last executing test programs: 11.075170469s ago: executing program 4 (id=2181): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'cp437'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 9.938599152s ago: executing program 4 (id=2190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @empty, @loopback}, &(0x7f00000006c0)=0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x4) ioctl$FIBMAP(r5, 0x660c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x4, 0x6c2f23e7, 0x41, r5, 0x8, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, &(0x7f0000000080), 0x0}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@restrict={0x1, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000a80)=""/236, 0x29, 0xec, 0x0, 0x6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x19, &(0x7f0000001240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@printk={@x}, @exit, @alu={0x4, 0x1, 0x3, 0x6, 0x0, 0x2, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3c6, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000380)='./file0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r8, 0x1) 8.507296698s ago: executing program 4 (id=2198): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="cc0300001900000428bd7000fedbdf25ac14141a000000000000000000000000e00000020000000000000000000000004e2200024e2200010a00808000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x3cc}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffc, 0x0}}], 0x58}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000007540)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x2, &(0x7f0000000040), 0x4) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYBLOB="010000000000000000000c0000001800058004000100657468000c0002800800040000000000"], 0x2c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x0) getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @bcast}, [@netrom, @remote, @default, @bcast, @null, @bcast, @remote, @null]}, &(0x7f0000000100)=0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0x8, 0xa}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRES16=r6, @ANYRESDEC=r6, @ANYRES32, @ANYRES16=r4, @ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESDEC, @ANYRES32=r6, @ANYRESDEC, @ANYBLOB="78a329f6b25a66ae48041acadeaad0f8654a44769b3a8b2ead581f427839e7169f0e30cd635d3fb7ed71367a03c70cdd11985dc8f7fd207fd459842ebe6f31d8ce81ac561b8f", @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x8, 0x12) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000000)=0x11, 0x4) setsockopt$inet_tcp_buf(r7, 0x6, 0x1f, 0x0, 0x0) 8.182263315s ago: executing program 3 (id=2200): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x5c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x9}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000010000300686173683a69702c6d6163000900020073797a3200000000050004000000000005000500020000000500010006"], 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x8}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030600000000000000001f154ca300000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000005c0)=""/199, 0xc7, 0x40000040, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, {0xa, 0x4e20, 0xfd8a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x6e6e}}}, 0x80) 7.673733306s ago: executing program 4 (id=2201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1fffffffffb) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 7.392207389s ago: executing program 4 (id=2207): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRES32, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESDEC, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000006680)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000be80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x78}}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}}) 5.762041261s ago: executing program 2 (id=2212): openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) 5.496393963s ago: executing program 2 (id=2214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x400448ca, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x1}) pwritev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0b000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000004008000140000000000900010073797a300000000050000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xc4}}, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r5 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f00000000c0)={0x4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) write(r6, &(0x7f0000000540)="95", 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b}}) rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') getpid() 5.469764955s ago: executing program 4 (id=2215): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x14}}, @timestamping={{0x10}}], 0x24}}], 0x2, 0x0) 4.262498533s ago: executing program 1 (id=2224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)={0x0, 0x0, 0x0, {0x0, 0x0, 0x40}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="80040001"], 0x28}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) fchownat(r2, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) sendto$inet(r4, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) r5 = epoll_create(0xe27) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = dup(r6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f0000000040)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001600)={0x6, 0x0, [{0x0, 0x6d, &(0x7f0000000300)=""/109}, {0x0, 0x41, &(0x7f0000001700)=""/65}, {0x1, 0x0, 0x0}, {0xd000, 0x4f, &(0x7f0000000540)=""/79}, {0x10001, 0x1000, &(0x7f00000005c0)=""/4096}, {0xf000, 0x2a, &(0x7f00000015c0)=""/42}]}) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) 3.917563551s ago: executing program 3 (id=2226): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b7000400000008002600940900000800a0000200000005001901080000000500190104000000080027"], 0x4c}}, 0x0) 3.659561812s ago: executing program 3 (id=2227): ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 3.07666763s ago: executing program 0 (id=2228): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback={0x2001000000000000}}]}]}, 0xcc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x41a0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) 2.992912096s ago: executing program 1 (id=2229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8979) sendfile(r1, r2, 0x0, 0x103e) 2.887012955s ago: executing program 1 (id=2230): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 2.613398107s ago: executing program 1 (id=2231): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008080000000000c4c6850000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x80}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001000010400000000fbdbdf2500000000", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08002e0004000000080013"], 0xdc}, 0x1, 0xf303000000000000}, 0x0) connect$can_bcm(r4, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="05000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0800008001000000000000000000020044a349524fa606b83bea9313846bcc8dde499f4583e4030a48de3f26b12f70dcc5d1642a2e1cc7d75157b72039cc42927a8a1e5be26e7a783a1bd49e3ef101642ea9a4c9cab83396"], 0x80}}, 0x0) dup3(0xffffffffffffffff, r3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x477) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='mem_disconnect\x00'}, 0x17) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.589232179s ago: executing program 3 (id=2232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xf7}]}}}]}, 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000c000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @random="bf7d132b5a64", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) 2.538192553s ago: executing program 0 (id=2233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500000000000000100007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000480"], 0x2c}}, 0x0) 2.251265567s ago: executing program 0 (id=2234): sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102371, 0xffffffba}], 0x1, 0x0, 0xffffffff) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x0) unshare(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000008280), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@private1}, &(0x7f0000000100)=0x14) openat$cgroup_int(r2, &(0x7f0000000740)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 2.022794255s ago: executing program 3 (id=2235): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@txtime={{0x14}}, @timestamping={{0x10}}], 0x24}}], 0x2, 0x0) 1.928131323s ago: executing program 1 (id=2236): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000380)={"57a28812aec6233d39373a6420c0bb951c87b9daff0e4e5ca97ba269aeb6"}) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x546, &(0x7f0000000200)="$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") prctl$PR_SVE_SET_VL(0x32, 0x28f3d) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0xb000, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000500)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='svc_stats_latency\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000600000000000000181100000000227b0c7475b0bb838dec5249", @ANYRES32, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.885400087s ago: executing program 2 (id=2237): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) chdir(0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 1.809539132s ago: executing program 3 (id=2238): semget$private(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000180), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0xce100, 0x0) fsopen(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b291de20cd060701fe44000000010902120001000000000904000000a9f08300"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000001c0)=""/117, &(0x7f0000000240)=0x75) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000640)={0x0, &(0x7f0000000600)}) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x40800) capset(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x8000000) fanotify_mark(0xffffffffffffffff, 0x565, 0x48000000, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000080)=0x7, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000580), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 1.566811123s ago: executing program 2 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x2000}, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000076, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000280)=@md5={0x1, "bf5110b0dbe094319d585e800e0e621c"}, 0x11, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) 298.785795ms ago: executing program 2 (id=2240): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 296.933345ms ago: executing program 0 (id=2241): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) 227.051522ms ago: executing program 2 (id=2242): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000b80)="$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") 176.688605ms ago: executing program 0 (id=2243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000500000000000000100007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000480"], 0x2c}}, 0x0) 174.490276ms ago: executing program 1 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_ES={0x5, 0xa, 0xf7}]}}}]}, 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000c000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @random="bf7d132b5a64", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7], 0x4c}}, 0x0) 0s ago: executing program 0 (id=2245): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000300)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x0, 0x3b, 0x0, "5819f9e6b047ec2003b8892ff3889dcf134877503c8e12291d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de4"}, 0xd8) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00004a0000/0x1000)=nil, 0x1000, 0xb635773f05ebbeee, 0x8031, r2, 0xc3a0f000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0x2, @win={{0x7f, 0x159, 0x7fffffff}, 0x0, 0x5, &(0x7f0000000580)={{0x7, 0x8, 0x1, 0xbe43}, &(0x7f0000000540)={{0x3, 0x7, 0x5939, 0x4}, &(0x7f0000000500)={{0x0, 0x6, 0x680, 0x18a}}}}, 0x3, 0x0, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}}) kernel console output (not intermixed with test programs): audit(1722013387.179:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f0dd1299 code=0x7ffc0000 [ 425.421170][ T26] audit: type=1326 audit(1722013387.239:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6f0dd1299 code=0x7ffc0000 [ 425.471923][ T4822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.497705][ T4822] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 425.508645][ T4822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.680297][T10042] loop3: detected capacity change from 0 to 2048 [ 425.716140][ T4822] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 425.725370][ T4822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.754079][ T4822] usb 3-1: Product: syz [ 425.764235][ T4822] usb 3-1: Manufacturer: syz [ 425.774365][ T4822] usb 3-1: SerialNumber: syz [ 425.830513][T10042] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 425.872840][T10042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.076879][ T4822] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 426.241407][T10049] loop4: detected capacity change from 0 to 8192 [ 426.303449][T10049] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.303538][ T4822] usb 3-1: USB disconnect, device number 14 [ 426.359956][ T4822] usblp0: removed [ 426.475630][T10049] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 426.498017][T10049] FAT-fs (loop4): Filesystem has been set read-only [ 426.511066][T10049] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 426.521488][T10049] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 426.603109][T10056] loop0: detected capacity change from 0 to 64 [ 427.563342][T10066] loop1: detected capacity change from 0 to 128 [ 427.946228][ T4827] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 427.996643][T10066] hpfs: Bad magic ... probably not HPFS [ 428.041876][T10061] loop2: detected capacity change from 0 to 32768 [ 428.066176][ T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 428.179121][T10065] nbd1: detected capacity change from 0 to 2199023255576 [ 428.203637][ T263] block nbd1: Send control failed (result -89) [ 428.211920][ T263] block nbd1: Request send failed, requeueing [ 428.226493][ T3576] block nbd1: Receive control failed (result -32) [ 428.228434][ T263] block nbd1: Dead connection, failed to find a fallback [ 428.243829][ T4827] usb 4-1: Using ep0 maxpacket: 16 [ 428.251391][ T263] block nbd1: shutting down sockets [ 428.258535][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.270370][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.285913][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.297071][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.306890][T10061] XFS (loop2): Mounting V5 Filesystem [ 428.311524][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.327929][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.335859][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.346832][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.365231][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.376215][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.384129][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 428.390121][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.396690][T10061] XFS (loop2): Ending clean mount [ 428.401275][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.408313][T10061] XFS (loop2): Quotacheck needed: Please wait. [ 428.416418][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.432478][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.441122][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.452117][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.476339][T10065] ldm_validate_partition_table(): Disk read failed. [ 428.480674][T10085] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 428.483598][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.502102][ T263] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.516571][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 428.527506][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 428.535786][T10065] Dev nbd1: unable to read RDB block 0 [ 428.547227][T10065] nbd1: unable to read partition table [ 428.559862][T10006] ldm_validate_partition_table(): Disk read failed. [ 428.579883][T10006] Dev nbd1: unable to read RDB block 0 [ 428.586791][T10006] nbd1: unable to read partition table [ 428.605297][T10006] ldm_validate_partition_table(): Disk read failed. [ 428.624330][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 428.644839][T10006] Dev nbd1: unable to read RDB block 0 [ 428.652295][T10089] loop1: detected capacity change from 0 to 256 [ 428.659851][T10006] nbd1: unable to read partition table [ 428.666439][ T4827] usb 4-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=8e.53 [ 428.675497][ T4827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.702349][ T4827] usb 4-1: Product: syz [ 428.711833][ T4827] usb 4-1: Manufacturer: syz [ 428.716592][ T4827] usb 4-1: SerialNumber: syz [ 428.726135][T10061] XFS (loop2): Quotacheck: Done. [ 428.727414][ T4827] usb 4-1: config 0 descriptor?? [ 428.789613][ T4827] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 428.819829][ T4827] dvb-usb: bulk message failed: -22 (2/0) [ 428.829195][ T4827] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 428.846856][T10089] attempt to access beyond end of device [ 428.846856][T10089] loop1: rw=2049, want=260, limit=256 [ 428.858262][ T7] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 428.876347][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.884579][ T7] usb 5-1: Product: syz [ 428.889654][ T7] usb 5-1: Manufacturer: syz [ 428.896278][ T7] usb 5-1: SerialNumber: syz [ 428.906849][ T4827] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 428.928936][ T7641] XFS (loop2): Unmounting Filesystem [ 428.935166][ T4827] usb 4-1: media controller created [ 428.940954][ T7] usb 5-1: config 0 descriptor?? [ 428.947418][ T4827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.961879][T10095] loop0: detected capacity change from 0 to 2048 [ 428.980212][T10070] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 429.034899][ T4827] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 429.074489][T10095] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 429.097332][ T4827] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 429.099142][T10095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 429.306057][ T4827] rc_core: IR keymap rc-dtt200u not found [ 429.311966][ T4827] Registered IR keymap rc-empty [ 429.329594][ T4827] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 429.364879][ T4827] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input26 [ 429.391150][ T4827] dvb-usb: schedule remote query interval to 300 msecs. [ 429.418765][ T4827] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 429.495673][ T4827] usb 4-1: USB disconnect, device number 21 [ 429.609712][ T4827] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 430.126283][ T4827] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 430.763155][ T3612] usb 5-1: USB disconnect, device number 16 [ 430.892146][ T26] audit: type=1326 audit(1722013392.809:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10114 comm="syz.4.1725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31d3c70299 code=0x0 [ 430.944578][T10117] loop2: detected capacity change from 0 to 64 [ 431.027905][ T4827] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x31, skipping [ 431.071891][ T4827] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 431.081975][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 431.093955][ T4827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.107504][ T4827] usb 4-1: config 0 descriptor?? [ 431.225755][T10123] loop2: detected capacity change from 0 to 1024 [ 431.285019][T10123] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,data_err=ignore,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 431.616378][T10128] input: syz0 as /devices/virtual/input/input27 [ 432.288211][ T4827] ath6kl: Failed to submit usb control message: -110 [ 432.360425][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.374639][ T4827] ath6kl: unable to send the bmi data to the device: -110 [ 432.383608][ T4827] ath6kl: Unable to send get target info: -110 [ 432.398613][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.426027][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.496049][ T4827] ath6kl: Failed to init ath6kl core: -110 [ 432.576273][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.586520][ T4827] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 432.617549][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.629190][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.659869][T10135] loop4: detected capacity change from 0 to 128 [ 432.678414][ T4827] usb 4-1: USB disconnect, device number 22 [ 432.741685][T10135] hpfs: Bad magic ... probably not HPFS [ 432.786407][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.805996][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.816769][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.940144][T10135] nbd4: detected capacity change from 0 to 2199023255576 [ 432.942241][ T6210] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 432.952353][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.967256][ T263] block nbd4: Send control failed (result -89) [ 432.973453][ T263] block nbd4: Request send failed, requeueing [ 432.980314][ T263] block nbd4: Dead connection, failed to find a fallback [ 432.980446][ T3576] block nbd4: Receive control failed (result -32) [ 432.987422][ T263] block nbd4: shutting down sockets [ 433.002422][ T7892] ldm_validate_partition_table(): Disk read failed. [ 433.014033][ T7892] Dev nbd4: unable to read RDB block 0 [ 433.022454][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.028624][ T7892] nbd4: unable to read partition table [ 433.036501][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.055099][T10137] ldm_validate_partition_table(): Disk read failed. [ 433.065039][T10137] Dev nbd4: unable to read RDB block 0 [ 433.072531][T10137] nbd4: unable to read partition table [ 433.100514][ T7892] ldm_validate_partition_table(): Disk read failed. [ 433.113664][ T7892] Dev nbd4: unable to read RDB block 0 [ 433.120423][ T7892] nbd4: unable to read partition table [ 433.146365][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.165793][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.186746][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.236106][ T6210] usb 3-1: Using ep0 maxpacket: 8 [ 433.306538][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.322017][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.338856][T10147] loop3: detected capacity change from 0 to 2048 [ 433.345341][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 433.366321][ T6210] usb 3-1: config 0 has no interfaces? [ 433.415746][T10147] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 433.463443][T10149] loop4: detected capacity change from 0 to 2048 [ 433.494902][T10150] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 433.526326][ T6210] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 433.588109][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 433.606262][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.632430][ T7] usb 1-1: Product: syz [ 433.673016][ T7] usb 1-1: Manufacturer: syz [ 433.693823][ T7] usb 1-1: SerialNumber: syz [ 433.708525][ T6210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.717111][ T6210] usb 3-1: Product: syz [ 433.721370][ T6210] usb 3-1: Manufacturer: syz [ 433.727451][ T6210] usb 3-1: SerialNumber: syz [ 433.733454][ T6210] r8152-cfgselector 3-1: config 0 descriptor?? [ 433.760628][T10149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 433.911501][T10141] loop1: detected capacity change from 0 to 32768 [ 434.150626][ T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.237888][ T7] usb 1-1: USB disconnect, device number 22 [ 434.284409][ T7] usblp0: removed [ 434.326125][T10141] XFS (loop1): Mounting V5 Filesystem [ 434.420782][T10153] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 434.435089][ T6210] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 434.442961][T10153] File: /14/file1/bus PID: 10153 Comm: syz.4.1734 [ 434.499250][ T3693] usb 3-1: config 0 descriptor?? [ 434.501159][T10153] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 434.522619][T10153] File: /14/file1/bus PID: 10153 Comm: syz.4.1734 [ 434.567480][T10141] XFS (loop1): Ending clean mount [ 434.586806][T10141] XFS (loop1): Quotacheck needed: Please wait. [ 434.613585][T10167] loop3: detected capacity change from 0 to 64 [ 434.635035][ T3609] usb 3-1: USB disconnect, device number 15 [ 434.646320][T10141] XFS (loop1): Quotacheck: Done. [ 434.657854][ T3693] usb 3-1: can't set config #0, error -71 [ 434.684292][T10167] hfs: creator requires a 4 character value [ 434.701711][T10167] hfs: unable to parse mount options [ 434.737093][ T7] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 434.820988][ T7572] XFS (loop1): Unmounting Filesystem [ 435.000282][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 435.021728][T10177] loop3: detected capacity change from 0 to 64 [ 435.186409][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 435.396463][ T7] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 435.415799][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.429150][T10184] loop3: detected capacity change from 0 to 128 [ 435.446587][ T7] usb 1-1: Product: syz [ 435.456362][ T7] usb 1-1: Manufacturer: syz [ 435.468500][ T7] usb 1-1: SerialNumber: syz [ 435.492781][ T7] usb 1-1: config 0 descriptor?? [ 435.498574][T10186] program syz.1.1738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.506337][T10184] hpfs: Bad magic ... probably not HPFS [ 435.511024][T10186] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 435.546444][T10160] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 435.605888][T10191] nbd3: detected capacity change from 0 to 2199023255576 [ 435.637323][ T263] block nbd3: Send control failed (result -89) [ 435.647368][ T263] block nbd3: Request send failed, requeueing [ 435.653599][ T263] block nbd3: Dead connection, failed to find a fallback [ 435.653719][ T3576] block nbd3: Receive control failed (result -32) [ 435.661218][ T263] block nbd3: shutting down sockets [ 435.673096][ T263] print_req_error: 90 callbacks suppressed [ 435.673110][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.692495][ T263] buffer_io_error: 88 callbacks suppressed [ 435.692512][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.706749][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.717691][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.734845][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.746142][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.754181][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.765038][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.785110][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.796462][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.804655][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.815630][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.823646][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.834581][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.851697][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.862780][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.870754][ T7729] ldm_validate_partition_table(): Disk read failed. [ 435.922221][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.933341][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.942164][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 435.953316][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 435.965617][ T7729] Dev nbd3: unable to read RDB block 0 [ 435.999430][ T7729] nbd3: unable to read partition table [ 436.065802][T10191] ldm_validate_partition_table(): Disk read failed. [ 436.107292][T10191] Dev nbd3: unable to read RDB block 0 [ 436.135632][T10191] nbd3: unable to read partition table [ 436.144738][T10199] bond0: (slave veth0_to_bond): Error: Device can not be enslaved while up [ 436.180535][ T7729] ldm_validate_partition_table(): Disk read failed. [ 436.198353][ T7729] Dev nbd3: unable to read RDB block 0 [ 436.215590][ T7729] nbd3: unable to read partition table [ 436.933689][T10208] loop3: detected capacity change from 0 to 64 [ 437.119129][T10208] hfs: creator requires a 4 character value [ 437.126082][T10208] hfs: unable to parse mount options [ 437.199766][T10215] loop4: detected capacity change from 0 to 2048 [ 437.355744][T10215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.822407][T10215] UDF-fs: incorrect filename length (10) [ 438.162433][ T3609] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 438.200556][ T3612] usb 1-1: USB disconnect, device number 23 [ 438.676056][ T3609] usb 3-1: Using ep0 maxpacket: 8 [ 438.846719][ T3609] usb 3-1: config 0 has no interfaces? [ 439.048206][ T3609] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 439.086998][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.093849][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.202633][ T3609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.449189][ T3609] usb 3-1: Product: syz [ 439.453407][ T3609] usb 3-1: Manufacturer: syz [ 439.459233][ T3609] usb 3-1: SerialNumber: syz [ 439.465386][ T3609] r8152-cfgselector 3-1: config 0 descriptor?? [ 439.480294][T10235] trusted_key: encrypted_key: key trusted:syz not found [ 439.746742][ T3609] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 439.774043][T10242] loop4: detected capacity change from 0 to 4096 [ 439.856845][T10242] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 439.940525][T10242] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 439.957654][ T3609] usb 3-1: USB disconnect, device number 16 [ 439.966457][T10247] loop1: detected capacity change from 0 to 64 [ 439.992861][T10247] hfs: creator requires a 4 character value [ 440.002261][T10247] hfs: unable to parse mount options [ 440.007836][T10242] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 440.036116][T10242] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 440.065691][T10242] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 440.088408][T10242] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 440.124060][T10242] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 440.154866][T10242] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 440.164174][T10242] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 440.235386][T10242] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 440.262504][T10242] ntfs: volume version 3.1. [ 440.496194][ T6210] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 440.555113][T10250] loop3: detected capacity change from 0 to 40427 [ 440.566025][ T3609] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 440.610800][T10262] loop4: detected capacity change from 0 to 256 [ 440.633383][T10250] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 440.641670][T10250] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 440.655522][T10250] F2FS-fs (loop3): Found nat_bits in checkpoint [ 440.742238][T10262] attempt to access beyond end of device [ 440.742238][T10262] loop4: rw=2049, want=260, limit=256 [ 440.745449][T10250] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 440.753461][ T6210] usb 1-1: Using ep0 maxpacket: 32 [ 440.766768][T10250] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 440.861997][ T3612] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 440.879747][T10268] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 440.893692][ T6210] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 440.942032][ T9585] attempt to access beyond end of device [ 440.942032][ T9585] loop3: rw=2049, want=45112, limit=40427 [ 440.976481][ T3609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 440.996154][ T3609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.015984][ T3609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.066323][ T6210] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 441.075399][ T6210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.093951][ T6210] usb 1-1: Product: syz [ 441.109329][ T6210] usb 1-1: Manufacturer: syz [ 441.118312][ T6210] usb 1-1: SerialNumber: syz [ 441.124875][ T6210] usb 1-1: config 0 descriptor?? [ 441.136278][ T3609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.146467][T10252] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 441.160983][ T3609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.200924][ T3609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.256292][ T3612] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 441.281915][ T3612] usb 3-1: config 0 has no interface number 0 [ 441.296163][ T3612] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.336291][ T3609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.354078][ T3612] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.358419][ T3609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.384282][ T3609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.476933][ T3612] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 441.496144][ T3612] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 441.511287][ T3612] usb 3-1: Manufacturer: syz [ 441.527166][ T3612] usb 3-1: config 0 descriptor?? [ 441.536424][ T3609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.548932][ T3609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.560596][ T3609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.666318][ T3609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.690209][ T3609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.700535][ T3609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.806312][ T3609] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 441.820750][ T3609] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 441.842230][ T3609] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.062177][ T3609] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 442.074787][ T3609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.089865][ T3609] usb 2-1: Product: syz [ 442.094179][ T3609] usb 2-1: Manufacturer: syz [ 442.101961][ T3609] usb 2-1: SerialNumber: syz [ 442.170439][ T3612] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.000A/input/input28 [ 442.381532][ T3609] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 442.400448][ T3612] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18 [ 442.452022][ T3612] usb 3-1: USB disconnect, device number 17 [ 442.629702][ T3609] usb 2-1: USB disconnect, device number 14 [ 442.658795][ T3609] usblp0: removed [ 443.061935][T10286] loop2: detected capacity change from 0 to 2048 [ 443.099834][T10289] loop3: detected capacity change from 0 to 2048 [ 443.125821][T10290] loop4: detected capacity change from 0 to 4096 [ 443.151142][T10289] loop3: p1 < > p4 [ 443.160312][T10289] loop3: p4 size 8388608 extends beyond EOD, truncated [ 443.200166][T10290] ntfs: volume version 3.1. [ 443.205026][T10286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.228709][ T3609] usb 1-1: USB disconnect, device number 24 [ 443.281986][T10294] loop0: detected capacity change from 0 to 512 [ 443.389565][T10294] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1782: casefold flag without casefold feature [ 443.457148][T10294] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.1782: missing EA_INODE flag [ 443.495675][T10294] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1782: error while reading EA inode 2 err=-117 [ 443.508290][ T7784] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 443.511648][T10294] EXT4-fs (loop0): 1 orphan inode deleted [ 443.557786][T10294] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 443.635489][T10006] udevd[10006]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 443.650699][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 443.721080][ T7729] udevd[7729]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 443.725549][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 443.746125][T10294] syz.0.1782 (pid 10294) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 443.766190][ T7784] usb 2-1: Using ep0 maxpacket: 8 [ 443.800176][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 443.891092][ T7784] usb 2-1: config 0 has no interfaces? [ 444.476112][ T3609] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 444.516283][ T7784] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 444.551357][ T7784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.571802][ T7784] usb 2-1: Product: syz [ 444.580997][ T7784] usb 2-1: Manufacturer: syz [ 444.585634][ T7784] usb 2-1: SerialNumber: syz [ 444.618736][ T7784] r8152-cfgselector 2-1: config 0 descriptor?? [ 444.866229][ T4822] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 444.886703][ T7784] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 444.906375][ T3609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.918387][ T3609] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.942157][ T3609] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.956068][ T3609] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.965313][ T3609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.987419][ T3609] usb 4-1: config 0 descriptor?? [ 445.018093][T10325] loop0: detected capacity change from 0 to 2048 [ 445.082653][T10325] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 445.102738][ T7784] usb 2-1: USB disconnect, device number 15 [ 445.143803][T10327] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.406149][ T4822] usb 3-1: config 0 has an invalid interface number: 18 but max is 0 [ 445.414868][ T4822] usb 3-1: config 0 has no interface number 0 [ 445.421998][ T4822] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.433143][ T4822] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.081439][ T3609] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 446.093993][ T3609] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 446.120443][ T3609] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 446.206414][ T4822] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 446.225110][ T4822] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 446.243944][ T4822] usb 3-1: Manufacturer: syz [ 446.272627][ T4822] usb 3-1: config 0 descriptor?? [ 446.610896][T10339] loop0: detected capacity change from 0 to 2048 [ 447.112883][ T3609] usb 4-1: USB disconnect, device number 23 [ 447.177235][T10342] loop0: p1 < > p4 [ 447.353771][T10342] loop0: p4 size 8388608 extends beyond EOD, truncated [ 448.024886][T10339] loop0: p1 < > p4 [ 448.041019][T10339] loop0: p4 size 8388608 extends beyond EOD, truncated [ 448.244209][ T4822] usbhid 3-1:0.18: can't add hid device: -71 [ 448.294192][ T3027] loop0: p1 < > p4 [ 448.298732][ T4822] usbhid: probe of 3-1:0.18 failed with error -71 [ 448.308465][ T3027] loop0: p4 size 8388608 extends beyond EOD, truncated [ 449.052385][ T4822] usb 3-1: USB disconnect, device number 18 [ 449.060095][T10369] loop1: detected capacity change from 0 to 2048 [ 449.122862][T10369] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 449.190217][T10006] udevd[10006]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 449.202580][ T7729] udevd[7729]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 449.232035][T10379] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 449.460416][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 449.460433][ T26] audit: type=1800 audit(1722013411.379:223): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1802" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 450.090188][T10006] udevd[10006]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 450.105603][ T7729] udevd[7729]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 450.317339][ T7729] udevd[7729]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 450.321924][T10006] udevd[10006]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 450.529201][T10402] loop2: detected capacity change from 0 to 16 [ 450.565849][T10402] erofs: (device loop2): mounted with root inode @ nid 36. [ 450.616144][ T3612] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 450.859851][T10417] loop3: detected capacity change from 0 to 512 [ 451.086373][ T3612] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 451.117893][ T3612] usb 1-1: config 0 has no interface number 0 [ 451.144540][ T3612] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.479274][ T3612] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.567195][ T3612] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 451.586936][ T3612] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 451.595318][ T3612] usb 1-1: Manufacturer: syz [ 451.697084][ T3612] usb 1-1: config 0 descriptor?? [ 452.302903][ T26] audit: type=1800 audit(1722013414.219:224): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1821" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 452.353866][T10427] loop4: detected capacity change from 0 to 256 [ 452.842271][ T3612] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.000C/input/input29 [ 452.959226][ T3612] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 453.629693][ T3612] usb 1-1: USB disconnect, device number 25 [ 454.247696][T10457] loop4: detected capacity change from 0 to 256 [ 458.269203][T10468] loop3: detected capacity change from 0 to 1024 [ 458.301592][T10470] loop0: detected capacity change from 0 to 512 [ 459.837955][T10488] loop4: detected capacity change from 0 to 2048 [ 459.910428][T10494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 459.931269][T10488] loop4: p1 < > p4 [ 459.932700][T10494] netlink: 'syz.1.1841': attribute type 25 has an invalid length. [ 459.939491][ T26] audit: type=1800 audit(1722013421.849:225): pid=10491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1838" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 459.974455][T10488] loop4: p4 size 8388608 extends beyond EOD, truncated [ 460.003330][T10494] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.013088][T10494] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.022008][T10494] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.030780][T10494] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.545459][T10006] udevd[10006]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 460.560069][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 460.601435][T10516] Cannot find add_set index 0 as target [ 460.673855][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 460.893948][T10006] udevd[10006]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 460.910594][ T7892] udevd[7892]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 460.980732][T10523] program syz.3.1852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.229914][T10528] loop3: detected capacity change from 0 to 4096 [ 461.389794][T10528] ntfs3: loop3: Failed to load $MFT. [ 461.474618][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'. [ 461.793913][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1861'. [ 461.819535][T10550] netlink: 'syz.0.1861': attribute type 25 has an invalid length. [ 461.878251][T10550] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.887106][T10550] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.895788][T10550] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.905240][T10550] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.985525][T10511] loop2: detected capacity change from 0 to 32768 [ 462.275769][T10511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1848 (10511) [ 462.858642][T10511] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 462.886297][T10511] BTRFS info (device loop2): using free space tree [ 462.908363][T10511] BTRFS info (device loop2): has skinny extents [ 462.974595][T10571] Cannot find add_set index 0 as target [ 463.082890][T10565] loop3: detected capacity change from 0 to 4096 [ 463.124409][T10582] MPTCP: kernel_bind error, err=-22 [ 463.152340][T10565] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 463.180324][T10511] BTRFS info (device loop2): enabling ssd optimizations [ 463.235277][T10565] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 463.272982][T10511] BTRFS error (device loop2): balance: invalid convert data profile raid1c3 [ 463.320956][T10565] ntfs3: loop3: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 463.416904][ T26] audit: type=1800 audit(1722013425.339:226): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1875" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 463.817567][T10613] sctp: [Deprecated]: syz.3.1878 (pid 10613) Use of int in max_burst socket option. [ 463.817567][T10613] Use struct sctp_assoc_value instead [ 464.073080][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 464.097980][T10621] netlink: 'syz.4.1879': attribute type 25 has an invalid length. [ 464.145991][T10621] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.155104][T10621] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.164019][T10621] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.172756][T10621] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.613743][T10639] loop0: detected capacity change from 0 to 1024 [ 464.872986][T10639] hfsplus: invalid extended attribute record [ 465.033473][ T302] hfsplus: b-tree write err: -5, ino 8 [ 466.075397][T10651] loop4: detected capacity change from 0 to 4096 [ 466.483221][ T9523] ntfs3: loop4: failed to convert name for inode 1e. [ 466.496918][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 466.502868][T10675] loop2: detected capacity change from 0 to 1024 [ 466.512088][T10641] loop3: detected capacity change from 0 to 32768 [ 466.521293][ T9523] ntfs3: loop4: failed to convert name for inode 1e. [ 466.530123][T10676] netlink: 'syz.1.1899': attribute type 25 has an invalid length. [ 466.621599][T10641] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1886 (10641) [ 466.856628][T10675] hfsplus: invalid extended attribute record [ 466.951851][ T3693] hfsplus: b-tree write err: -5, ino 8 [ 467.166879][T10641] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 467.190347][T10641] BTRFS info (device loop3): using free space tree [ 467.207270][T10641] BTRFS info (device loop3): has skinny extents [ 467.280969][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.383610][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.504814][T10699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 467.627275][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.713166][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.721161][T10641] BTRFS error (device loop3): open_ctree failed [ 467.906974][T10725] loop0: detected capacity change from 0 to 8192 [ 468.010510][T10725] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 468.020802][T10725] REISERFS (device loop0): using ordered data mode [ 468.056469][T10725] reiserfs: using flush barriers [ 468.112253][T10725] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 468.162877][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.184715][T10725] REISERFS (device loop0): checking transaction log (loop0) [ 468.273582][T10727] loop1: detected capacity change from 0 to 16 [ 468.312363][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.375206][T10736] loop2: detected capacity change from 0 to 4096 [ 468.393772][T10727] erofs: (device loop1): mounted with root inode @ nid 36. [ 468.531884][T10736] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 468.546499][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.611269][T10725] REISERFS (device loop0): Using tea hash to sort names [ 468.619423][T10736] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 468.637381][T10725] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 468.679203][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.688205][T10736] ntfs3: loop2: ino=21, "bus" The size of extended attributes must not exceed 64KiB [ 468.996441][T10705] chnl_net:caif_netlink_parms(): no params data found [ 469.555266][T10749] loop3: detected capacity change from 0 to 32768 [ 469.623815][ T1078] Bluetooth: hci0: command 0x0409 tx timeout [ 469.715247][T10754] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.972945][T10705] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.668400][T10705] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.732826][T10705] device bridge_slave_0 entered promiscuous mode [ 470.749758][T10705] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.757571][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.848520][T10705] device bridge_slave_1 entered promiscuous mode [ 470.943102][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1923'. [ 470.946323][ T3643] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 471.097068][T10705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.175003][T10705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.236233][ T3643] usb 2-1: Using ep0 maxpacket: 32 [ 471.284473][T10789] loop0: detected capacity change from 0 to 512 [ 471.325512][T10705] team0: Port device team_slave_0 added [ 471.353502][T10784] loop2: detected capacity change from 0 to 8192 [ 471.360409][ T3643] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.375569][T10705] team0: Port device team_slave_1 added [ 471.381714][ T3643] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.408425][ T3643] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.455219][ T3643] usb 2-1: config 0 descriptor?? [ 471.482642][T10789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 471.517267][ T3643] hub 2-1:0.0: USB hub found [ 471.522034][T10789] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038 (0x7fffffff) [ 471.535837][T10705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.543137][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.551267][T10784] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 471.645701][T10789] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 471.683144][T10705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.694816][ T3613] Bluetooth: hci0: command 0x041b tx timeout [ 471.706995][T10784] REISERFS (device loop2): using ordered data mode [ 471.713524][T10784] reiserfs: using flush barriers [ 471.719708][T10789] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 28 [ 471.733985][T10784] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 471.741949][ T3643] hub 2-1:0.0: 1 port detected [ 471.755642][ T26] audit: type=1804 audit(1722013433.669:227): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1927" name="/newroot/202/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 471.764820][T10779] loop3: detected capacity change from 0 to 32768 [ 471.787745][T10784] REISERFS (device loop2): checking transaction log (loop2) [ 471.805371][T10705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.821021][T10789] EXT4-fs (loop0): This should not happen!! Data will be lost [ 471.821021][T10789] [ 471.832668][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.886327][T10789] EXT4-fs (loop0): Total free blocks count 0 [ 471.899921][T10789] EXT4-fs (loop0): Free/Dirty block details [ 471.910739][T10705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.921744][T10779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1925 (10779) [ 471.940526][T10789] EXT4-fs (loop0): free_blocks=65280 [ 471.957503][T10789] EXT4-fs (loop0): dirty_blocks=7 [ 471.962904][T10789] EXT4-fs (loop0): Block reservation details [ 472.002085][T10779] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 472.021901][T10789] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 472.045391][T10784] REISERFS (device loop2): Using tea hash to sort names [ 472.046024][T10779] BTRFS info (device loop3): using free space tree [ 472.070900][T10784] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 472.088839][T10705] device hsr_slave_0 entered promiscuous mode [ 472.096506][T10779] BTRFS info (device loop3): has skinny extents [ 472.110821][T10705] device hsr_slave_1 entered promiscuous mode [ 472.128829][T10705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.137462][T10705] Cannot create hsr debugfs directory [ 472.448863][T10824] netlink: 'syz.0.1928': attribute type 32 has an invalid length. [ 472.507155][T10779] BTRFS info (device loop3): enabling ssd optimizations [ 472.657529][T10779] BTRFS error (device loop3): balance: invalid convert data profile raid1c3 [ 472.907374][ T3613] usb 2-1-port1: config error [ 473.026315][ T3613] usb 2-1-port1: cannot disable (err = -71) [ 473.251320][ T144] device hsr_slave_0 left promiscuous mode [ 473.267315][ T144] device hsr_slave_1 left promiscuous mode [ 473.291900][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.328740][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.566847][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.574766][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.597408][ T144] device bridge_slave_1 left promiscuous mode [ 473.625707][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.665298][ T144] device bridge_slave_0 left promiscuous mode [ 473.666190][ T13] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 473.674647][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.719649][ T144] device veth1_macvtap left promiscuous mode [ 473.725724][ T144] device veth0_macvtap left promiscuous mode [ 473.735562][T10867] loop0: detected capacity change from 0 to 512 [ 473.742434][ T144] device veth1_vlan left promiscuous mode [ 473.748324][ T144] device veth0_vlan left promiscuous mode [ 473.766100][ T3612] Bluetooth: hci0: command 0x040f tx timeout [ 473.797307][ T4822] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 473.872448][T10867] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 473.899555][T10867] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038 (0x7fffffff) [ 473.947336][ T3610] usb 2-1: USB disconnect, device number 16 [ 473.956033][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 473.999166][T10867] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 474.013761][T10857] loop1: detected capacity change from 0 to 32768 [ 474.035651][T10867] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 7 with error 28 [ 474.055289][T10867] EXT4-fs (loop0): This should not happen!! Data will be lost [ 474.055289][T10867] [ 474.065574][ T26] audit: type=1804 audit(1722013435.969:228): pid=10870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1938" name="/newroot/207/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 474.080893][T10867] EXT4-fs (loop0): Total free blocks count 0 [ 474.103620][T10867] EXT4-fs (loop0): Free/Dirty block details [ 474.110150][ T13] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 474.122677][T10867] EXT4-fs (loop0): free_blocks=65280 [ 474.129661][T10867] EXT4-fs (loop0): dirty_blocks=7 [ 474.132893][ T13] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.148106][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 474.159072][ T13] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.169798][ T13] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.177911][T10867] EXT4-fs (loop0): Block reservation details [ 474.186634][ T13] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.202648][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.213110][T10867] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 474.225785][T10857] XFS (loop1): Mounting V5 Filesystem [ 474.236778][ T4822] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 474.246607][ T4822] usb 4-1: config 0 has no interface number 0 [ 474.252840][ T4822] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.278885][ T4822] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.334151][ T144] team0 (unregistering): Port device team_slave_1 removed [ 474.360685][ T144] team0 (unregistering): Port device team_slave_0 removed [ 474.372410][ T4822] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 474.382865][ T4822] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 474.383470][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.391477][ T4822] usb 4-1: Manufacturer: syz [ 474.406844][ T4822] usb 4-1: config 0 descriptor?? [ 474.474341][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.474916][T10857] XFS (loop1): Ending clean mount [ 474.516203][ T13] usb 3-1: GET_CAPABILITIES returned 0 [ 474.521722][ T13] usbtmc 3-1:16.0: can't read capabilities [ 474.537501][T10880] loop0: detected capacity change from 0 to 256 [ 474.625698][ T7572] XFS (loop1): Unmounting Filesystem [ 474.803130][ T144] bond0 (unregistering): Released all slaves [ 475.071299][ T3614] usb 3-1: USB disconnect, device number 19 [ 475.809493][ T4822] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000D/input/input30 [ 475.846331][ T3643] Bluetooth: hci0: command 0x0419 tx timeout [ 475.895343][T10705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.911421][T10705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 475.938221][ T4822] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 476.019012][T10705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.089089][T10705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.328744][ T4822] usb 4-1: USB disconnect, device number 24 [ 477.103495][T10886] loop0: detected capacity change from 0 to 32768 [ 477.216662][T10886] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1941 (10886) [ 477.383253][T10705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.395020][T10886] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 477.425606][T10886] BTRFS info (device loop0): using free space tree [ 477.445035][T10886] BTRFS info (device loop0): has skinny extents [ 477.447323][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.486843][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.555471][T10705] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.592694][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.613151][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.636998][T10889] loop2: detected capacity change from 0 to 40427 [ 477.667035][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.674138][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.711875][ T3643] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 477.788513][T10889] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 477.822183][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.848506][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.857831][T10889] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 477.866215][T10886] BTRFS info (device loop0): enabling ssd optimizations [ 477.887841][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.931732][T10889] F2FS-fs (loop2): invalid crc value [ 477.937655][T10889] F2FS-fs (loop2): Wrong cp_pack_start_sum: 1 [ 477.943784][T10889] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 477.956425][T10886] BTRFS error (device loop0): balance: invalid convert data profile raid1c3 [ 477.956657][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.972210][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.980410][ T3643] usb 4-1: Using ep0 maxpacket: 32 [ 478.039371][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.073354][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.116392][ T3643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.124908][T10905] loop1: detected capacity change from 0 to 32768 [ 478.152120][T10705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.174748][ T3643] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 478.192009][ T3643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.221797][T10705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.234228][ T3643] usb 4-1: config 0 descriptor?? [ 478.275727][T10905] gfs2: fsid=#.!%.'\': Trying to join cluster "lock_nolock", "#.!%.'\'" [ 478.317767][ T3643] hub 4-1:0.0: USB hub found [ 478.325467][T10905] gfs2: fsid=#.!%.'\': Now mounting FS (format 1801)... [ 478.332618][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.363366][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.389071][T10905] gfs2: fsid=#.!%.'\'.s: journal 0 mapped with 18 extents in 0ms [ 478.425946][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.447123][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.469556][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 478.501021][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.526219][ T3643] hub 4-1:0.0: 1 port detected [ 478.542189][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 478.576947][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.620782][T10905] gfs2: fsid=#.!%.'\'.s: first mount done, others may mount [ 478.836256][T10705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.970698][T10963] loop2: detected capacity change from 0 to 1024 [ 479.125071][T10963] EXT4-fs (loop2): Invalid want_extra_isize 3 [ 479.256392][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.265469][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.278223][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.285731][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.322969][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.342635][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.468391][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.512314][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.567045][T10705] device veth0_vlan entered promiscuous mode [ 479.581732][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1949'. [ 479.613443][T10705] device veth1_vlan entered promiscuous mode [ 479.677928][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.696831][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.705044][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.722458][ T7786] usb 4-1: USB disconnect, device number 25 [ 479.728721][ T7781] usb 4-1-port1: config error [ 479.755498][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.801419][T10705] device veth0_macvtap entered promiscuous mode [ 479.845800][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.857003][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.893050][T10705] device veth1_macvtap entered promiscuous mode [ 479.915397][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.939445][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.980246][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.038931][T11000] 9pnet: Insufficient options for proto=fd [ 480.047077][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.079015][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1952'. [ 480.086082][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.116357][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.130847][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.168114][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.213327][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.234997][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.249153][ T3576] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 480.254501][T10705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.346605][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.355335][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.364582][ T4822] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 480.393767][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.395473][T11008] loop2: detected capacity change from 0 to 64 [ 480.417015][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.443540][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.464531][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.487249][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.507854][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.529946][T10705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.550696][T10705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.573345][T10705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.589840][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1953'. [ 480.610765][T11009] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.619814][T11009] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.628805][T11009] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.638052][T11009] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.659236][ T4822] usb 1-1: Using ep0 maxpacket: 8 [ 480.661120][T11009] device vxlan0 entered promiscuous mode [ 480.706898][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.727773][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.748755][T10705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.769789][T10705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.779152][ T4822] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 480.788071][ T4822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 480.798484][T10705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.813136][ T4822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 480.823422][T10705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.834503][ T4822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 480.846869][ T4822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.873207][ T4822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 480.885399][ T4822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.896061][ T6223] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 481.020533][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.046334][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.083226][ T7784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.104249][ T7921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.114843][ T7921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.157752][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.186470][ T4822] usb 1-1: GET_CAPABILITIES returned 0 [ 481.192010][ T4822] usbtmc 1-1:16.0: can't read capabilities [ 481.296314][ T6223] usb 3-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 481.326119][ T6223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.373762][ T6223] usb 3-1: config 0 descriptor?? [ 481.406543][ T4822] usb 1-1: USB disconnect, device number 26 [ 481.439940][ T6223] r8712u: register rtl8712_netdev_ops to netdev_ops [ 481.466312][ T6223] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 481.687372][ T6223] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 481.694029][ T6223] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 481.722178][ T6223] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 481.748920][ T6223] usb 3-1: USB disconnect, device number 20 [ 481.893966][T11029] loop4: detected capacity change from 0 to 256 [ 482.009681][T11031] loop0: detected capacity change from 0 to 256 [ 482.060584][T11029] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 482.172301][T11029] exFAT-fs (loop4): hint_cluster is invalid (33) [ 482.217236][T11029] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 482.260409][T11029] exFAT-fs (loop4): Filesystem has been set read-only [ 482.280647][T11029] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880735e21e0 iblock : 9, err : -5) [ 482.324548][T11029] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 482.407277][T11033] Invalid ELF header len 1 [ 482.438313][ T26] audit: type=1804 audit(1722013444.309:229): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1963" name="/newroot/212/bus/bus" dev="loop0" ino=1048850 res=1 errno=0 [ 482.891177][T11012] loop3: detected capacity change from 0 to 32768 [ 482.947853][T11029] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) [ 483.053178][T11012] gfs2: fsid=#.!%.'\': Trying to join cluster "lock_nolock", "#.!%.'\'" [ 483.100759][T11012] gfs2: fsid=#.!%.'\': Now mounting FS (format 1801)... [ 483.145198][T11012] gfs2: fsid=#.!%.'\'.s: journal 0 mapped with 18 extents in 0ms [ 483.181964][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1966'. [ 483.254767][T11041] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.263828][T11041] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.272853][T11041] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.281703][T11041] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.387440][T11041] device vxlan0 entered promiscuous mode [ 483.393053][T11012] gfs2: fsid=#.!%.'\'.s: first mount done, others may mount [ 483.562873][T11027] loop1: detected capacity change from 0 to 40427 [ 483.662758][T11027] F2FS-fs (loop1): invalid crc value [ 483.719252][T11027] F2FS-fs (loop1): Found nat_bits in checkpoint [ 483.816207][T11027] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 484.068877][T11056] loop3: detected capacity change from 0 to 512 [ 484.113684][T11063] loop2: detected capacity change from 0 to 64 [ 484.337269][T11064] input: syz0 as /devices/virtual/input/input31 [ 484.347225][ T26] audit: type=1800 audit(1722013446.179:230): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1961" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 484.818937][T11056] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 484.922630][ T7572] attempt to access beyond end of device [ 484.922630][ T7572] loop1: rw=2049, want=45104, limit=40427 [ 485.180661][ T7781] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 485.257285][T11068] loop0: detected capacity change from 0 to 256 [ 485.685065][T11071] Invalid ELF header len 1 [ 485.756838][ T26] audit: type=1804 audit(1722013447.589:231): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1976" name="/newroot/214/bus/bus" dev="loop0" ino=1048851 res=1 errno=0 [ 485.785840][ T7781] usb 3-1: New USB device found, idVendor=14b2, idProduct=3302, bcdDevice=1b.fe [ 485.983776][ T7781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.357399][ T7781] usb 3-1: config 0 descriptor?? [ 486.418697][ T7781] r8712u: register rtl8712_netdev_ops to netdev_ops [ 486.448510][ T7781] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 486.466280][T11073] sock: sock_set_timeout: `syz.1.1975' (pid 11073) tries to set negative timeout [ 486.566251][T11075] loop3: detected capacity change from 0 to 256 [ 486.581199][T11060] loop4: detected capacity change from 0 to 40427 [ 486.653243][T11060] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 486.672088][ T7781] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 486.681538][T11060] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 486.702203][T11075] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 486.719583][ T7781] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 486.720004][T11060] F2FS-fs (loop4): invalid crc value [ 486.731466][ T7781] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 486.760471][ T7781] usb 3-1: USB disconnect, device number 21 [ 486.770343][T11060] F2FS-fs (loop4): Wrong cp_pack_start_sum: 1 [ 486.774659][T11075] exFAT-fs (loop3): hint_cluster is invalid (33) [ 486.783957][T11060] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 486.809214][T11075] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000020) [ 486.866319][T11075] exFAT-fs (loop3): Filesystem has been set read-only [ 486.894209][T11075] exFAT-fs (loop3): error, failed to bmap (inode : ffff88807361c8e0 iblock : 9, err : -5) [ 486.933206][T11086] loop1: detected capacity change from 0 to 1024 [ 486.963669][T11075] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000020) [ 486.988345][T11075] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000020) [ 487.371085][T11096] loop2: detected capacity change from 0 to 1024 [ 487.628056][T11096] hfsplus: xattr searching failed [ 487.648765][ T26] audit: type=1800 audit(1722013449.569:232): pid=11096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1985" name="bus" dev="loop2" ino=4 res=0 errno=0 [ 487.651824][T11096] hfsplus: catalog searching failed [ 487.770266][T11082] loop0: detected capacity change from 0 to 32768 [ 487.872925][ T7921] hfsplus: b-tree write err: -5, ino 3 [ 487.905858][T11082] gfs2: fsid=#.!%.'\': Trying to join cluster "lock_nolock", "#.!%.'\'" [ 487.944037][ T7641] hfsplus: node 4:3 still has 1 user(s)! [ 487.947327][T11082] gfs2: fsid=#.!%.'\': Now mounting FS (format 1801)... [ 488.047749][T11082] gfs2: fsid=#.!%.'\'.s: journal 0 mapped with 18 extents in 0ms [ 488.160952][T11093] loop4: detected capacity change from 0 to 32768 [ 488.223617][T11093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1986 (11093) [ 488.241075][T11116] loop1: detected capacity change from 0 to 256 [ 488.263454][T11118] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1993'. [ 488.289980][T11082] gfs2: fsid=#.!%.'\'.s: first mount done, others may mount [ 488.304340][T11119] loop2: detected capacity change from 0 to 1024 [ 488.313378][T11093] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 488.323719][T11093] BTRFS info (device loop4): using free space tree [ 488.352220][T11119] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 488.352220][T11119] [ 488.357741][T11116] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 488.376090][T11093] BTRFS info (device loop4): has skinny extents [ 488.382964][T11119] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 488.433480][T11116] exFAT-fs (loop1): hint_cluster is invalid (33) [ 488.458329][T11116] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 488.492657][T11116] exFAT-fs (loop1): Filesystem has been set read-only [ 488.526098][T11116] exFAT-fs (loop1): error, failed to bmap (inode : ffff8880735e2ee0 iblock : 9, err : -5) [ 488.578230][ T13] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 488.602547][T11116] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 488.636291][T11116] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 488.702465][T11093] BTRFS info (device loop4): enabling ssd optimizations [ 488.756264][T11093] BTRFS error (device loop4): balance: invalid convert data profile raid1c3 [ 488.815997][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 488.936298][ T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 489.016002][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 489.066477][ T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.106108][ T7781] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 489.129127][ T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.155878][ T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.172645][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.436201][ T13] usb 4-1: usb_control_msg returned -32 [ 489.452264][ T13] usbtmc 4-1:16.0: can't read capabilities [ 489.527176][ T7781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.549735][ T7781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.570703][ T7781] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.599942][ T7781] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.616056][ T7781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.637702][ T7781] usb 3-1: config 0 descriptor?? [ 489.642701][T11162] loop4: detected capacity change from 0 to 1024 [ 489.806174][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 489.816510][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 489.853376][T11165] usbtmc 4-1:16.0: Unable to send data, error -71 [ 490.859931][T11182] loop1: detected capacity change from 0 to 256 [ 490.926174][ T7781] usbhid 3-1:0.0: can't add hid device: -71 [ 490.932221][ T7781] usbhid: probe of 3-1:0.0 failed with error -71 [ 490.964241][ T7781] usb 3-1: USB disconnect, device number 22 [ 491.012447][T11182] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 491.084408][T11182] exFAT-fs (loop1): hint_cluster is invalid (33) [ 491.096679][T11182] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 491.104702][T11182] exFAT-fs (loop1): Filesystem has been set read-only [ 491.137014][T11182] exFAT-fs (loop1): error, failed to bmap (inode : ffff88807361d5e0 iblock : 9, err : -5) [ 491.157971][T11182] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 491.185479][T11182] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 491.245839][ T7785] usb 4-1: USB disconnect, device number 26 [ 491.750770][T11202] loop1: detected capacity change from 0 to 512 [ 491.844460][T11176] loop4: detected capacity change from 0 to 32768 [ 491.864716][T11211] loop3: detected capacity change from 0 to 1024 [ 492.018218][T11202] EXT4-fs (loop1): Ignoring removed bh option [ 492.024432][T11202] EXT4-fs (loop1): Ignoring removed orlov option [ 492.037132][T11176] gfs2: fsid=#.!%.'\': Trying to join cluster "lock_nolock", "#.!%.'\'" [ 492.058775][T11176] gfs2: fsid=#.!%.'\': Now mounting FS (format 1801)... [ 492.111028][T11202] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 492.240790][T11176] gfs2: fsid=#.!%.'\'.s: journal 0 mapped with 18 extents in 26ms [ 492.849691][T11176] gfs2: fsid=#.!%.'\'.s: first mount done, others may mount [ 493.007377][T11202] loop1: detected capacity change from 0 to 512 [ 493.122275][T11202] EXT4-fs (loop1): orphan cleanup on readonly fs [ 493.273740][T11202] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.2019: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 493.409994][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 493.445810][T11202] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.2019: Bad quota inode: 4, type: 1 [ 493.472280][T11202] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 493.529468][T11202] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 493.548800][T11202] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 493.703807][T11240] loop4: detected capacity change from 0 to 1024 [ 494.057546][T11240] hfsplus: xattr searching failed [ 494.097720][ T26] audit: type=1800 audit(1722013456.019:233): pid=11240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2028" name="bus" dev="loop4" ino=4 res=0 errno=0 [ 494.198160][ T7921] hfsplus: b-tree write err: -5, ino 3 [ 494.206260][T10705] hfsplus: node 4:3 still has 1 user(s)! [ 494.396751][T11249] loop2: detected capacity change from 0 to 1024 [ 494.467765][T11256] loop4: detected capacity change from 0 to 1024 [ 494.478144][T11249] EXT4-fs (loop2): Ignoring removed orlov option [ 494.484527][T11249] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 494.577703][T11244] loop1: detected capacity change from 0 to 32768 [ 494.593937][T11249] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 494.651703][T11244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2030 (11244) [ 494.675649][T11265] sp0: Synchronizing with TNC [ 494.676179][T11263] loop0: detected capacity change from 0 to 1024 [ 494.782581][T11244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 494.796256][T11244] BTRFS info (device loop1): using free space tree [ 494.833826][T11244] BTRFS info (device loop1): has skinny extents [ 494.867818][T11263] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 495.059665][T11286] loop4: detected capacity change from 0 to 2048 [ 495.130407][T11288] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.228729][T11286] NILFS (loop4): error -2 truncating bmap (ino=16) [ 495.256381][ T6221] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 495.307307][T11244] BTRFS info (device loop1): enabling ssd optimizations [ 495.342582][T11286] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 495.454652][T11286] Remounting filesystem read-only [ 495.487833][T11286] NILFS (loop4): error -2 truncating bmap (ino=16) [ 495.721028][ T6221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.732609][ T6221] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.742957][ T6221] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.757071][ T6221] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 495.767467][ T6221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.777892][ T6221] usb 3-1: config 0 descriptor?? [ 495.963255][T10705] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 495.972577][T10705] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 495.980497][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 495.989903][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 496.000659][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 496.010909][T10705] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 496.027030][T10705] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 496.034273][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 496.044432][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 496.056180][T10705] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 496.063508][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 496.087948][T11318] loop3: detected capacity change from 0 to 512 [ 496.201330][T11318] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 496.232303][T11318] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 496.242374][T11318] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 496.259902][T11318] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 496.278512][T11318] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 496.286754][T11318] EXT4-fs (loop3): failed to initialize system zone (-117) [ 496.294216][T11318] EXT4-fs (loop3): mount failed [ 496.312664][ T6221] acrux 0003:1A34:0802.000E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 496.324972][T11326] loop4: detected capacity change from 0 to 1024 [ 496.335694][ T6221] acrux 0003:1A34:0802.000E: no inputs found [ 496.350028][ T6221] acrux 0003:1A34:0802.000E: Failed to enable force feedback support, error: -19 [ 496.374127][T11328] loop1: detected capacity change from 0 to 2048 [ 496.471670][T11328] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value [ 496.523408][ T6221] usb 3-1: USB disconnect, device number 23 [ 497.423168][ C1] vxcan0: j1939_tp_txtimer: 0xffff88805ae98400: tx aborted with unknown reason: -2 [ 497.436644][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888060438000: 0x20000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 497.458879][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805ae98400: 0x20000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 497.566863][T11345] netlink: 'syz.3.2057': attribute type 2 has an invalid length. [ 497.574644][T11345] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2057'. [ 497.603113][T11348] loop2: detected capacity change from 0 to 256 [ 497.905538][T11354] loop1: detected capacity change from 0 to 4096 [ 497.953323][T11354] ntfs: (device loop1): parse_ntfs_boot_sector(): Index record size (512) is smaller than the sector size (2048). This is not supported. Sorry. [ 498.053562][T11359] Invalid ELF header len 1 [ 498.068912][ T26] audit: type=1804 audit(1722013459.959:234): pid=11359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2059" name="/newroot/205/bus/bus" dev="loop2" ino=1048855 res=1 errno=0 [ 498.310216][T11354] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 498.869941][T11363] loop3: detected capacity change from 0 to 8192 [ 498.973340][T11342] loop4: detected capacity change from 0 to 32768 [ 498.984354][T11368] loop0: detected capacity change from 0 to 1024 [ 499.002229][T11363] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 499.118285][T11371] loop1: detected capacity change from 0 to 1024 [ 499.165097][T11363] REISERFS (device loop3): using ordered data mode [ 499.240361][T11342] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2055 (11342) [ 499.274196][T11363] reiserfs: using flush barriers [ 499.288166][T11363] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 499.309166][T11342] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 499.325073][T11342] BTRFS info (device loop4): using free space tree [ 499.332730][T11342] BTRFS info (device loop4): has skinny extents [ 499.340070][T11371] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 499.340592][T11363] REISERFS (device loop3): checking transaction log (loop3) [ 499.719200][T11342] BTRFS info (device loop4): enabling ssd optimizations [ 499.814479][T11398] loop1: detected capacity change from 0 to 2048 [ 499.916890][T11363] REISERFS (device loop3): Using tea hash to sort names [ 499.963851][T11363] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 500.001268][T11398] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value [ 500.156526][T11405] netlink: 'syz.0.2072': attribute type 2 has an invalid length. [ 500.177696][T11405] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2072'. [ 500.483603][ T1390] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.490273][ T1390] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.370173][ T3618] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 501.396219][ T3611] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 501.626103][ T3618] usb 2-1: Using ep0 maxpacket: 32 [ 501.685056][T11422] loop3: detected capacity change from 0 to 32768 [ 501.713867][T11422] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2078 (11422) [ 501.746226][ T3618] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 501.753992][T11422] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 501.758688][ T3618] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 501.765961][T11422] BTRFS info (device loop3): using free space tree [ 501.785896][T11422] BTRFS info (device loop3): has skinny extents [ 501.792867][ T3618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 501.812231][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.812784][ T3618] usb 2-1: config 1 has no interface number 0 [ 501.824290][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.846086][ T3618] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.847331][ T3611] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.868720][ T3618] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 501.876227][ T3611] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 501.898084][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.912383][ T3611] usb 5-1: config 0 descriptor?? [ 501.922095][ T3618] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 501.934175][T11422] BTRFS info (device loop3): enabling ssd optimizations [ 501.979729][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.019813][T11443] loop2: detected capacity change from 0 to 2048 [ 502.034089][ T26] audit: type=1800 audit(1722013463.949:235): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2078" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 502.037832][ T3618] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 502.107629][T11422] loop3: detected capacity change from 32768 to 11 [ 502.139224][T11443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.245121][T11416] udc-core: couldn't find an available UDC or it's busy [ 502.266367][T11416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 502.282635][T11416] udc-core: couldn't find an available UDC or it's busy [ 502.285065][T11422] attempt to access beyond end of device [ 502.285065][T11422] loop3: rw=34817, want=10568, limit=11 [ 502.290041][T11416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 502.327280][T11422] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 502.350162][T11422] BTRFS warning (device loop3): direct IO failed ino 263 rw 1,34817 sector 0x28c8 len 65536 err no 10 [ 502.413204][ T3611] acrux 0003:1A34:0802.000F: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 502.434571][ T3611] acrux 0003:1A34:0802.000F: no inputs found [ 502.456346][ T3611] acrux 0003:1A34:0802.000F: Failed to enable force feedback support, error: -19 [ 502.470832][ T3576] attempt to access beyond end of device [ 502.470832][ T3576] loop3: rw=6145, want=13456, limit=11 [ 502.486772][ T3576] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 502.504529][ T9585] BTRFS: error (device loop3) in __btrfs_run_delayed_items:1089: errno=-5 IO failure [ 502.556067][ T9585] BTRFS info (device loop3): forced readonly [ 502.562538][ T9585] BTRFS warning (device loop3): Skipping commit of aborted transaction. [ 502.571177][ T9585] BTRFS: error (device loop3) in cleanup_transaction:2018: errno=-5 IO failure [ 502.652989][ T3611] usb 5-1: USB disconnect, device number 17 [ 502.687238][ T3618] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 502.912920][ T3691] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 502.964363][ T3691] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 502.986920][ T3691] EXT4-fs (loop2): This should not happen!! Data will be lost [ 502.986920][ T3691] [ 503.002140][ T3691] EXT4-fs (loop2): Total free blocks count 0 [ 503.010046][ T3691] EXT4-fs (loop2): Free/Dirty block details [ 503.024521][ T3691] EXT4-fs (loop2): free_blocks=2415919104 [ 503.030966][ T3691] EXT4-fs (loop2): dirty_blocks=16 [ 503.036995][ T3691] EXT4-fs (loop2): Block reservation details [ 503.043483][ T3691] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 503.262386][T11454] loop4: detected capacity change from 0 to 128 [ 503.362166][T11454] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 503.384203][T11450] loop3: detected capacity change from 0 to 32768 [ 503.593489][T11460] loop4: detected capacity change from 0 to 2048 [ 503.690094][T11456] loop0: detected capacity change from 0 to 8192 [ 503.728372][T11462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.766631][ T3610] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 503.789050][T11460] NILFS (loop4): error -2 truncating bmap (ino=16) [ 503.845833][T11456] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 503.863913][T11456] REISERFS (device loop0): using ordered data mode [ 503.867442][T11464] cgroup: Unexpected value for 'cpuset_v2_mode' [ 503.871312][T11456] reiserfs: using flush barriers [ 503.891593][T11456] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 503.923759][T11460] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 503.944597][T11456] REISERFS (device loop0): checking transaction log (loop0) [ 503.945225][T11452] loop2: detected capacity change from 0 to 32768 [ 503.991626][T11460] Remounting filesystem read-only [ 504.003049][T11467] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0 [ 504.026309][T11460] NILFS (loop4): error -2 truncating bmap (ino=16) [ 504.055293][T11452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2081 (11452) [ 504.170749][T10705] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 504.176379][ T3611] usb 2-1: USB disconnect, device number 17 [ 504.184852][ T3611] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 504.186032][T10705] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 504.205285][T11452] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 504.249481][T11452] BTRFS info (device loop2): using free space tree [ 504.264944][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 504.275816][T11452] BTRFS info (device loop2): has skinny extents [ 504.309050][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 504.342216][T11456] REISERFS (device loop0): Using tea hash to sort names [ 504.353311][T11456] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 504.362582][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 504.396365][T10705] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 504.406920][T10705] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 504.413632][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 504.423190][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 504.432768][T10705] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 504.444241][T10705] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 504.687078][T11452] BTRFS info (device loop2): enabling ssd optimizations [ 505.542240][T11503] loop0: detected capacity change from 0 to 2048 [ 505.661544][T11503] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.141685][ T3610] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 506.506305][ T3610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.545643][ T3610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.581725][ T3610] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.621841][ T3610] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 506.631288][ T3610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.658112][ T3610] usb 4-1: config 0 descriptor?? [ 506.779843][T11506] loop1: detected capacity change from 0 to 40427 [ 506.856908][ T7784] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 506.913182][T11506] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 506.923399][ T144] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 506.936014][T11506] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 506.954014][T11506] F2FS-fs (loop1): invalid crc value [ 506.962191][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 506.964123][T11506] F2FS-fs (loop1): Found nat_bits in checkpoint [ 506.995234][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 506.995234][ T144] [ 507.013727][ T144] EXT4-fs (loop0): Total free blocks count 0 [ 507.023728][ T144] EXT4-fs (loop0): Free/Dirty block details [ 507.034347][ T144] EXT4-fs (loop0): free_blocks=2415919104 [ 507.040438][ T144] EXT4-fs (loop0): dirty_blocks=16 [ 507.045872][ T144] EXT4-fs (loop0): Block reservation details [ 507.054180][T11506] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 507.056864][ T144] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 507.061950][T11506] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 507.135293][ T3610] acrux 0003:1A34:0802.0010: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 507.183115][ T3610] acrux 0003:1A34:0802.0010: no inputs found [ 507.209473][ T3610] acrux 0003:1A34:0802.0010: Failed to enable force feedback support, error: -19 [ 507.276423][ T7784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 507.308113][ T7784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 507.349469][ T4895] usb 4-1: USB disconnect, device number 27 [ 507.351771][ T7784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 507.389315][ T7784] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 507.403420][ T7784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.425504][ T7784] usb 3-1: config 0 descriptor?? [ 507.466100][T11515] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 507.549554][T11527] loop0: detected capacity change from 0 to 256 [ 507.662745][T11527] exfat: Deprecated parameter 'namecase' [ 507.763227][T11527] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 507.938674][ T7784] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 507.960210][ T7784] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 508.037648][ T7784] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 508.396748][ T7784] usb 3-1: USB disconnect, device number 24 [ 509.523975][T11546] loop1: detected capacity change from 0 to 512 [ 509.777540][T11546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 509.847337][T11546] ext4 filesystem being mounted at /231/bus supports timestamps until 2038 (0x7fffffff) [ 509.893492][T11552] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2107'. [ 509.997917][T11552] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.021519][T11552] device bridge1 entered promiscuous mode [ 510.511931][T11543] loop3: detected capacity change from 0 to 32768 [ 510.594209][T11543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2104 (11543) [ 510.702178][T11543] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 510.774658][T11543] BTRFS info (device loop3): using free space tree [ 510.805965][T11543] BTRFS info (device loop3): has skinny extents [ 510.844000][T11573] loop2: detected capacity change from 0 to 2048 [ 510.980343][T11573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.821752][T11543] BTRFS info (device loop3): enabling ssd optimizations [ 512.109384][T11559] loop0: detected capacity change from 0 to 40427 [ 512.234259][T11559] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 512.279134][T11559] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 512.306108][ T4895] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 512.355797][T11605] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2121'. [ 512.376755][T11559] F2FS-fs (loop0): invalid crc value [ 512.383261][T11607] loop4: detected capacity change from 0 to 256 [ 512.430206][T11605] xt_TPROXY: Can be used only with -p tcp or -p udp [ 512.450617][T11559] F2FS-fs (loop0): Found nat_bits in checkpoint [ 512.501384][T11605] device bridge2 entered promiscuous mode [ 512.645537][T11559] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 512.687662][T11615] loop1: detected capacity change from 0 to 256 [ 512.687821][T11559] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 512.966730][ T4895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 513.256040][ T4895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 513.447647][ T4895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.499563][ T4895] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.512402][ T4895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.528606][ T4895] usb 3-1: config 0 descriptor?? [ 513.546386][T11600] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 513.660074][T11618] Invalid ELF header len 1 [ 513.674638][ T26] audit: type=1804 audit(1722013475.559:236): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2123" name="/newroot/237/bus/bus" dev="loop1" ino=1048861 res=1 errno=0 [ 514.353942][T11620] loop3: detected capacity change from 0 to 512 [ 514.417342][ T4895] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 514.436657][ T4895] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 514.465868][ T4895] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 514.612241][T11620] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 514.686625][T11620] ext4 filesystem being mounted at /93/bus supports timestamps until 2038 (0x7fffffff) [ 514.701020][ T1078] usb 3-1: USB disconnect, device number 25 [ 514.843137][T11633] loop1: detected capacity change from 0 to 8192 [ 515.060401][T11633] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 515.076658][T11633] REISERFS (device loop1): using journaled data mode [ 515.083637][T11633] reiserfs: using flush barriers [ 515.121400][T11633] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 515.138218][T11633] REISERFS (device loop1): checking transaction log (loop1) [ 515.175414][T11633] REISERFS (device loop1): Using r5 hash to sort names [ 515.191480][T11633] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 515.246197][T11633] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 515.360437][T11633] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 515.429657][T11633] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 515.484885][T11633] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 515.881666][T11647] loop1: detected capacity change from 0 to 64 [ 516.120756][T11643] loop3: detected capacity change from 0 to 32768 [ 516.254630][T11643] XFS (loop3): Mounting V5 Filesystem [ 516.265405][T11645] loop2: detected capacity change from 0 to 32768 [ 516.266335][T11657] loop1: detected capacity change from 0 to 256 [ 516.333013][T11645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2130 (11645) [ 516.382535][T11643] XFS (loop3): Ending clean mount [ 516.410785][T11645] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 516.455376][T11657] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 516.458356][T11645] BTRFS info (device loop2): using free space tree [ 516.474153][T11645] BTRFS info (device loop2): has skinny extents [ 516.552824][ T26] audit: type=1804 audit(1722013478.469:237): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2129" name="/newroot/94/file1/bus" dev="loop3" ino=4425 res=1 errno=0 [ 516.826282][ T9585] XFS (loop3): Unmounting Filesystem [ 516.835872][T11645] BTRFS info (device loop2): enabling ssd optimizations [ 517.884394][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 517.945578][T11700] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2140'. [ 518.002919][T11700] xt_TPROXY: Can be used only with -p tcp or -p udp [ 518.098364][T11700] device bridge2 entered promiscuous mode [ 518.126888][T11706] loop0: detected capacity change from 0 to 512 [ 518.187774][T11686] loop1: detected capacity change from 0 to 40427 [ 518.235848][T11710] loop2: detected capacity change from 0 to 256 [ 518.242431][T11706] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 518.272350][T11712] loop3: detected capacity change from 0 to 8 [ 518.379486][T11686] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 518.390031][T11686] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 518.404751][T11686] F2FS-fs (loop1): invalid crc value [ 518.621536][T11717] mmap: syz.0.2141 (11717): VmData 164384768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 518.676920][T11712] SQUASHFS error: zstd decompression failed, data probably corrupt [ 518.716185][T11686] F2FS-fs (loop1): Found nat_bits in checkpoint [ 518.783809][T11710] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 518.870713][T11712] SQUASHFS error: Failed to read block 0x4ec: -5 [ 518.983886][T11710] FAT-fs (loop2): Filesystem has been set read-only [ 518.996074][T11712] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 519.048080][T11712] SQUASHFS error: Unable to read inode 0x2011f [ 519.224731][T11686] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 519.237504][T11686] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 519.307496][T11725] 9pnet: Insufficient options for proto=fd [ 519.550035][T11732] loop2: detected capacity change from 0 to 256 [ 519.669555][T11735] loop3: detected capacity change from 0 to 16 [ 520.025507][T11735] erofs: (device loop3): mounted with root inode @ nid 36. [ 520.163893][T11735] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 520.691743][T11735] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851] [ 520.705671][T11735] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 522.615378][T11760] loop2: detected capacity change from 0 to 256 [ 522.719480][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2155'. [ 522.783364][T11760] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 522.807163][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2155'. [ 522.882657][T11760] FAT-fs (loop2): Filesystem has been set read-only [ 522.899069][T11765] : renamed from ipvlan1 [ 523.036235][ T6231] Bluetooth: hci1: command 0x0406 tx timeout [ 523.250717][T11776] loop4: detected capacity change from 0 to 1024 [ 523.457028][T11781] device batadv0 entered promiscuous mode [ 523.493434][T11781] device macsec1 entered promiscuous mode [ 523.504573][T11771] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 523.525244][T11771] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 523.900467][T11781] device batadv0 left promiscuous mode [ 523.961539][T11776] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 524.726152][ T3610] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 524.755636][T11799] loop2: detected capacity change from 0 to 4096 [ 524.888756][T11799] NILFS (loop2): invalid segment: Checksum error in segment payload [ 524.957225][T11799] NILFS (loop2): trying rollback from an earlier position [ 525.961923][T11799] NILFS (loop2): recovery complete [ 526.017110][T11814] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.073581][ T3610] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 526.090649][ T3610] usb 5-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 526.101861][ T3610] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 526.111217][ T3610] usb 5-1: config 0 has no interface number 0 [ 526.121598][ T3610] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 526.131516][ T3610] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 187, changing to 11 [ 526.142943][ T3610] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 34240, setting to 1024 [ 526.162512][ T3610] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.195716][ T3610] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 526.205840][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.217671][ T3610] usb 5-1: config 0 descriptor?? [ 526.263283][ T3610] usb 5-1: can't set config #0, error -71 [ 526.289706][ T3610] usb 5-1: USB disconnect, device number 18 [ 526.292832][T11818] loop1: detected capacity change from 0 to 512 [ 526.340688][T11820] loop2: detected capacity change from 0 to 8 [ 526.388191][T11818] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 526.421592][T11820] SQUASHFS error: zstd decompression failed, data probably corrupt [ 526.451713][T11820] SQUASHFS error: Failed to read block 0x4ec: -5 [ 526.491063][T11820] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 526.520288][T11826] device batadv0 entered promiscuous mode [ 526.532366][T11820] SQUASHFS error: Unable to read inode 0x2011f [ 526.567275][T11826] device macsec1 entered promiscuous mode [ 526.581391][T11826] device batadv0 left promiscuous mode [ 528.357452][T11831] loop2: detected capacity change from 0 to 16 [ 528.788871][T11839] loop4: detected capacity change from 0 to 128 [ 528.830094][T11831] erofs: (device loop2): mounted with root inode @ nid 36. [ 528.854465][T11830] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 528.879211][T11830] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851] [ 528.891591][T11830] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 528.910410][T11830] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 528.920889][T11830] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -35 in[64, 4032] out[1851] [ 528.934793][T11830] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 529.217381][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 529.248261][T11838] netlink: 'syz.3.2182': attribute type 8 has an invalid length. [ 529.819325][T11849] loop1: detected capacity change from 0 to 4096 [ 529.934160][T11849] NILFS (loop1): invalid segment: Checksum error in segment payload [ 529.949792][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'. [ 529.983103][T11849] NILFS (loop1): trying rollback from an earlier position [ 530.067332][T11849] NILFS (loop1): recovery complete [ 530.229351][T11865] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.365717][T11870] loop4: detected capacity change from 0 to 512 [ 531.047765][T11869] loop3: detected capacity change from 0 to 1024 [ 531.053308][T11877] loop2: detected capacity change from 0 to 2048 [ 531.062091][T11870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.099684][T11866] fs-verity: sha512 using implementation "sha512-avx2" [ 531.107611][T11866] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.2190: verity is only allowed on extent-based files [ 531.138875][T11877] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 531.160023][T11869] hfsplus: failed to load catalog file [ 531.375399][T11869] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2192'. [ 532.337181][T11898] tipc: Started in network mode [ 532.345005][T11898] tipc: Node identity f7, cluster identity 4711 [ 532.378496][T11898] tipc: Node number set to 247 [ 532.385394][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2200'. [ 532.406903][T11900] input: syz1 as /devices/virtual/input/input34 [ 532.480394][T11901] netlink: 'syz.3.2200': attribute type 8 has an invalid length. [ 532.611843][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 532.657927][T11912] loop0: detected capacity change from 0 to 1024 [ 532.808253][T11914] loop4: detected capacity change from 0 to 4096 [ 532.864383][T11912] 9pnet: bogus RWRITE count (2 > 1) [ 532.933842][T11914] NILFS (loop4): invalid segment: Checksum error in segment payload [ 532.991988][T11914] NILFS (loop4): trying rollback from an earlier position [ 533.012064][T11919] loop2: detected capacity change from 0 to 256 [ 533.319890][T11914] NILFS (loop4): recovery complete [ 534.168913][T11923] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.230150][T11922] device batadv0 entered promiscuous mode [ 534.255392][T11922] device macsec1 entered promiscuous mode [ 534.283238][T11922] device batadv0 left promiscuous mode [ 534.660399][T11935] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2217'. [ 534.688709][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2214'. [ 534.715183][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2214'. [ 535.023727][T11944] input: syz1 as /devices/virtual/input/input35 [ 535.587872][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.735669][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.994829][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 536.121272][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.148127][T11960] loop0: detected capacity change from 0 to 4096 [ 536.247893][T11960] NILFS (loop0): invalid segment: Checksum error in segment payload [ 536.285108][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.290908][T11960] NILFS (loop0): trying rollback from an earlier position [ 536.381807][T11965] nbd3: detected capacity change from 0 to 12 [ 536.396787][T11960] NILFS (loop0): recovery complete [ 536.414176][ T263] block nbd3: Send control failed (result -89) [ 536.420872][ T263] block nbd3: Request send failed, requeueing [ 536.428864][ T3576] block nbd3: Receive control failed (result -32) [ 536.437600][ T263] block nbd3: Dead connection, failed to find a fallback [ 536.446403][ T263] block nbd3: shutting down sockets [ 536.451614][ T263] print_req_error: 40 callbacks suppressed [ 536.451624][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.468976][ T263] buffer_io_error: 39 callbacks suppressed [ 536.468986][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.492940][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.503826][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.511866][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.516928][T11968] block nbd3: NBD_DISCONNECT [ 536.522745][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.535223][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.546066][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.554357][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.565514][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.573551][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.584396][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.592534][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.603384][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.611447][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.622290][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.630150][ T7892] ldm_validate_partition_table(): Disk read failed. [ 536.648351][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.659762][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.667774][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.678991][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 536.687197][ T7892] Dev nbd3: unable to read RDB block 0 [ 536.699183][ T7892] nbd3: unable to read partition table [ 536.732506][T11967] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.757102][ T7892] nbd3: partition table beyond EOD, truncated [ 536.797662][T11968] block nbd3: Send disconnect failed -89 [ 536.856385][ T7892] ldm_validate_partition_table(): Disk read failed. [ 536.926344][ T7892] Dev nbd3: unable to read RDB block 0 [ 536.935759][ T7892] nbd3: unable to read partition table [ 537.014108][ T7892] nbd3: partition table beyond EOD, truncated [ 537.039887][T11964] ldm_validate_partition_table(): Disk read failed. [ 537.057059][T11964] Dev nbd3: unable to read RDB block 0 [ 537.067908][T11964] nbd3: unable to read partition table [ 537.103541][T11964] nbd3: partition table beyond EOD, truncated [ 537.122851][T11949] chnl_net:caif_netlink_parms(): no params data found [ 537.366654][ T6211] Bluetooth: hci4: command 0x0409 tx timeout [ 537.607592][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.623524][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.755357][T11949] device bridge_slave_0 entered promiscuous mode [ 537.780998][T11984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2231'. [ 537.817375][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.838145][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.871990][T11949] device bridge_slave_1 entered promiscuous mode [ 538.093798][T12008] loop2: detected capacity change from 0 to 128 [ 538.125982][T11949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.147458][T12005] loop1: detected capacity change from 0 to 512 [ 538.149575][T11949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.184491][ T26] audit: type=1804 audit(1722013500.099:238): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2237" name="/newroot/238/file0/file0" dev="loop2" ino=1048868 res=1 errno=0 [ 538.257219][T12005] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 538.338579][T12005] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.2236: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 538.366164][T12005] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2236: couldn't read orphan inode 15 (err -117) [ 538.380343][T12005] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 538.426291][T12005] ext2 filesystem being mounted at /264/file2 supports timestamps until 2038 (0x7fffffff) [ 538.479115][ T26] audit: type=1800 audit(1722013500.399:239): pid=12005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2236" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 538.506361][ T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 538.512159][T11949] team0: Port device team_slave_0 added [ 538.729508][T11949] team0: Port device team_slave_1 added [ 538.762930][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 538.939356][ T26] audit: type=1804 audit(1722013500.819:240): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2239" name="/newroot/239/bus/bus" dev="overlay" ino=1343 res=1 errno=0 [ 539.194361][T11949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.251878][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.549146][ T3617] Bluetooth: hci4: command 0x041b tx timeout [ 539.612306][ T23] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 539.635965][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.666904][ T23] usb 4-1: config 0 descriptor?? [ 539.681820][T11949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.723307][ T23] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 539.753610][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 539.755583][T12029] loop2: detected capacity change from 0 to 1024 [ 539.770092][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 539.778029][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 539.804653][T11949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.805196][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 539.812384][T11949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.830344][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 539.853317][T11949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.855231][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 539.935991][ T23] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 539.956991][ T23] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 540.035888][T12029] [ 540.038246][T12029] ====================================================== [ 540.045277][T12029] WARNING: possible circular locking dependency detected [ 540.052331][T12029] 5.15.163-syzkaller #0 Not tainted [ 540.057748][T12029] ------------------------------------------------------ [ 540.064786][T12029] syz.2.2242/12029 is trying to acquire lock: [ 540.070957][T12029] ffff88807ae2b048 (&hip->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x37f/0x14e0 [ 540.080790][T12029] [ 540.080790][T12029] but task is already holding lock: [ 540.088351][T12029] ffff88807ae2b3e0 (mapping.invalidate_lock#16){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 540.099633][T12029] [ 540.099633][T12029] which lock already depends on the new lock. [ 540.099633][T12029] [ 540.110055][T12029] [ 540.110055][T12029] the existing dependency chain (in reverse order) is: [ 540.119144][T12029] [ 540.119144][T12029] -> #3 (mapping.invalidate_lock#16){.+.+}-{3:3}: [ 540.128276][T12029] lock_acquire+0x1db/0x4f0 [ 540.133354][T12029] down_read+0x45/0x2e0 [ 540.138119][T12029] filemap_fault+0x708/0x1470 [ 540.143330][T12029] __do_fault+0x139/0x340 [ 540.148198][T12029] handle_mm_fault+0x376f/0x5950 [ 540.153689][T12029] exc_page_fault+0x271/0x700 [ 540.158906][T12029] asm_exc_page_fault+0x22/0x30 [ 540.164402][T12029] [ 540.164402][T12029] -> #2 (&mm->mmap_lock){++++}-{3:3}: [ 540.172167][T12029] lock_acquire+0x1db/0x4f0 [ 540.177326][T12029] down_read+0x45/0x2e0 [ 540.182104][T12029] mmap_read_lock+0x1c/0x50 [ 540.187226][T12029] exc_page_fault+0x596/0x700 [ 540.192440][T12029] asm_exc_page_fault+0x22/0x30 [ 540.197819][T12029] filldir+0x32b/0x720 [ 540.202506][T12029] hfsplus_readdir+0x484/0x12f0 [ 540.207979][T12029] iterate_dir+0x224/0x570 [ 540.212977][T12029] __se_sys_getdents+0x1e8/0x4c0 [ 540.218463][T12029] do_syscall_64+0x3b/0xb0 [ 540.223479][T12029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.230021][T12029] [ 540.230021][T12029] -> #1 (&tree->tree_lock#2){+.+.}-{3:3}: [ 540.237953][T12029] lock_acquire+0x1db/0x4f0 [ 540.243081][T12029] __mutex_lock_common+0x1da/0x25a0 [ 540.248814][T12029] mutex_lock_nested+0x17/0x20 [ 540.254275][T12029] hfsplus_file_truncate+0x78f/0xb80 [ 540.260177][T12029] hfsplus_write_begin+0xce/0xd0 [ 540.265686][T12029] generic_perform_write+0x2bf/0x5b0 [ 540.271608][T12029] __generic_file_write_iter+0x243/0x4f0 [ 540.277769][T12029] generic_file_write_iter+0xa7/0x1b0 [ 540.283688][T12029] aio_write+0x566/0x780 [ 540.288728][T12029] io_submit_one+0x768/0x18d0 [ 540.294028][T12029] __se_sys_io_submit+0x17b/0x2f0 [ 540.299587][T12029] do_syscall_64+0x3b/0xb0 [ 540.304527][T12029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.311128][T12029] [ 540.311128][T12029] -> #0 (&hip->extents_lock){+.+.}-{3:3}: [ 540.319142][T12029] validate_chain+0x1649/0x5930 [ 540.324528][T12029] __lock_acquire+0x1295/0x1ff0 [ 540.330071][T12029] lock_acquire+0x1db/0x4f0 [ 540.335115][T12029] __mutex_lock_common+0x1da/0x25a0 [ 540.341158][T12029] mutex_lock_nested+0x17/0x20 [ 540.346565][T12029] hfsplus_get_block+0x37f/0x14e0 [ 540.352250][T12029] block_read_full_page+0x2f9/0xde0 [ 540.357995][T12029] read_pages+0x605/0x8e0 [ 540.362858][T12029] page_cache_ra_unbounded+0x264/0x930 [ 540.368837][T12029] do_sync_mmap_readahead+0x610/0x800 [ 540.374857][T12029] filemap_fault+0x77a/0x1470 [ 540.380411][T12029] __do_fault+0x139/0x340 [ 540.385442][T12029] handle_mm_fault+0x376f/0x5950 [ 540.390913][T12029] __get_user_pages+0x4ed/0x11d0 [ 540.396540][T12029] get_user_pages_unlocked+0x23b/0x8a0 [ 540.402526][T12029] internal_get_user_pages_fast+0x22fb/0x2810 [ 540.409232][T12029] iov_iter_get_pages+0x25a/0x570 [ 540.415013][T12029] __blockdev_direct_IO+0x1419/0x4f40 [ 540.420911][T12029] hfsplus_direct_IO+0xf6/0x1e0 [ 540.426413][T12029] generic_file_direct_write+0x204/0x460 [ 540.432766][T12029] __generic_file_write_iter+0x2a2/0x4f0 [ 540.439274][T12029] generic_file_write_iter+0xa7/0x1b0 [ 540.445408][T12029] vfs_write+0xacd/0xe50 [ 540.450292][T12029] ksys_write+0x1a2/0x2c0 [ 540.455533][T12029] do_syscall_64+0x3b/0xb0 [ 540.460483][T12029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 540.466929][T12029] [ 540.466929][T12029] other info that might help us debug this: [ 540.466929][T12029] [ 540.477377][T12029] Chain exists of: [ 540.477377][T12029] &hip->extents_lock --> &mm->mmap_lock --> mapping.invalidate_lock#16 [ 540.477377][T12029] [ 540.491695][T12029] Possible unsafe locking scenario: [ 540.491695][T12029] [ 540.499166][T12029] CPU0 CPU1 [ 540.504533][T12029] ---- ---- [ 540.509902][T12029] lock(mapping.invalidate_lock#16); [ 540.515278][T12029] lock(&mm->mmap_lock); [ 540.522168][T12029] lock(mapping.invalidate_lock#16); [ 540.530075][T12029] lock(&hip->extents_lock); [ 540.534954][T12029] [ 540.534954][T12029] *** DEADLOCK *** [ 540.534954][T12029] [ 540.543625][T12029] 4 locks held by syz.2.2242/12029: [ 540.548817][T12029] #0: ffff88805b2c20f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2cb/0x380 [ 540.558246][T12029] #1: ffff888023a04460 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x29a/0xe50 [ 540.567414][T12029] #2: ffff88807ae2b240 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: generic_file_write_iter+0x7c/0x1b0 [ 540.578769][T12029] #3: ffff88807ae2b3e0 (mapping.invalidate_lock#16){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930 [ 540.590210][T12029] [ 540.590210][T12029] stack backtrace: [ 540.596156][T12029] CPU: 0 PID: 12029 Comm: syz.2.2242 Not tainted 5.15.163-syzkaller #0 [ 540.604533][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 540.614835][T12029] Call Trace: [ 540.618131][T12029] [ 540.621090][T12029] dump_stack_lvl+0x1e3/0x2d0 [ 540.626064][T12029] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 540.631905][T12029] ? print_circular_bug+0x12b/0x1a0 [ 540.637123][T12029] check_noncircular+0x2f8/0x3b0 [ 540.642088][T12029] ? add_chain_block+0x850/0x850 [ 540.647032][T12029] ? lockdep_lock+0x11f/0x2a0 [ 540.651868][T12029] ? __lock_acquire+0x1295/0x1ff0 [ 540.656992][T12029] validate_chain+0x1649/0x5930 [ 540.662026][T12029] ? __blk_mq_tag_idle+0x1a0/0x1a0 [ 540.667167][T12029] ? reacquire_held_locks+0x660/0x660 [ 540.672654][T12029] ? __lock_acquire+0x1ff0/0x1ff0 [ 540.677703][T12029] ? unwind_next_frame+0x1437/0x1fa0 [ 540.683015][T12029] ? deref_stack_reg+0xbe/0x110 [ 540.687978][T12029] ? validate_chain+0x112/0x5930 [ 540.692946][T12029] ? mark_lock+0x98/0x340 [ 540.697280][T12029] __lock_acquire+0x1295/0x1ff0 [ 540.702225][T12029] lock_acquire+0x1db/0x4f0 [ 540.706827][T12029] ? hfsplus_get_block+0x37f/0x14e0 [ 540.712069][T12029] ? read_lock_is_recursive+0x10/0x10 [ 540.717535][T12029] ? __might_sleep+0xc0/0xc0 [ 540.722254][T12029] ? mark_lock+0x98/0x340 [ 540.726679][T12029] __mutex_lock_common+0x1da/0x25a0 [ 540.731984][T12029] ? hfsplus_get_block+0x37f/0x14e0 [ 540.737198][T12029] ? hfsplus_get_block+0x37f/0x14e0 [ 540.742405][T12029] ? mutex_lock_io_nested+0x60/0x60 [ 540.747700][T12029] ? lockdep_softirqs_off+0x420/0x420 [ 540.753101][T12029] mutex_lock_nested+0x17/0x20 [ 540.757953][T12029] hfsplus_get_block+0x37f/0x14e0 [ 540.762984][T12029] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 540.768789][T12029] ? do_raw_spin_unlock+0x137/0x8b0 [ 540.774073][T12029] ? create_empty_buffers+0x5c0/0x6d0 [ 540.779627][T12029] ? create_page_buffers+0x24b/0x330 [ 540.784914][T12029] block_read_full_page+0x2f9/0xde0 [ 540.790238][T12029] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 540.796052][T12029] ? block_is_partially_uptodate+0x2c0/0x2c0 [ 540.802064][T12029] ? readahead_page+0x2c8/0x400 [ 540.807109][T12029] ? hfsplus_writepage+0x30/0x30 [ 540.812082][T12029] read_pages+0x605/0x8e0 [ 540.816423][T12029] ? page_cache_ra_unbounded+0x930/0x930 [ 540.822081][T12029] ? add_to_page_cache_locked+0x40/0x40 [ 540.827720][T12029] ? down_read+0x1b3/0x2e0 [ 540.832161][T12029] page_cache_ra_unbounded+0x264/0x930 [ 540.837713][T12029] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 540.844222][T12029] ? rcu_lock_release+0x5/0x20 [ 540.849123][T12029] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 540.855114][T12029] ? __lock_acquire+0x1ff0/0x1ff0 [ 540.860337][T12029] ? do_page_cache_ra+0xde/0x100 [ 540.865364][T12029] do_sync_mmap_readahead+0x610/0x800 [ 540.870919][T12029] ? count_memcg_event_mm+0x3d0/0x3d0 [ 540.876507][T12029] ? count_memcg_event_mm+0x37a/0x3d0 [ 540.881956][T12029] ? next_uptodate_page+0x86e/0x900 [ 540.887172][T12029] filemap_fault+0x77a/0x1470 [ 540.892016][T12029] ? mapping_seek_hole_data+0x1450/0x1450 [ 540.897752][T12029] ? filemap_read_page+0x4b0/0x4b0 [ 540.902871][T12029] ? count_memcg_event_mm+0x385/0x3e0 [ 540.908270][T12029] __do_fault+0x139/0x340 [ 540.912622][T12029] handle_mm_fault+0x376f/0x5950 [ 540.917569][T12029] ? numa_migrate_prep+0x1a0/0x1a0 [ 540.922893][T12029] ? follow_page_mask+0xb59/0x13f0 [ 540.928022][T12029] ? find_vma+0x1db/0x230 [ 540.932372][T12029] ? check_vma_flags+0x407/0x490 [ 540.937312][T12029] __get_user_pages+0x4ed/0x11d0 [ 540.942255][T12029] ? populate_vma_page_range+0x2a0/0x2a0 [ 540.947900][T12029] ? down_read+0x1b3/0x2e0 [ 540.952368][T12029] get_user_pages_unlocked+0x23b/0x8a0 [ 540.957831][T12029] ? print_irqtrace_events+0x210/0x210 [ 540.963292][T12029] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 540.969185][T12029] ? get_user_pages_locked+0x6b0/0x6b0 [ 540.974641][T12029] ? stack_trace_save+0x113/0x1c0 [ 540.979665][T12029] ? internal_get_user_pages_fast+0x2130/0x2810 [ 540.985999][T12029] internal_get_user_pages_fast+0x22fb/0x2810 [ 540.992098][T12029] ? get_user_pages_fast_only+0x40/0x40 [ 540.997663][T12029] ? memset+0x1f/0x40 [ 541.001644][T12029] ? lockdep_init_map_type+0x9d/0x8d0 [ 541.007018][T12029] ? lockdep_softirqs_off+0x420/0x420 [ 541.012402][T12029] ? slab_post_alloc_hook+0x73/0x380 [ 541.017864][T12029] iov_iter_get_pages+0x25a/0x570 [ 541.022897][T12029] __blockdev_direct_IO+0x1419/0x4f40 [ 541.028297][T12029] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 541.034049][T12029] ? sb_init_dio_done_wq+0x80/0x80 [ 541.039275][T12029] ? invalidate_inode_pages2_range+0x1104/0x1230 [ 541.045613][T12029] ? hfsplus_ext_write_extent+0x1f0/0x1f0 [ 541.051360][T12029] ? invalidate_mapping_pagevec+0x30/0x30 [ 541.057093][T12029] ? filemap_write_and_wait_range+0x203/0x280 [ 541.063169][T12029] hfsplus_direct_IO+0xf6/0x1e0 [ 541.068052][T12029] generic_file_direct_write+0x204/0x460 [ 541.073741][T12029] __generic_file_write_iter+0x2a2/0x4f0 [ 541.079397][T12029] generic_file_write_iter+0xa7/0x1b0 [ 541.084787][T12029] vfs_write+0xacd/0xe50 [ 541.089053][T12029] ? file_end_write+0x250/0x250 [ 541.093903][T12029] ? __fget_files+0x413/0x480 [ 541.098580][T12029] ? mutex_lock_nested+0x17/0x20 [ 541.103512][T12029] ? __fdget_pos+0x2cb/0x380 [ 541.108113][T12029] ? ksys_write+0x77/0x2c0 [ 541.112551][T12029] ksys_write+0x1a2/0x2c0 [ 541.116879][T12029] ? print_irqtrace_events+0x210/0x210 [ 541.122336][T12029] ? __ia32_sys_read+0x80/0x80 [ 541.127116][T12029] ? syscall_enter_from_user_mode+0x2e/0x240 [ 541.133116][T12029] ? lockdep_hardirqs_on+0x94/0x130 [ 541.138331][T12029] ? syscall_enter_from_user_mode+0x2e/0x240 [ 541.144309][T12029] do_syscall_64+0x3b/0xb0 [ 541.148721][T12029] ? clear_bhb_loop+0x15/0x70 [ 541.153518][T12029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 541.159412][T12029] RIP: 0033:0x7f291ca20299 [ 541.163825][T12029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.183426][T12029] RSP: 002b:00007f291ae9f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 541.191838][T12029] RAX: ffffffffffffffda RBX: 00007f291cbaef80 RCX: 00007f291ca20299 [ 541.199809][T12029] RDX: 000000000000f000 RSI: 0000000020000200 RDI: 0000000000000005 [ 541.207871][T12029] RBP: 00007f291ca8d8e6 R08: 0000000000000000 R09: 0000000000000000 [ 541.215856][T12029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.223832][T12029] R13: 000000000000000b R14: 00007f291cbaef80 R15: 00007ffc7a9cfe78 [ 541.231811][T12029] [ 541.284433][ T1078] usb 4-1: USB disconnect, device number 28 [ 541.294363][ T1078] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 541.314020][ T1078] keyspan 4-1:0.0: device disconnected [ 541.351063][T11949] device hsr_slave_0 entered promiscuous mode [ 541.399802][T11949] device hsr_slave_1 entered promiscuous mode [ 541.502193][ T144] device hsr_slave_0 left promiscuous mode [ 541.514638][ T144] device hsr_slave_1 left promiscuous mode [ 541.527487][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.535008][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.545682][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.553785][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.561749][ T144] device bridge_slave_1 left promiscuous mode [ 541.569789][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.580944][ T144] device bridge_slave_0 left promiscuous mode [ 541.587432][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.597812][ T3617] Bluetooth: hci4: command 0x040f tx timeout [ 541.604504][ T144] device veth1_macvtap left promiscuous mode [ 541.613386][ T144] device veth0_macvtap left promiscuous mode [ 541.622383][ T144] device veth1_vlan left promiscuous mode [ 541.628248][ T144] device veth0_vlan left promiscuous mode [ 541.768883][ T144] team0 (unregistering): Port device team_slave_1 removed [ 541.781356][ T144] team0 (unregistering): Port device team_slave_0 removed [ 541.791984][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.806059][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.861419][ T144] bond0 (unregistering): Released all slaves [ 542.270851][T11949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 542.281463][T11949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 542.309271][T11949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 542.327388][T11949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 542.424264][T11949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.439298][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.451813][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.465392][T11949] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.481761][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.494864][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.503928][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.511052][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.530551][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.541180][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.553423][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.564945][ T4901] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.572163][ T4901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.583423][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.592979][ T4901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.614563][T11949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.628078][T11949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.641968][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.654942][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.672556][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.685477][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.695980][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.704545][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.713638][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.722586][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.737013][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.751950][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.856232][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.863682][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.888620][T11949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.986344][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.995186][ T6211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 543.017829][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 543.027393][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 543.036453][T11949] device veth0_vlan entered promiscuous mode [ 543.045302][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 543.054885][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 543.065294][T11949] device veth1_vlan entered promiscuous mode [ 543.089994][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 543.101492][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 543.112304][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 543.121666][ T6421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 543.132145][T11949] device veth0_macvtap entered promiscuous mode [ 543.147249][T11949] device veth1_macvtap entered promiscuous mode [ 543.161963][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.176008][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.185983][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.196709][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.207063][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.220200][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.230337][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.240963][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.254727][T11949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.263241][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 543.271852][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 543.280011][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 543.288817][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 543.299973][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.311748][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.323977][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.334864][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.346565][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.358455][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.368673][T11949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 543.379850][T11949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.391266][T11949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.400638][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 543.410293][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 543.426280][T11949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.435723][T11949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.448317][T11949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.458358][T11949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.502460][T11949] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 543.530709][ T7921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.540684][T11949] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 543.546417][ T7921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.560900][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.571883][ T7921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.579972][ T7921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.587624][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.686589][ T3610] Bluetooth: hci4: command 0x0419 tx timeout