last executing test programs: 9m55.609933339s ago: executing program 32 (id=33): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x200) 9m29.670686977s ago: executing program 33 (id=201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x1000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) 7m26.878867561s ago: executing program 2 (id=975): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) recvmsg$unix(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40001000) 7m26.622857776s ago: executing program 2 (id=986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000001440)) 7m26.43540302s ago: executing program 2 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="0c005a800400018004000290"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) 7m26.220631084s ago: executing program 2 (id=983): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x842, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=cp1250,discard,dmask=00000000000000000000002,time_offset=0x000000000000001e,umask=00000000000015761052113,umask=00000000000000000000174,dmask=000000000000006010,fmask=00000000000000000000000,allow_utime=00000000000000000000064,sys_tz,\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYRESOCT], 0x1, 0x1524, &(0x7f0000005340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 7m25.733153344s ago: executing program 2 (id=988): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xffffffff, 0x1, 0x0, 0x10000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x13, 0x3, 0x14, 0x0, 0xffffca21}}}]}, 0x78}}, 0x20000010) 7m25.258009403s ago: executing program 2 (id=989): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000005f80)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x5, 0x6bd, &(0x7f0000000cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r0, 0x0, &(0x7f0000000080), 0x0) 7m24.808855812s ago: executing program 34 (id=989): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000005f80)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x5, 0x6bd, &(0x7f0000000cc0)="$eJzs3U+IXVcdB/DvfZm8mRchnf5LowgZGijaYDKTR00EoVFEsggSdNPtkEyaIZO0TKaSFjEvahVcuZIuXFQkLroSEaGuxLoWBDeusg+4c5GFOnL/vJk3b14mM51k3rT9fODOPfeee8753R/3z3v3JdwAn1nnX8vBXoqcP3HhVrl872536d7d7vV+OclkklYyUc9SdJLio+Rc6imfL1c23RUPG+eV+x8WE+990K2XJpqp2r61VbtNRm7ZS6bWFg4kmamL/9lGh63R/VVT1c+l9f4a7W1HWyvW4i4TdryfOBi31U1665WjTo2Ntn/eAvvW7fq+ucl0cij13bX8HJDm6vDoK8P4bXlt6u1dHAAAAPCkjPwuP+ipB3mQWzm8N+EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAp0NRvzOwaKZWvzyTov/+//bAO/XbYw53l969Us2++9S4AwEAAAAAAACAXTn2IA9yK4f7y6tF9Zv/i9XCc9Xfz+Wt3MxClnMytzKflaxkOXNJpgc6at+aX1lZntvc8pcpW66urt5uWp4e2fL0xrh6w4GO+pcGmzYCAAAAAAAAgM+sH+X8+u//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHxTJgXpWTc/1y9NpTSSZStIuZtY2b4812Mfgz+MOAAAAAJ68TjM/XPyvLqwW1Xf+I9X3/qm8lRtZyWJWspSFXK6eBdTf+lt/73WX7t3tXi+nzR1/4187iqPqMfWzh9Ejz1ZbPL/W4ny+ne/lRGZyMctZzPczn5UsZCbfqkrzKTLdPL2Yvne3k36sm+M9t2Hp4nBsxwbKZXxHq0g6uZLFKraTudTuh95qtjs6MNof28nQiHfK7BSvNraZo8vNvNyjXzTz/WG62vODaxmZbXJfZuPpwbxvzv0Oj5PhkebSWnsG9dz6KOXi8EgfK+eHmnmZ658+2Zzv8FHaxkz0fl4u9Y++I1vnPPnyP/5y8WrrxrWrV26e2D+H0cc0fEx0BzLxwrYysVRmoreLTEztJv7Hp91ko76K7uxq+WLV9nAW8528kctZyJnMZi5nM5uv5XS6OT2Q1+e3zmt1rrV2dq4d/1JTKO9JPxu4N+2ZyYdVlHl9eiCvg1e66apucM16lp7ZRpaKdkZn6Z8jQ7nzhaZQjvHjgTvO+A1nYm4gE89unYlf/3c1yc2lG9eWr86/uc3xXmrm5Wn77sZr828eyw7tXLO75fHyTJKJ1LeNwaOjrHu2XzeUr3bzi8tE09mGunaq87mue9SZWvZ05M6onuq6F0aO0q3qjg7UbfiUkzeytPYppLHnJykA23Do5UPtzv3O3zrvd37Sudq5MPXNybOTX2zn4F8n/nTgd63ftr5evJz388McHnekAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaXDz7XeuzS8tLSwPFg5keM1YCmk95g7vjKzqp6Je0x6xzbHscvSpJGNO5qMLad6ltKt+Jrdq/vskWzRvj2PfO0nGnfmqkIk9GGsyI6ourK3pJK21eJJc2ycvuAOehFMr1988dfPtd76yeH3+9YXXF26cPnvm1TPdr87dPnVlcWlhtv477iiBJ2Hjxz8AAAAAAAAAAADgk2Cv/mPJkKI3hn0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpnOv5aDvRSZmz05Wy7fu9tdKqd+eX3LiSStJMUPkuKj5FzqKdMD3RUPG+eV+x/+6qX3Puiu9zXR37411O4P/15d3eFe9JopM0kONPNHm9xWf5cG+uvtMLBasbaHZcKO9xMH4/b/AAAA//9tywGy") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r0, 0x0, &(0x7f0000000080), 0x0) 6m49.138904101s ago: executing program 5 (id=1229): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0x253, &(0x7f00000002c0)="$eJzs2s9rHGUYB/BnkpTWlHQj/mxBfNGDehmanD00SArigqCNUAXp1Ex0ybgbMktgRWxOCp569uRZPHoTpEcvufgXeNBTLjn2II4km9o0RmuQ7Ab7+Vz2gXe+vM/s+zK8h3f71dsfr65MxUrRj4ksi4krsRl3s5iNibhnM1556fqPz719/d03FtrtxbdSurpwbW4+pXTh+R/e+/TbF+70z7/z3YXvz8bW7PvbO/O/bD29dXH792sfderUqVO3109Futnr9YubVZmWO/VqntLtqizqMnW6dbn+wPhK1VtbG6SiuzwzvbZe1nUquoO0Wg5Sv5f664NUfFh0uinP8zQzHfwXS9/cbZrYac7ciKZpHvs6zt+JmZ+jFdnjKXviSvbUjeyZzeziTtO0xt0qJ8L6P9oOfNTPRVRfbCxtLA1/h+MLK9GJKsq4HK34LXa3yb5hffX19uLltGc2Pq9u7edvbSxN7uW/vJefi1bMHp2fG+bTg/mzMX1w/vloxZN/zf862V6cPzJ/Ll5+8UA+j1b89EH0oorl2M3en/+zuZRee7N9KH9p7zkAgP+bPP3pyPNbnv/d+DB/jPPhofPVVFyaGu+7E1EPPlktqqpcH0mxu6dGNddDimz/D3j4w89OjLnVky6+Oh1tnFAxub/Qp6WffyrO/KsNOZpijB8lRub+oo+7EwAAAAAAAAAAAI7j0KW/1klckxz3OwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfbHwEAAP//Ok/KeQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents64(r0, 0x0, 0x43) 6m48.392610025s ago: executing program 5 (id=1231): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712"], 0x30}, 0x0) 6m48.277120187s ago: executing program 5 (id=1233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100003"], 0x34}}, 0x0) 6m48.096742591s ago: executing program 5 (id=1234): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000080)={[{@bh}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 6m47.719021148s ago: executing program 5 (id=1235): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x9}]}, 0x24}}, 0x24044884) 6m47.027867922s ago: executing program 5 (id=1242): syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 6m46.669179358s ago: executing program 35 (id=1242): syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 5m34.338621735s ago: executing program 7 (id=1957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, r1, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) 5m33.754911036s ago: executing program 7 (id=1959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x4, 0x3}}, 0x18, @val={0x8c, 0x10, {0x95c, "9263e899d608", @short="3eaa012a01acc3a8"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x40000) 5m33.621151539s ago: executing program 7 (id=1961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xda, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) 5m33.04369015s ago: executing program 7 (id=1965): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000080)={[{@bh}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 5m32.805242395s ago: executing program 7 (id=1968): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000000034"], 0x118}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m32.295986835s ago: executing program 7 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m31.960139102s ago: executing program 36 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x87b, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa53}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m22.00372952s ago: executing program 4 (id=3835): r0 = socket$inet6(0xa, 0x80002, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "4e4106", 0x8, 0x3a, 0x1, @remote, @empty, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x8001}}}}}}, 0x0) 2m21.800847674s ago: executing program 4 (id=3836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) 2m21.555943869s ago: executing program 4 (id=3840): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2) 2m21.348739873s ago: executing program 4 (id=3841): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000001f00)=ANY=[], 0x1, 0x210, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000002840)='./file1\x00', 0x1c1400, 0x10) 2m20.94978437s ago: executing program 4 (id=3846): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x14, 0xfffffffd, 0x4}) 2m20.524305179s ago: executing program 4 (id=3850): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,longad,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c00edd5a22bf4eb27adbc1822e1bf1dfd03952e04d9cc720d912021521b25862e34b978bfd137dd793773dd560aa17d735a4036c393aeaecf3c955f1a7446536cdb36"], 0xfe, 0xc22, &(0x7f00000002c0)="$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") lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 2m20.006991399s ago: executing program 37 (id=3850): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=ascii,noadinicb,adinicb,longad,uid=forget,umask=00000000000000000000002,longad,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c00edd5a22bf4eb27adbc1822e1bf1dfd03952e04d9cc720d912021521b25862e34b978bfd137dd793773dd560aa17d735a4036c393aeaecf3c955f1a7446536cdb36"], 0xfe, 0xc22, &(0x7f00000002c0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu43bTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22YXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkFPAYGbfikuKsmhTpCj7+2zqNzvz3sx7M+sZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/fOnMc+lhtwIAOEhXxr985qznPwB8rFz1//8AAAAAAAAAAAAAAHDYpSji8Ugxf2U9TVafOwYut2dv3Z4YGd252rFU1TxSlS9/Bp47e+78F54fvtDN96//oD0Zr45fvVR/ae7m/EJrcbE1XZ+YbU/NTbd2vYe91t9uqDoB9Zuv3Zq+fn2xfvbZc1s23x58r/+xk4MXh58+/VS37MTI6Oh4T5la34c++l3uNcLjaBRxOlI8890fp2ZEFLH3c3Gf785+O1Z1YqjqxMTIaNWRmXZzdqncONY9EUVEvadSo3uODuBa7EkjYrlsftngobJ74/PNhea1mVZ9rLmw1F5qz82OpU5ry/7Uo4gLKWIlItb6795dXxRRixTfPrGerkXEke55+Hw1MPje7Sj2sY+7ULaz3hexUjwC1+wQ648iXokUP3m7iKnynOWf+FzEK2V+P+LNMl+MSOUX43zEuzt8j3g01aKIvyiv/8X1NB0RGyc660frl79S/9Ls9bmest37yiP/fDhIh/zeNBBFNKs7/nr68L/ZAQAAAAAAAAAAAAAAAOBBOxZFPBkpXv6PP67GFUc1Lv3ExeE/GPzF3jHjT9xnP2XZZyNiudjdmNyjeQjxWBpL6SGPJf44G4gi/iSP//vmw24MAAAAAAAAAAAAAAAAAADAx1oRP4oUL7xzKq1E75zi7dkb9avNazOdWWG7c/9250zf2NjYqKdONnJO5lzOuZJzNedazihy/ZyNnJM5l3Ou5FzNuZYzjuT6ORs5J3Mu51zJuZpzLWfUcv2cjZyTOZdzruRczbmWMw7J3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lRRTxs0jxra+tp0gR0YiYjE6u9nfLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU38q4nuRov6HjTvrahGRqn87TpW/nI/G0TI/GY3hMl+MxqWczSprjW/e92hpX/rAh9eXivhhpOgfeOvO1cnXv6/zafOavfn1zU+/Uuvkke7Gwff6Hzt54uLw6K89ca/lHa/+0OX27K3b9YmR0dHxntW1fPRP9qwbzMctHkzXiYjF1994rTkz01qw8PFYqHUWanFI2nNQC/l+FYelPdsXGoejGZsLD/nGxIEon//vRorfeec/uw/87vP/Fzqf7jzh46d/uvn8f2H7jvbp+f94z7oX8u9G+moRA0s35/tORgwsvv7G6fbN5o3Wjdbs+TNnvjg8/MVzZ/qORgxcb8+0epb2fKoAAAAAAAAAAAAAAAAADlYq4vciRfOH66keEber8VqDF4efPv3UkThSjbfaMm7r1fGrl+ovzd2cX2gtLram6xOz7am56dZuDzdQDfeaGBndl87c17F9bv+xgZfm5l9faN/4o6Udtx8fuHRtcWmhObXz5jgWRUSjd81Q1eCJkdGq0TPt5mxVdewBvUqhLxXxX5Fi6nw9fTavy+P/to/w3zL+f3n7jvZp/N8netaVx0ypiJ9Git/+yyfis1U7j8dd5yyX+9tIMXThM7lcHC3LddvQea9AZ2RgWfb/IsU//mxr2e54yMc3yz636xP7iCiv/4lI8b0//078Rl639f0PO1//49t3tE/X/1M9645veV/BnrtOvv6nI8WLj78Vv5nXvd/7P4rY2Nj4RsSpXPjO+zn26fp/umfdYHSO+1sPrvsAAAAAAAAAAACPrL5UxN9FiqdGa+n5vG43f/9vevuO9unvf/1yz7rpA5qvaM8nFQAAAAAOib5UxI8ixY2lt+6Mod46/rtn/Ofvbs69PpK2ba3+nO+XqvcGPMg//+s1mI87ufduAwAAAAAAAAAAAAAAAAAAwKGSUhHP5/nUJ+8zn/pqpHj5f57J5dLJslx3HvjB6teBK3Ozpy/NzMxNNZea12Za9fH55lSrrPupSLH+N5/JdYtqfvXufPOdOd4HNrpzsS9EitG/75btzMXenZu8Mx94Zy72suwnIsV//8PWst15rD+9WfZsWfavI8VX/3nnsic3y54ry34nUvzgq/Vu2eNl2e77UTvvJB2oxUzr2am5mbtehQoAAAAAAAAAAAAAAAAAAAAfVF8q4s8ixf/eXInlPOw/z//fnYG/1i375td75vvf5nY1z/9gNf//vZY/zPz/gw+spwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OhIUcQbkWL+ynpa7S8/dwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lzw/fKGb71//QXsyXh2/eqn+0tzN+YXW4mJruj4x256am27teg97rb956jqGqhNQv/narenr1xfrZ589t2Xz7cH3+h87OXhx+OnTT3XLToyMjo73lKn1fYCjf6DGbToaRfxVpHjmuz9O/9IfUcTez8V9vjv77VjViaGqExMjo1VHZtrN2aVy41j3RBQR9Z5Kje45OoBrsSeNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv3t3fVHEa5Hi2yfW07/2RxzpnofPXxn/8pmz925HsY993IWynfW+iJXiEbhmh1h/FPFPkeInb5+Kf+uPqEXnJz4X8UqZ3494s8wXI1KK2PhGxLs7fI94NNWiiP8vr//F9fR2f3k/6N5XLn+l/qXZ63M9Zbv3lV09H3793sd86M+Hg3TI700DUcQPqjv+evp3/10DAAAAAAAAAAAAAAAAHCJF/GqkeOGdU6kaH3xnTHF79kb9avPaTGdYX3fsX3fM9MbGxkY9dbKRczLncs6VnKs513JGkevnbOSczLmccyXnas61nHEk18/ZyDmZcznnSs7VnGs5o5br52zknMy5nHMl52rOtZxxSMbuAQAAAAAAAAAAAAAAAAAAHy1F9U+Kb31tPW30d+aXnoxOrpoP9CPv5wEAAP//N4D+uw==") lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 1m10.747526945s ago: executing program 9 (id=4586): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)={0x40002019}) 1m10.652142567s ago: executing program 9 (id=4587): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f0000000280)={0x2020}, 0x2020) 1m10.50837876s ago: executing program 9 (id=4589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000006105"]) 1m10.213770635s ago: executing program 9 (id=4592): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1m9.839113053s ago: executing program 9 (id=4595): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfd, 0x57b, &(0x7f0000001e40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) getdents(r0, &(0x7f0000000000)=""/51, 0x33) getdents(r0, 0x0, 0x58) 1m9.347525983s ago: executing program 9 (id=4596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r2}, [@IFA_LABEL={0x14, 0x3, 'team0\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1m9.068094868s ago: executing program 38 (id=4596): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000380)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xcb, r2}, [@IFA_LABEL={0x14, 0x3, 'team0\x00'}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 37.540905096s ago: executing program 1 (id=4924): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020400000e"], 0x70}, 0x1, 0x7}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, &(0x7f0000001a00)) 37.454516727s ago: executing program 1 (id=4926): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 37.269450601s ago: executing program 1 (id=4928): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 37.178016353s ago: executing program 1 (id=4929): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 37.024255636s ago: executing program 1 (id=4931): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r0, 0x0, 0x0, 0x400) read(r0, &(0x7f0000000d40)=""/4096, 0x1000) 36.706097412s ago: executing program 1 (id=4935): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "5b1c35", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 36.329507149s ago: executing program 39 (id=4935): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "5b1c35", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.657671829s ago: executing program 6 (id=5259): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="210329bd"], 0x24}, 0x1, 0x0, 0x0, 0x4c811}, 0x0) io_setup(0x7e, &(0x7f0000000080)=0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000002000000, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) 3.511265802s ago: executing program 6 (id=5260): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) 3.231877027s ago: executing program 6 (id=5264): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 2.950902813s ago: executing program 6 (id=5266): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@noalign}, {@sysvgroups}, {@inode64}, {@logbufs={'logbufs', 0x3d, 0x6}}]}, 0x1, 0xb919, &(0x7f0000001440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0xa2) linkat(r0, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./bus\x00', 0x0) 1.897600693s ago: executing program 0 (id=5278): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd894f", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1.879308414s ago: executing program 8 (id=5279): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)=' ', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="d539", 0x2}], 0x1}}], 0x2, 0x20040810) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 1.621046628s ago: executing program 3 (id=5280): r0 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.604643499s ago: executing program 0 (id=5281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001000)='j', 0x1}], 0x1}}], 0x1, 0x40000) 1.54880171s ago: executing program 8 (id=5282): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.53410056s ago: executing program 0 (id=5283): unshare(0x28000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) fallocate(r0, 0x8, 0x0, 0x7) 1.397053583s ago: executing program 8 (id=5284): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x11}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10ef}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1.388345394s ago: executing program 0 (id=5285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000009f000040"]) 1.216846487s ago: executing program 3 (id=5286): r0 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) syz_clone3(&(0x7f0000000c40)={0x80001000, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r0], 0x1}, 0x58) 1.110406049s ago: executing program 8 (id=5287): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c726573765f6c6576656c3d30303030303030303030303030303030303030302c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c646174613d77726974656261636b2c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00149e0cb4c679a55808f10855fc0d9b9d7241cc60c5c0b35a9ce6bd73d50a863d736b7f64cdbf2582b25c868128f5a0c3ca71ea7a85f79743e17bbb3291a3c43eb49fcfcab9a806f939773a5895370494ec438f24b77c23cb13a0c7c11503d4e4a25d5e8142cc163f75ca2557bc5b3dd2856dbf2f4fbffb092b1a8d3f410d0daefab8a2f41a23713a02fa9349bc76bc637fe28f733ee38a6de0e2174f54e7f4ebc705a06c4b7d76bcc94f8985dbf4791afe238c9f24f48c0f98d3898ad1f3597c15fdc241ce161617ca162b1d4a17900f12843677d372e706"], 0x1, 0x442a, &(0x7f0000008940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') 1.03641128s ago: executing program 3 (id=5288): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0xfff6, 0x101001, @loopback, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 944.871952ms ago: executing program 0 (id=5289): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 879.651293ms ago: executing program 6 (id=5290): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002640)={'team_slave_0\x00', @random="76e04c34b99d"}) 865.628604ms ago: executing program 3 (id=5291): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x80086601, 0xffffffffffffffff) 444.803682ms ago: executing program 3 (id=5292): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xbf}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 158.612438ms ago: executing program 3 (id=5293): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 99.329429ms ago: executing program 8 (id=5294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x54, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "ae894ac6de0b656f8d12b1aa4d"}, @NL80211_KEY_IDX={0x5}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x0) 67.129759ms ago: executing program 6 (id=5295): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, 'hfs\x00', 0x3a, '#! ', 0x3a, './file2'}, 0x2e) 14.17451ms ago: executing program 8 (id=5296): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodiscard,quota,iocharset=cp950,grpquota,quota,noquota,nointegrity\x00uid=', @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYBLOB="bf6a8bfcf00ce3cc70200921", @ANYRESHEX=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="f303e42912de99b7ea1135f2f9d5b1a74117c5c998fb6fd985561a5cd1ce", @ANYRES64], 0x1, 0x617a, &(0x7f0000000580)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1Ka1xICBdoe4MClB5QrSmTcKiIFlBiUVhFx5QsHTvwFICSOCHFEHPgDeuDKjRMnIiVIoJ4YNPbzxOPNbtbB8c7az+cj2TO/eWa9z/i74931zOwTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB89zvfO9+JiKs/SwtWIj4VvYhuxFJdr0bE0upKXr8fES/EdnM8HxGDhYj69tvfno14PSI+Phlx/8GdtXrxhX3249t/+Ntvv3/inb/+fnD2P3/c6L0xab3bt3/57z/dPdg2AwAAQGmqqqo66W3+qfT+vtt2pwCAmcjP/1WSlx/7+lf/eOfP89Qf9SHXG7fq7/PTH7VarW6nbqrGu9ssImKzeZv6NYPD8QBwxGzGJ213gRbJv2j9iDjRdieAudZpuwMcivsP7qx1Ur6d5vPB6k57PhdkT/6bnYfXd0yaTjN6jsmsHl9b0YvnJvRnaUZ9mCc5/+5o/ld32odpvcPOf1Ym5T/cufSpODn/3mj+I45P/t2x+Zcq599/ovx78gcAAAAAgDmW//+/0vLx34WDb8q+PO747+qM+gAAAAAAAAAAT9tBx/97yPh/AAAAMLfq9+q1X5/cXTbps9jq5Vc6Ec+MrA8UJl0ss9x2PwAAAAAAAAAAAACgJP2dc3ivdCIGEfHM8nJVVfVX02j9pA56+6Ou9O2HkrX9Rx4AAHZ8fHLkWv5OxGJEXEmf9TdYXl6uqsWl5Wq5WlrIr2eHC4vVUuN9bZ7WyxaG+3hB3B9W9Q9bbNyuadr75Wntoz+vvq9h1dtHx56SQfptTmhuKWwASHaeje57RjpmqurZSS8+YA/7//Fj/2c/2n6cAgAAAIevqqqqkz7O+1Q65t9tu1MAwEzk5//R4wKHUkcc7s9Xq9VqtVr92LqpGu9us4iIzeZt6tcMhuMHgCNmMz5puwu0SP5F60fEC213AphrnbY7wKG4/+DOWifl22k+H6Tx3fO5IHvy3+xs3y7fftx0mtFzTGb1+NqKXjw3oT/Pz6gP8yTn3x3N/+pO+zCtd9j5z8qk/OvtXGmhP23L+fdG8x9xfPLvjs2/VDn//hPl35M/AAAAAADMsfz//xXHf/MmAwAAAAAAAMCRc//BnbV83Ws+/v+ZMeu5/vN4yvl35F+knH93JP8vjqzXa8zfe3s3/389uLP2u41/fjpP95v/Qp7ppEdWJz0iOumeOv00PcjWPWpr0BvW9zTodHv9dM5PNXg3rseNWI9ze9btpt/Hbvv5Pe11Twd72i/sae8/0n5xT/sgfe5AtZTbz8Ra/DhuNH7bC1O2f3FKezWlPeffs/8XKeffb3zV+S+n9s7ItHbvo+4j+31zOu5+3rr+2V+cO/zNmWoreg+3ranevtMt9Gf7d3JiGD+9tX7zzO1rGxs3z0ea7Fl6IdLkKcv5D7a/Fnb//r+0057/EjX313sfDZ84/3mxFf2J+b/UmK+395UZ960NOf9h+sr5/yC1j9//j3L+k/f/V1voDwAAAAAAAAAAAAAAADxOVVXbl4i+FRGX0vU/bV2bCQDMVn7+r5K8XK1Wq9Vq9fGrm6rx3mwWEfGX5m3q1ww/H/fDAIB59t+I+HvbnaA18i9Y/ry/evpy250BZurWBx/+8NqNG+s3b7XdEwAAAAAAAADg/5XH/1xtjP/8ckSsjKy3Z/zXt2P1oON/9vPMwwFGn/JA3xNsdYe9bmO48Rdje3zuM5PG/z4djx//uz/l/gZT2odT2hemtC+OXbqb1tgLPRpy/i82xjuv8z81Mvx6CeO/jo55P8W06I+EnP/pxuO5zv8LI+s1869+M3f5b+53xa3o7sn/7Mb7Pzl764MPX7v+/rX31t9b/9HF8+fPXbx06fLly2ffvX5j/dzO98Pp9RzI+eexr50HWpacf85c/mXJ+X8u1fIvS87/86mWf1ly/vn1nvzLkvPP733kX5ac/yupln9Zcv5fSrX8y5LzfzXV8i9Lzv/LqZZ/WXL+r6Va/mXJ+Z9JtfzLkvM/m+p95O/j4Y+RnH8+wmX/L0vOP5/ZIP+y5PwvpFr+Zcn5X0y1/MuS83891fIvS87/K6mWf1ly/pdSLf+y5Py/mmr5lyXnfznV8i9Lzv9rqZZ/WXL+X0+1/MuS838j1fIvS87/G6mWf1ly/t9MtfzLkvP/VqrlX5ac/5upln9Zdj//34wZM2byTNt/mQAAAAAAAAAAAACAUbM4nbjtbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zF3vtEGIgBCd/A5vEhOAs2fUlvvCviwnXBigFEgq9YLvetVnwDa9dAkWyaaBEwqioomr6oi0g1EaqKqyKF7SiNC+qXl6V9gV9U1FVQmpUBRSQkNqKstXMeZ7HM7Ozc9be8Xr2PJ+PFP+8O2fmnDnzzOx+1/nuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALS7+41zn20URdH8r/XHlqJ4QfPvmya3tD73upt9hAAAAMBq/W/rz+dvS584tIIrtW3zd6/4x68vLi4uFu8f/d3xLy4upgsmi2J8Y1G0Louu/PsHGu3bBE8UE42Rto9HKnY/WnH5WMXl4xWXb6i4fGPF5RMVly85AUtsKn8e07qx7a2/bilPaXF7Md66bHuPaz3R2DgyEn+W09JoXWdx/HgxX5ws5oqZju3LbRut7b95d3Nfbyvivkba9rWtuUJ++Mlj8Rga4Rxv79jX1duMvv+GYvJHP/zksT8+/9ydvWblaei4vfI477+neZyfDp8pj7VRbEznJB7nSNtxbuvxmIx2HGejdb3m37uP8/kVHufo1cNcU92P+UQx0vr7t1vnaaz9x3rpPG0Ln/uve4uiuHT1sLu3WbKvYqTY3PGZkauPz0S5Ipu30VxKLy7Grmmd3r2Cddqcs9s712n3cyI+/neH640tcwztD9P3P7VhyeN+res0at7r5Z4r3Wtw0M+VYVmDcV18u3Wnn+y5BreH+//J+5Zfgz3XTo81mO532xq8p2oNjmwYbR1zehAaretcXYM7O7Yfbe2p0ZrP3td/DU6fP3V2euHjn3jt/KmjJ+ZOzJ3evXPnzO69e/fv3z99fP7k3Ez553We7eG3uRhJz4F7wrmLz4FXd23bvlQXvzy45+FEn+fhlq5tB/08HOu+c421eUIuXdPlc+PR5kmfuDxSLPMcaz0+O1b/PEz3u+15ONb2POz5NaXH83BsBc/D5jZnd6zse5axtv96HcON+lqwpW0Ndn8/0r0GB/39yLCswYmwLv51x/JfC7aF431y6lq/HxldsgbT3Q2vPc3PpO/3J/a3Rq91eVfzgls2FBcW5s49+PjR8+fP7SzCWBMvaVsr3et1c9t9Kpas15FrXq+H5l/x5F09Pr8lnKuJ1zb/mFj2sWpus+fB/o9V66tb7/PZ8dldRRgDttbns9dX8+b5TFmyz/lsbvPp6dV/L55yadvr7/gyr78x9/+03F+6qSdGx8fK5+9oOjvjHa/HnQ/VWOu1q9Ha9/PTK3s9Hg//rfXr8e19Xo+3dm076Nfj8e47F1+PG1U/7Vid7sdzIqyTkzP9X4+b22zdda1rcqzv6/G9YTbC+X9NSAopF7WtneXWbdrX2Nh4uF9jcQ+d63R3x/bjIZs19/X0rutbp/ffW97WaLp3V63VOp3s2nbQ6zS9Xi23ThtVP327Pt2P50RYF7fv7r9Om9s8s2f1r52b4l/bXjs3VK3B8dENzWMeT4uwfL1f3BTX4IPFseJMcbKYbV26obWeGq19TT20sjW4Ify31q+VW/uswfu7th30Gkxfx5Zbe42xpXd+ALofz4mwLp56qP8abG7zpn2D/d71/vCZtE3b967dP19b7mded3Wdphv5M6/mcf7Nvv4/m21uc3L/tebM/ufpgfCZW3qcp+7n73LPqdlibc7T1nCcz+1f/jw1j6e5zRcPrHA9HSqK4uJHH279vDf8+8qfX/jO1zv+3aXXv+lc/OjDP7j1+N9ey/EDsP79tByby691bf8ytZJ//wcAAADWhZj7R8JM5H8AAACojZj74/8Vnsj/AAAAUBsx94+FmWSS/7e+6bn5n14sUjN/MYiXp9PwSLld7LjOhI8nF69qfv7hr879+C8vrmzfI0VR/OSR3+i5/dZH4nGVJsNxXnlz5+eXXvHiivZ/5LGr27X3178Ubj/en77LYHFx8WLYsFcFd6Yoim/e9vnWfiY/cLk1n3nkSGu+59KTTzS3ef5A+XG8/rMvKbf/g1D+PXT8aMf1nw3n4Xthzry99/mI1/va5dds2/e+q/uL12vc88LW3X7qg+Xtxt+T84Unyu3jeV7u+P/qc09/rbn946/qffwXR3of/9Phdr8a5n+/vNy+/TFofhyv95lw/HF/8XoPfuVbPY//ymfL7c++pdzuSJhx//eHj7e/5bn59vP1eONox/0q3lpuF/c/853fbl0eby/efvfxTxy+3HE+ovjxM/9c3s501/bx83E/0V907b95O+3rM+7/6d860nGeq/Z/5T3Pvrx5u937f6Bru9Gu63f/xqY//Mzne+4vHs+hPzvbcX8OvTs8j8P+n/pgWI/h8v+58vmO/UZH3t35+hO3/9KWix33J3rbj8r9X3n9idb8j8kf//4tL7j1hZde2Tx3RfHt95a3V7X/E390puP4v3zHjtbjES+PHf3u/S8n7v/cx6ZOn1m4MD/bdlZbvzvnHeXxbJzYtLl5vLeF19bujw+fOf+huXOTM5MzRTFZ31+hd92+EuYPynHpWq+/47HweN71e9/cfN8/fS5+/l8eLT9/+e3l161Xh+2+ED6/pXz8Fhur3P9Td9/Ren43nik/7uixD8C27f+5f0Ubhvvf/X1BXO9nX/qh1nloXtb6uhGf16s8/u/OlrfzjXBeF8NvZr7njqv7a98+/m6Ey+8tn++rPn/hZS4+rn8SHu93fq+8/Xhc8f5+N3wf862tna93cX184+JI9+23fovHpfB6UlwqL49bxfN9+fk7eh5e/D0kxaU7Wx//TrqdO6/pbi5n4eML0yfnT194fPr83ML56YWPf+LwqTMXTp8/3Ppdnoc/XHX9q69Pm1uvT7Nze/cUM5uKojhTzKzBC9aNOf7m31Z2/GcfOza7b+a+2bnjRy8cP//Y2blzJ44tLBybm1247+jx43Mfq7r+/OzBnbsO7N63a+rE/OzB/QcO7D4wNX/6TPMwyoOqsHfmI1Onzx1uXWXh4J4DOx96aM/M1Kkzs3MH983MTF2oun7ra9NU89q/PnVu7uTR8/On5qYW5j8xd3Dngb17d1X+NsBTZ48vTE6fu3B6+sLC3Lnp8r5Mnm99uvm1r+r61NPCv5Xfz3ZrlL+Ir3jXA3vT72dt+uqnlr2pcpOuXyD6XPhdNP/worP7V/JxzP3jYSaZ5H8AAADIQcz9G8JM5H8AAACojZj7N4aZyP8AAABQGzH3T4SZZJL/9f9X0f9vU//+f3m5/n9e/f+zHy17peu9/x/78/r/ebjJ/f9V71//X/+/fv3/lffn1/vx6//r/7PUsPX/Y+7fVBRZ5n8AAADIQcz9m8NM5H8AAACojZj7bwkzkf8BAACgNmLuf0GYSSb5X/9/Rf3/XVWFq/r3/73/v/5/sT77//HB0f/PxjX379/3aMeH+v+B/r/+v/6//r/+P6s2vuwlN6v/H3P/rWEmmeR/AAAAyEHM/S8MM5H/AQAAoDZi7r8tzET+BwAAgNqIuX9LmEkm+V//3/v/6//r/9e6/7/a9/9vOxj9//XB+//3p/9f4br7/xP6/+ux/z8+2OMf7v5/5eHr/3NDDNv7/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAbMfe/JMxE/gcAAIDaiLn/9jCTTPK//r/+v/6//r/+f+/9V7//f/k3/f/hov/fn/5/Be//n1f/f8DHP9z9/0G////4m7uvr/9PL8PW/4+5/6VhJpnkfwAAAMhBzP13hJnI/wAAAFAbMfe/LMxE/gcAAIDaiLl/a5hJJvlf/1//X/9f/1//v/f+q/v/Jf3/4aL/35/+fwX9f/1//f+V9f97fPOr/08vw9b/j7n/zjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+/9fmIn8DwAAALURc/+2MJNM8r/+v/6//n9e/f8HNuj/6//Xm/5/f/r/FfT/9f/1/1f4/v9LXUv/f2PVjVEbw9b/j7n/5WEmmeR/AAAAyEHM/a8IM5H/AQAAoDZi7n9lmIn8DwAAALURc/9kmEkm+V//v179/z/966deWej/6/9X7L+m/f+4DPT/M6f/35/+fwX9f/1//f816f+Tj2Hr/8fcf3eYSSb5HwAAAHIQc/89YSbyPwAAANRGzP33hpnI/wAAAFAbMfdvDzPJJP/r/9er/x/p/+v/99t/Tfv/if5/3vT/e2h7kur/V9D/1//Pvv8fv/vV/2cwhq3/H3P/q8JMMsn/AAAAkIOY++8LM5H/AQAAoDZi7n91mIn8DwAAALURc//9YSaZ5H/9f/1//X/9f/3/3vvX/1+f1mH/f7L9A+//r/+v/79+j78e/X/v/89gDVv/P+b+14SZZJL/AQAAIAcx9+8IM5H/AQAAoDbi/79Z/n+v8j8AAADUUcz9U2EmmeR//X/9/5z6/41c+//xE/r/+v8ZWIf9/w76//r/+v/r9/j1//X/WWrY+v8x9782zCST/A8AAAA5iLn/wTAT+R8AAABqI+b+6TAT+R8AAABqI+b+mTCTTPK//r/+f079f+//r/+v/19/+v/96f9X0P/X/69b/78o9P+5qYat/x9z/84wk0zyPwAAAOQg5v5dYSbyPwAAANRGzP27w0zkfwAAAKiNmPv3hJlkkv/1//X/9f/1//X/e+9f/399Wk/9/5Een9P/1//X/1+/xz+U/X/v/89NNmz9/5j7HwozyST/AwAAQA5i7t8bZiL/AwAAQG3E3L8vzET+BwAAgNqIuX9/mEkm+V//vyb9/9/8+4596//r//fb/2D6/5v0/8PU/x8u66n/38sy/fXup8V10/+voP+v/6//r//PQA1b/z/m/gNhJpnkfwAAAMhBzP2vCzOR/wEAAKA2Yu7//2Em8j8AAADURsz9PxNmkkn+1/+vSf+/i/6//n+//Xv/f/3/Oqtp/39g9P8r6P/r/+v/6/8zUDe+/x//trL+f8z9B8NMMsn/AAAAkIOY+382zET+BwAAgNqIuf/1YSbyPwAAANRGzP2Hwkwyyf/6//r/+v/6/zem///6otsw9v+bi0f/v170//vT/6+g/6//r/+v/89ADdv7/8fc/4Ywk0zyPwAAAOQg5v6Hw0zkfwAAAKiNmPvfGGYi/wMAAEBtxNz/pjCTTPK//r/+v/6//r/3/++9f/3/9Un/vz/9/wr6//r/+v/6/wzUsPX/Y+5/c5hJJvkfAAAAchBz/1vCTOR/AAAAqI2Y+98aZiL/AwAAQG3E3P+2MJNM8r/+v/6//r/+v/5/7/3r/69P+v/96f9X0P/X/9f/1/9noIat/x9z/8+FmWSS/wEAACAHMfc/EmYi/wMAAEBtxNz/9jAT+R8AAABqI+b+d4SZZJL/9f/1/9dD/79RFJeaj4n+v/5/of+v/19B/78//f8K+v/6//r/+v8M1LD1/2Puf2eYSSb5HwAAAHIQc//Ph5nI/wAAAFAbMfe/K8xE/gcAAIDaiLn/F8JMMsn/+v/6/+uh/+/9//X/V93/b15J/z8L+v/96f9X6NH/36j/r/+v/6//z3Ubtv5/zP3vDjPJJP8DAABADmLuf0+YifwPAAAAtRFz/3vDTOR/AAAAqI2Y+x8NM8kk/+v/Z9n/T3dZ/7+k/59B/9/7/2dD/78//f8K3v9f/1//X/+fgRq2/n/M/Y+FmWSS/wEAACAHMfe/L8xE/gcAAIDaiLn/F8NM5H8AAACojZj73x9mkkn+1//Psv/v/f/XrP8/1rE+cur/T7Q9nmld6v/r/68B/f/+9P8r6P/r/w9z/z+s5k3LXF//n2E0bP3/mPs/EGaSSf4HAACAHMTc/0thJvI/AAAA1EbM/b8cZiL/AwAAQG3E3P8rYSaZ5H/9f/1//X/v/+/9/3vvX/9/fdL/70//v4L+v/7/MPf/K+j/M4yGrf8fc/+vhplkkv8BAAAgBzH3fzDMRP4HAACA2oi5/3CYifwPAAAAtRFz/5Ewk0zyv/5/d/8/vqOq/r/+v/6//r/+/3o0uP7/y24tCv1//X/9f/1//X/9f1Zj2Pr/MfcfDTPJJP8DAABADmLu/7UwE/kfAAAAaiPm/mNhJvI/AAAA1EbM/bNhJpnkf/1/7/8/qP7/T/T/9f8D/f/e9P/Xhvf/70//v4L+v/6//r/+PwM1bP3/mPvnwkwyyf8AAABQY+nHwTH3Hw8zkf8BAACgNmLuPxFmIv8DAABAbcTc/6Ewk0zyv/6//r/3/78Z/f+xju31/0v6//r/g6D/35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAAAgBzH3fzjMRP4HAACA2oi5/yNhJvI/AAAA1EbM/SfDTDLJ//r/+v+59/8bRXHJ+//r//fav/7/+qT/35/+fwX9f/1//X/9fwZq2Pr/MfefCjPJJP8DAABADmLuPx1mIv8DAABAbcTcfybMRP4HAADg/9i7j2Y57yqP422PrLCYmnkJs57VLMcrNrwAtuyoYk0VYBMN2CZnMDkHk3POyeScc7SJJicTDVWiuDrnSFfdevpKt3X76f/5fDYHqyRuS74w8xvXd/4MI3f/veOWJvtf/6//797/L7by/v/+n6//P0P/r//fhKX+/tjF/foL9v//9//X3kP/r//X/0/S/+v/9f+cb279f+7++8QtTfY/AAAAdJC7/75xi/0PAAAAw8jdf03cYv8DAADAMHL3Xxu3NNn/+n/9v/5f/7+v/79F/7+t/v+E/n8jvP8/Tf+/hv5f/6//1/+zUXPr/3P33y9uabL/AQAAoIPc/fePW+x/AAAAGEbu/gfELfY/AAAADCN3/wPjlib7X/+v/9f/6/+9/7/663v/fzfp/6fp/9fQ/+v/9f/6fzZqbv1/7v4HxS1N9j8AAAB0kLv/wXGL/Q8AAADDyN1/Xdxi/wMAAMAwcvc/JG5psv/1/0fZ/8fPukH/r//f//P1/2fo//X/m3Dz4ux/J+j/l+n/11jT/y8W+v8pB+7nV//2dufzX4D+X//Psrn1/7n7Hxq3NNn/AAAA0EHu/ofFLfY/AAAADCN3//Vxi/0PAAAAw8jdf0Pc0mT/6/+9/6//1//r/1d/ff3/bvL+/7TD9///+9/3umff/t/7/4v9//vyebz/r//X/3O+ufX/uftvjFua7H8AAADoIHf/w+MW+x8AAACGkbv/EXGL/Q8AAADDyN3/yLilyf7X/7fp//dqF/2//l//r/8fnf5/mvf/19j7r7lT9Zf6/6Pt53f98+v/9f8sm1v/n7v/UXFLk/0PAAAAHeTuf3TcYv8DAADAMHL3PyZusf8BAABgGLn7Hxu3NNn/+v82/b/3//X/+n/9fwv6/2kH7P9v793/D/D+/yV+12y7nz+sbX/+Xv3/8aVfr/9nlbn1/7n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAADCN3/xPiFvsfAAAAhpG7/4lxS5P9r//X/+9G/59fQf+v/9f/6/+n7Wb/f3X9x2gm/X/z9/8H6P8v0bb7+V3//L36/2X6f1aZW/+fu/9JcUuT/Q8AAAAd5O5/ctxi/wMAAMAwcvc/JW6x/wEAAGAYufufGrc02f/6f/3/bvT/3v/X/+v/9f8Hs5v9/1n6f/2//n93P7/+X//Psrn1/7n7b4pbmux/AAAA6CB3/9PiFvsfAAAAhpG7/+lxi/0PAAAAw8jd/4y4pcn+1//r//X/+n/9/+qvr//fTfr/afr/NfT/+n/9v/6fjZpR/3/Orzq5eGbc0mT/AwAAQAe5+58Vt9j/AAAAMIzc/c+OW+x/AAAAGEbu/ufELU32v/5/Nv3/Xs43Vv9/arFY6P8XTfv/U+f8/azvS/2//v8I6P+n6f/XGKb/v+qifttp2/38YV348x/s+0D/r/9n82bU/+/9de7+58YtTfY/AAAAdJC7/3lxi/0PAAAAw8jd//y4xf4HAACAYeTuf0Hc0mT/6/8vov+/5j8v+O/n/f/9n9/7/6u/Pzr1/97/X3aQ/v8/9P+Hpv+fpv9fY5j+/9KM2/97/1//z7bMrf/P3f/CuOn4pf2/TQEAAABmKHf/i+KWJv/8HwAAADrI3f/iuMX+BwAAgB1109KP5O5/SdzSZP/r/zf7/v/xc35M/6//P//7Q/+v//f+/+Wn/5928P7/ztP6f/2//l//r//nsObW/+fuf2nc0mT/AwAAQAe5+2+OW+x/AAAAGEbu/pfFLfY/AAAADCN3/8vjlib7X/+/2f7/XPp//f/53x/6f/2//v/yO8r+/9jQ/b/3//X/+v8t9P8nzv5L/T9juIj+//Tp09df9v4/d/8r4pYm+x8AAAA6yN3/yrjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/037//xW1//v0f/r/1d9ff3/bvL+/zT9/xr6f/2/9//1/2zU3N7/z93/mrilyf4HAACADnL3vzZusf8BAABgGLn7Xxe32P8AAAAwjNz9r49bmux//X/T/t/7//p//f9R9/93LvT/R2In+v9TF/76c+//b9T/6/8ntOv/73b1vr/U/+v/WTa3/j93/xvilib7HwAAADrI3f/GuMX+BwAAgGHk7n9T3GL/AwAAwDBy9785bjrWZP/r//X/+n/9v/5/9dc/4vf/jy8WC/3/BuxE/z9h7v2/9//1/1Pa9f/n0f/r/1k2t/4/d/9b4pYm+x8AAAA6yN3/1rjF/gcAAIBh5O5/W9xi/wMAAMAwcve/PW5psv/1//p//b/+f/j+/8ad6P+9/78h+v9p+v819P/6f/2//p8jsa3+P3f/O+KWJvsfAAAAOsjd/864xf4HAACAYeTuf1fcYv8DAADAMHL3vztuabL/9f/6f/2//v/E7Pr/k/v+/Zq8/6//3xD9/zT9/xr6f/2//v8m/T+bNLf3/3P3vyduabL/AQAAoIPc/e+NW/+nW/sfAAAAhpG7/31xi/0PAAAAw8jd//64pcn+1//r//X/+v/h3//X/7ei/5+m/19D/6//1/97/5+Nmlv/n7v/A3FLk/0PAAAAHeTu/2DcYv8DAADAMHL3fyhusf8BAABgGLn7b4lbmux//b/+X/+v/9f/n/l7qP8fg/5/2tH0/6f0//r/6ueviP8U6P/1/+t+PWOaW/+fu//DcUuT/Q8AAAAd5O7/SNxi/wMAAMAwcvd/NG6x/wEAAGAnHVvxY7n7Pxa3NNn/+v+p/v+Y/l//vxv9f/4R6P/3eP+/N/3/NO//r6H/v8h+/n/2/dWuvf9//v/80v/r/9m8ufX/ufs/Hrc02f8AAADQQe7+T8Qt9j8AAAAMI3f/J+MW+x8AAACGkbv/U3FLk/2v//f+v/5/gP7f+//6f4r+f5r+fw39/1bfz9/1z6//1/+zbG79f+7+T8ctTfY/AAAAdJC7/zNxi/0PAAAAw8jd/9m4xf4HAACAYezt/ozLGu5//b/+X/+v/9f/r/76+v/dpP+fpv9fQ/+v/9f/6//ZqLn1/5/b+1UnF5+PW5rsfwAAAOggd/8X4hb7HwAAAIaRu/+LcYv9DwAAAMPI3f+luKXJ/tf/6/93o/8/ffr09fp//f/+38/Z/v82/T9F/z9N/7+G/l//r//X/7NRc+v/c/d/OW5psv8BAACgg9z9X4lb7H8AAAAYRu7+r8Yt9j8AAAAMI3f/1+KWJvtf/z+D/v+k/t/7//r/hff/9f8bov+fpv9fY8T+/+TBf/vb7ucPa9ufX/+v/2fZ3Pr/3P1fj1ua7H8AAADoIHf/N+IW+x8AAACGkbv/m3GL/Q8AAADDyN3/rbilyf7X/x9d///vP7su7/+fWqz+/Pp//b/+X/9/uen/p+n/1xix/78I2+7nd/3z6//1/yybW/+fu//bcUuT/Q8AAAAd5O7/Ttxi/wMAAMAwcvd/N26x/wEAAGAYufu/F7c02f/6/xm8/z9g/7+XO+Y3i/5f/5/fl/Pu/6/U/49B/z9N/7+G/l//r//fUP+f3836/+7m1v/n7v9+3NJk/wMAAEAHuft/ELfY/wAAADCM3P23xi32PwAAAAwjd/9tccs5+39V2z0K/b/+/7L1/97/X/r+0P/Puv/3/v8g9P/TDtr/n1gcrv9P+n/9v/6/a//v/X/OmFv/n7v/h3GLf/4PAAAAO+eqC/x47v4fxS32PwAAAAwjd/+P4xb7HwAAAIaRu/8nccsdV27rIx0p/b/+X/+v/9f/r/76+v/dpP+f5v3/NfT/m+jn76L/H6P/Xyz0/xze3Pr/3P0/jVv8838AAAAYRu7+n8Ut9j8AAAAMI3f/7XGL/Q8AAADDyN3/87ilyf7X/+v/D9n/76WZM+r/73rrmX+p/5/4+vp//f/I9P/T9P9r6P+9/6//9/4/GzW3/j93/y/ilib7HwAAADrI3f/LuMX+BwAAgGHk7v9V3GL/AwAAwDBy9/86bmmy/7fW/8cftf5/5/t/7//r//X/+v9Z0f9P0/+vof/X/+v/9f9s1Nz6/9z9v4lbmux/AAAA6CB3/2/jFvsfAAAAdtBVK380d//v4hb7HwAAAIaRu//3cUuT/e/9f/2//l//r/9f/fX1/7tJ/z9N/79a/Y0aof8/fpDf8Wrb7ucPa9ufX/+v/2fZ3Pr/3P1/iFua7H8AAADoIHf/H+MW+x8AAACGkbv/jrjF/gcAAIBh5O7/U9zSZP/r//X/2+7/jy/0//r/M7bX/193+5lfqf8fgf5/2jb7/7v/1/ov6/3/rb//nx9B/6//1/+zEXPr/3P3/zluabL/AQAAoIPc/X+JW+x/AAAAGEbu/r/GLfY/AAAADCN3/9/ilib7f03/f6J+ov5/kv5//+f3/v/q7w/9/1z7/9VfX/+/m/T/02b0/v8Vq/5w9P9b7/+9/6//1/+zUXPr/3P3/z1uabL/AQAAoIPc/XfGLfY/AAAADCN3/z/iFvsfAAAAhpG7/59xS5P97/1//b/+X/+v/1/99fX/u0n/P21G/f9K+n/9/y5/fv2//p9lc+v/c/f/KwAA//9dk1th") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 0s ago: executing program 0 (id=5297): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b67040d8c560a06ffffff7f100000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): 81 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.270093][ T28] audit: type=1326 audit(1758920714.429:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.323308][ T28] audit: type=1326 audit(1758920714.459:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.404871][ T28] audit: type=1326 audit(1758920714.469:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.465263][ T28] audit: type=1326 audit(1758920714.469:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.524313][ T28] audit: type=1326 audit(1758920714.469:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.600019][ T28] audit: type=1326 audit(1758920714.469:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.4006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f877f58eec9 code=0x7ffc0000 [ 571.680141][ T786] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 571.711764][T17302] loop8: detected capacity change from 0 to 512 [ 571.726733][T17302] EXT4-fs: Ignoring removed bh option [ 571.887644][ T786] usb 7-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 571.917885][ T786] usb 7-1: config 0 interface 0 has no altsetting 0 [ 571.937702][ T786] usb 7-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 571.954568][ T786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.975411][ T786] usb 7-1: Product: syz [ 571.979659][ T786] usb 7-1: Manufacturer: syz [ 571.988834][ T786] usb 7-1: SerialNumber: syz [ 572.000666][ T786] r8152-cfgselector 7-1: config 0 descriptor?? [ 572.009341][ T786] r8152 7-1:0.0: Expected endpoints are not found [ 572.055163][T17312] loop0: detected capacity change from 0 to 1024 [ 572.063760][T17312] EXT4-fs: Ignoring removed oldalloc option [ 572.070221][T17312] EXT4-fs: Ignoring removed bh option [ 572.083222][T17312] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 572.133380][T17312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.221566][ T786] r8152-cfgselector 7-1: Unknown version 0x0000 [ 572.240249][ T786] r8152-cfgselector 7-1: USB disconnect, device number 24 [ 572.240569][T17316] loop8: detected capacity change from 0 to 1024 [ 572.285989][T16405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.387509][T17321] loop0: detected capacity change from 0 to 256 [ 572.407613][T17321] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 572.523692][T17327] netlink: 'syz.0.4034': attribute type 2 has an invalid length. [ 572.531823][T17327] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4034'. [ 572.702326][T17335] loop0: detected capacity change from 0 to 16 [ 572.717172][T17335] erofs: (device loop0): mounted with root inode @ nid 36. [ 572.726820][T17337] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.734548][T17337] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 572.883879][T17343] loop6: detected capacity change from 0 to 128 [ 572.919718][T17343] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.948853][T17343] ext4 filesystem being mounted at /756/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 572.977092][T17343] EXT4-fs (loop6): shut down requested (1) [ 573.058981][ T9325] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 573.080587][T17352] loop0: detected capacity change from 0 to 1024 [ 573.170208][T17352] hfsplus: bad catalog entry type [ 573.243145][ T58] hfsplus: b-tree write err: -5, ino 4 [ 573.259230][ T5829] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 573.268967][T17356] loop6: detected capacity change from 0 to 4096 [ 573.321110][ T5829] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 573.371206][T17356] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 573.500983][T17356] ntfs3: loop6: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 573.598883][T17360] loop0: detected capacity change from 0 to 8192 [ 573.606175][ T9325] ntfs3: loop6: ino=9, ntfs_sync_fs failed, -22. [ 573.886873][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4045'. [ 574.072994][T17381] loop6: detected capacity change from 0 to 128 [ 574.149820][T17381] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 574.165204][T17381] FAT-fs (loop6): Filesystem has been set read-only [ 574.181476][T17381] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 574.320443][ T5825] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 574.502176][ T5825] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 574.510605][ T5825] usb 1-1: config 0 has no interface number 0 [ 574.516773][ T5825] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 574.566129][ T5825] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 574.576661][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.595815][ T5825] usb 1-1: Product: syz [ 574.605957][ T5825] usb 1-1: Manufacturer: syz [ 574.616085][ T5825] usb 1-1: SerialNumber: syz [ 574.629338][ T5825] usb 1-1: config 0 descriptor?? [ 574.888664][T17388] loop9: detected capacity change from 0 to 40427 [ 574.918382][T17388] F2FS-fs (loop9): Found nat_bits in checkpoint [ 575.002260][T17388] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 575.118558][T16893] syz-executor: attempt to access beyond end of device [ 575.118558][T16893] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 575.172962][T16893] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 575.253908][ T5825] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input37 [ 575.472410][ T5825] usb 1-1: USB disconnect, device number 32 [ 575.657248][T17399] loop6: detected capacity change from 0 to 512 [ 575.703013][T17399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.721638][T17399] ext4 filesystem being mounted at /762/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.885190][T17409] loop9: detected capacity change from 0 to 512 [ 575.913653][T17409] EXT4-fs error (device loop9): ext4_get_journal_inode:5807: comm syz.9.4059: inode #1792: comm syz.9.4059: iget: illegal inode # [ 575.933970][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.934128][T17409] EXT4-fs (loop9): Remounting filesystem read-only [ 576.002227][T17409] EXT4-fs (loop9): no journal found [ 576.007526][T17409] EXT4-fs (loop9): can't get journal size [ 576.039458][T17409] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 576.058871][T17409] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 576.068373][T17409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.115542][T17409] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 576.158282][T16893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.399918][ T5858] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 576.589940][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 576.598261][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.610309][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.620531][ T5858] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 576.629689][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.643710][ T5858] usb 1-1: config 0 descriptor?? [ 576.651493][ T5858] hub 1-1:0.0: USB hub found [ 576.733077][T17424] loop9: detected capacity change from 0 to 40427 [ 576.745007][T17424] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 576.753064][T17424] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 576.764074][T17424] F2FS-fs (loop9): invalid crc value [ 576.774827][T17424] F2FS-fs (loop9): Found nat_bits in checkpoint [ 576.829729][T17424] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 576.837290][T17424] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 576.863410][ T5858] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 577.280239][ T5858] hid-generic 0003:046D:C31C.0019: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 577.520268][ T5829] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 577.620520][ T785] usb 1-1: USB disconnect, device number 33 [ 577.626562][ T5825] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 577.729981][ T5829] usb 7-1: Using ep0 maxpacket: 16 [ 577.737481][ T5829] usb 7-1: config 0 has an invalid interface number: 236 but max is 0 [ 577.745996][ T5829] usb 7-1: config 0 has no interface number 0 [ 577.752471][ T5829] usb 7-1: config 0 interface 236 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.763775][ T5829] usb 7-1: config 0 interface 236 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.777132][ T5829] usb 7-1: config 0 interface 236 has no altsetting 0 [ 577.784089][ T5829] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 577.793440][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.805262][ T5829] usb 7-1: config 0 descriptor?? [ 577.814461][ T5829] usbhid 7-1:0.236: can't add hid device: -22 [ 577.820762][ T5829] usbhid: probe of 7-1:0.236 failed with error -22 [ 577.830090][ T5825] usb 10-1: Using ep0 maxpacket: 16 [ 577.832379][T17448] loop8: detected capacity change from 0 to 32768 [ 577.844092][ T5825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.855745][ T5825] usb 10-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 577.865219][ T5825] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.875464][ T5825] usb 10-1: config 0 descriptor?? [ 578.107676][T17452] loop0: detected capacity change from 0 to 1024 [ 578.116571][T17452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 578.130125][T17452] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 578.161534][T17452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.245068][T16405] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.311762][ T5825] wacom 0003:056A:003F.001A: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.9-1/input0 [ 578.500339][ T786] usb 10-1: USB disconnect, device number 2 [ 579.209643][T17470] loop9: detected capacity change from 0 to 256 [ 579.271096][T17470] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x4abcbe05, utbl_chksum : 0xe619d30d) [ 579.434529][T17467] loop8: detected capacity change from 0 to 32768 [ 579.550274][ T5787] Bluetooth: hci4: command tx timeout [ 579.915114][T17486] loop9: detected capacity change from 0 to 2048 [ 579.965620][T17486] loop9: p1 < > p4 [ 579.978909][T17486] loop9: p4 size 8388608 extends beyond EOD, truncated [ 580.173172][T17498] loop8: detected capacity change from 0 to 512 [ 580.333174][ T785] usb 7-1: USB disconnect, device number 25 [ 580.404989][T17500] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4100'. [ 580.805190][T17486] F2FS-fs (loop9p1): Unable to read 1th superblock [ 580.833304][T17486] F2FS-fs (loop9p1): Unable to read 2th superblock [ 580.850145][ T785] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 581.070082][ T785] usb 7-1: Using ep0 maxpacket: 16 [ 581.085934][ T785] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 581.103550][ T785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.124795][ T785] usb 7-1: Product: syz [ 581.129029][ T785] usb 7-1: Manufacturer: syz [ 581.156119][ T785] usb 7-1: SerialNumber: syz [ 581.163716][ T785] usb 7-1: config 0 descriptor?? [ 581.191870][ T785] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 581.222556][T17518] loop0: detected capacity change from 0 to 2364 [ 581.506593][T17524] sp0: Synchronizing with TNC [ 581.521813][T17513] loop8: detected capacity change from 0 to 32768 [ 581.543126][T17523] [U] è`` [ 582.004746][ T785] ssu100: probe of 7-1:0.0 failed with error -71 [ 582.032714][ T785] usb 7-1: USB disconnect, device number 26 [ 582.049375][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.080159][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.101839][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.132382][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.148442][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.161115][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.171912][T17532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.178571][T17522] loop9: detected capacity change from 0 to 40427 [ 582.189196][T17532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.199719][T17522] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 582.204212][T17532] batman_adv: batadv0: Adding interface: ipvlan2 [ 582.208153][T17522] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 582.227385][T17532] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.254894][T17532] batman_adv: batadv0: Interface activated: ipvlan2 [ 582.262650][T17522] F2FS-fs (loop9): invalid crc value [ 582.275473][T17522] F2FS-fs (loop9): Found nat_bits in checkpoint [ 582.308394][T17541] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4118'. [ 582.369586][T17522] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 582.390055][T17522] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 583.534507][T17569] loop9: detected capacity change from 0 to 1024 [ 583.607748][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 583.607768][ T28] audit: type=1800 audit(1758920726.959:251): pid=17569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4130" name="file1" dev="loop9" ino=2 res=0 errno=0 [ 583.634689][T17554] loop8: detected capacity change from 0 to 40427 [ 583.687632][T17571] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4132'. [ 583.688501][ T12] hfsplus: bad catalog folder entry [ 583.717572][ T12] hfsplus: bad catalog file entry [ 583.764056][T17573] loop6: detected capacity change from 0 to 128 [ 583.790669][T17573] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 583.819242][T17573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.884595][ T28] audit: type=1800 audit(1758920727.259:252): pid=17573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4133" name="file1" dev="loop6" ino=104 res=0 errno=0 [ 583.905238][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.949972][ T28] audit: type=1800 audit(1758920727.299:253): pid=17573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4133" name="file1" dev="loop6" ino=104 res=0 errno=0 [ 584.306077][T17584] loop8: detected capacity change from 0 to 512 [ 584.374031][T17575] loop9: detected capacity change from 0 to 32768 [ 584.419377][T17575] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 584.520378][T17575] XFS (loop9): Ending clean mount [ 584.664701][T16893] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 584.827798][T17607] loop6: detected capacity change from 0 to 128 [ 584.857865][T17607] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 584.875257][T17607] hpfs: filesystem error: improperly stopped [ 584.908100][T17607] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 584.926632][T17607] hpfs: You really don't want any checks? You are crazy... [ 584.957047][T17607] hpfs: hpfs_map_sector(): read error [ 584.962630][T17607] hpfs: code page support is disabled [ 584.995008][T17607] hpfs: hpfs_map_4sectors(): unaligned read [ 585.002295][T17607] hpfs: hpfs_map_4sectors(): unaligned read [ 585.008336][T17607] hpfs: filesystem error: unable to find root dir [ 585.027266][T17609] loop8: detected capacity change from 0 to 4096 [ 585.069128][T17607] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 585.188289][ T785] kernel write not supported for file /amidi2 (pid: 785 comm: kworker/1:2) [ 585.278879][T17615] loop6: detected capacity change from 0 to 512 [ 585.333659][T17619] loop9: detected capacity change from 0 to 256 [ 585.357422][T17615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.381899][T17624] bond0: entered promiscuous mode [ 585.387258][T17624] bond_slave_0: entered promiscuous mode [ 585.393849][T17624] bond_slave_1: entered promiscuous mode [ 585.401289][T17615] ext4 filesystem being mounted at /778/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.403941][T17619] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 585.428377][T17619] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 585.458766][T17626] loop8: detected capacity change from 0 to 256 [ 585.594470][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.380145][T17660] loop8: detected capacity change from 0 to 256 [ 586.391037][T17660] exfat: Deprecated parameter 'namecase' [ 586.407198][T17660] exfat: Deprecated parameter 'utf8' [ 586.801315][T17656] loop6: detected capacity change from 0 to 32768 [ 586.822242][T17656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.4164 (17656) [ 586.839032][T17656] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 586.854012][T17656] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 586.862867][T17656] BTRFS info (device loop6): enabling ssd optimizations [ 586.871373][T17656] BTRFS info (device loop6): using spread ssd allocation scheme [ 586.879067][T17656] BTRFS info (device loop6): setting nodatacow, compression disabled [ 586.887289][T17656] BTRFS info (device loop6): not using ssd optimizations [ 586.894649][T17656] BTRFS info (device loop6): not using spread ssd allocation scheme [ 586.902846][T17656] BTRFS info (device loop6): max_inline at 0 [ 586.908878][T17656] BTRFS info (device loop6): using free space tree [ 586.956040][T17656] BTRFS info (device loop6): auto enabling async discard [ 587.069350][ T9325] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 587.086747][T17678] loop8: detected capacity change from 0 to 512 [ 587.222202][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.674156][T17690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4173'. [ 587.722484][T17690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4173'. [ 587.735129][T17687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4173'. [ 587.755600][T17691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4173'. [ 587.835191][T17695] loop9: detected capacity change from 0 to 256 [ 587.868228][T17695] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 587.895921][T17695] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 587.919971][T17695] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 587.928206][T17695] UDF-fs: Scanning with blocksize 512 failed [ 587.938758][T17695] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 587.992548][T17695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 588.321475][T17704] loop9: detected capacity change from 0 to 8192 [ 588.346186][T17704] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 588.385990][T17704] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 588.396053][T17704] REISERFS (device loop9): using ordered data mode [ 588.402930][T17704] reiserfs: using flush barriers [ 588.416919][T17704] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 588.434499][T17704] REISERFS (device loop9): checking transaction log (loop9) [ 588.444664][T17704] REISERFS (device loop9): Using r5 hash to sort names [ 588.452370][T17704] REISERFS warning (device loop9): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 588.466192][T17704] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 588.492089][T17704] REISERFS warning (device loop9): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 588.511598][T17704] REISERFS warning (device loop9): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 588.527498][T17704] REISERFS warning (device loop9): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 588.951494][T17705] loop8: detected capacity change from 0 to 32768 [ 589.548905][T17734] sctp: [Deprecated]: syz.9.4189 (pid 17734) Use of int in maxseg socket option. [ 589.548905][T17734] Use struct sctp_assoc_value instead [ 590.110427][ T786] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 590.320296][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 590.345948][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.375594][ T786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 590.396572][ T786] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 590.405912][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.421996][ T786] usb 1-1: config 0 descriptor?? [ 590.432238][T17766] netlink: 'syz.6.4205': attribute type 32 has an invalid length. [ 590.446593][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4205'. [ 590.466275][T17766] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 590.860460][ T786] logitech 0003:046D:C623.001B: item fetching failed at offset 8/69 [ 590.880722][ T786] logitech 0003:046D:C623.001B: parse failed [ 590.886929][ T786] logitech: probe of 0003:046D:C623.001B failed with error -22 [ 590.910555][T17782] loop9: detected capacity change from 0 to 2048 [ 590.978144][T17782] loop9: p1 < > [ 591.073324][ T5829] usb 1-1: USB disconnect, device number 34 [ 591.290849][ T785] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 591.470013][ T785] usb 7-1: Using ep0 maxpacket: 32 [ 591.478948][ T785] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 591.498568][ T785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.520116][ T785] usb 7-1: config 0 descriptor?? [ 591.611554][T17797] input: syz0 as /devices/virtual/input/input41 [ 591.648884][T17794] loop8: detected capacity change from 0 to 32768 [ 591.755276][ T785] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 591.784167][ T785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 591.814660][ T785] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 591.830204][ T785] usb 7-1: media controller created [ 591.890129][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.960081][T17790] dib0700: tx buffer length is larger than 4. Not supported. [ 592.054181][ T785] DVB: Unable to find symbol dib7000p_attach() [ 592.065790][ T785] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 592.190162][ T785] rc_core: IR keymap rc-dib0700-rc5 not found [ 592.210090][ T785] Registered IR keymap rc-empty [ 592.215373][ T785] dvb-usb: could not initialize remote control. [ 592.241015][ T785] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 592.270862][ T785] usb 7-1: USB disconnect, device number 27 [ 592.365133][ T785] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 592.492663][T17825] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 592.583380][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4234'. [ 593.184871][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4244'. [ 593.503130][T17845] loop9: detected capacity change from 0 to 32768 [ 593.515020][T17845] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.4242 (17845) [ 593.542846][T17845] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 593.561227][T17845] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 593.576331][T17845] BTRFS info (device loop9): using free space tree [ 593.638711][T17845] BTRFS info (device loop9): enabling ssd optimizations [ 593.658112][T17845] BTRFS info (device loop9): auto enabling async discard [ 594.065714][T16893] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 595.013842][T17889] loop8: detected capacity change from 0 to 32768 [ 595.239967][ T5829] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 595.438382][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 595.456216][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.473618][ T5829] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 595.490550][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.513440][ T5829] usb 7-1: config 0 descriptor?? [ 595.753041][T17926] loop8: detected capacity change from 0 to 2048 [ 595.831798][T17926] loop8: p1 < > [ 595.947272][ T5829] elan 0003:04F3:0755.001C: failed to start in urb: -90 [ 595.973804][ T5829] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 596.122118][T17934] netlink: 'syz.9.4274': attribute type 29 has an invalid length. [ 596.140320][T17934] netlink: 'syz.9.4274': attribute type 29 has an invalid length. [ 596.162699][T17934] netlink: 'syz.9.4274': attribute type 29 has an invalid length. [ 596.180510][T17934] netlink: 'syz.9.4274': attribute type 29 has an invalid length. [ 596.207174][ T786] usb 7-1: USB disconnect, device number 28 [ 596.350560][T17938] loop9: detected capacity change from 0 to 1024 [ 596.411500][T17938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 596.444413][T17938] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.512499][T17947] loop8: detected capacity change from 0 to 512 [ 596.518976][ T28] audit: type=1800 audit(1758920739.889:254): pid=17938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4276" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 596.543577][T17947] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 596.560859][T17947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 596.580259][T17947] EXT4-fs (loop8): write access unavailable, skipping orphan cleanup [ 596.598732][T17947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 596.623071][T16893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 596.713837][T17947] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.4279: dx entry: limit 0 != root limit 125 [ 596.751131][T17947] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.4279: Corrupt directory, running e2fsck is recommended [ 596.861601][T12073] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 597.545685][T17981] vxcan1: tx address claim with dlc 0 [ 597.815554][T17991] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4298'. [ 598.009411][T18001] program syz.6.4303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.136312][T18008] loop9: detected capacity change from 0 to 128 [ 598.526161][T18024] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 598.536274][T18024] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 598.547309][T18024] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 598.671795][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4316'. [ 598.786298][T18031] pimreg1: tun_chr_ioctl cmd 1074025677 [ 598.798997][T18031] pimreg1: linktype set to 1 [ 599.374869][ T5829] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 599.433550][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 599.470348][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 599.557985][T18065] loop6: detected capacity change from 0 to 4096 [ 599.571985][T18065] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 599.572083][ T5829] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.601228][ T5829] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.618909][ T5829] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 599.639937][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.651219][ T5829] usb 10-1: Product: syz [ 599.657802][ T5829] usb 10-1: Manufacturer: syz [ 599.663827][ T5829] usb 10-1: SerialNumber: syz [ 599.827543][T18075] loop8: detected capacity change from 0 to 1024 [ 599.835286][T18075] EXT4-fs: Ignoring removed nobh option [ 599.841526][T18075] EXT4-fs: Ignoring removed oldalloc option [ 599.847702][T18075] EXT4-fs: Ignoring removed orlov option [ 599.902316][ T5829] usb 10-1: 0:2 : does not exist [ 599.921107][ T5829] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 599.976153][ T5829] usb 10-1: USB disconnect, device number 3 [ 601.309375][T18117] loop6: detected capacity change from 0 to 1024 [ 601.326982][T18118] tap0: tun_chr_ioctl cmd 35108 [ 601.416296][T18117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 601.487455][T18117] ext4 filesystem being mounted at /825/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.735296][T18117] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: comm syz.6.4357: lblock 0 mapped to illegal pblock 0 (length 6) [ 601.757913][T18117] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 601.771709][T18129] EXT4-fs error (device loop6): ext4_ext_remove_space:2929: inode #15: comm syz.6.4357: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 601.792800][T18117] EXT4-fs (loop6): This should not happen!! Data will be lost [ 601.792800][T18117] [ 601.902461][T18129] EXT4-fs error (device loop6) in ext4_setattr:5645: Corrupt filesystem [ 602.050829][ T12] EXT4-fs error (device loop6): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 602.120407][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 602.150118][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 602.150118][ T12] [ 602.177905][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 602.553558][T18142] loop6: detected capacity change from 0 to 64 [ 603.316668][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 603.480612][T18144] loop8: detected capacity change from 0 to 32768 [ 603.588815][T18163] loop9: detected capacity change from 0 to 128 [ 604.438928][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4390'. [ 604.598398][T18194] loop8: detected capacity change from 0 to 256 [ 604.787825][T18197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 604.798479][T18201] loop8: detected capacity change from 0 to 256 [ 604.822078][T18197] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 604.854874][T18202] program syz.0.4396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.879400][T18197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 604.892383][T18197] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 605.097676][T18197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 605.130234][T18197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 605.184447][T18197] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 605.216760][T18197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 605.224481][T18197] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 605.246045][T18197] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 605.506449][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4405'. [ 605.527113][T18222] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4405'. [ 605.757337][T18233] loop8: detected capacity change from 0 to 64 [ 606.179419][T18242] loop8: detected capacity change from 0 to 1024 [ 606.442240][T18230] loop9: detected capacity change from 0 to 32768 [ 606.452560][T18230] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.4409 (18230) [ 606.490570][T18230] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 606.505127][T18230] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 606.530066][T18230] BTRFS info (device loop9): force clearing of disk cache [ 606.539960][T18230] BTRFS info (device loop9): enabling auto defrag [ 606.550081][T18230] BTRFS info (device loop9): max_inline at 0 [ 606.556149][T18230] BTRFS info (device loop9): enabling disk space caching [ 606.583928][T18230] BTRFS info (device loop9): disk space caching is enabled [ 606.657973][T18230] BTRFS info (device loop9): enabling ssd optimizations [ 606.687451][T18230] BTRFS info (device loop9): rebuilding free space tree [ 606.759484][T18230] BTRFS info (device loop9): disabling free space tree [ 606.790192][T18230] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 606.810840][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 606.820075][T18230] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 606.890050][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 606.955351][T18248] loop6: detected capacity change from 0 to 32768 [ 607.001164][T16893] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 607.006564][T18248] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 607.146459][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 607.292708][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 607.327045][T18248] XFS (loop6): Ending clean mount [ 607.357417][T18248] XFS (loop6): Quotacheck needed: Please wait. [ 607.578597][T18248] XFS (loop6): Quotacheck: Done. [ 607.667318][T18294] loop8: detected capacity change from 0 to 8192 [ 607.863016][ T9325] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 608.504503][T18310] loop8: detected capacity change from 0 to 4096 [ 608.892179][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 608.913417][T18321] loop9: detected capacity change from 0 to 16 [ 608.921869][T18321] erofs: (device loop9): mounted with root inode @ nid 36. [ 608.970108][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 609.004007][T18324] loop8: detected capacity change from 0 to 64 [ 609.201513][T18332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4444'. [ 609.220262][ T5787] Bluetooth: hci3: command 0x0c1a tx timeout [ 609.382958][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 609.439131][T18340] program syz.8.4448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.530148][ T5829] IPVS: starting estimator thread 0... [ 609.630246][T18346] IPVS: using max 16 ests per chain, 38400 per kthread [ 609.830490][ T5829] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 609.928835][T18357] loop8: detected capacity change from 0 to 1024 [ 610.050038][ T5829] usb 10-1: Using ep0 maxpacket: 32 [ 610.062870][ T5829] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 610.080465][ T5829] usb 10-1: config 0 has no interface number 0 [ 610.108961][ T5829] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 610.127055][ T5829] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.138611][ T5829] usb 10-1: Product: syz [ 610.143160][ T5829] usb 10-1: Manufacturer: syz [ 610.153208][ T5829] usb 10-1: SerialNumber: syz [ 610.164776][ T5829] usb 10-1: config 0 descriptor?? [ 610.402663][ T5829] radio-si470x 10-1:0.35: this is not a si470x device. [ 610.406499][T18347] loop9: detected capacity change from 0 to 64 [ 610.476134][ T5829] radio-raremono 10-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 610.678030][ T5829] radio-raremono 10-1:0.35: raremono_cmd_main failed (-71) [ 610.718275][ T5829] radio-raremono 10-1:0.35: V4L2 device registered as radio48 [ 610.744461][ T5829] usb 10-1: USB disconnect, device number 4 [ 610.760967][ T5829] radio-raremono 10-1:0.35: Thanko's Raremono disconnected [ 611.002804][T18383] loop6: detected capacity change from 0 to 1024 [ 611.027815][T18383] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 611.069430][T18383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.144596][T18383] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: inode #11: comm syz.6.4469: missing EA_INODE flag [ 611.193308][T18383] EXT4-fs (loop6): Remounting filesystem read-only [ 611.203158][T18383] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1238: inode #18: comm syz.6.4469: ea_inode dec ref err=-5 [ 611.232310][T18383] EXT4-fs warning (device loop6): ext4_evict_inode:272: xattr delete (err -5) [ 611.300005][T16409] Bluetooth: hci3: command 0x0c1a tx timeout [ 611.330843][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.450066][ T5787] Bluetooth: hci4: command 0x0c1a tx timeout [ 611.548222][T18391] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 612.514867][T18399] loop6: detected capacity change from 0 to 32768 [ 612.536318][T18399] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.4474 (18399) [ 612.562000][T18399] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 612.579269][T18399] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 612.588877][T18399] BTRFS info (device loop6): using free space tree [ 612.707964][T18399] BTRFS info (device loop6): enabling ssd optimizations [ 612.740209][T18399] BTRFS info (device loop6): auto enabling async discard [ 612.948739][T18450] loop8: detected capacity change from 0 to 64 [ 613.179194][ T9325] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 613.566912][T18460] loop9: detected capacity change from 0 to 8 [ 613.630504][T18460] SQUASHFS error: lzo decompression failed, data probably corrupt [ 613.680018][T18460] SQUASHFS error: Failed to read block 0x91: -5 [ 613.689949][T18460] SQUASHFS error: Unable to read metadata cache entry [8f] [ 613.704859][T18460] SQUASHFS error: Unable to read inode 0x11f [ 614.036678][T18471] loop9: detected capacity change from 0 to 64 [ 614.143864][T18471] Trying to free block not in datazone [ 614.443404][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 614.480164][T18487] netlink: 'syz.6.4506': attribute type 1 has an invalid length. [ 614.970156][ T8] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 615.040389][T18506] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 615.189663][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 615.209251][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.234327][ T8] usb 7-1: config 0 descriptor?? [ 615.254463][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 615.489462][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4519'. [ 615.740641][T18522] loop8: detected capacity change from 0 to 1024 [ 615.868445][ T8] gspca_stv06xx: vv6410 sensor detected [ 616.105215][T18538] netlink: 864 bytes leftover after parsing attributes in process `syz.8.4529'. [ 616.163655][ T8] STV06xx: probe of 7-1:0.0 failed with error -71 [ 616.192512][ T8] usb 7-1: USB disconnect, device number 29 [ 616.317927][T18548] loop9: detected capacity change from 0 to 764 [ 616.334956][T18548] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 616.830430][ T785] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 616.881214][T18573] program syz.8.4546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.962275][T18579] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 616.962275][T18579] The task syz.0.4547 (18579) triggered the difference, watch for misbehavior. [ 617.040028][ T785] usb 10-1: Using ep0 maxpacket: 32 [ 617.047938][ T785] usb 10-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 617.058280][ T785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.068987][ T785] usb 10-1: config 0 descriptor?? [ 617.076151][ T785] rndis_host: probe of 10-1:0.0 failed with error -22 [ 617.289514][ T8] usb 10-1: USB disconnect, device number 5 [ 618.115358][T18596] loop8: detected capacity change from 0 to 128 [ 618.138635][T18596] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 618.150848][ T8] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 618.164622][T18596] hpfs: filesystem error: improperly stopped [ 618.172062][T18596] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 618.182247][T18596] hpfs: You really don't want any checks? You are crazy... [ 618.190412][T18596] hpfs: hpfs_map_sector(): read error [ 618.196951][T18596] hpfs: code page support is disabled [ 618.206749][T18596] hpfs: hpfs_map_4sectors(): unaligned read [ 618.217332][T18596] hpfs: hpfs_map_4sectors(): unaligned read [ 618.237088][T18596] hpfs: filesystem error: unable to find root dir [ 618.285791][T18596] hpfs: hpfs_map_4sectors(): unaligned read [ 618.351018][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 618.375740][ T8] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 618.391488][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.409774][ T8] usb 7-1: Product: syz [ 618.414117][ T8] usb 7-1: Manufacturer: syz [ 618.418767][ T8] usb 7-1: SerialNumber: syz [ 618.441128][ T8] usb 7-1: config 0 descriptor?? [ 618.463266][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 618.559049][T18590] loop9: detected capacity change from 0 to 40427 [ 618.575931][T18590] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 618.594219][T18590] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 618.613791][T18590] F2FS-fs (loop9): heap/no_heap options were deprecated [ 618.623853][T18607] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.628517][T18590] F2FS-fs (loop9): invalid crc value [ 618.634213][T18607] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.648215][T18607] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.657164][T18607] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 618.687747][T18590] F2FS-fs (loop9): Found nat_bits in checkpoint [ 618.814143][T18590] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 618.831041][T18590] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 618.878017][ T8] gspca_se401: ExtraFeatures: 255 [ 618.886057][ T8] gspca_se401: Too many frame sizes [ 618.895902][T16893] syz-executor: attempt to access beyond end of device [ 618.895902][T16893] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 618.923340][T16893] F2FS-fs (loop9): Remounting filesystem read-only [ 619.106847][ T8] usb 7-1: USB disconnect, device number 30 [ 619.238518][T18611] loop8: detected capacity change from 0 to 32768 [ 619.529511][ T8] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 619.564928][ T8] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 619.749423][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.767226][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.785230][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.795342][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.823286][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.849976][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.857507][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.865064][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.879916][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.887462][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.913952][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.928601][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.949958][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.967714][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 619.987996][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.003051][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.011846][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.020370][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.027931][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.035504][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.053702][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.069960][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.087678][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.097806][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.120765][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.135703][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.160064][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.188331][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.200082][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.217819][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.235547][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.253301][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.270015][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.297802][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.309940][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.327644][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.340281][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.360088][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.370063][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.387631][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.410048][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.417551][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.442807][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.460131][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.467608][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.468605][T18641] loop6: detected capacity change from 0 to 2048 [ 620.481164][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.494564][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.503749][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.515072][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.528503][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.533538][T18641] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 620.548203][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.554004][T18641] UDF-fs: Scanning with blocksize 512 failed [ 620.555751][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.573838][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.581612][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.589156][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.597039][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.604776][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.608422][T18641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.618427][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.636620][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.644427][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.669957][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.683055][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.694107][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.701791][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.709324][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.723679][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.733606][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.747062][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.758987][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.770511][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.778063][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.785717][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.793367][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.805366][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.813039][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.820809][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.828327][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.839027][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.846635][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.867790][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.875478][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.886800][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.900516][ T8] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 620.925059][ T8] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.03 Device [syz1] on syz1 [ 621.089310][T18658] loop8: detected capacity change from 0 to 512 [ 621.486468][T18652] loop6: detected capacity change from 0 to 32768 [ 621.499195][T18652] XFS: noikeep mount option is deprecated. [ 621.543764][T18652] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 621.610948][ T5825] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 621.688017][T18652] XFS (loop6): Ending clean mount [ 621.700239][T18652] XFS (loop6): Quotacheck needed: Please wait. [ 621.795266][T18652] XFS (loop6): Quotacheck: Done. [ 621.809948][ T5825] usb 9-1: Using ep0 maxpacket: 32 [ 621.819458][ T5825] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 621.829212][ T5825] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.844508][T18688] nbd0: detected capacity change from 0 to 549764202496 [ 621.847294][ T5825] usb 9-1: config 0 descriptor?? [ 621.865760][ T5787] block nbd0: Receive control failed (result -32) [ 621.974857][T18690] loop9: detected capacity change from 0 to 1024 [ 621.983502][T18690] EXT4-fs: Ignoring removed bh option [ 621.994592][T18690] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 622.015693][ T9325] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 622.043022][T18690] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.098774][ T5825] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 622.127002][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 622.152687][T18690] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.4592: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 622.180418][ T5825] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 622.196908][ T5825] usb 9-1: media controller created [ 622.208539][T18690] EXT4-fs (loop9): Remounting filesystem read-only [ 622.218794][T18690] overlayfs: cleanup of 'index/#e' failed (-5) [ 622.237205][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.293766][ T5825] az6027: usb out operation failed. (-71) [ 622.310326][ T5825] az6027: usb out operation failed. (-71) [ 622.316130][ T5825] stb0899_attach: Driver disabled by Kconfig [ 622.330295][ T5825] az6027: no front-end attached [ 622.330295][ T5825] [ 622.337973][ T5825] az6027: usb out operation failed. (-71) [ 622.351624][ T5825] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 622.391629][ T5825] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 622.424428][ T5825] dvb-usb: schedule remote query interval to 400 msecs. [ 622.431549][ T5825] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 622.442767][ T5825] usb 9-1: USB disconnect, device number 18 [ 622.537951][ T5825] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 622.612050][T16893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.768189][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.945593][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.077405][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.166216][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4599'. [ 623.587458][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.912473][T16409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.927288][T16409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.960174][T16409] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.993430][T16409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 624.024453][T16409] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 624.033893][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.570089][ T785] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 624.710068][T18735] program syz.8.4611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.736396][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.765677][ T785] usb 1-1: Using ep0 maxpacket: 8 [ 624.781297][ T785] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.818565][ T785] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 624.826744][T18724] loop6: detected capacity change from 0 to 40427 [ 624.836525][T18724] F2FS-fs (loop6): Corrupted extension count (720933 + 1 > 64) [ 624.880143][T18724] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 624.888449][ T785] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.898392][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.912505][T18724] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 624.918499][ T785] usb 1-1: Product: syz [ 624.928387][T18724] F2FS-fs (loop6): Image doesn't support compression [ 624.928661][ T785] usb 1-1: Manufacturer: syz [ 624.943934][T18737] loop8: detected capacity change from 0 to 512 [ 624.945677][T18714] chnl_net:caif_netlink_parms(): no params data found [ 624.952870][T18724] F2FS-fs (loop6): Image doesn't support compression [ 624.957676][ T785] usb 1-1: SerialNumber: syz [ 624.978962][T18724] F2FS-fs (loop6): invalid crc value [ 624.993958][T18724] F2FS-fs (loop6): Found nat_bits in checkpoint [ 625.067922][T18724] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 625.075448][T18724] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 625.124859][T18724] syz.6.4607: attempt to access beyond end of device [ 625.124859][T18724] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 625.223213][ T785] cdc_ncm 1-1:1.0: bind() failure [ 625.233177][ T785] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 625.240832][ T785] cdc_ncm 1-1:1.1: bind() failure [ 625.250662][ T785] usb 1-1: USB disconnect, device number 35 [ 625.264301][ T9325] syz-executor: attempt to access beyond end of device [ 625.264301][ T9325] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 625.293005][ T9325] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 625.327730][ T9325] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 625.399577][T18714] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.407514][T18714] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.422191][T18714] bridge_slave_0: entered allmulticast mode [ 625.429754][T18714] bridge_slave_0: entered promiscuous mode [ 625.448718][T18714] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.458908][T18714] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.474242][T18714] bridge_slave_1: entered allmulticast mode [ 625.485490][T18714] bridge_slave_1: entered promiscuous mode [ 626.090193][ T5787] Bluetooth: hci0: command tx timeout [ 626.096757][T18714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.370048][ T58] hsr_slave_0: left promiscuous mode [ 626.397532][ T58] hsr_slave_1: left promiscuous mode [ 626.410983][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.418455][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.470916][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.478488][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.508647][ T58] bridge_slave_1: left allmulticast mode [ 626.517852][ T58] bridge_slave_1: left promiscuous mode [ 626.534318][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.553468][ T58] bridge_slave_0: left allmulticast mode [ 626.559184][ T58] bridge_slave_0: left promiscuous mode [ 626.575375][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.596243][T18761] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.4621'. [ 626.607872][T18761] netlink: zone id is out of range [ 626.613305][T18761] netlink: zone id is out of range [ 626.618913][T18761] netlink: del zone limit has 8 unknown bytes [ 626.690253][ T58] veth1_macvtap: left promiscuous mode [ 626.695871][ T58] veth0_macvtap: left promiscuous mode [ 626.712249][ T58] veth1_vlan: left promiscuous mode [ 626.718402][ T58] veth0_vlan: left promiscuous mode [ 627.888151][ T58] team0 (unregistering): Port device team_slave_1 removed [ 627.986320][ T58] team0 (unregistering): Port device team_slave_0 removed [ 628.069897][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.156749][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.190216][ T5787] Bluetooth: hci0: command tx timeout [ 628.913042][ T58] bond0 (unregistering): Released all slaves [ 629.021261][T18714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.152328][T18714] team0: Port device team_slave_0 added [ 629.199549][T18714] team0: Port device team_slave_1 added [ 629.278518][T18780] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4629'. [ 629.290043][T18780] netlink: 58 bytes leftover after parsing attributes in process `syz.8.4629'. [ 629.310296][T18714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.317719][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.353112][T18714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.439098][T18714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.446373][T18714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.476178][T18714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.715503][T18714] hsr_slave_0: entered promiscuous mode [ 629.726728][T18714] hsr_slave_1: entered promiscuous mode [ 629.735840][T18714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.746394][T18714] Cannot create hsr debugfs directory [ 630.119454][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4636'. [ 630.260444][ T5787] Bluetooth: hci0: command tx timeout [ 630.401018][T18801] loop6: detected capacity change from 0 to 1024 [ 630.408842][T18801] EXT4-fs: Ignoring removed oldalloc option [ 630.416801][T18801] EXT4-fs: Ignoring removed bh option [ 630.423059][T18801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 630.451388][T18801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.550556][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.014768][T18818] sp0: Synchronizing with TNC [ 631.111184][T18823] Falling back ldisc for ttyS3. [ 631.138205][T18828] loop8: detected capacity change from 0 to 1024 [ 631.267058][T18714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 631.289146][T18714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 631.343450][T18714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 631.382484][T18714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 631.601264][T18714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.641744][T18714] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.657264][T18850] can0: slcan on ttyS3. [ 631.675113][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.682404][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.729110][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.736375][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.810490][T18850] can0 (unregistered): slcan off ttyS3. [ 631.858986][T18853] can0: slcan on ttyS3. [ 631.970502][T18849] can0 (unregistered): slcan off ttyS3. [ 632.143384][T18863] loop8: detected capacity change from 0 to 16 [ 632.155394][T18863] erofs: (device loop8): mounted with root inode @ nid 36. [ 632.168392][T18714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.186939][T18863] erofs: (device loop8): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 632.202086][T18863] erofs: (device loop8): z_erofs_readahead: readahead error at folio 9 @ nid 36 [ 632.214345][T18863] erofs: (device loop8): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 632.223885][T18863] erofs: (device loop8): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 632.233364][T18863] erofs: (device loop8): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 632.248405][T18863] syz.8.4662: attempt to access beyond end of device [ 632.248405][T18863] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 632.277300][T18714] veth0_vlan: entered promiscuous mode [ 632.299818][T18714] veth1_vlan: entered promiscuous mode [ 632.320287][T18863] syz.8.4662: attempt to access beyond end of device [ 632.320287][T18863] loop8: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 632.346083][T18868] trusted_key: syz.6.4664 sent an empty control message without MSG_MORE. [ 632.347824][ T5787] Bluetooth: hci0: command tx timeout [ 632.358915][T18863] syz.8.4662: attempt to access beyond end of device [ 632.358915][T18863] loop8: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 632.383319][T18714] veth0_macvtap: entered promiscuous mode [ 632.412497][T18863] syz.8.4662: attempt to access beyond end of device [ 632.412497][T18863] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 632.427494][T18863] syz.8.4662: attempt to access beyond end of device [ 632.427494][T18863] loop8: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 632.427770][T18714] veth1_macvtap: entered promiscuous mode [ 632.546361][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.573997][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.607305][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.619680][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.635111][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.645708][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.676884][T18714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.705470][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.728133][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.746050][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.768299][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.778356][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.781559][T18882] loop8: detected capacity change from 0 to 1024 [ 632.789037][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.809695][T18714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 632.828160][T18714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.848571][T18714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.856197][T18883] loop6: detected capacity change from 0 to 4096 [ 632.874839][T18714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.883895][T18714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.899618][T18714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.917487][T18714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.084281][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.112749][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.206738][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.238859][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.994841][T18913] loop8: detected capacity change from 0 to 2048 [ 634.266062][T18919] loop1: detected capacity change from 0 to 512 [ 634.305822][T18919] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 634.399510][T18919] futex_wake_op: syz.1.4685 tries to shift op by 32; fix this program [ 634.516574][T18923] loop6: detected capacity change from 0 to 8192 [ 634.544287][T18923] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 634.576428][T18925] loop8: detected capacity change from 0 to 512 [ 634.611007][T18925] EXT4-fs: Ignoring removed nobh option [ 634.761039][T18933] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4691'. [ 635.089987][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4699'. [ 635.123024][T18946] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 635.623453][T18963] /dev/loop0: Can't open blockdev [ 635.634669][T18963] /dev/loop0: Can't open blockdev [ 635.865241][T18965] loop1: detected capacity change from 0 to 4096 [ 635.896674][T18965] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 636.069900][ T786] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 636.260064][ T786] usb 7-1: Using ep0 maxpacket: 32 [ 636.282601][ T786] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.297485][ T786] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 636.307160][ T786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.326236][ T786] usb 7-1: Product: syz [ 636.339959][ T786] usb 7-1: Manufacturer: syz [ 636.344679][ T786] usb 7-1: SerialNumber: syz [ 636.381057][ T786] usb 7-1: config 0 descriptor?? [ 636.399034][ T786] usb 7-1: bad CDC descriptors [ 636.412769][ T786] usb 7-1: unsupported MDLM descriptors [ 636.506372][T18975] loop8: detected capacity change from 0 to 512 [ 636.641712][ T785] usb 7-1: USB disconnect, device number 31 [ 636.728582][T18969] loop1: detected capacity change from 0 to 40427 [ 636.757021][T18969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 636.849602][T18969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 637.041460][T18714] syz-executor: attempt to access beyond end of device [ 637.041460][T18714] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 637.065977][T18714] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 638.066999][T19014] /dev/loop0: Can't open blockdev [ 638.298713][T19018] loop6: detected capacity change from 0 to 1024 [ 638.359939][T19018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.426535][T19008] loop1: detected capacity change from 0 to 32768 [ 638.482108][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.501543][T19004] loop8: detected capacity change from 0 to 40427 [ 638.505990][T19008] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 638.831928][T18714] ocfs2: Unmounting device (7,1) on (node local) [ 639.162441][T19043] loop1: detected capacity change from 0 to 128 [ 639.190171][T19043] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 639.238258][T19043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.339223][T19043] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 640.565167][T19094] loop1: detected capacity change from 0 to 128 [ 640.612094][T19094] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 640.819454][T19100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.968568][T19105] netlink: 11 bytes leftover after parsing attributes in process `syz.6.4769'. [ 641.204732][T19116] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 641.786426][ T28] audit: type=1326 audit(1758920785.159:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 641.849373][ T28] audit: type=1326 audit(1758920785.179:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 641.849428][ T28] audit: type=1326 audit(1758920785.189:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 641.849472][ T28] audit: type=1326 audit(1758920785.189:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 641.849515][ T28] audit: type=1326 audit(1758920785.189:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 641.849567][ T28] audit: type=1326 audit(1758920785.189:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 641.849610][ T28] audit: type=1326 audit(1758920785.189:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.8.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32cf8eec9 code=0x7ffc0000 [ 642.052341][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.102352][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.935339][T19150] loop8: detected capacity change from 0 to 32768 [ 642.974152][T19146] syz.6.4787 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 643.341831][T19160] loop6: detected capacity change from 0 to 2048 [ 643.370793][T19160] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 643.439097][T19161] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.923697][T19181] loop8: detected capacity change from 0 to 2048 [ 643.978973][T19185] nvme_fabrics: missing parameter 'transport=%s' [ 643.986948][T19185] nvme_fabrics: missing parameter 'nqn=%s' [ 644.409030][ T28] audit: type=1800 audit(1758920787.779:262): pid=19190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.4806" name="/newroot/925/bus/#4838//deleted" dev="tmpfs" ino=4838 res=0 errno=0 [ 645.103600][T19226] tipc: Started in network mode [ 645.108553][T19226] tipc: Node identity 2d0b50e1d8a655f0002e, cluster identity 4711 [ 645.125673][T19221] loop6: detected capacity change from 0 to 4096 [ 645.146871][T19221] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 645.327334][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4825'. [ 645.344600][T19234] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4825'. [ 645.366223][T19234] batadv1: entered promiscuous mode [ 645.374590][T19234] batadv1: entered allmulticast mode [ 645.803454][T19253] bond_slave_0: entered promiscuous mode [ 645.811502][T19255] loop6: detected capacity change from 0 to 524287999 [ 645.828418][T19253] bond_slave_0: left promiscuous mode [ 646.328660][T19275] Bluetooth: MGMT ver 1.22 [ 646.560241][T19282] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 646.742462][T19286] loop1: detected capacity change from 0 to 64 [ 647.317845][T19278] loop6: detected capacity change from 0 to 40427 [ 647.326832][T19278] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 647.346248][T19278] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 647.383727][T19278] F2FS-fs (loop6): Found nat_bits in checkpoint [ 647.474854][T19278] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 647.482238][T19278] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 647.579178][ T9325] syz-executor: attempt to access beyond end of device [ 647.579178][ T9325] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 647.599296][ T9325] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 647.676399][T19296] loop1: detected capacity change from 0 to 32768 [ 647.692028][T19296] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.4853 (19296) [ 647.708965][T19296] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 647.725296][T19296] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 647.734974][ T8] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 647.743500][T19296] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 647.753323][T19296] BTRFS info (device loop1): use lzo compression, level 0 [ 647.761605][T19296] BTRFS info (device loop1): using free space tree [ 647.808595][T19296] BTRFS info (device loop1): enabling ssd optimizations [ 647.817056][T19296] BTRFS info (device loop1): auto enabling async discard [ 647.940994][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 647.974938][ T8] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 647.998309][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.033703][ T8] usb 1-1: Product: syz [ 648.044416][ T8] usb 1-1: Manufacturer: syz [ 648.049180][ T8] usb 1-1: SerialNumber: syz [ 648.056719][ T8] usb 1-1: config 0 descriptor?? [ 648.072477][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 648.213286][T18714] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 648.564707][ T5875] kernel write not supported for file /media1 (pid: 5875 comm: kworker/0:5) [ 648.584721][T19333] loop8: detected capacity change from 0 to 512 [ 648.704820][ T8] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 648.903511][T19342] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4866'. [ 648.939580][ T8] usb 1-1: USB disconnect, device number 36 [ 649.143976][T19353] loop1: detected capacity change from 0 to 2048 [ 649.158793][T19353] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 649.349981][ T785] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 649.552068][ T785] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 649.566047][ T785] usb 7-1: config 1 has no interface number 0 [ 649.572482][ T785] usb 7-1: config 1 interface 105 has no altsetting 0 [ 649.602546][ T785] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 649.620803][ T785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.630889][ T785] usb 7-1: Product: syz [ 649.635113][ T785] usb 7-1: Manufacturer: syz [ 649.639923][ T785] usb 7-1: SerialNumber: syz [ 649.655457][T19368] loop1: detected capacity change from 0 to 16 [ 649.669413][T19368] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 649.814558][T19372] loop1: detected capacity change from 0 to 136 [ 649.949740][T19376] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 650.240214][ T5825] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 650.438508][T19392] netem: incorrect gi model size [ 650.445206][T19392] netem: change failed [ 650.457118][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 650.469302][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short [ 650.481892][ T785] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 650.503931][ T5825] usb 1-1: config 4 interface 0 has no altsetting 0 [ 650.511147][ T785] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 650.534385][ T5825] usb 1-1: string descriptor 0 read error: -22 [ 650.550833][ T785] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 650.562119][ T5825] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 650.579543][ T5825] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 650.590288][ T785] aqc111 7-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 650.609596][ T5825] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 650.622854][ T5825] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 650.635010][ T785] usb 7-1: USB disconnect, device number 32 [ 650.642656][ T785] aqc111 7-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 650.654825][ T5825] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 650.662686][ T5825] usb 1-1: media controller created [ 650.711444][ T785] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 650.726549][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 650.736732][ T785] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 650.749712][ T785] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 650.998788][T19397] loop1: detected capacity change from 0 to 32768 [ 651.006988][T19397] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.4892 (19397) [ 651.025841][T19397] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 651.036294][T19397] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 651.046555][T19397] BTRFS info (device loop1): enabling ssd optimizations [ 651.053651][T19397] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 651.063194][T19397] BTRFS info (device loop1): force zstd compression, level 3 [ 651.070731][T19397] BTRFS info (device loop1): ignoring data csums [ 651.077144][T19397] BTRFS info (device loop1): turning on async discard [ 651.084122][T19397] BTRFS warning (device loop1): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 651.095044][T19397] BTRFS info (device loop1): metadata ratio 0 [ 651.101234][T19397] BTRFS info (device loop1): using free space tree [ 651.270294][T18714] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 651.411570][T19416] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4894'. [ 651.857623][ T5825] zl10353_read_register: readreg error (reg=127, ret==0) [ 651.958860][ T5825] usb 1-1: USB disconnect, device number 37 [ 652.120291][T19414] loop6: detected capacity change from 0 to 40427 [ 652.170413][T19414] F2FS-fs (loop6): invalid crc value [ 652.188953][T19414] F2FS-fs (loop6): Found nat_bits in checkpoint [ 652.315041][T19414] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 652.546467][ T9325] syz-executor: attempt to access beyond end of device [ 652.546467][ T9325] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 652.570225][ T9325] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 652.616191][T19423] loop1: detected capacity change from 0 to 32768 [ 652.636928][T19423] XFS: ikeep mount option is deprecated. [ 652.695271][T19423] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 652.793784][T19423] XFS (loop1): Ending clean mount [ 652.831149][T19423] XFS (loop1): Quotacheck needed: Please wait. [ 652.978204][T19423] XFS (loop1): Quotacheck: Done. [ 653.264449][T18714] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 654.733543][T19495] loop1: detected capacity change from 0 to 16 [ 654.760943][T19495] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 654.769982][ T786] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 654.961666][ T786] usb 9-1: not running at top speed; connect to a high speed hub [ 654.984148][ T786] usb 9-1: config index 0 descriptor too short (expected 2322, got 18) [ 655.008354][ T786] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 655.024139][ T786] usb 9-1: config 95 has no interface number 0 [ 655.033145][ T786] usb 9-1: config 95 interface 1 has no altsetting 0 [ 655.045403][ T786] usb 9-1: string descriptor 0 read error: -22 [ 655.052394][ T786] usb 9-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 655.061795][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.147773][T19505] netlink: 'syz.0.4930': attribute type 2 has an invalid length. [ 655.510750][ T1144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.637630][ T786] usb 9-1: USB disconnect, device number 19 [ 655.646459][ T1144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.859169][ T1144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.027790][ T1144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.425831][ T1144] tipc: Left network mode [ 656.598687][T16409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.620392][T16409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.626535][T19515] loop6: detected capacity change from 0 to 32768 [ 656.642374][T19515] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 scanned by syz.6.4938 (19515) [ 656.657822][T16409] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.668497][T19515] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 656.687143][T16409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.694610][T19515] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 656.704600][T19515] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 656.719546][T19515] BTRFS info (device loop6): use lzo compression, level 0 [ 656.735185][T16409] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 656.739592][T19515] BTRFS info (device loop6): using free space tree [ 656.759968][T16409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.016964][T19515] BTRFS info (device loop6): enabling ssd optimizations [ 657.025807][T19515] BTRFS info (device loop6): auto enabling async discard [ 657.289285][T19524] loop8: detected capacity change from 0 to 32768 [ 657.347189][T19524] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 657.432285][ T9325] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 657.542327][T19524] XFS (loop8): Ending clean mount [ 657.677134][T12073] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 657.815555][T19521] chnl_net:caif_netlink_parms(): no params data found [ 658.254642][T19521] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.269745][T19521] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.277184][T19521] bridge_slave_0: entered allmulticast mode [ 658.302243][T19521] bridge_slave_0: entered promiscuous mode [ 658.422738][T19521] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.430552][T19521] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.437929][T19521] bridge_slave_1: entered allmulticast mode [ 658.445552][T19521] bridge_slave_1: entered promiscuous mode [ 658.562637][ T1144] hsr_slave_0: left promiscuous mode [ 658.568853][ T1144] hsr_slave_1: left promiscuous mode [ 658.600506][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.608000][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.631386][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.638871][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.660798][ T1144] bridge_slave_1: left allmulticast mode [ 658.666561][ T1144] bridge_slave_1: left promiscuous mode [ 658.672487][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.683972][ T1144] bridge_slave_0: left allmulticast mode [ 658.690223][ T1144] bridge_slave_0: left promiscuous mode [ 658.700337][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.835543][ T5787] Bluetooth: hci0: command tx timeout [ 658.868601][ T1144] veth1_macvtap: left promiscuous mode [ 658.900012][ T1144] veth0_macvtap: left promiscuous mode [ 658.905748][ T1144] veth1_vlan: left promiscuous mode [ 658.947287][ T1144] veth0_vlan: left promiscuous mode [ 658.954837][ T28] audit: type=1326 audit(1758920802.329:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbdcd85d67 code=0x7ffc0000 [ 659.023754][ T28] audit: type=1326 audit(1758920802.329:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbdcd2af79 code=0x7ffc0000 [ 659.071410][ T28] audit: type=1326 audit(1758920802.329:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbdcd85d67 code=0x7ffc0000 [ 659.155793][ T28] audit: type=1326 audit(1758920802.329:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbdcd2af79 code=0x7ffc0000 [ 659.201543][ T28] audit: type=1326 audit(1758920802.329:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbdcd85d67 code=0x7ffc0000 [ 659.251889][ T28] audit: type=1326 audit(1758920802.329:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbdcd2af79 code=0x7ffc0000 [ 659.305343][ T28] audit: type=1326 audit(1758920802.329:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbdcd85d67 code=0x7ffc0000 [ 659.337033][ T28] audit: type=1326 audit(1758920802.329:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbdcd2af79 code=0x7ffc0000 [ 659.363377][ T28] audit: type=1326 audit(1758920802.329:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbdcd85d67 code=0x7ffc0000 [ 659.387796][ T28] audit: type=1326 audit(1758920802.329:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19571 comm="syz.6.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbbdcd2af79 code=0x7ffc0000 [ 659.840094][ T5879] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 660.038094][ T5879] usb 9-1: Using ep0 maxpacket: 16 [ 660.045617][ T5879] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.056509][ T5879] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.068497][ T5879] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 660.077847][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.086623][ T5879] usb 9-1: Product: syz [ 660.090881][ T5879] usb 9-1: Manufacturer: syz [ 660.095521][ T5879] usb 9-1: SerialNumber: syz [ 660.496752][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 660.526550][ T5879] usb 9-1: 0:2 : does not exist [ 660.607469][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 660.706975][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.807107][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.920757][ T5787] Bluetooth: hci0: command tx timeout [ 660.956925][ T5879] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 660.994743][ T5879] usb 9-1: USB disconnect, device number 20 [ 661.766345][T19590] loop8: detected capacity change from 0 to 16 [ 661.773635][T19590] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 662.036462][ T1144] bond0 (unregistering): Released all slaves [ 662.240247][T19521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.249744][T19584] tap0: tun_chr_ioctl cmd 2147767517 [ 662.268016][T19521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.428110][T19521] team0: Port device team_slave_0 added [ 662.455715][T19521] team0: Port device team_slave_1 added [ 662.568711][T19521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.582296][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.621967][T19521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.643910][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'. [ 662.676563][T19521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.700242][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.769957][T19521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.955406][T19521] hsr_slave_0: entered promiscuous mode [ 662.977156][ T5787] Bluetooth: hci0: command tx timeout [ 662.988668][T19521] hsr_slave_1: entered promiscuous mode [ 663.006084][T19521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 663.045258][T19521] Cannot create hsr debugfs directory [ 663.425485][T19607] loop8: detected capacity change from 0 to 32768 [ 664.179732][ C0] vkms_vblank_simulate: vblank timer overrun [ 664.205626][T19624] loop6: detected capacity change from 0 to 32768 [ 664.294171][T19624] ialloc: diAlloc returned -28! [ 664.676756][T19626] loop8: detected capacity change from 0 to 32768 [ 664.686503][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 664.686520][ T28] audit: type=1326 audit(1758920808.059:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19634 comm="syz.0.4978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3462d8eec9 code=0x0 [ 664.720744][T19626] XFS: ikeep mount option is deprecated. [ 664.865128][T19521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 664.878044][T19521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 664.889622][T19521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 664.912825][T19521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 665.049933][ T5787] Bluetooth: hci0: command tx timeout [ 665.090636][T19521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.125418][T19521] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.156739][T16464] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.163979][T16464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.207305][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.214576][T16464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.290396][T19653] netlink: 'syz.6.4981': attribute type 1 has an invalid length. [ 665.693155][ T8] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 665.731070][T19521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.842773][T19521] veth0_vlan: entered promiscuous mode [ 665.887788][T19521] veth1_vlan: entered promiscuous mode [ 665.892303][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.909356][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.931486][ T8] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 665.945908][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 665.958255][T19676] loop8: detected capacity change from 0 to 128 [ 665.964726][ T8] usb 7-1: SerialNumber: syz [ 666.019477][T19521] veth0_macvtap: entered promiscuous mode [ 666.035357][T19521] veth1_macvtap: entered promiscuous mode [ 666.080994][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.098490][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.114327][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.126185][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.144797][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.156318][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.192083][ T8] usb 7-1: 0:2 : does not exist [ 666.203937][T19521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.233478][ T8] usb 7-1: USB disconnect, device number 33 [ 666.243022][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.254596][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.275149][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.286312][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.303167][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.315643][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.325973][T19521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 666.336303][T19521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.349149][T19521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.366700][T19521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.379434][T19521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.389907][T19521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.398879][T19521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.573859][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.590937][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.636503][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.648171][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.957532][T19693] loop6: detected capacity change from 0 to 64 [ 667.173574][T19696] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 667.384350][T19704] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5002'. [ 667.761537][T19716] Bluetooth: MGMT ver 1.22 [ 668.125909][T19726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5012'. [ 668.361626][T19711] loop8: detected capacity change from 0 to 32768 [ 668.856010][T19728] loop6: detected capacity change from 0 to 32768 [ 668.907872][T19728] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 669.063015][T19728] XFS (loop6): Ending clean mount [ 669.144729][T19748] veth0_to_bond: entered allmulticast mode [ 669.221091][ T9325] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 669.757628][T19756] serio: Serial port pty32 [ 669.803918][T19763] syzkaller0: tun_chr_ioctl cmd 35092 [ 670.151742][T19776] netlink: 88 bytes leftover after parsing attributes in process `syz.8.5031'. [ 670.165051][T19775] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5030'. [ 670.207896][T19780] loop6: detected capacity change from 0 to 1024 [ 670.315176][ T58] hfsplus: b-tree write err: -5, ino 4 [ 670.329723][T19783] sp0: Synchronizing with TNC [ 670.754073][T19788] loop6: detected capacity change from 0 to 32768 [ 670.762652][T19788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.5037 (19788) [ 670.780520][T19788] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.791053][T19788] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 670.799982][T19788] BTRFS info (device loop6): using free space tree [ 670.835126][T19788] BTRFS info (device loop6): enabling ssd optimizations [ 670.843071][T19788] BTRFS info (device loop6): auto enabling async discard [ 670.914584][ T9325] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 671.325968][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.415000][T19822] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 671.429579][ C0] vkms_vblank_simulate: vblank timer overrun [ 671.601455][T19829] loop8: detected capacity change from 0 to 2048 [ 671.941434][T19838] loop8: detected capacity change from 0 to 164 [ 671.977274][T19838] rock: directory entry would overflow storage [ 671.986670][T19838] rock: sig=0x4543, size=28, remaining=18 [ 672.205010][T19826] loop3: detected capacity change from 0 to 40427 [ 672.217049][T19826] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 672.229847][T19826] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 672.256032][T19826] F2FS-fs (loop3): invalid crc value [ 672.272715][T19826] F2FS-fs (loop3): Found nat_bits in checkpoint [ 672.408336][T19826] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 672.420080][T19826] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 672.438702][T19860] [U] ^G„ [ 672.443709][T19859] [U] ^G [ 672.710035][ T5858] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 672.889928][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 672.897514][ T5858] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.908943][ T5858] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 672.918061][ T5858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 672.929490][ T5858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 672.942076][ T5858] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 672.952551][ T5858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.999116][ T5858] hub 7-1:1.0: bad descriptor, ignoring hub [ 673.010795][ T5858] hub: probe of 7-1:1.0 failed with error -5 [ 673.017422][ T5858] cdc_wdm 7-1:1.0: skipping garbage [ 673.035684][ T5858] cdc_wdm 7-1:1.0: skipping garbage [ 673.059048][ T5858] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 673.066735][ T5858] cdc_wdm 7-1:1.0: Unknown control protocol [ 673.078631][T19873] netlink: 'syz.3.5066': attribute type 11 has an invalid length. [ 673.331757][ T23] usb 7-1: USB disconnect, device number 34 [ 673.740777][T19901] loop3: detected capacity change from 0 to 2048 [ 673.783504][T19901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.915657][T19912] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5082'. [ 674.006220][T19521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.719940][ T786] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 674.765436][ T5879] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 674.923140][ T786] usb 9-1: Using ep0 maxpacket: 16 [ 674.946198][ T786] usb 9-1: config 0 has an invalid interface number: 94 but max is 0 [ 674.960004][ T786] usb 9-1: config 0 has no interface number 0 [ 674.977489][ T786] usb 9-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 674.980007][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 674.990023][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.002855][ T5879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 675.009550][ T5879] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 675.019859][ T786] usb 9-1: Product: syz [ 675.024091][ T786] usb 9-1: Manufacturer: syz [ 675.039033][ T786] usb 9-1: SerialNumber: syz [ 675.039589][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.055392][ T786] usb 9-1: config 0 descriptor?? [ 675.072409][ T786] usb 9-1: unsupported MDLM descriptors [ 675.072418][ T5879] usb 7-1: config 0 descriptor?? [ 675.331224][ T8] usb 9-1: USB disconnect, device number 21 [ 675.503778][ T5879] hid (null): invalid report_size 41201 [ 675.514026][ T5879] hid (null): unknown global tag 0xe [ 675.519405][ T5879] hid (null): unknown global tag 0xe [ 675.535236][ T5879] hid (null): bogus close delimiter [ 675.669444][T19959] loop3: detected capacity change from 0 to 32768 [ 675.692751][T19959] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 675.697418][ T5879] usb 7-1: USB disconnect, device number 35 [ 675.736626][T19959] XFS (loop3): Ending clean mount [ 675.746682][T19959] XFS (loop3): Quotacheck needed: Please wait. [ 675.827061][T19959] XFS (loop3): Quotacheck: Done. [ 675.913025][T19959] XFS (loop3): User initiated shutdown received. [ 675.919618][T19959] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 675.937571][T19959] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 675.984870][T19521] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 676.266440][ T5879] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 676.341096][ T8] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 676.452210][ T5879] usb 9-1: config 5 has an invalid interface number: 3 but max is 0 [ 676.469943][ T5879] usb 9-1: config 5 has no interface number 0 [ 676.493236][ T5879] usb 9-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 676.510124][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.518199][ T5879] usb 9-1: Product: syz [ 676.534528][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 676.540033][ T5879] usb 9-1: Manufacturer: syz [ 676.540056][ T5879] usb 9-1: SerialNumber: syz [ 676.545760][ T5879] ftdi_sio 9-1:5.3: FTDI USB Serial Device converter detected [ 676.564368][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 676.565309][ T5879] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 676.573420][ T8] usb 1-1: too many configurations: 73, using maximum allowed: 8 [ 676.596225][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 676.609264][ T8] usb 1-1: can't read configurations, error -71 [ 676.796859][ T785] usb 9-1: USB disconnect, device number 22 [ 676.804913][ T785] ftdi_sio 9-1:5.3: device disconnected [ 676.821134][T19996] sctp: [Deprecated]: syz.3.5118 (pid 19996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 676.821134][T19996] Use struct sctp_sack_info instead [ 677.097377][T20003] loop6: detected capacity change from 0 to 512 [ 677.154253][T20003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.187447][T20003] ext4 filesystem being mounted at /996/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.246570][T20003] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #4: comm syz.6.5121: corrupted inode contents [ 677.270358][T20003] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #4: comm syz.6.5121: mark_inode_dirty error [ 677.295154][T20003] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #4: comm syz.6.5121: corrupted inode contents [ 677.309853][T20003] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #4: comm syz.6.5121: mark_inode_dirty error [ 677.366717][T20003] Quota error (device loop6): write_blk: dquota write failed [ 677.385211][T20003] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 677.410261][T20003] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 677.434350][T20003] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.5121: Failed to acquire dquot type 1 [ 677.462187][T20011] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #4: comm syz.6.5121: corrupted inode contents [ 677.504244][T20011] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #4: comm syz.6.5121: mark_inode_dirty error [ 677.534962][T20011] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #4: comm syz.6.5121: corrupted inode contents [ 677.570597][T20011] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #4: comm syz.6.5121: mark_inode_dirty error [ 677.610319][T20011] Quota error (device loop6): write_blk: dquota write failed [ 677.617933][T20011] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 677.656004][T20011] EXT4-fs error (device loop6): ext4_acquire_dquot:6940: comm syz.6.5121: Failed to acquire dquot type 1 [ 677.733023][T20005] loop3: detected capacity change from 0 to 32768 [ 677.754667][T20005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5122 (20005) [ 677.769191][T20012] Quota error (device loop6): write_blk: dquota write failed [ 677.790301][T20012] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 677.800963][T20016] loop8: detected capacity change from 0 to 4096 [ 677.813042][T20005] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 677.826571][T20005] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 677.850301][T20005] BTRFS info (device loop3): max_inline at 0 [ 677.880349][T20005] BTRFS info (device loop3): enabling disk space caching [ 677.887463][T20005] BTRFS info (device loop3): setting nodatasum [ 677.904130][T20005] BTRFS info (device loop3): turning off barriers [ 677.911103][T20005] BTRFS info (device loop3): turning on flush-on-commit [ 677.918704][T20005] BTRFS info (device loop3): doing ref verification [ 677.927349][ T9325] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.936556][T20005] BTRFS info (device loop3): force clearing of disk cache [ 677.944594][T20005] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 677.955119][T20005] BTRFS info (device loop3): use zstd compression, level 3 [ 677.964166][T20005] BTRFS info (device loop3): max_inline at 0 [ 677.970918][T20005] BTRFS info (device loop3): disk space caching is enabled [ 678.119995][T20005] BTRFS info (device loop3): enabling ssd optimizations [ 678.127023][T20005] BTRFS info (device loop3): auto enabling async discard [ 678.174536][T20005] BTRFS info (device loop3): rebuilding free space tree [ 678.214364][T20005] BTRFS info (device loop3): disabling free space tree [ 678.236032][T20005] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 678.260457][T20005] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 678.285018][T20005] BTRFS info (device loop3): checking UUID tree [ 678.452253][T19521] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 678.832422][T20046] syz_tun: entered allmulticast mode [ 678.858415][T20045] syz_tun: left allmulticast mode [ 679.007616][T20035] loop8: detected capacity change from 0 to 32768 [ 679.049551][T20048] loop3: detected capacity change from 0 to 2048 [ 679.084974][T20048] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 679.129502][T20048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 679.562271][T20044] loop6: detected capacity change from 0 to 40427 [ 679.590042][T20044] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 679.623473][T20044] F2FS-fs (loop6): invalid crc value [ 679.629329][T20044] F2FS-fs (loop6): invalid crc value [ 679.635205][T20044] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 679.677814][T20060] loop3: detected capacity change from 0 to 1024 [ 679.685979][T20060] EXT4-fs: Ignoring removed bh option [ 679.736396][T20060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.818897][T20060] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz.3.5137: directory missing '.' [ 679.907514][T19521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.287785][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5149'. [ 680.492901][T20096] loop8: detected capacity change from 0 to 64 [ 680.594209][T20099] netlink: 'syz.0.5153': attribute type 8 has an invalid length. [ 681.144507][T20101] loop6: detected capacity change from 0 to 32768 [ 681.145354][T20119] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 681.159450][T20101] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.5154 (20101) [ 681.182794][T20101] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 681.197764][T20101] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 681.206672][T20101] BTRFS info (device loop6): enabling disk space caching [ 681.218793][T20101] BTRFS info (device loop6): use no compression [ 681.225720][T20101] BTRFS info (device loop6): force clearing of disk cache [ 681.233180][T20101] BTRFS info (device loop6): turning on sync discard [ 681.240203][T20101] BTRFS info (device loop6): disabling disk space caching [ 681.320791][T20101] BTRFS info (device loop6): enabling ssd optimizations [ 681.348790][T20101] BTRFS info (device loop6): rebuilding free space tree [ 681.405311][T20101] BTRFS info (device loop6): disabling free space tree [ 681.414849][T20101] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 681.440238][T20101] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 681.522208][ T28] audit: type=1800 audit(1758921080.890:377): pid=20101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5154" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 681.700960][T20101] BTRFS info (device loop6): balance: start -sconvert=raid0,soft [ 681.793164][T20101] BTRFS info (device loop6): relocating block group 1048576 flags system [ 681.997211][T20101] BTRFS info (device loop6): balance: ended with status: 0 [ 682.080230][ T9325] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 682.150654][ T785] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 682.393848][ T785] usb 4-1: Using ep0 maxpacket: 32 [ 682.422557][ T785] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 682.438163][ T785] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 682.452698][T20150] loop8: detected capacity change from 0 to 32768 [ 682.459340][ T785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 682.474101][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 682.492332][ T785] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 682.512400][ T785] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 682.539864][ T785] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 682.569478][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.600587][ T785] usb 4-1: config 0 descriptor?? [ 682.803919][ T5879] Process accounting resumed [ 682.827145][ T785] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 682.907342][T20179] loop8: detected capacity change from 0 to 256 [ 682.935888][T20177] Process accounting resumed [ 683.026695][ T785] usb 4-1: USB disconnect, device number 3 [ 683.035655][ T785] usblp0: removed [ 683.431365][ T786] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 683.455848][T16409] Bluetooth: hci4: sending frame failed (-49) [ 683.466185][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 683.620073][ T786] usb 9-1: Using ep0 maxpacket: 32 [ 683.631517][ T786] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 683.649919][ T786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.670983][ T786] usb 9-1: config 0 descriptor?? [ 683.891570][ T786] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 683.919914][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.940391][ T786] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 683.947632][ T786] usb 9-1: media controller created [ 683.996737][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.100499][ T786] az6027: usb out operation failed. (-71) [ 684.118610][ T786] az6027: usb out operation failed. (-71) [ 684.132811][ T786] stb0899_attach: Driver disabled by Kconfig [ 684.159874][ T786] az6027: no front-end attached [ 684.159874][ T786] [ 684.167362][ T786] az6027: usb out operation failed. (-71) [ 684.189870][ T786] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 684.199632][ T786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input46 [ 684.240835][ T786] dvb-usb: schedule remote query interval to 400 msecs. [ 684.248525][ T786] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 684.269312][ T786] usb 9-1: USB disconnect, device number 23 [ 684.340725][T20212] loop6: detected capacity change from 0 to 22 [ 684.370710][ T786] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 684.374562][T20212] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 684.425638][T20212] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 684.998407][T20227] IPv6: NLM_F_CREATE should be specified when creating new route [ 685.067676][ T5879] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 685.283673][ T5879] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 685.301005][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.315589][ T5879] usb 7-1: config 0 descriptor?? [ 685.320931][T20238] block nbd1: server does not support multiple connections per device. [ 685.323392][T20238] block nbd1: shutting down sockets [ 685.335285][ T5879] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 685.438900][T20245] loop8: detected capacity change from 0 to 128 [ 685.524634][T20248] loop3: detected capacity change from 0 to 64 [ 686.142349][ T5879] gspca_sunplus: reg_w_riv err -71 [ 686.147630][ T5879] sunplus: probe of 7-1:0.0 failed with error -71 [ 686.176668][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.180948][ T5879] usb 7-1: USB disconnect, device number 36 [ 686.529509][T20284] loop8: detected capacity change from 0 to 512 [ 686.536998][T20284] EXT4-fs: Ignoring removed oldalloc option [ 686.633322][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5234'. [ 686.700764][ T786] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 686.901724][ T786] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 686.922403][ T786] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 686.939115][ T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 686.949100][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.960845][T20282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 686.982636][ T786] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 687.223553][T20309] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5244'. [ 687.257030][T20305] loop8: detected capacity change from 0 to 8192 [ 687.300587][ T785] usb 1-1: USB disconnect, device number 40 [ 687.578441][T20322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5249'. [ 688.184916][T20327] loop3: detected capacity change from 0 to 32768 [ 688.204699][T20327] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.5251 (20327) [ 688.253833][T20327] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 688.274209][T20327] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 688.295805][T20327] BTRFS info (device loop3): enabling auto defrag [ 688.309326][T20327] BTRFS info (device loop3): allowing degraded mounts [ 688.321850][T20327] BTRFS info (device loop3): max_inline at 8 [ 688.328021][T20327] BTRFS info (device loop3): turning on sync discard [ 688.340040][T20327] BTRFS info (device loop3): using free space tree [ 688.471907][T20327] BTRFS info (device loop3): enabling ssd optimizations [ 688.696011][T20362] bridge0: port 3(ip6gretap0) entered disabled state [ 688.703072][T20362] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.794280][T19521] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 688.994884][T20368] netlink: 'syz.6.5264': attribute type 16 has an invalid length. [ 689.030137][T20368] netlink: 'syz.6.5264': attribute type 3 has an invalid length. [ 689.037963][T20368] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.5264'. [ 689.909069][T20388] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5273'. [ 690.944368][T20372] loop6: detected capacity change from 0 to 65536 [ 690.997527][T20372] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 691.074545][T20372] XFS (loop6): Ending clean mount [ 691.264960][ T9325] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 691.376590][T20436] loop3: detected capacity change from 0 to 1024 [ 691.530536][T20436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 691.543247][T20436] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.645529][T19521] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 691.670212][T20430] loop8: detected capacity change from 0 to 32768 [ 691.771600][T20441] C: renamed from team_slave_0 (while UP) [ 691.788797][T20441] netlink: 'syz.3.5292': attribute type 2 has an invalid length. [ 691.814599][T20441] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5292'. [ 691.840123][T20441] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 691.905747][T20443] mkiss: ax0: crc mode is auto. [ 692.156003][T20452] loop6: detected capacity change from 0 to 64 [ 692.215509][T20452] [ 692.217921][T20452] ====================================================== [ 692.224967][T20452] WARNING: possible circular locking dependency detected [ 692.232027][T20452] syzkaller #0 Not tainted [ 692.236475][T20452] ------------------------------------------------------ [ 692.243510][T20452] syz.6.5295/20452 is trying to acquire lock: [ 692.249593][T20452] ffff88805e5f5bf8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 692.260430][T20452] [ 692.260430][T20452] but task is already holding lock: [ 692.267823][T20452] ffff88802b9ba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 692.277392][T20452] [ 692.277392][T20452] which lock already depends on the new lock. [ 692.277392][T20452] [ 692.287821][T20452] [ 692.287821][T20452] the existing dependency chain (in reverse order) is: [ 692.296869][T20452] [ 692.296869][T20452] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 692.305023][T20452] __mutex_lock+0x129/0xcc0 [ 692.310108][T20452] hfs_find_init+0x17e/0x1f0 [ 692.315276][T20452] hfs_extend_file+0x2ef/0x1220 [ 692.320692][T20452] hfs_bmap_reserve+0x107/0x430 [ 692.326121][T20452] hfs_cat_create+0x1b4/0x620 [ 692.331373][T20452] hfs_create+0x66/0xd0 [ 692.336103][T20452] path_openat+0x1277/0x3190 [ 692.341254][T20452] do_filp_open+0x1c5/0x3d0 [ 692.346322][T20452] do_sys_openat2+0x12c/0x1c0 [ 692.351648][T20452] __x64_sys_openat+0x139/0x160 [ 692.357054][T20452] do_syscall_64+0x55/0xb0 [ 692.362031][T20452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.368489][T20452] [ 692.368489][T20452] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 692.377715][T20452] __lock_acquire+0x2ddb/0x7c80 [ 692.383103][T20452] lock_acquire+0x197/0x410 [ 692.388137][T20452] __mutex_lock+0x129/0xcc0 [ 692.393178][T20452] hfs_extend_file+0xdb/0x1220 [ 692.398487][T20452] hfs_bmap_reserve+0x107/0x430 [ 692.403916][T20452] __hfs_ext_write_extent+0x1fa/0x470 [ 692.409930][T20452] __hfs_ext_cache_extent+0x6b/0x9b0 [ 692.415759][T20452] hfs_extend_file+0x317/0x1220 [ 692.421143][T20452] hfs_get_block+0x3d8/0xbd0 [ 692.426274][T20452] __block_write_begin_int+0x566/0x1ad0 [ 692.432358][T20452] block_write_begin+0x9a/0x1e0 [ 692.437743][T20452] cont_write_begin+0x5c8/0x7e0 [ 692.443133][T20452] hfs_write_begin+0x8b/0xd0 [ 692.448264][T20452] generic_perform_write+0x2fb/0x5b0 [ 692.454117][T20452] generic_file_write_iter+0xaf/0x2e0 [ 692.460023][T20452] vfs_write+0x43b/0x940 [ 692.464837][T20452] ksys_write+0x147/0x250 [ 692.469714][T20452] do_syscall_64+0x55/0xb0 [ 692.474695][T20452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.481138][T20452] [ 692.481138][T20452] other info that might help us debug this: [ 692.481138][T20452] [ 692.491373][T20452] Possible unsafe locking scenario: [ 692.491373][T20452] [ 692.498833][T20452] CPU0 CPU1 [ 692.504202][T20452] ---- ---- [ 692.509569][T20452] lock(&tree->tree_lock#2/1); [ 692.514454][T20452] lock(&HFS_I(tree->inode)->extents_lock); [ 692.523006][T20452] lock(&tree->tree_lock#2/1); [ 692.530405][T20452] lock(&HFS_I(tree->inode)->extents_lock); [ 692.536392][T20452] [ 692.536392][T20452] *** DEADLOCK *** [ 692.536392][T20452] [ 692.544549][T20452] 5 locks held by syz.6.5295/20452: [ 692.549757][T20452] #0: ffff88802b6b1248 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 692.559020][T20452] #1: ffff888030bdc418 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x20e/0x940 [ 692.568009][T20452] #2: ffff88805e5f3d38 (&sb->s_type->i_mutex_key#34){++++}-{3:3}, at: generic_file_write_iter+0x83/0x2e0 [ 692.579342][T20452] #3: ffff88805e5f3b78 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 692.590149][T20452] #4: ffff88802b9ba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x17e/0x1f0 [ 692.600112][T20452] [ 692.600112][T20452] stack backtrace: [ 692.606130][T20452] CPU: 1 PID: 20452 Comm: syz.6.5295 Not tainted syzkaller #0 [ 692.613600][T20452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.623672][T20452] Call Trace: [ 692.626970][T20452] [ 692.629913][T20452] dump_stack_lvl+0x16c/0x230 [ 692.634706][T20452] ? load_image+0x3b0/0x3b0 [ 692.639222][T20452] ? show_regs_print_info+0x20/0x20 [ 692.644438][T20452] ? print_circular_bug+0x12b/0x1a0 [ 692.649657][T20452] check_noncircular+0x2bd/0x3c0 [ 692.654623][T20452] ? look_up_lock_class+0x75/0x140 [ 692.659758][T20452] ? print_deadlock_bug+0x5d0/0x5d0 [ 692.664973][T20452] ? lockdep_lock+0xe0/0x220 [ 692.669660][T20452] ? check_noncircular+0x175/0x3c0 [ 692.674793][T20452] ? _find_first_zero_bit+0xd3/0x100 [ 692.680102][T20452] __lock_acquire+0x2ddb/0x7c80 [ 692.684982][T20452] ? hlock_conflict+0x5d/0x1f0 [ 692.689763][T20452] ? verify_lock_unused+0x140/0x140 [ 692.694979][T20452] ? __bfs+0x2a3/0x5c0 [ 692.699058][T20452] ? check_path+0x40/0x40 [ 692.703409][T20452] ? check_path+0x21/0x40 [ 692.707752][T20452] ? check_noncircular+0x175/0x3c0 [ 692.712906][T20452] ? look_up_lock_class+0x75/0x140 [ 692.718053][T20452] lock_acquire+0x197/0x410 [ 692.722569][T20452] ? hfs_extend_file+0xdb/0x1220 [ 692.727516][T20452] ? __might_sleep+0xe0/0xe0 [ 692.732119][T20452] ? __lock_acquire+0x2b6b/0x7c80 [ 692.737162][T20452] ? read_lock_is_recursive+0x20/0x20 [ 692.742579][T20452] __mutex_lock+0x129/0xcc0 [ 692.747100][T20452] ? hfs_extend_file+0xdb/0x1220 [ 692.752048][T20452] ? lock_chain_count+0x20/0x20 [ 692.756937][T20452] ? hfs_extend_file+0xdb/0x1220 [ 692.761881][T20452] ? verify_lock_unused+0x140/0x140 [ 692.767095][T20452] ? mutex_lock_nested+0x20/0x20 [ 692.772056][T20452] hfs_extend_file+0xdb/0x1220 [ 692.776834][T20452] ? hfs_get_block+0xbd0/0xbd0 [ 692.781706][T20452] ? __mutex_trylock_common+0x153/0x250 [ 692.787286][T20452] ? trace_raw_output_contention_end+0xd0/0xd0 [ 692.793483][T20452] ? rcu_is_watching+0x15/0xb0 [ 692.798285][T20452] ? hfs_brec_find+0x18f/0x500 [ 692.803079][T20452] ? __mutex_lock+0x304/0xcc0 [ 692.807784][T20452] hfs_bmap_reserve+0x107/0x430 [ 692.812666][T20452] __hfs_ext_write_extent+0x1fa/0x470 [ 692.818063][T20452] __hfs_ext_cache_extent+0x6b/0x9b0 [ 692.823362][T20452] ? hfs_find_init+0x17e/0x1f0 [ 692.828160][T20452] hfs_extend_file+0x317/0x1220 [ 692.833053][T20452] ? filemap_get_folios+0xe5/0x7b0 [ 692.838183][T20452] ? hfs_get_block+0xbd0/0xbd0 [ 692.842971][T20452] ? find_lock_entries+0xfe0/0xfe0 [ 692.848102][T20452] ? clean_bdev_aliases+0x55f/0x630 [ 692.853427][T20452] hfs_get_block+0x3d8/0xbd0 [ 692.858082][T20452] ? hfs_free_extents+0x430/0x430 [ 692.863155][T20452] ? _raw_spin_unlock+0x28/0x40 [ 692.868031][T20452] ? folio_add_lru+0x320/0xd50 [ 692.872817][T20452] __block_write_begin_int+0x566/0x1ad0 [ 692.878423][T20452] ? hfs_free_extents+0x430/0x430 [ 692.883468][T20452] ? folio_zero_new_buffers+0x550/0x550 [ 692.889049][T20452] ? hfs_free_extents+0x430/0x430 [ 692.894094][T20452] block_write_begin+0x9a/0x1e0 [ 692.898971][T20452] ? hfs_free_extents+0x430/0x430 [ 692.904019][T20452] cont_write_begin+0x5c8/0x7e0 [ 692.908898][T20452] ? generic_cont_expand_simple+0x200/0x200 [ 692.914813][T20452] ? fault_in_readable+0xcb/0x160 [ 692.919859][T20452] ? fault_in_readable+0xd0/0x160 [ 692.924911][T20452] hfs_write_begin+0x8b/0xd0 [ 692.929513][T20452] ? hfs_free_extents+0x430/0x430 [ 692.934560][T20452] generic_perform_write+0x2fb/0x5b0 [ 692.939979][T20452] ? generic_file_direct_write+0x3e0/0x3e0 [ 692.945816][T20452] ? __generic_file_write_iter+0xf7/0x230 [ 692.951646][T20452] ? generic_file_write_iter+0x9b/0x2e0 [ 692.957210][T20452] generic_file_write_iter+0xaf/0x2e0 [ 692.962602][T20452] vfs_write+0x43b/0x940 [ 692.966874][T20452] ? file_end_write+0x250/0x250 [ 692.971764][T20452] ? __fget_files+0x44a/0x4d0 [ 692.976461][T20452] ? __fdget_pos+0x2a3/0x330 [ 692.981061][T20452] ? ksys_write+0x75/0x250 [ 692.985492][T20452] ksys_write+0x147/0x250 [ 692.989839][T20452] ? __ia32_sys_read+0x90/0x90 [ 692.994627][T20452] ? lockdep_hardirqs_on+0x98/0x150 [ 692.999849][T20452] do_syscall_64+0x55/0xb0 [ 693.004391][T20452] ? clear_bhb_loop+0x40/0x90 [ 693.009102][T20452] ? clear_bhb_loop+0x40/0x90 [ 693.013808][T20452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.019735][T20452] RIP: 0033:0x7fbbdcd8eec9 [ 693.024168][T20452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.043798][T20452] RSP: 002b:00007fbbddcf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 693.052232][T20452] RAX: ffffffffffffffda RBX: 00007fbbdcfe5fa0 RCX: 00007fbbdcd8eec9 [ 693.060217][T20452] RDX: 000000000000fea7 RSI: 0000200000000040 RDI: 0000000000000004 [ 693.068217][T20452] RBP: 00007fbbdce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.076242][T20452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.084232][T20452] R13: 00007fbbdcfe6038 R14: 00007fbbdcfe5fa0 R15: 00007fff5df0af28 [ 693.092336][T20452] [ 693.160606][T20445] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 693.229088][T20451] loop8: detected capacity change from 0 to 32768