ 236.286040][ T5123] hub 4-1:0.0: probe with driver hub failed with error -5 [ 236.301036][ T5123] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 236.384345][ T5123] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 236.409174][ T29] audit: type=1804 audit(1716990882.618:4): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/3/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 236.426064][ T25] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 236.434752][ T29] audit: type=1804 audit(1716990882.618:5): pid=5317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/3/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 236.571986][ T5123] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 236.656584][ T5082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.252281][ T25] usb 1-1: USB disconnect, device number 3 [ 237.551948][ T5123] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 237.740983][ T25] usb 4-1: USB disconnect, device number 3 [ 237.843286][ T5340] loop3: detected capacity change from 0 to 256 [ 237.890507][ T5123] usb 5-1: Using ep0 maxpacket: 32 [ 238.182540][ T5123] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 238.192442][ T5123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.202084][ T5123] usb 5-1: Product: syz [ 238.206497][ T5123] usb 5-1: Manufacturer: syz [ 238.212147][ T5123] usb 5-1: SerialNumber: syz [ 238.277042][ T5123] usb 5-1: config 0 descriptor?? [ 238.660340][ T5351] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 238.862273][ T29] audit: type=1800 audit(1716990885.098:6): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 238.883669][ T29] audit: type=1326 audit(1716990885.138:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5346 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4000a7cee9 code=0x0 [ 238.906685][ T5351] loop1: detected capacity change from 0 to 2048 [ 238.969777][ T5353] loop3: detected capacity change from 0 to 2048 [ 239.001054][ T5123] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:7c:c6:5b:e5:a4 [ 239.025916][ T5123] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 239.080949][ T5351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.085350][ T5353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.106238][ T5353] ext4 filesystem being mounted at /root/syzkaller-testdir2321390577/syzkaller.GhCtGo/7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.145603][ T5123] usb 5-1: USB disconnect, device number 2 [ 239.234632][ T5351] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 239.585349][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 239.599356][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 239.599356][ T11] [ 239.609319][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 239.615638][ T11] EXT4-fs (loop1): Free/Dirty block details [ 239.622091][ T11] EXT4-fs (loop1): free_blocks=0 [ 239.627255][ T11] EXT4-fs (loop1): dirty_blocks=64 [ 239.632638][ T11] EXT4-fs (loop1): Block reservation details [ 239.638817][ T11] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 239.651990][ T5363] loop2: detected capacity change from 0 to 4096 [ 239.715274][ T5363] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 239.777246][ T34] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 239.875326][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.176163][ T29] audit: type=1804 audit(1716990886.438:8): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/9/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 240.202249][ T29] audit: type=1804 audit(1716990886.448:9): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/9/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 240.227034][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.412007][ T5130] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 240.730649][ T5130] usb 1-1: Using ep0 maxpacket: 32 [ 240.860897][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 241.075842][ T5130] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 241.085723][ T5130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.100794][ T5130] usb 1-1: Product: syz [ 241.105394][ T5130] usb 1-1: Manufacturer: syz [ 241.110352][ T5130] usb 1-1: SerialNumber: syz [ 241.148982][ T5130] usb 1-1: config 0 descriptor?? [ 241.204383][ T5130] hub 1-1:0.0: bad descriptor, ignoring hub [ 241.210673][ T5130] hub 1-1:0.0: probe with driver hub failed with error -5 [ 241.225232][ T5130] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 241.261654][ T5130] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 241.319467][ T5130] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 241.341558][ T5123] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 241.745565][ T5123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 241.756607][ T5123] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 241.766705][ T5123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.832449][ T5123] usb 4-1: config 0 descriptor?? [ 241.974614][ T5393] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 242.191692][ T5123] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 242.208515][ T5393] loop2: detected capacity change from 0 to 2048 [ 242.297635][ T5393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.388560][ T29] audit: type=1800 audit(1716990888.608:10): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 242.410168][ T29] audit: type=1326 audit(1716990888.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec287cee9 code=0x0 [ 242.551324][ T5393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 242.656383][ T5130] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 242.909288][ T779] usb 4-1: USB disconnect, device number 4 [ 243.018011][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 243.030826][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 243.030826][ T11] [ 243.044388][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 243.051885][ T11] EXT4-fs (loop2): Free/Dirty block details [ 243.053334][ T5130] usb 1-1: device firmware changed [ 243.057995][ T11] EXT4-fs (loop2): free_blocks=0 [ 243.058085][ T11] EXT4-fs (loop2): dirty_blocks=64 [ 243.073773][ T11] EXT4-fs (loop2): Block reservation details [ 243.080096][ T11] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 243.082230][ T5130] usb 1-1: USB disconnect, device number 4 [ 243.189442][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 243.520544][ T5130] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 243.803483][ T5130] usb 1-1: Using ep0 maxpacket: 32 [ 244.030679][ T5127] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 244.110779][ T5130] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 244.120776][ T5130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.129127][ T5130] usb 1-1: Product: syz [ 244.133707][ T5130] usb 1-1: Manufacturer: syz [ 244.138600][ T5130] usb 1-1: SerialNumber: syz [ 244.212072][ T5130] usb 1-1: config 0 descriptor?? [ 244.460503][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.476808][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.488760][ T5127] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 244.498230][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.574002][ T5127] usb 3-1: config 0 descriptor?? [ 244.861989][ T5416] loop1: detected capacity change from 0 to 4096 [ 244.908623][ T5416] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 245.007664][ T5130] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:ae:da:3b:0e:fe [ 245.033233][ T5130] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 245.086657][ T5130] usb 1-1: USB disconnect, device number 5 [ 245.175068][ T5410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.193080][ T5410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.227303][ T29] audit: type=1804 audit(1716990891.488:12): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/13/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 245.253428][ T29] audit: type=1804 audit(1716990891.498:13): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/13/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 245.355753][ T5127] hid (null): bogus close delimiter [ 245.421175][ T5127] wacom 0003:056A:0043.0001: bogus close delimiter [ 245.427949][ T5127] wacom 0003:056A:0043.0001: item 0 1 2 10 parsing failed [ 245.479604][ T5127] wacom 0003:056A:0043.0001: parse failed [ 245.486626][ T5127] wacom 0003:056A:0043.0001: probe with driver wacom failed with error -22 [ 245.637916][ T5423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.647230][ T5423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.748866][ T25] usb 3-1: USB disconnect, device number 2 [ 246.221204][ T5130] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 246.235994][ T5432] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 246.420526][ T5432] loop1: detected capacity change from 0 to 2048 [ 246.471284][ T5130] usb 1-1: Using ep0 maxpacket: 32 [ 246.499121][ T29] audit: type=1800 audit(1716990892.788:14): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 246.523865][ T29] audit: type=1326 audit(1716990892.808:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3417e7cee9 code=0x0 [ 246.595576][ T5432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.620722][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 246.642958][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 246.716087][ T5432] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 246.832667][ T5130] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 246.842365][ T5130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.851190][ T5130] usb 1-1: Product: syz [ 246.855637][ T5130] usb 1-1: Manufacturer: syz [ 246.860606][ T5130] usb 1-1: SerialNumber: syz [ 246.888469][ T5130] usb 1-1: config 0 descriptor?? [ 246.955244][ T3206] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.961321][ T5130] hub 1-1:0.0: bad descriptor, ignoring hub [ 246.967682][ T3206] EXT4-fs (loop1): This should not happen!! Data will be lost [ 246.967682][ T3206] [ 246.974018][ T5130] hub 1-1:0.0: probe with driver hub failed with error -5 [ 246.981231][ T5130] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 246.984124][ T3206] EXT4-fs (loop1): Total free blocks count 0 [ 247.007307][ T3206] EXT4-fs (loop1): Free/Dirty block details [ 247.013525][ T3206] EXT4-fs (loop1): free_blocks=0 [ 247.018671][ T3206] EXT4-fs (loop1): dirty_blocks=64 [ 247.024077][ T3206] EXT4-fs (loop1): Block reservation details [ 247.034287][ T3206] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 247.042795][ T5123] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 247.073991][ T34] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 247.123264][ T5130] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 247.144253][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.155854][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.166150][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 247.176114][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.227265][ T25] usb 5-1: config 0 descriptor?? [ 247.255762][ T5130] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 247.441759][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.451929][ T5123] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 247.461445][ T5123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.534874][ T5123] usb 3-1: config 0 descriptor?? [ 247.865863][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.875017][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.943788][ T5123] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 248.161957][ T25] hid (null): bogus close delimiter [ 248.217897][ T25] wacom 0003:056A:0043.0002: bogus close delimiter [ 248.225130][ T25] wacom 0003:056A:0043.0002: item 0 1 2 10 parsing failed [ 248.304464][ T5127] usb 1-1: USB disconnect, device number 6 [ 248.308559][ T25] wacom 0003:056A:0043.0002: parse failed [ 248.318233][ T25] wacom 0003:056A:0043.0002: probe with driver wacom failed with error -22 [ 248.456397][ T5435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.473153][ T5435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.657760][ T5133] usb 5-1: USB disconnect, device number 3 [ 248.732899][ T5127] usb 3-1: USB disconnect, device number 3 [ 248.930198][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 249.060472][ T5130] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 249.180638][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 249.313518][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 249.325238][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 249.331578][ T5130] usb 2-1: Using ep0 maxpacket: 32 [ 249.336800][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.351199][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.445301][ T25] usb 1-1: config 0 descriptor?? [ 249.472103][ T5463] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 249.518462][ T25] hub 1-1:0.0: USB hub found [ 249.702502][ T5130] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 249.712313][ T5130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.720695][ T5130] usb 2-1: Product: syz [ 249.725078][ T5130] usb 2-1: Manufacturer: syz [ 249.730093][ T5130] usb 2-1: SerialNumber: syz [ 249.762689][ T5130] usb 2-1: config 0 descriptor?? [ 249.784245][ T25] hub 1-1:0.0: 2 ports detected [ 249.846904][ T25] hub 1-1:0.0: insufficient power available to use all downstream ports [ 250.091891][ T5468] loop4: detected capacity change from 0 to 4096 [ 250.110359][ T5461] sctp: [Deprecated]: syz-executor.0 (pid 5461) Use of int in max_burst socket option. [ 250.110359][ T5461] Use struct sctp_assoc_value instead [ 250.170669][ T5468] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 250.268095][ T5461] loop0: detected capacity change from 0 to 128 [ 250.328271][ T5461] VFS: unable to find oldfs superblock on device loop0 [ 250.478883][ T5461] 9pnet_fd: Insufficient options for proto=fd [ 250.524378][ T5130] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4a:35:b9:86:d8:97 [ 250.549162][ T5130] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 250.571724][ T25] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 250.578309][ T25] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 250.616133][ T29] audit: type=1804 audit(1716990896.888:16): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2651645827/syzkaller.Vx54nl/10/file0/bus" dev="loop4" ino=35 res=1 errno=0 [ 250.641803][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.649911][ T29] audit: type=1804 audit(1716990896.928:17): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2651645827/syzkaller.Vx54nl/10/file0/bus" dev="loop4" ino=35 res=1 errno=0 [ 250.675629][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.684881][ T5130] usb 2-1: USB disconnect, device number 2 [ 250.752425][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 250.759052][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.822867][ T25] usb 1-1: USB disconnect, device number 7 [ 251.180634][ T5127] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 251.590635][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.601988][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.612172][ T5127] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 251.621629][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.678899][ T5127] usb 3-1: config 0 descriptor?? [ 252.110375][ T5130] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 252.231964][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.241310][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.470564][ T5123] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 252.523049][ T5127] hid (null): bogus close delimiter [ 252.576866][ T5127] wacom 0003:056A:0043.0003: bogus close delimiter [ 252.583948][ T5127] wacom 0003:056A:0043.0003: item 0 1 2 10 parsing failed [ 252.612200][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.623509][ T5130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.633730][ T5130] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.647062][ T5130] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.656509][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.689392][ T5127] wacom 0003:056A:0043.0003: parse failed [ 252.696397][ T5127] wacom 0003:056A:0043.0003: probe with driver wacom failed with error -22 [ 252.711186][ T5130] usb 1-1: config 0 descriptor?? [ 252.746822][ T5476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.756318][ T5476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.770576][ T5123] usb 5-1: Using ep0 maxpacket: 32 [ 252.852109][ T25] usb 3-1: USB disconnect, device number 4 [ 252.891334][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 253.092202][ T5123] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 253.102913][ T5123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.111628][ T5123] usb 5-1: Product: syz [ 253.116018][ T5123] usb 5-1: Manufacturer: syz [ 253.121012][ T5123] usb 5-1: SerialNumber: syz [ 253.136421][ T5123] usb 5-1: config 0 descriptor?? [ 253.198753][ T5123] hub 5-1:0.0: bad descriptor, ignoring hub [ 253.205103][ T5123] hub 5-1:0.0: probe with driver hub failed with error -5 [ 253.216759][ T5130] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 253.220104][ T5123] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 253.225051][ T5130] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 253.249568][ T5123] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 253.301732][ T5123] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 253.312798][ T5130] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 253.322670][ T5133] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 253.345159][ T5130] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 253.599409][ T5127] usb 1-1: USB disconnect, device number 8 [ 253.771146][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.783169][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.796604][ T5133] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 253.806986][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.854704][ T5133] usb 4-1: config 0 descriptor?? [ 254.401803][ T5496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.405350][ T5127] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.412835][ T5496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.463949][ T5506] loop1: detected capacity change from 0 to 4096 [ 254.561972][ T5506] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 254.582534][ T5123] usb 5-1: USB disconnect, device number 4 [ 254.636790][ T5133] hid (null): bogus close delimiter [ 254.677962][ T5133] wacom 0003:056A:0043.0005: bogus close delimiter [ 254.685231][ T5127] usb 3-1: Using ep0 maxpacket: 32 [ 254.693976][ T5133] wacom 0003:056A:0043.0005: item 0 1 2 10 parsing failed [ 254.759081][ T5133] wacom 0003:056A:0043.0005: parse failed [ 254.766451][ T5133] wacom 0003:056A:0043.0005: probe with driver wacom failed with error -22 [ 254.800876][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 254.817431][ T5127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 254.831361][ T5127] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.840867][ T5127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.887369][ T5127] usb 3-1: config 0 descriptor?? [ 254.918215][ T5509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.926237][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.931646][ T779] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.941527][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.954179][ T5127] hub 3-1:0.0: USB hub found [ 254.983175][ T5130] usb 4-1: USB disconnect, device number 5 [ 255.162013][ T29] audit: type=1804 audit(1716990901.448:18): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/24/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 255.174728][ T5127] hub 3-1:0.0: 2 ports detected [ 255.187927][ T29] audit: type=1804 audit(1716990901.458:19): pid=5506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/24/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 255.226260][ T779] usb 1-1: Using ep0 maxpacket: 32 [ 255.241819][ T5127] hub 3-1:0.0: insufficient power available to use all downstream ports [ 255.514029][ T5507] sctp: [Deprecated]: syz-executor.2 (pid 5507) Use of int in max_burst socket option. [ 255.514029][ T5507] Use struct sctp_assoc_value instead [ 255.546350][ T779] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 255.555977][ T779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.574331][ T779] usb 1-1: Product: syz [ 255.580434][ T779] usb 1-1: Manufacturer: syz [ 255.603077][ T779] usb 1-1: SerialNumber: syz [ 255.637107][ T779] usb 1-1: config 0 descriptor?? [ 255.769591][ T5507] loop2: detected capacity change from 0 to 128 [ 255.807177][ T5507] VFS: unable to find oldfs superblock on device loop2 [ 255.968130][ T5507] 9pnet_fd: Insufficient options for proto=fd [ 256.030784][ T5127] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 256.045001][ T5127] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 256.161258][ T5127] usbhid 3-1:0.0: can't add hid device: -71 [ 256.167968][ T5127] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 256.239522][ T5127] usb 3-1: USB disconnect, device number 5 [ 256.410900][ T779] (unnamed net_device) (uninitialized): Assigned a random MAC address: 16:46:2a:49:85:6e [ 256.435537][ T779] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 256.542073][ T779] usb 1-1: USB disconnect, device number 9 [ 257.450374][ T5133] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 257.670272][ T5123] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 257.785263][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.870776][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.885573][ T5133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.896663][ T5133] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 257.906086][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.940420][ T5133] usb 2-1: config 0 descriptor?? [ 258.050709][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 258.092032][ T5123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.103329][ T5123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.113443][ T5123] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.126800][ T5123] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.136269][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.172204][ T5123] usb 1-1: config 0 descriptor?? [ 258.220971][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 258.401562][ T25] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 258.411090][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.419354][ T25] usb 5-1: Product: syz [ 258.423996][ T25] usb 5-1: Manufacturer: syz [ 258.428845][ T25] usb 5-1: SerialNumber: syz [ 258.471079][ T25] usb 5-1: config 0 descriptor?? [ 258.528396][ T25] hub 5-1:0.0: bad descriptor, ignoring hub [ 258.534744][ T25] hub 5-1:0.0: probe with driver hub failed with error -5 [ 258.549780][ T25] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 258.577215][ T5533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.586422][ T5533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.624932][ T25] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 258.689447][ T25] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 258.739147][ T5123] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.746929][ T5123] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 258.814107][ T5133] hid (null): bogus close delimiter [ 258.820408][ T5526] loop3: detected capacity change from 0 to 1024 [ 258.865994][ T5123] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 258.889235][ T5133] wacom 0003:056A:0043.0007: bogus close delimiter [ 258.896209][ T5133] wacom 0003:056A:0043.0007: item 0 1 2 10 parsing failed [ 258.965869][ T5123] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 259.013857][ T5526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 259.015953][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.031488][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.047730][ T5526] System zones: 0-1, 3-12 [ 259.048167][ T5133] wacom 0003:056A:0043.0007: parse failed [ 259.059069][ T5133] wacom 0003:056A:0043.0007: probe with driver wacom failed with error -22 [ 259.070758][ T5526] EXT4-fs: error -4 creating inode table initialization thread [ 259.091158][ T5526] EXT4-fs (loop3): mount failed [ 259.126271][ T5133] usb 1-1: USB disconnect, device number 10 [ 259.233272][ T5134] usb 2-1: USB disconnect, device number 3 [ 259.312081][ T5547] loop2: detected capacity change from 0 to 4096 [ 259.337040][ T5547] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 259.606938][ T29] audit: type=1804 audit(1716990905.888:20): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/22/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 259.637952][ T29] audit: type=1804 audit(1716990905.888:21): pid=5547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/22/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 259.951503][ T5134] usb 5-1: USB disconnect, device number 5 [ 260.560660][ T779] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 260.941557][ T5134] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 260.971296][ T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.982745][ T779] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.992924][ T779] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 261.002372][ T779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.022204][ T779] usb 5-1: config 0 descriptor?? [ 261.095956][ T5578] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 261.138045][ T5133] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 261.230482][ T5134] usb 4-1: Using ep0 maxpacket: 32 [ 261.253909][ T5578] loop1: detected capacity change from 0 to 2048 [ 261.325171][ T5578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.365070][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 261.378196][ T5134] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 261.389854][ T5134] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.399271][ T5134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.441023][ T5133] usb 3-1: Using ep0 maxpacket: 32 [ 261.491226][ T5578] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 261.508967][ T5134] usb 4-1: config 0 descriptor?? [ 261.511683][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.523468][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.542392][ T5570] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 261.582252][ T5134] hub 4-1:0.0: USB hub found [ 261.708034][ T779] hid (null): bogus close delimiter [ 261.760584][ T779] wacom 0003:056A:0043.0008: bogus close delimiter [ 261.767352][ T779] wacom 0003:056A:0043.0008: item 0 1 2 10 parsing failed [ 261.781606][ T5134] hub 4-1:0.0: 2 ports detected [ 261.806873][ T5134] hub 4-1:0.0: insufficient power available to use all downstream ports [ 261.820974][ T5133] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 261.822637][ T779] wacom 0003:056A:0043.0008: parse failed [ 261.830410][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.830546][ T5133] usb 3-1: Product: syz [ 261.830651][ T5133] usb 3-1: Manufacturer: syz [ 261.830758][ T5133] usb 3-1: SerialNumber: syz [ 261.864150][ T5133] usb 3-1: config 0 descriptor?? [ 261.867876][ T5088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.869635][ T779] wacom 0003:056A:0043.0008: probe with driver wacom failed with error -22 [ 261.941426][ T5561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.950872][ T5561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.966986][ T779] usb 5-1: USB disconnect, device number 6 [ 262.000293][ T5127] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 262.137508][ T5566] sctp: [Deprecated]: syz-executor.3 (pid 5566) Use of int in max_burst socket option. [ 262.137508][ T5566] Use struct sctp_assoc_value instead [ 262.255287][ T5127] usb 1-1: Using ep0 maxpacket: 32 [ 262.265559][ T5566] loop3: detected capacity change from 0 to 128 [ 262.326077][ T5566] VFS: unable to find oldfs superblock on device loop3 [ 262.380710][ T5127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 262.426945][ T5566] 9pnet_fd: Insufficient options for proto=fd [ 262.452001][ T5134] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 262.458615][ T5134] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 262.581227][ T5127] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 262.583948][ T5134] usbhid 4-1:0.0: can't add hid device: -71 [ 262.596647][ T5127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.603407][ T5134] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.611462][ T5127] usb 1-1: Product: syz [ 262.611574][ T5127] usb 1-1: Manufacturer: syz [ 262.611678][ T5127] usb 1-1: SerialNumber: syz [ 262.669348][ T5127] usb 1-1: config 0 descriptor?? [ 262.671073][ T5133] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:aa:48:a8:e6:dc [ 262.708084][ T5133] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 262.755558][ T5127] hub 1-1:0.0: bad descriptor, ignoring hub [ 262.761843][ T5127] hub 1-1:0.0: probe with driver hub failed with error -5 [ 262.776961][ T5127] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 262.799275][ T5134] usb 4-1: USB disconnect, device number 6 [ 262.881455][ T5127] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 262.890336][ T5133] usb 3-1: USB disconnect, device number 6 [ 262.979438][ T5127] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 263.321949][ T5123] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 263.760560][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.771946][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.782125][ T5123] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.795409][ T5123] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.804844][ T5123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.842704][ T5123] usb 5-1: config 0 descriptor?? [ 264.036082][ T779] usb 1-1: USB disconnect, device number 11 [ 264.151765][ T5597] loop3: detected capacity change from 0 to 4096 [ 264.179674][ T5597] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 264.403393][ T5123] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.411462][ T5123] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 264.476842][ T5123] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 264.521872][ T5123] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 264.684563][ T29] audit: type=1804 audit(1716990910.948:22): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2321390577/syzkaller.GhCtGo/20/file0/bus" dev="loop3" ino=35 res=1 errno=0 [ 264.710897][ T29] audit: type=1804 audit(1716990910.958:23): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2321390577/syzkaller.GhCtGo/20/file0/bus" dev="loop3" ino=35 res=1 errno=0 [ 264.778609][ T5123] usb 5-1: USB disconnect, device number 7 [ 265.541328][ T5615] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 265.737377][ T5615] loop2: detected capacity change from 0 to 2048 [ 265.796005][ T5615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.902850][ T5123] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 265.967726][ T5615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 266.010264][ T5133] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 266.186763][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 266.200461][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 266.200461][ T11] [ 266.210553][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 266.216756][ T11] EXT4-fs (loop2): Free/Dirty block details [ 266.220450][ T5123] usb 1-1: Using ep0 maxpacket: 32 [ 266.222948][ T11] EXT4-fs (loop2): free_blocks=0 [ 266.233473][ T11] EXT4-fs (loop2): dirty_blocks=64 [ 266.238798][ T11] EXT4-fs (loop2): Block reservation details [ 266.245171][ T11] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 266.261594][ T5133] usb 5-1: Using ep0 maxpacket: 32 [ 266.264002][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 266.392292][ T5133] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 266.561790][ T5123] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 266.571529][ T5123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.579780][ T5123] usb 1-1: Product: syz [ 266.587802][ T5123] usb 1-1: Manufacturer: syz [ 266.593662][ T5123] usb 1-1: SerialNumber: syz [ 266.627129][ T5133] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 266.636658][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.645220][ T5133] usb 5-1: Product: syz [ 266.649614][ T5133] usb 5-1: Manufacturer: syz [ 266.654652][ T5133] usb 5-1: SerialNumber: syz [ 266.678038][ T5123] usb 1-1: config 0 descriptor?? [ 266.713865][ T5133] usb 5-1: config 0 descriptor?? [ 266.753969][ T5133] hub 5-1:0.0: bad descriptor, ignoring hub [ 266.760233][ T5133] hub 5-1:0.0: probe with driver hub failed with error -5 [ 266.774805][ T5133] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 266.828852][ T5133] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 266.888280][ T5133] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 267.531185][ T5123] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:40:0d:0e:66:c8 [ 267.556020][ T5123] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 267.577225][ T5123] usb 1-1: USB disconnect, device number 12 [ 268.177388][ T5123] usb 5-1: USB disconnect, device number 8 [ 268.384117][ T5656] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 268.573917][ T5648] loop2: detected capacity change from 0 to 4096 [ 268.590757][ T5123] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 268.630184][ T5648] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 268.690772][ T5656] loop4: detected capacity change from 0 to 2048 [ 268.815640][ T5656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.996486][ T5656] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 269.046412][ T5123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.056622][ T5123] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 269.066295][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.103222][ T5123] usb 2-1: config 0 descriptor?? [ 269.131147][ T29] audit: type=1804 audit(1716990915.418:24): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/29/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 269.162239][ T29] audit: type=1804 audit(1716990915.418:25): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/29/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 269.277486][ T4315] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 269.291180][ T4315] EXT4-fs (loop4): This should not happen!! Data will be lost [ 269.291180][ T4315] [ 269.302604][ T4315] EXT4-fs (loop4): Total free blocks count 0 [ 269.308944][ T4315] EXT4-fs (loop4): Free/Dirty block details [ 269.315170][ T4315] EXT4-fs (loop4): free_blocks=0 [ 269.320731][ T4315] EXT4-fs (loop4): dirty_blocks=64 [ 269.326252][ T4315] EXT4-fs (loop4): Block reservation details [ 269.332933][ T4315] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 269.362021][ T5670] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.377145][ T4315] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 269.471999][ T5123] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 270.425462][ T5123] usb 2-1: USB disconnect, device number 4 [ 270.931289][ T779] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 270.990648][ T5134] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 271.170998][ T779] usb 3-1: Using ep0 maxpacket: 32 [ 271.199165][ T5672] syz-executor.1 (5672) used greatest stack depth: 4256 bytes left [ 271.261880][ T5134] usb 1-1: Using ep0 maxpacket: 32 [ 271.375744][ T5696] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 271.411588][ T5134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 271.470722][ T779] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 271.480298][ T779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.488691][ T779] usb 3-1: Product: syz [ 271.493241][ T779] usb 3-1: Manufacturer: syz [ 271.498072][ T779] usb 3-1: SerialNumber: syz [ 271.548670][ T779] usb 3-1: config 0 descriptor?? [ 271.620869][ T5134] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 271.630428][ T5134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.638676][ T5134] usb 1-1: Product: syz [ 271.643267][ T5134] usb 1-1: Manufacturer: syz [ 271.648090][ T5134] usb 1-1: SerialNumber: syz [ 271.728336][ T5134] usb 1-1: config 0 descriptor?? [ 271.739670][ T5696] loop4: detected capacity change from 0 to 2048 [ 271.794258][ T5134] hub 1-1:0.0: bad descriptor, ignoring hub [ 271.800563][ T5134] hub 1-1:0.0: probe with driver hub failed with error -5 [ 271.821416][ T5134] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 271.877767][ T5134] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 271.879903][ T5696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.960734][ T5696] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 271.970409][ T5700] loop1: detected capacity change from 0 to 4096 [ 272.001058][ T5700] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 272.029893][ T5134] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 272.316923][ T779] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:e1:ba:f9:22:5f [ 272.328926][ T29] audit: type=1804 audit(1716990918.628:26): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/38/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 272.329161][ T29] audit: type=1804 audit(1716990918.628:27): pid=5700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/38/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 272.407183][ T779] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 272.434133][ T4315] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 272.446764][ T4315] EXT4-fs (loop4): This should not happen!! Data will be lost [ 272.446764][ T4315] [ 272.456779][ T4315] EXT4-fs (loop4): Total free blocks count 0 [ 272.463875][ T4315] EXT4-fs (loop4): Free/Dirty block details [ 272.470050][ T4315] EXT4-fs (loop4): free_blocks=0 [ 272.475202][ T4315] EXT4-fs (loop4): dirty_blocks=64 [ 272.480745][ T4315] EXT4-fs (loop4): Block reservation details [ 272.487011][ T4315] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 272.507632][ T779] usb 3-1: USB disconnect, device number 7 [ 272.547327][ T3206] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 272.564979][ T5705] loop3: detected capacity change from 0 to 4096 [ 272.596592][ T5705] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 273.050257][ T29] audit: type=1804 audit(1716990919.348:28): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2321390577/syzkaller.GhCtGo/33/file0/bus" dev="loop3" ino=35 res=1 errno=0 [ 273.075871][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.082690][ T29] audit: type=1804 audit(1716990919.358:29): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2321390577/syzkaller.GhCtGo/33/file0/bus" dev="loop3" ino=35 res=1 errno=0 [ 273.348565][ T5134] usb 1-1: USB disconnect, device number 13 [ 274.420908][ T779] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 274.625866][ T5733] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 274.787959][ T5733] loop4: detected capacity change from 0 to 2048 [ 274.830796][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 274.840979][ T779] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 274.850426][ T779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.889751][ T5733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.899453][ T779] usb 1-1: config 0 descriptor?? [ 274.930680][ T5134] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 274.976545][ T5733] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 275.051120][ T5736] loop1: detected capacity change from 0 to 4096 [ 275.064879][ T5736] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 275.120531][ T5123] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 275.210245][ T5134] usb 3-1: Using ep0 maxpacket: 32 [ 275.266638][ T3206] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 275.279438][ T3206] EXT4-fs (loop4): This should not happen!! Data will be lost [ 275.279438][ T3206] [ 275.295993][ T3206] EXT4-fs (loop4): Total free blocks count 0 [ 275.303902][ T3206] EXT4-fs (loop4): Free/Dirty block details [ 275.310214][ T3206] EXT4-fs (loop4): free_blocks=0 [ 275.315378][ T3206] EXT4-fs (loop4): dirty_blocks=64 [ 275.320816][ T3206] EXT4-fs (loop4): Block reservation details [ 275.327004][ T3206] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 275.337548][ T29] audit: type=1804 audit(1716990921.658:30): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/41/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 275.338244][ T779] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 275.363892][ T29] audit: type=1804 audit(1716990921.658:31): pid=5736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3458758842/syzkaller.CO016I/41/file0/bus" dev="loop1" ino=35 res=1 errno=0 [ 275.417084][ T3206] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 275.460305][ T5123] usb 4-1: Using ep0 maxpacket: 32 [ 275.581419][ T5123] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 275.604396][ T5134] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 275.614208][ T5134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.622606][ T5134] usb 3-1: Product: syz [ 275.626991][ T5134] usb 3-1: Manufacturer: syz [ 275.632307][ T5134] usb 3-1: SerialNumber: syz [ 275.730991][ T5134] usb 3-1: config 0 descriptor?? [ 275.831067][ T5123] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 275.840615][ T5123] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.848866][ T5123] usb 4-1: Product: syz [ 275.853408][ T5123] usb 4-1: Manufacturer: syz [ 275.858236][ T5123] usb 4-1: SerialNumber: syz [ 275.920431][ T5123] usb 4-1: config 0 descriptor?? [ 275.978604][ T5123] hub 4-1:0.0: bad descriptor, ignoring hub [ 275.984878][ T5123] hub 4-1:0.0: probe with driver hub failed with error -5 [ 275.999475][ T5123] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 276.061900][ T5123] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 276.098966][ T5123] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 276.138059][ T5745] loop4: detected capacity change from 0 to 4096 [ 276.159402][ T5745] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 276.491195][ T5134] (unnamed net_device) (uninitialized): Assigned a random MAC address: ca:98:ab:21:e5:26 [ 276.522998][ T5134] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 276.565482][ T5134] usb 3-1: USB disconnect, device number 8 [ 276.617732][ T29] audit: type=1804 audit(1716990922.928:32): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2651645827/syzkaller.Vx54nl/29/file0/bus" dev="loop4" ino=35 res=1 errno=0 [ 276.649041][ T29] audit: type=1804 audit(1716990922.938:33): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2651645827/syzkaller.Vx54nl/29/file0/bus" dev="loop4" ino=35 res=1 errno=0 [ 277.208930][ T5133] usb 1-1: USB disconnect, device number 14 [ 277.252972][ T779] usb 4-1: USB disconnect, device number 7 [ 277.903066][ T5769] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 278.349261][ T5769] loop2: detected capacity change from 0 to 2048 [ 278.489247][ T5769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.563122][ T5774] loop4: detected capacity change from 0 to 4096 [ 278.632873][ T5769] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 278.659921][ T5774] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 278.972793][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.188697][ T5785] loop0: detected capacity change from 0 to 4096 [ 279.263885][ T5785] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 279.304634][ T29] audit: type=1804 audit(1716990925.578:34): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2651645827/syzkaller.Vx54nl/31/file0/bus" dev="loop4" ino=35 res=1 errno=0 [ 279.330806][ T29] audit: type=1804 audit(1716990925.578:35): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2651645827/syzkaller.Vx54nl/31/file0/bus" dev="loop4" ino=35 res=1 errno=0 [ 279.400580][ T5133] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 279.616692][ T29] audit: type=1804 audit(1716990925.928:36): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3171851545/syzkaller.aOjlWc/30/file0/bus" dev="loop0" ino=35 res=1 errno=0 [ 279.621427][ T5134] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 279.642630][ T29] audit: type=1804 audit(1716990925.928:37): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3171851545/syzkaller.aOjlWc/30/file0/bus" dev="loop0" ino=35 res=1 errno=0 [ 279.714847][ T5133] usb 4-1: Using ep0 maxpacket: 32 [ 279.751013][ T5123] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 280.002500][ T5123] usb 3-1: Using ep0 maxpacket: 32 [ 280.026854][ T5133] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 280.036304][ T5133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.046717][ T5133] usb 4-1: Product: syz [ 280.051483][ T5133] usb 4-1: Manufacturer: syz [ 280.056312][ T5133] usb 4-1: SerialNumber: syz [ 280.064345][ T5134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 280.074430][ T5134] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 280.084550][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.106704][ T5133] usb 4-1: config 0 descriptor?? [ 280.129030][ T5134] usb 2-1: config 0 descriptor?? [ 280.151893][ T5123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 280.362344][ T5123] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 280.371827][ T5123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.380469][ T5123] usb 3-1: Product: syz [ 280.384978][ T5123] usb 3-1: Manufacturer: syz [ 280.389819][ T5123] usb 3-1: SerialNumber: syz [ 280.463021][ T5123] usb 3-1: config 0 descriptor?? [ 280.502417][ T5134] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 280.552553][ T5123] hub 3-1:0.0: bad descriptor, ignoring hub [ 280.558735][ T5123] hub 3-1:0.0: probe with driver hub failed with error -5 [ 280.573411][ T1220] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.573829][ T5123] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 280.580068][ T1220] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.679026][ T5123] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 280.785999][ T5123] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 280.855716][ T5133] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:02:2d:6b:25:f4 [ 280.881018][ T5133] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 280.955828][ T5133] usb 4-1: USB disconnect, device number 8 [ 281.593987][ T5814] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 281.887863][ T5817] loop4: detected capacity change from 0 to 2048 [ 281.954317][ T5133] usb 3-1: USB disconnect, device number 9 [ 281.968457][ T5817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.195460][ T5814] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 282.197708][ T5824] loop3: detected capacity change from 0 to 512 [ 282.233417][ T5824] ======================================================= [ 282.233417][ T5824] WARNING: The mand mount option has been deprecated and [ 282.233417][ T5824] and is ignored by this kernel. Remove the mand [ 282.233417][ T5824] option from the mount to silence this warning. [ 282.233417][ T5824] ======================================================= [ 282.313591][ T5824] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 282.347781][ T5824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.493589][ T5130] usb 2-1: USB disconnect, device number 5 [ 282.525916][ T5826] loop2: detected capacity change from 0 to 4096 [ 282.554913][ T34] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 282.572821][ T34] EXT4-fs (loop4): This should not happen!! Data will be lost [ 282.572821][ T34] [ 282.577634][ T5826] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 282.585394][ T34] EXT4-fs (loop4): Total free blocks count 0 [ 282.601954][ T34] EXT4-fs (loop4): Free/Dirty block details [ 282.608060][ T34] EXT4-fs (loop4): free_blocks=0 [ 282.614388][ T34] EXT4-fs (loop4): dirty_blocks=64 [ 282.619706][ T34] EXT4-fs (loop4): Block reservation details [ 282.626227][ T34] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 282.785992][ T34] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 282.954212][ T5086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.263769][ T29] audit: type=1804 audit(1716990929.538:38): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/39/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 283.293079][ T29] audit: type=1804 audit(1716990929.558:39): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2941162773/syzkaller.8kdfaB/39/file0/bus" dev="loop2" ino=35 res=1 errno=0 [ 284.117935][ T5852] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 284.171082][ T779] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 284.305085][ T5852] loop0: detected capacity change from 0 to 2048 [ 284.313540][ T5130] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 284.434057][ T5852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.451853][ T779] usb 5-1: Using ep0 maxpacket: 32 [ 284.541474][ T5852] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 284.616447][ T5127] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 284.624828][ T5130] usb 4-1: Using ep0 maxpacket: 32 [ 284.732401][ T779] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 284.741897][ T779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.750571][ T779] usb 5-1: Product: syz [ 284.754952][ T779] usb 5-1: Manufacturer: syz [ 284.759785][ T779] usb 5-1: SerialNumber: syz [ 284.766657][ T5130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 284.792030][ T779] usb 5-1: config 0 descriptor?? [ 284.839210][ T4315] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 284.852142][ T4315] EXT4-fs (loop0): This should not happen!! Data will be lost [ 284.852142][ T4315] [ 284.862123][ T4315] EXT4-fs (loop0): Total free blocks count 0 [ 284.868331][ T4315] EXT4-fs (loop0): Free/Dirty block details [ 284.874528][ T4315] EXT4-fs (loop0): free_blocks=0 [ 284.879678][ T4315] EXT4-fs (loop0): dirty_blocks=64 [ 284.885467][ T4315] EXT4-fs (loop0): Block reservation details [ 284.891718][ T4315] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 284.908930][ T4315] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 284.941348][ T5130] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 284.950842][ T5130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.959087][ T5130] usb 4-1: Product: syz [ 284.963807][ T5130] usb 4-1: Manufacturer: syz [ 284.968643][ T5130] usb 4-1: SerialNumber: syz [ 284.984455][ T5130] usb 4-1: config 0 descriptor?? [ 285.050964][ T5127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 285.062173][ T5127] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 285.072946][ T5127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.085818][ T5130] hub 4-1:0.0: bad descriptor, ignoring hub [ 285.092164][ T5130] hub 4-1:0.0: probe with driver hub failed with error -5 [ 285.107952][ T5130] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 285.155051][ T5127] usb 2-1: config 0 descriptor?? [ 285.185983][ T5130] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 285.274289][ T5130] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 285.500778][ T779] (unnamed net_device) (uninitialized): Assigned a random MAC address: 0a:2f:47:12:aa:0f [ 285.525841][ T779] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 285.588687][ T5127] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 285.624390][ T779] usb 5-1: USB disconnect, device number 9 [ 286.275491][ T5870] loop0: detected capacity change from 0 to 4096 [ 286.390425][ T5127] usb 4-1: USB disconnect, device number 9 [ 286.464212][ T5870] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 287.130195][ T29] audit: type=1804 audit(1716990933.418:40): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3171851545/syzkaller.aOjlWc/38/file0/bus" dev="loop0" ino=35 res=1 errno=0 [ 287.156349][ T29] audit: type=1804 audit(1716990933.438:41): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3171851545/syzkaller.aOjlWc/38/file0/bus" dev="loop0" ino=35 res=1 errno=0 [ 287.363140][ T5133] usb 2-1: USB disconnect, device number 6 [ 287.901717][ T5892] input: syz1 as /devices/virtual/input/input17 [ 288.096205][ T5896] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 288.377791][ T5898] loop1: detected capacity change from 0 to 512 [ 288.695201][ T5895] loop3: detected capacity change from 0 to 32768 [ 288.700498][ T5898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.721617][ T5898] ext4 filesystem being mounted at /root/syzkaller-testdir3458758842/syzkaller.CO016I/56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.739367][ T5895] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5895) [ 288.752747][ T5896] loop0: detected capacity change from 0 to 2048 [ 288.888792][ T5895] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.899427][ T5895] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 288.905466][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.914686][ T5895] BTRFS info (device loop3): using free-space-tree [ 288.998958][ T5905] loop4: detected capacity change from 0 to 1024 [ 289.109739][ T5905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.238594][ T5896] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 289.259371][ T5088] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor.1: path /root/syzkaller-testdir3458758842/syzkaller.CO016I/56/bus/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 289.394400][ T29] audit: type=1800 audit(1716990935.678:42): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 289.545538][ T5082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.602492][ T4035] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 289.615183][ T4035] EXT4-fs (loop0): This should not happen!! Data will be lost [ 289.615183][ T4035] [ 289.630897][ T4035] EXT4-fs (loop0): Total free blocks count 0 [ 289.637106][ T4035] EXT4-fs (loop0): Free/Dirty block details [ 289.645118][ T4035] EXT4-fs (loop0): free_blocks=0 [ 289.650381][ T4035] EXT4-fs (loop0): dirty_blocks=64 [ 289.655691][ T4035] EXT4-fs (loop0): Block reservation details [ 289.661990][ T4035] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 289.774535][ T5086] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 289.838864][ T4035] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28 [ 290.401427][ T5935] Zero length message leads to an empty skb [ 290.892950][ T5941] input: syz1 as /devices/virtual/input/input18 [ 291.293160][ T5945] loop4: detected capacity change from 0 to 512 [ 291.459068][ T5945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.475887][ T5945] ext4 filesystem being mounted at /root/syzkaller-testdir2651645827/syzkaller.Vx54nl/46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 292.239469][ T5082] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor.4: path /root/syzkaller-testdir2651645827/syzkaller.Vx54nl/46/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 292.534611][ T5952] loop2: detected capacity change from 0 to 32768 [ 292.552662][ T5952] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5952) [ 292.592017][ T5956] loop0: detected capacity change from 0 to 1024 [ 292.603384][ T5952] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.603618][ T5952] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 292.625022][ T5952] BTRFS info (device loop2): using free-space-tree [ 292.692352][ T5960] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 292.868499][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.952800][ T5960] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 293.150630][ T29] audit: type=1800 audit(1716990939.408:43): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 293.203748][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.476665][ T5074] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 294.446950][ T5986] input: syz1 as /devices/virtual/input/input19 [ 295.046522][ T5992] loop3: detected capacity change from 0 to 512 [ 295.120826][ T5990] loop0: detected capacity change from 0 to 2048 [ 295.220660][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.233857][ T5992] ext4 filesystem being mounted at /root/syzkaller-testdir2321390577/syzkaller.GhCtGo/52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.260677][ T5997] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.640876][ T5086] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor.3: path /root/syzkaller-testdir2321390577/syzkaller.GhCtGo/52/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 296.640691][ T6006] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 296.918247][ T6007] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 296.922336][ T6004] loop2: detected capacity change from 0 to 32768 [ 297.004128][ T6004] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6004) [ 297.034904][ T6004] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.045441][ T6004] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 297.056805][ T6004] BTRFS info (device loop2): using free-space-tree [ 297.491593][ T29] audit: type=1800 audit(1716990943.758:44): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 297.793084][ T5074] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.363501][ T6032] input: syz1 as /devices/virtual/input/input20 [ 299.919539][ T6038] loop2: detected capacity change from 0 to 512 [ 300.022891][ T6038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.036131][ T6038] ext4 filesystem being mounted at /root/syzkaller-testdir2941162773/syzkaller.8kdfaB/57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.436200][ T5074] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 32: comm syz-executor.2: path /root/syzkaller-testdir2941162773/syzkaller.8kdfaB/57/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 300.721878][ T6044] loop0: detected capacity change from 0 to 2048 [ 300.825974][ T6045] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.967834][ T6048] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 302.116161][ T6050] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 303.602247][ T6052] loop0: detected capacity change from 0 to 32768 [ 303.624891][ T6052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6052) [ 303.668516][ T6052] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.679071][ T6052] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 303.690565][ T6052] BTRFS info (device loop0): using free-space-tree [ 304.367784][ T4315] ===================================================== [ 304.379147][ T4315] BUG: KMSAN: uninit-value in btrfs_compress_heuristic+0xb34/0x31f0 [ 304.388623][ T4315] btrfs_compress_heuristic+0xb34/0x31f0 [ 304.394534][ T4315] btrfs_run_delalloc_range+0x158f/0x16e0 [ 304.400484][ T4315] writepage_delalloc+0x244/0x6b0 [ 304.405675][ T4315] extent_writepages+0x1c01/0x3850 [ 304.411165][ T4315] btrfs_writepages+0x35/0x40 [ 304.416038][ T4315] do_writepages+0x427/0xc30 [ 304.420855][ T4315] filemap_fdatawrite_wbc+0x1d8/0x270 [ 304.426410][ T4315] start_delalloc_inodes+0xb02/0x17c0 [ 304.432056][ T4315] btrfs_start_delalloc_roots+0x89e/0x1030 [ 304.438060][ T4315] flush_space+0xbd6/0x16d0 [ 304.442914][ T4315] btrfs_async_reclaim_metadata_space+0x76d/0x9c0 [ 304.449523][ T4315] process_scheduled_works+0xa81/0x1bd0 [ 304.455327][ T4315] worker_thread+0xea5/0x1560 [ 304.460273][ T4315] kthread+0x3e2/0x540 2024/05/29 13:55:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 304.464518][ T4315] ret_from_fork+0x6d/0x90 [ 304.469096][ T4315] ret_from_fork_asm+0x1a/0x30 [ 304.478259][ T4315] [ 304.481811][ T4315] Uninit was stored to memory at: [ 304.487149][ T4315] btrfs_compress_heuristic+0x303/0x31f0 [ 304.493049][ T4315] btrfs_run_delalloc_range+0x158f/0x16e0 [ 304.498939][ T4315] writepage_delalloc+0x244/0x6b0 [ 304.504844][ T4315] extent_writepages+0x1c01/0x3850 [ 304.510216][ T4315] btrfs_writepages+0x35/0x40 [ 304.516033][ T4315] do_writepages+0x427/0xc30 [ 304.520958][ T4315] filemap_fdatawrite_wbc+0x1d8/0x270 [ 304.526529][ T4315] start_delalloc_inodes+0xb02/0x17c0 [ 304.532256][ T4315] btrfs_start_delalloc_roots+0x89e/0x1030 [ 304.538256][ T4315] flush_space+0xbd6/0x16d0 [ 304.543013][ T4315] btrfs_async_reclaim_metadata_space+0x76d/0x9c0 [ 304.549613][ T4315] process_scheduled_works+0xa81/0x1bd0 [ 304.555426][ T4315] worker_thread+0xea5/0x1560 [ 304.560508][ T4315] kthread+0x3e2/0x540 [ 304.564755][ T4315] ret_from_fork+0x6d/0x90 [ 304.569330][ T4315] ret_from_fork_asm+0x1a/0x30 [ 304.578425][ T4315] [ 304.581926][ T4315] Uninit was stored to memory at: [ 304.587297][ T4315] copy_page_from_iter_atomic+0x12b7/0x2ae0 [ 304.593697][ T4315] btrfs_copy_from_user+0x176/0x4c0 [ 304.599066][ T4315] btrfs_buffered_write+0x119a/0x2ab0 [ 304.606786][ T4315] btrfs_do_write_iter+0x395/0x2270 [ 304.612690][ T4315] btrfs_file_write_iter+0x38/0x50 [ 304.617966][ T4315] __kernel_write_iter+0x64d/0xc80 [ 304.623439][ T4315] dump_user_range+0x8dc/0xee0 [ 304.628388][ T4315] elf_core_dump+0x57c7/0x5ae0 [ 304.633412][ T4315] do_coredump+0x32d5/0x4920 [ 304.638179][ T4315] get_signal+0x267e/0x2d00 [ 304.642919][ T4315] arch_do_signal_or_restart+0x53/0xcb0 [ 304.648685][ T4315] syscall_exit_to_user_mode+0x5d/0x160 [ 304.654536][ T4315] do_syscall_64+0xdc/0x1e0 [ 304.659227][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.665384][ T4315] [ 304.667786][ T4315] Uninit was created at: [ 304.672326][ T4315] __alloc_pages+0x9d6/0xe70 [ 304.681496][ T4315] alloc_pages_mpol+0x299/0x990 [ 304.686531][ T4315] alloc_pages+0x1bf/0x1e0 [ 304.692634][ T4315] dump_user_range+0x4a/0xee0 [ 304.697499][ T4315] elf_core_dump+0x57c7/0x5ae0 [ 304.702542][ T4315] do_coredump+0x32d5/0x4920 [ 304.707299][ T4315] get_signal+0x267e/0x2d00 [ 304.712032][ T4315] arch_do_signal_or_restart+0x53/0xcb0 [ 304.717804][ T4315] syscall_exit_to_user_mode+0x5d/0x160 [ 304.723709][ T4315] do_syscall_64+0xdc/0x1e0 [ 304.728401][ T4315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.734592][ T4315] [ 304.737015][ T4315] CPU: 1 PID: 4315 Comm: kworker/u8:31 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 304.747172][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 304.757454][ T4315] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 304.765334][ T4315] ===================================================== [ 304.772430][ T4315] Disabling lock debugging due to kernel taint [ 304.783084][ T4315] Kernel panic - not syncing: kmsan.panic set ... [ 304.789617][ T4315] CPU: 1 PID: 4315 Comm: kworker/u8:31 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 304.801160][ T4315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 304.811347][ T4315] Workqueue: events_unbound btrfs_async_reclaim_metadata_space [ 304.819092][ T4315] Call Trace: [ 304.822470][ T4315] [ 304.825492][ T4315] dump_stack_lvl+0x216/0x2d0 [ 304.830358][ T4315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 304.836428][ T4315] dump_stack+0x1e/0x30 [ 304.840758][ T4315] panic+0x4e2/0xcd0 [ 304.844832][ T4315] ? kmsan_get_metadata+0xf1/0x1d0 [ 304.850120][ T4315] kmsan_report+0x2d5/0x2e0 [ 304.854780][ T4315] ? filemap_fdatawrite_wbc+0x1d8/0x270 [ 304.860499][ T4315] ? btrfs_async_reclaim_metadata_space+0x750/0x9c0 [ 304.867264][ T4315] ? process_scheduled_works+0xa81/0x1bd0 [ 304.873154][ T4315] ? worker_thread+0xea5/0x1560 [ 304.878170][ T4315] ? kthread+0x3e2/0x540 [ 304.882587][ T4315] ? ret_from_fork+0x6d/0x90 [ 304.887343][ T4315] ? __msan_warning+0x95/0x120 [ 304.892253][ T4315] ? btrfs_compress_heuristic+0xb34/0x31f0 [ 304.898241][ T4315] ? btrfs_run_delalloc_range+0x158f/0x16e0 [ 304.904294][ T4315] ? writepage_delalloc+0x244/0x6b0 [ 304.909656][ T4315] ? extent_writepages+0x1c01/0x3850 [ 304.915134][ T4315] ? btrfs_writepages+0x35/0x40 [ 304.920181][ T4315] ? do_writepages+0x427/0xc30 [ 304.925100][ T4315] ? filemap_fdatawrite_wbc+0x1d8/0x270 [ 304.930816][ T4315] ? start_delalloc_inodes+0xb02/0x17c0 [ 304.936538][ T4315] ? btrfs_start_delalloc_roots+0x89e/0x1030 [ 304.942700][ T4315] ? flush_space+0xbd6/0x16d0 [ 304.947522][ T4315] ? btrfs_async_reclaim_metadata_space+0x76d/0x9c0 [ 304.954282][ T4315] ? process_scheduled_works+0xa81/0x1bd0 [ 304.960171][ T4315] ? worker_thread+0xea5/0x1560 [ 304.965187][ T4315] ? kthread+0x3e2/0x540 [ 304.969598][ T4315] ? ret_from_fork+0x6d/0x90 [ 304.974341][ T4315] ? ret_from_fork_asm+0x1a/0x30 [ 304.979474][ T4315] ? __filemap_get_folio+0x1319/0x14b0 [ 304.985132][ T4315] ? _raw_spin_unlock+0x30/0x50 [ 304.990152][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 304.995521][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.000880][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.006242][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.011597][ T4315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 305.017575][ T4315] __msan_warning+0x95/0x120 [ 305.022311][ T4315] btrfs_compress_heuristic+0xb34/0x31f0 [ 305.028135][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.033491][ T4315] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 305.039938][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.045305][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.050668][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.056042][ T4315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 305.062041][ T4315] btrfs_run_delalloc_range+0x158f/0x16e0 [ 305.067931][ T4315] ? find_lock_delalloc_range+0xc03/0xf50 [ 305.073839][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.079208][ T4315] writepage_delalloc+0x244/0x6b0 [ 305.084416][ T4315] extent_writepages+0x1c01/0x3850 [ 305.089722][ T4315] ? padata_alloc_pd+0x29f/0xd40 [ 305.094937][ T4315] ? __pfx_btrfs_writepages+0x10/0x10 [ 305.100510][ T4315] btrfs_writepages+0x35/0x40 [ 305.105382][ T4315] do_writepages+0x427/0xc30 [ 305.110121][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.115483][ T4315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 305.121472][ T4315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 305.127450][ T4315] filemap_fdatawrite_wbc+0x1d8/0x270 [ 305.132999][ T4315] start_delalloc_inodes+0xb02/0x17c0 [ 305.138583][ T4315] btrfs_start_delalloc_roots+0x89e/0x1030 [ 305.144645][ T4315] flush_space+0xbd6/0x16d0 [ 305.149298][ T4315] ? kmsan_get_metadata+0x146/0x1d0 [ 305.154684][ T4315] btrfs_async_reclaim_metadata_space+0x76d/0x9c0 [ 305.161290][ T4315] ? __pfx_btrfs_async_reclaim_metadata_space+0x10/0x10 [ 305.168400][ T4315] process_scheduled_works+0xa81/0x1bd0 [ 305.174151][ T4315] worker_thread+0xea5/0x1560 [ 305.179112][ T4315] kthread+0x3e2/0x540 [ 305.183356][ T4315] ? __pfx_worker_thread+0x10/0x10 [ 305.188645][ T4315] ? __pfx_kthread+0x10/0x10 [ 305.193424][ T4315] ret_from_fork+0x6d/0x90 [ 305.198000][ T4315] ? __pfx_kthread+0x10/0x10 [ 305.202772][ T4315] ret_from_fork_asm+0x1a/0x30 [ 305.207734][ T4315] [ 305.211072][ T4315] Kernel Offset: disabled [ 305.215450][ T4315] Rebooting in 86400 seconds..