last executing test programs: 2m12.095804247s ago: executing program 4 (id=95): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000400)={0x20, 0xe, 0x2, "b303"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m10.056249832s ago: executing program 3 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000280), 0x0}, 0x20) 2m9.594695499s ago: executing program 32 (id=108): syz_mount_image$hfs(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000640)=ANY=[@ANYBLOB="636f6465706167653d63703835322c006fb691d2737b705dc556d65d9df1cb7dba7e22e9401baeb7cec264b4e5364639fd3f79a413496c6f41cd1a0d6fe36ee520f4e84b336e780abd660b52e8e0821bb6db0d3823e1a16d8daa1b5613f213c29a616e2ef7bbce58232e3aa6ed2a6744cf109759d8491ce6643490d484408e16eede91d78ef35b7e90df199605a94fe0527e93cb7b2a98be7d4ddee04c980658d34ab783479a07adc05722c7fc5058312dc1e6ed8f0685e0a3a445d76146412c95e4715118847084a5baa5a7e1eec512c152d9feee0b7cd673b5c2f965fcecbf0d62972a98e12a14a3d980d6a37926d88c7c32c4b2531e78e0c8693ded07ac17c49a8bc4cfe434b818197f66a1cc56b4f14d97aa4385b43eaed584945fba3020c8347647eda9ce76f38c28d3cd37153352d5efe5785c9f19a9527869f4642d1d29a7ea10e3da51121d309e4a7a7fdaccfa203a1fa4fd61722e3868e8cb60f335fafc358947ad06c161545e2d00c2f6e07081dd61822e8e83bd4f9cab70f728f5"], 0x1, 0x2e0, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x1) 2m9.546907523s ago: executing program 3 (id=112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x10000006, 0x0, {[0x7fffffff]}}, 0x0, 0x8, &(0x7f0000000000)) 2m9.428134053s ago: executing program 4 (id=113): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r0, 0x0, 0x7fff) ftruncate(r0, 0xf09) 2m8.572458032s ago: executing program 4 (id=117): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x1000, 0x1, 0x3c3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m8.013243658s ago: executing program 3 (id=119): timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 2m7.940900104s ago: executing program 4 (id=120): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000440)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) 2m7.260442439s ago: executing program 4 (id=121): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2m6.109208842s ago: executing program 3 (id=126): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3811809, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e9902, 0x5e) 2m5.456718585s ago: executing program 4 (id=129): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r0}}, 0x18) 2m5.067247766s ago: executing program 33 (id=129): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r0}}, 0x18) 2m5.053182227s ago: executing program 3 (id=132): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000300)=[0x0], &(0x7f0000000140), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000040)=[r2], &(0x7f0000000600)=[0x2], &(0x7f0000000140)=[r3, r3], &(0x7f0000000580)}) 2m1.677084411s ago: executing program 3 (id=142): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) 2m1.128227075s ago: executing program 34 (id=142): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000000) 1m40.568793861s ago: executing program 2 (id=201): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pivot_root(0x0, 0x0) 1m38.640548108s ago: executing program 2 (id=213): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfff}) 1m38.378733719s ago: executing program 2 (id=216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1m38.177215915s ago: executing program 2 (id=219): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYBLOB="747970653d25c2506b2c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d69736f383835392d352c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303030302c00118467e4c2bc915b8214a76410d8c106c8e94cd477fa867e8d7defd3fee1ddf11043edc9c69b5f32ba8740f2df79cf01d4b39e7deb49cab640d6f8dc7b4a25a8c1f2b17a54a03712cd4bf5f917d65505bd7b8559"], 0x16, 0x6bf, &(0x7f0000005440)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {0x3, 0xfff8, 0x5}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x5, 0xf3, 0x0, 0x80008, 0xd, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x4, 0x3, 0xa, 0x4, 0x79, 0xfffffffe, 0x8, 0x100, 0x8000, 0xfff, 0x400, 0x0, 0x3, 0x404, 0x9, 0x40003, 0x10, 0xffffffff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1192, 0x8, 0x5, 0x8, 0x7, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0xfbf, 0x1, 0x6, 0x4, 0xedbe, 0x4, 0x2, 0x8, 0xa3, 0xfffdfff8, 0x6, 0x80, 0x2, 0x81], [0x1, 0x80000001, 0x563, 0x2, 0x0, 0x0, 0x4, 0x854f000, 0x2, 0x93, 0xfffffff6, 0xd2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x8, 0x13, 0x100, 0x1, 0x6, 0x200, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x7, 0x8, 0x8000, 0xff, 0x4, 0x7ff, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x1, 0x2, 0x6, 0x0, 0x9, 0xffd, 0x0, 0x0, 0xfffff2a1, 0x9, 0x3cb, 0x5bda, 0x4, 0xde7e, 0x7, 0x7, 0x5, 0x4000524, 0x8001, 0x1], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x3, 0x124, 0xc, 0x1, 0x2, 0x6, 0xfffffff8, 0x9, 0x300000, 0x80000001, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x7, 0x1, 0x1ff, 0x2, 0x410, 0x20400, 0xff, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x80, 0x9, 0xb, 0x1000, 0x9, 0x6, 0xfeb, 0x5, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0x0, 0x7, 0x4, 0x10, 0x4, 0x3, 0x3, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x1007ff, 0x3ff, 0x800, 0x40, 0x6, 0x1, 0x5, 0x2, 0xfffffffe, 0x8a4, 0x5, 0xdd, 0xb5, 0x800002, 0x6, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x7ff, 0x10001, 0x1, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0x8, 0x3, 0x0, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46da, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x10, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0x7, 0x8, 0x7d1, 0x1, 0x2]}, 0x45c) 1m37.397041228s ago: executing program 2 (id=222): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed3) 1m35.884815621s ago: executing program 2 (id=229): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00)={[{@noikeep}, {@sysvgroups}]}, 0x4, 0x9864, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10) r1 = open(&(0x7f0000000080)='./file2\x00', 0x101000, 0xa2) copy_file_range(r1, 0x0, r0, 0x0, 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m35.294180199s ago: executing program 35 (id=229): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00)={[{@noikeep}, {@sysvgroups}]}, 0x4, 0x9864, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10) r1 = open(&(0x7f0000000080)='./file2\x00', 0x101000, 0xa2) copy_file_range(r1, 0x0, r0, 0x0, 0x400000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m31.129856976s ago: executing program 5 (id=246): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000057b000/0x3000)=nil, 0x3000}}) 1m29.747505608s ago: executing program 5 (id=248): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m28.693860084s ago: executing program 5 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) 1m28.397172558s ago: executing program 5 (id=255): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {0x3, 0x6, 0x5}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x5, 0xf3, 0x0, 0x8, 0x11, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x4, 0x3, 0xe, 0x4, 0x79, 0xfffffffe, 0x8, 0x100, 0x9, 0xfff, 0x400, 0x0, 0x3, 0x404, 0x9, 0x40003, 0x10, 0xffffffff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1192, 0x8, 0x5, 0x8, 0x7, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0xfbf, 0x1, 0x6, 0x4, 0xedbe, 0x4, 0x2, 0x8, 0xa3, 0xfffffff8, 0x6, 0x80, 0x2, 0x81], [0x1, 0x80000001, 0x563, 0x2, 0x0, 0x0, 0x4, 0x854f000, 0x2, 0x93, 0xfffffff6, 0xd2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x13, 0x100, 0x1, 0x6, 0x200, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x7, 0x8, 0x8000, 0xff, 0x4, 0x7ff, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x1, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x0, 0x0, 0xfffff2a1, 0x9, 0x3cb, 0x5bda, 0x4, 0xde7e, 0x7, 0x7, 0x5, 0x8, 0x8001, 0x1], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x3, 0x124, 0xc, 0x1, 0x2, 0x6, 0xfffffff8, 0x9, 0x300000, 0x2, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x7, 0x1, 0x6, 0x2, 0x410, 0x20400, 0x100, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x80, 0x9, 0x8, 0x1000, 0x9, 0x6, 0xfeb, 0x5, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0x0, 0x7, 0x4, 0x10, 0x4, 0x3, 0x3, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x1007ff, 0x3ff, 0x800, 0x40, 0x6, 0x1, 0x5, 0x2, 0xfffffffe, 0x8a4, 0x5, 0xdd, 0xb5, 0x800002, 0x6, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x7ff, 0x10001, 0x1, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0x8, 0x3, 0x0, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46da, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x10, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0xa, 0x8, 0x7d1, 0x1, 0x9]}, 0x45c) 1m27.662909377s ago: executing program 5 (id=260): socket$unix(0x1, 0x1, 0x0) open(0x0, 0x2, 0x104) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() 1m24.969006225s ago: executing program 5 (id=271): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x380c8c0, &(0x7f0000000000)={[{@abort}, {@jqfmt_vfsv0}, {@grpquota}, {@nogrpid}]}, 0x3, 0x5f6, &(0x7f0000001440)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, &(0x7f0000000240)={0x1f, 0x0, 0x10001, 0x0, 0x5, 0x0, 0x5, 0x2000000000}, 0x0, 0x0, 0x0) 1m24.330919917s ago: executing program 36 (id=271): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000001c0)='./file1\x00', 0x380c8c0, &(0x7f0000000000)={[{@abort}, {@jqfmt_vfsv0}, {@grpquota}, {@nogrpid}]}, 0x3, 0x5f6, &(0x7f0000001440)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, &(0x7f0000000240)={0x1f, 0x0, 0x10001, 0x0, 0x5, 0x0, 0x5, 0x2000000000}, 0x0, 0x0, 0x0) 35.878085183s ago: executing program 7 (id=520): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@space_cache_v1}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@datasum}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) write$snddsp(r0, &(0x7f0000000080)="a42d", 0x2) 32.670113513s ago: executing program 7 (id=532): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x5090880b, 0x0, 0x10, 0xd, 0x40, 0x0, 0x0, 0x2f, 0x1}}, 0x50) 31.207730932s ago: executing program 7 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) close(0x3) 30.943520473s ago: executing program 7 (id=541): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x512, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x100d64d, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x1, 0x4800001a, r1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 30.141253768s ago: executing program 7 (id=546): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000013c0)=[{0x0, 0x56}, {&(0x7f0000000140)=""/18, 0x12}], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r1 = syz_open_pts(r0, 0x42) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) 29.389177609s ago: executing program 7 (id=552): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0x7fffffff, 0x4) 28.954320314s ago: executing program 37 (id=552): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0x7fffffff, 0x4) 12.946265271s ago: executing program 1 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 12.59307249s ago: executing program 1 (id=626): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) 12.109809039s ago: executing program 1 (id=627): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='pids.events\x00', 0x300, 0x0) pread64(r3, &(0x7f0000000200)=""/150, 0x96, 0x92) 11.614646009s ago: executing program 1 (id=630): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3811809, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e9902, 0x5e) 10.86537284s ago: executing program 1 (id=634): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f00000000c0)=ANY=[], 0x1, 0x625, &(0x7f0000002c40)="$eJzs3U9oHNcdB/DvrFay5IKjJHZiSqAihrRU1NYflFa92C2l6BBKSA+9VthyLLxWgqQUJYdW/X/tIddCetCtp0Lvhvbc3HLVMVDoJSdBDyozO7ta2autLNvSKvl8zNv33r437735zcyudhczAb6ylqbTfJgiS9NvbZX1n+/Mt3Z35i/Uza0kZbmRNNtZirWk+efkVtopoz3DFUfN8/Hq4juffbH7ebvWrFPVv3F4iJPYrlOmkozUebJ/4XC3AdPs7x853u3ueCdVdCNTBuxamW8/1YDwbOw/pnNm/vc4mx95vQPnR9F+33zMZHIxyXj9d0DqV4fG6a7u2fP+CwAAwFfBC3vZy1YunfU6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dyp7/9f1KnRKU+l6Nz/f6x+LnX5nCkO1R6e2ToAAAAAAAAA4Nn5xl72spVLnfp+Uf3m/3pVuVw9fi0fZCMrWc/1bGU5m9nMemaTTPYMNLa1vLm5PnuMLef6bjl3OvsLAAAAAAAAAOfHzSfp/JssHfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw6BIRtpZlS53ypNpNJOMJxkr+20nn3bK59nDs14AAAAAnIIX9rKXrVzq1PeL6jP/K9Xn/vF8kLVsZjWbaWUld6rvAtqf+hu7O/Ot3Z35B2V6fNwf/OeJllGNmPZ3D/1nvlr1mMjdrFbPXM/tvJdW7qRRbVm62llP/3X9ulxTcbOtOObK7tR52f9PdT4cJquIjHYjMlOvrYzGi4Mj8YRH59GZZtPofvNz+dGZRg5teijmN48538U6L/fnD0Md87n67Pu0vGYGxzz55t//+rN7rbX79+5uTA/PLp1QHYntZh2J+Z7r8NVzGonRE201U0XiSre+lB/np5nOVN7e/1WSX2Q5m1nJVH5UlZZTdM/oycGRunWo9vb/W8lYfVzal+ARa8p6Vvus6fVq20tZzU/yXu5kJW9W/+Yym+9mIQtZ7DnCV47xStt4sqv+2rfqwkSSP9b5MBit4vpiT1x7X3Mnq7beZw6i9NLRUSpO+NrY/HpdKOf4bZ0Ph0cjMdsTiZcHny9/2S8fN1pr99fvLb9/zPneqPMylL8fqneJ8nx5qTxYVe3w2VG2vdy3bbZqu9xtazzWdqXb1vdKXe/Mv1j1fqXvSHNV26t92+artqs9bf3+3gJg6F389sWxiX9P/Gvik4nfTdybeGv8hxe+d+G1sYz+c/T7zZmRNxqvFX/LJ/nlwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DY+/Oj+cqu1sj6g0LnBzqA+T1so6hv5PMcpFIaskPGhWMbzLDQzFMs40dEBvuRubD54/8bGhx99Z/XB8rsr766sjS4sLM4sLrw5f+Puamtlpv141qsEnoeDN/2zXgkAAAAAAAAAAABwXKfx3wnOeh8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA821pOs2HKTI7c32mrO/uzLfK1Ckf9GwmaSTjZbn4R3Ir7ZTJnuGKo+b5eHXxnc++2P38YKxmp39j0HZ9jT76xHadMpVkpM6fwqHxbj/1eEV3D8uAXesEDs7a/wIAAP//XHoJeA==") r0 = creat(&(0x7f0000000100)='./file1\x00', 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) write$UHID_INPUT(r1, &(0x7f0000005b80)={0x8, {"c40c8290dadb52435965e4d7a8ca2c1c6faf4535defcf13c00c78d7cde6f1bd792703a3690a538c1586d0bdf0e259349a9a35a18ed755ca478c33cfef6d31d9f3457838b299e913a80999793b89593b472fd75aa9e7bdcb45ca20cbe9058e7b8d516239cf86826f729a79970bdede67009a4ffb293cbc367dc70bf6fd1e88f71a6950718ccb4331409030defc1ba646e4bf35c243158eeb39256ca057338e02c7f97f8e15e1f0a25f7e79f7e1dd162d73e96bc7069a7dbd10b40612b4fa7ecfc160e8ca79f0f9b18e73cd4bffd96e153bdfa83c7100bee1ea2e234440bf825a9c16a1abdb69c82a4ea4326b0e55740e425d3c55946e13c89ddf05fce4bcaeb0ab26cc1b0b1dc1d00c450260178e4695914839fea83d81403a9380d7627019aa6abf0358f0ad136fb332fde67e5f8cb183e31a8914fbd9b0b0df8c2fe71ede2f8e1fbc820f627d12e19da43a0a94ee1a63f55e0b68400b1ed02b87e58a35ee739e2205c754389454970599c816353b7849bc550b9c6a79329fe26e41133938c3469fa614404e132b79d2a1405d29fb2e63a3b5fc283c939cf278b75ec002445a4fb6688f060fec70268a689860565689f473ba0d2376999236c5bd5977dd2527b3d7bd27e67136aadaab99aeb4fed5e2aeea735fce33762cc972aaa806c18f85a9188029d6d481ea337c1fa5c977537bac06149492b68884cbdc75ab2243ca1ed20b0c7e9998cd52804ba897c23c9da581546aeb406351266386749ebe6a2dd490dd54d2ca8c9b322153916dd7b5fb9e53ebfa792d15b5322848feff8f98645531c151230781262833a48222457141f11e6752a5f73282ede6f718e6cf3806fa5b3c2e6ba91d6440a53e78f2622cf7b56e928553a7235c64511fed57bf07f2a49f5d5fce15fff69ec960906f336c7dd36d7c3124eba6085ab7ad9280ad8f03fe73ebec789611503b968be1e2e8294d8b7a27111276b3cb224a474641adeed1e3eb66ad7993b5d61c2cb05cc928463425c203c2e65492a7b471e69286cd3de5e05c0f6bf01b1164b6ccfa51a6b3ad187434eeeac34f65cfcb1f901c66e9578a1b752b943a769358d7f345d4578838714e083dd213090755ee16866e5d8240fc6f166a1ee4dc3a14df9a20d274681c8f69b44909d5e3897e855054a7e22d5a1097a4f597c5e2e54ff3e66ab3fd550396a6b26e26f5912b59b3f739a166eee431ed27ea826db3b9128f22f957306515dd9832953ac6993a6daed43605db627bc7526471fb75f0ca931f974f065ba74bb97697b9d674c9ffa0a76e4580777e119bfbe32a0e309768b8f9f86be79d259b9967e3d1e744b8a12020672e617c28c69cdbad8ffe755b0b186237d41f5c76d9572b90406249e40cf865fe9af17ff261198ab57818032467ce11871326efb0b86c599411fb843cbebe672f745921a8f807683a9d6de0c32be5e64578388ccd4fd18e9f2f28c7a110259fadb09f4c24ad603515b555b8843fb22089a035134c6823ab4989b9ed285266ee5244c8d945f79228723462e0ba7563a1f1700a715980d5ccadb99a3a8c7b6a1bd05c05d6411f1268b1bedcb08e6e7dda0f9fd163a37c99b34182c5c2c114ef7615a788059a92fa7e659777f553347c8f0265a3dd916e0a1b4e6efb189bb5fccb58964e95f41b90eb47f8dcedf5e017d45be077d5f8b002aa6345cff5731a569ff11142b6d52c85f494023d90622ce1c55ed010d399107c0b7e22e3a5a8a77f7982153bce64698df678f00e8839da9bb1d69efa34dc60348706f69d03a93cc285cf1993d47ec4a6e035808a91958cfa44f31167315ae673818f4bbfd4a49e4e203d9bb9d66baf23bce54ca8bc7d772c52400a79c79268c32238d89baa5b3bf424072c36f25132588fbaa589d4fe8d0923e8a3eb7c865e6bd7076d07a2467a3073421de6f3c8e39c5ae841e400cdd5536d51a4a38e1ec25d2aa683d1e5c7d44c84506dfd53a49fdba01d5077920ce5e47996e82be02229fcaeb77f6d5b7ec1b9dce3ba47c137a205bf10e634edfddbb9e3260c9393999ac253596eee7e094fa41f1e0d5756ca2aad2a84e5a383be85a979895841b7ccb2b4c889ded8d6cacfcbb5fb54bb835f6072e08d69a8e4603bb706c88870e30a2de025a05f64d887da8209f767166846686c27a10527346c5236caf1a6b6c960182c9ab22cc54332b5bd5173648d8007f7c221017db10aefbd0076045cf830bfb2cac3fd57869cc975ed2aed417a6c28abf388aa50ebc002295d8b472e0bf7bacd8beca1b629b693ace438a841d594749db69674754ddace2c6085eb7a9aa433aa622b8a01099520e364f11df0e0d83b8f0772dffc4c66258a04d634958149cbd84b1539d74d9fe473c436ce6fc161d7c4427ee31a5017c0e273ab4cee2ba1421d6ea368bb10b15967e78a3f3be2d4a2bbf37412361f7cdc8719a3beef60fac353ddeebd4ab874989dfbbf21115dec4ac7212a6ff1c42c0b375ede2b9f325ce1598bc14f787234aa5d071fad071e64feab09281e8d3d6ab89fbeddfa6f4d0f284912cf6d710aaa4eb2f227dc446d8be5f60cc0acffbd3760148b1c31943826a083f33053f52359a25f36929b302b5caa4db943b40befc0676527c3b9e77656dc5d32fa7f4754950cd4af1c94eaf27abc61adb17d2c47cf438df1e75a0f83208af81f35d22459e2790c5cae11a550f6536767577822cd871c4d35a4fb97b873410eb1304b7b96979219ae0bf27b87d27c146805bab3bc3c2cfda7bcdab9ec57b033ab59dbeacc96920155b5b923d1f484ee6846f55ccbee86acc5492ee2ca01a70fd6aa07e41bd751291b7a11ac43159a9f03fb4f24ecc55a7d1792a74cf180064775e899cd4d42fdb504328873607a0ef718aca77456601054302d2c30aab7ffb0fe62870d0b46aa5cbeccdb51c60729d57397b510f4b93fe83c8b701dfc3a3eaabe869f75c688073bda8670fd17879723647099fcd983956965ff2b0c13357a8a63699318d467aaf97f2f3ac05fccbf3884d40fa67bb0e7339fa0c35ba46292e8fc6fee426f7a84f0ef654bd79f8b185d1920b3932f39af798250fb19d600b92e2b54aefecf96fcf96822e665f3e12f34875b81274ba8b0ef94f53a0e6342aff80109bbe47a4fe911364ffea04e50f576da1fcf19b58ac30287412043d8159ef719e257fee1ecd1fbade33a1fcaf580ae72b696444a3151660f400f92e60efde5b44dd28cc4c1391eb3d5f278aed95448b65902f9e51e3561605120b414b2876d9a7157c835bfd807ee7f691f054d63f33500a89689d7ddc4006dac4c5c896b07b420e27d859d573ba75d9cddfa46f16fc51e7863a1c1cf5609f625a34a08e112e4b3f90c2173e09c790306496111d083a271e6d0739cf759d7699e77df7815c207e2450a50ba73e95b6be530e78a589fa9a95fab79df9f101d1109740e300f0b8d6d15d6fcd198e61c1d812666804e6271df608ecf36fc24cd220a6cbcd04e523f0692e5cc488d600c39d03c791fa45db97e3603a3bddddaf8804f71d0d94904bcac44190c3e971fa098f6714a2b8cf64e82152575fe2a0790997af2930bf441dece223cdbdc5b0f61f1bb9775522355eb6ef18ec8e1ced0cb8e9fded06f1cff928243cf90871f8b27197502a8a990ffb48fde13a6bc6c9d411d522310bc5d4a9d3cf4c47ddb00e94e1219ff61e7286ef30355cf32d00a6ece4eaa9e6df09e77586eebc5b69f86d3989269862d48fff9cf9c285f7c41d820c99533a0f160c2def6298ee2272df9b626b2bb547f094d8969cd0349c380a2a074db79e16b26251726492f2633710b69968e0e110b9553638c2769ff6a923b0ed53719a45be10ab1cc04f844f66a206b43f7f25a397c18c3363ebd0e96a37c1d00df85749f0c08a0bd97b0a57e38bebd403467eefce9266235604f7352bbb81960abb2dc820359a85afd80d4bc72f7923a870f7ee3b2408b9d6ff57de58ccbfff49bf02eda155a246fa7536bdea1f2f510ca3eee3fc5d5e70f61ac095a538996dc476d5d283790aae21c8ec00078a80a808b2d2d18a15adff133713f05df3100394da5000e6fdcdcacc5901a907bfece44c0b75967b24944c05b68d0d3ec00e724b9468e38a4b69a7b17546e0f4449b69032a448fe656407ef9ec008c9f4f1fa13d2ff17ddea0101ba4c3a98d71acc4a0e01a974385c85fa35aebcc0e7f2d7055fbc315819ecb8482775338b634b3eb411db808ac63c74bd33b2e57be1edc3f7d4d27fc1c24f4e20b58b491db90a9cd778e6007cfef7abb24a1d433a750d48cbde59b8661f0bf4b3cf5b474c44eb91c426f1c2195cd065cb87cb8c400bb897c4c434f3cc4f22148f822045b1b662fcd829d4c8794e8e7303a295aaf729ac8ceb85603c1fb778da8293437ab837e1633a3fc2c8b778a53def2cf73204be3a8048a40b8db0291ce339ae23605d1b50eea2f1f4e52a6221b5b84bae54590c5f5cca4cd4af87c884a1ebd7142af957f37727f0a9cbff27d9a47b2a493b0b1a7be18ad3f255c4f55bbff134d4634de3cade300c3dc2610f06490415000b7d78e1899a88a8901774c6d3de69216463606ec66fa7c9425ea119e677d45fc4bfcd3b6bf859458c81fb991b6ae6b2a50ca9dba3eaaa9036fedb1fd8b7edc8c50c9e6bbb01a2f2c76b93241ec1fb693376ab7076df59ec6ab40b727f70db294aa1de8ffa770b40a62e0a678231d0801072ba3c23dbccc68f2d3867f54abe4f3eec65227ffda7bf496785472f20ab533b193fd859dd2fed4f38f8edeb0ff2e2c6cd73e00ad3d5e29f5abac25d88dcbddbfe77b5ccbadfa37a6172799880a9a39145e9d740e33ef213cf4fbc56256f9f1a230aff447d848bb2df5d9e6ba15d831d754ce18a437f6df6e436c8748687a9194b83c2767216011f7e76502bb134b603692d24cb178db13dc0c0dbd2f5c9a52aabf967afde5b400207c9ce1ba439c1f2484f6155fb28ee478b0357a4519f38bdd3f406f20c3b0d9e7af75f90fb09a6bb6f019bd5c7cda9a804d8dc2182f42851ac276aa5b9135c76ffc8191e4460a83a2b798285d69b8b3484a0b3ca96f61eb4bdfd0d440c528bcb6c5a7f14c5f4b5fbf2607e23f8be3c98516c8688bac6075cf7f70209f8d3b82c485f20f9794dee9da02678a42826d8536e44ed91ba6b4a2f0bb915b421d5a80bfc2b208dd54468fde7a71f7a90ffc36fc99386f92ab0ff5557b8d6bf7ab8077b624db2cff8bb0a9633cf87eac9edc09b7a5828210ef4c84b5556b01bca1648156f8964a7a17dc9bdc776141b1a7d93b1488b6989d9e495032eba1bc7cd0c62dbaff286942ea41dfe26fb4631fcb30ad7ca8c6bb9e2b854bb5a4bc6895694f4dd7f54a7d2ceaada43d84fe591c5fe80d293c6a750c5df6cf49f39efdbd1f5800aa71b21d036930f95ca9db0f53e61b363fbb6abf78765d51b9a9a4ff22d9fede9d59e873b9ee6cace81f959059d51df0db6f565e9fb7899c2a5de0468de98e52b6371453e66739b13fb53a213bcfbab23bf6c7df2f4e2716539209d57fe04919c5ee0b46e7cd3a5fbfd9ba38cbf627bc60653bd525e5554dba813cafb37578ee0a83198c1b769efdbca8a28c4572a017ef0a97ce36b5bf623c61c29650ab73d099458333823e1bb95bf455193f1acb592c031d6fd845f59b8258d32deeacdf7f533c213ea337d85eaecf60b0f06cf20221b5c48abf3bdbe4109264fc3c68875ea3568f81d0775d5ca083bd619f8b48bd90437d92e5a77b415c7aac657a7c71e0f48e3f258858bd2c", 0x1000}}, 0x1006) write$FUSE_STATFS(r0, &(0x7f0000000280)={0x60, 0x0, 0x0, {{0x81, 0x81, 0x1000, 0x8, 0xbe7, 0x81, 0xd, 0x4}}}, 0x60) 8.864667852s ago: executing program 6 (id=643): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, 0x0}, 0x0) 8.651119389s ago: executing program 6 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) 8.441130526s ago: executing program 1 (id=646): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0x3de8e7ed, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0x2041) 7.992548183s ago: executing program 38 (id=646): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x710, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0x3de8e7ed, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0x2041) 7.982014773s ago: executing program 6 (id=651): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) 7.140200631s ago: executing program 0 (id=654): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="fc", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) unshare(0x22020600) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) 6.940753408s ago: executing program 0 (id=656): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close(0x3) 6.858312994s ago: executing program 6 (id=657): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) syz_usb_connect(0x2, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x93, 0x9, 0x5b, 0x10, 0x57c, 0x8403, 0x427d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x0, 0x2, [{{0x9, 0x4, 0x16, 0x40, 0x0, 0x65, 0xcf, 0x5b, 0x8}}]}}]}}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/mnt\x00') 6.571314108s ago: executing program 0 (id=660): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000002740)=0x6, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 6.463894647s ago: executing program 0 (id=661): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 5.764918613s ago: executing program 0 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2c}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 5.031920973s ago: executing program 8 (id=667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) write(r1, &(0x7f00000013c0)="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", 0xfffffcdf) ioctl$TCFLSH(r1, 0x540b, 0x2) 4.930024931s ago: executing program 6 (id=668): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {0x3, 0x6, 0x5}, 0x49, [0x3, 0x0, 0x4, 0x1, 0x1, 0x5, 0xf3, 0x0, 0x8, 0x11, 0x7, 0x3, 0xfffffffe, 0x101, 0x400, 0x3, 0x4, 0x3, 0xe, 0x4, 0x79, 0xfffffffe, 0x8, 0x100, 0x9, 0xfff, 0x400, 0x0, 0x3, 0x404, 0x9, 0x40003, 0x10, 0xffffffff, 0x4, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1192, 0x8, 0x5, 0x8, 0x7, 0x2, 0x10001, 0x3, 0x2b2, 0x4, 0xfbf, 0x1, 0x6, 0x4, 0xedbe, 0x4, 0x2, 0x8, 0xa3, 0xfffffff8, 0x6, 0x80, 0x2, 0x81], [0x1, 0x80000001, 0x563, 0x2, 0x0, 0x0, 0x4, 0x854f000, 0x2, 0x93, 0xfffffff6, 0xd2, 0x8b, 0x8ab, 0x3, 0x2a6d2895, 0x5, 0x13, 0x100, 0x1, 0x6, 0x200, 0x5, 0x7, 0x4a63, 0x1, 0x9, 0x8, 0x1000, 0x9, 0x4, 0xf, 0x7, 0x401, 0x7, 0x8, 0x8000, 0xff, 0x4, 0x7ff, 0x8001, 0xdfcf, 0xc1f40800, 0x9, 0x1, 0x2, 0x6, 0x0, 0x9, 0xfff, 0x0, 0x0, 0xfffff2a1, 0x9, 0x3cb, 0x5bda, 0x4, 0xde7e, 0x7, 0x7, 0x5, 0x8, 0x8001, 0x1], [0x6, 0x4, 0x7, 0xe000, 0x7, 0x3, 0x124, 0xc, 0x1, 0x2, 0x6, 0xfffffff8, 0x9, 0x300000, 0x2, 0x4, 0x8008, 0x4, 0xd, 0x9, 0x8001, 0x9, 0x7, 0x4, 0x7, 0x1, 0x6, 0x2, 0x410, 0x20400, 0x100, 0x166, 0x7, 0xc8f, 0x3, 0x8, 0x3, 0x1, 0x1000, 0x80, 0x9, 0x8, 0x1000, 0x9, 0x6, 0xfeb, 0x5, 0x8, 0x3ff, 0x3a, 0xa18858f, 0x9, 0x1, 0x9, 0x0, 0x7, 0x4, 0x10, 0x4, 0x3, 0x3, 0x40, 0x5ff, 0x3a], [0xaeaf, 0x6, 0x2, 0x1007ff, 0x3ff, 0x800, 0x40, 0x6, 0x1, 0x5, 0x2, 0xfffffffe, 0x8a4, 0x5, 0xdd, 0xb5, 0x800002, 0x6, 0x2, 0xcb32, 0x3, 0xf018, 0x9, 0x0, 0xda19, 0x80000001, 0x10001, 0x7ff, 0x10001, 0x1, 0x5, 0xcc1, 0x8, 0x1, 0x2, 0x8, 0x3, 0x0, 0x0, 0xb7b, 0xffffff4a, 0x4, 0x7886, 0xbf8d, 0x9, 0x46da, 0x1, 0x40, 0x9, 0x8, 0x10000, 0x1, 0x8, 0x10, 0x770, 0x0, 0x10001, 0x3ff, 0x5, 0xa, 0x8, 0x7d1, 0x1, 0x9]}, 0x45c) 4.56489647s ago: executing program 0 (id=669): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcf3d97900000004", @ANYRES32=0x0, @ANYBLOB="1000000000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.982967467s ago: executing program 39 (id=669): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000d0425bd7000fcf3d97900000004", @ANYRES32=0x0, @ANYBLOB="1000000000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.959496779s ago: executing program 6 (id=673): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) setpgid(r0, r0) waitid(0x2, r0, 0x0, 0x4, 0x0) wait4(0x0, 0x0, 0x2, 0x0) 3.491241287s ago: executing program 9 (id=675): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009004"]) 3.189927902s ago: executing program 8 (id=676): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4063, 0xfdf, 0x800004c4, 0x0, 0x0) 3.153492895s ago: executing program 9 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) 2.984925538s ago: executing program 8 (id=678): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) syz_usb_connect(0x2, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0x93, 0x9, 0x5b, 0x10, 0x57c, 0x8403, 0x427d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x2, 0x0, 0x2, [{{0x9, 0x4, 0x16, 0x40, 0x0, 0x65, 0xcf, 0x5b, 0x8}}]}}]}}, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/mnt\x00') 2.800776283s ago: executing program 9 (id=679): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.446263732s ago: executing program 9 (id=680): epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x14ba00, 0x109) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="93d3e4b1af"], 0x0) 1.310034894s ago: executing program 8 (id=681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 1.252039309s ago: executing program 8 (id=682): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x10001, 0x3}, 0x80) 918.713076ms ago: executing program 9 (id=683): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x8000000, 0x7, 0x0, 0xffffe}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 410.902637ms ago: executing program 9 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 0s ago: executing program 8 (id=685): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000900)="dc31dea0bc20f266dd8812d12c6fb9201e4f941c1857009fb29e75d20c977ffdb8f3d6514d74136ae9ac941552f3074e001d9393b2e60fac3af20cda79add1527f46c1eb94c6f2debfd50d084cd6a20fc819cc06027608529c31384abf2e7c8f59499f845f07a3", 0x67}, {&(0x7f0000000380)="901bc96187dd3ead2743f1445d7153fdaf0974a7d47281f9a8bb3e0b86b47cc12fdad9433b8d8f4bdab0219334605585be75fdd7bf42b6b745d76d22e8ca9925e1e48d582a0db6b1fa26f8041d78ebbef3f40f9b983f0ac52cb0235f5bb503981ca0b8f52aad0fcc327e62d3cd5167b4d2007a43d9a5e113b0b97ba8571466dfca8b7b945c21e1f597dc59182a5035a690990c365d24c0eb23", 0x99}], 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 249][ T4366] loop2: rw=1, sector=206, nr_sectors = 2 limit=64 [ 125.777104][ T5236] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 125.791818][ T5236] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.224: invalid indirect mapped block 1 (level 1) [ 125.826396][ T4366] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 125.861754][ T5236] EXT4-fs (loop6): 1 truncate cleaned up [ 125.867493][ T5236] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 125.890346][ T4366] kworker/u4:7: attempt to access beyond end of device [ 125.890346][ T4366] loop2: rw=1, sector=208, nr_sectors = 2 limit=64 [ 125.942534][ T4366] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 125.957347][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.998719][ T4366] kworker/u4:7: attempt to access beyond end of device [ 125.998719][ T4366] loop2: rw=1, sector=210, nr_sectors = 2 limit=64 [ 126.059900][ T4366] Buffer I/O error on dev loop2, logical block 105, lost async page write [ 126.146714][ T4366] kworker/u4:7: attempt to access beyond end of device [ 126.146714][ T4366] loop2: rw=1, sector=212, nr_sectors = 2 limit=64 [ 126.206642][ T4366] Buffer I/O error on dev loop2, logical block 106, lost async page write [ 126.245633][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.258533][ T4790] EXT4-fs (loop6): unmounting filesystem. [ 126.268158][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 126.315630][ T4366] kworker/u4:7: attempt to access beyond end of device [ 126.315630][ T4366] loop2: rw=2049, sector=206, nr_sectors = 2 limit=64 [ 126.369967][ T4366] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 126.413586][ T4366] kworker/u4:7: attempt to access beyond end of device [ 126.413586][ T4366] loop2: rw=2049, sector=208, nr_sectors = 2 limit=64 [ 126.497377][ T4366] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 126.514197][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.539575][ T4366] kworker/u4:7: attempt to access beyond end of device [ 126.539575][ T4366] loop2: rw=2049, sector=210, nr_sectors = 2 limit=64 [ 126.599183][ T4366] Buffer I/O error on dev loop2, logical block 105, lost async page write [ 126.625636][ T4366] kworker/u4:7: attempt to access beyond end of device [ 126.625636][ T4366] loop2: rw=2049, sector=212, nr_sectors = 2 limit=64 [ 126.658436][ T4366] Buffer I/O error on dev loop2, logical block 106, lost async page write [ 126.693099][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.884305][ T5232] loop5: detected capacity change from 0 to 40427 [ 126.915915][ T5232] F2FS-fs (loop5): invalid crc value [ 126.953356][ T5232] F2FS-fs (loop5): Found nat_bits in checkpoint [ 127.160929][ T5232] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 127.325402][ T4718] syz-executor: attempt to access beyond end of device [ 127.325402][ T4718] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.331327][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.342960][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.357654][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.389139][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.399421][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.420198][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.555301][ T5278] loop6: detected capacity change from 0 to 32768 [ 128.627801][ T5296] loop5: detected capacity change from 0 to 512 [ 128.649502][ T5278] XFS (loop6): Mounting V5 Filesystem [ 128.714381][ T5296] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.875283][ T5278] XFS (loop6): Ending clean mount [ 128.933530][ T5296] EXT4-fs (loop5): 1 orphan inode deleted [ 128.960683][ T5296] EXT4-fs (loop5): 1 truncate cleaned up [ 128.966544][ T5296] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 129.077026][ T5296] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 129.095463][ T5285] loop7: detected capacity change from 0 to 32768 [ 129.145584][ T5296] EXT4-fs (loop5): Remounting filesystem read-only [ 129.165823][ T5285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.237 (5285) [ 129.275061][ T4790] XFS (loop6): Unmounting Filesystem [ 129.318786][ T5285] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.395230][ T4718] EXT4-fs (loop5): unmounting filesystem. [ 129.405575][ T5285] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 129.460871][ T5285] BTRFS info (device loop7): setting nodatacow, compression disabled [ 129.499166][ T5285] BTRFS info (device loop7): max_inline at 0 [ 129.549450][ T5285] BTRFS info (device loop7): enabling disk space caching [ 129.559776][ T5285] BTRFS info (device loop7): turning off barriers [ 129.567190][ T5285] BTRFS info (device loop7): turning on flush-on-commit [ 129.608444][ T5285] BTRFS info (device loop7): doing ref verification [ 129.647194][ T5285] BTRFS info (device loop7): force clearing of disk cache [ 129.683628][ T5285] BTRFS info (device loop7): enabling ssd optimizations [ 129.708287][ T5285] BTRFS info (device loop7): max_inline at 4096 [ 129.744836][ T5285] BTRFS info (device loop7): disk space caching is enabled [ 129.884795][ T5287] chnl_net:caif_netlink_parms(): no params data found [ 130.039392][ T5285] BTRFS info (device loop7): rebuilding free space tree [ 130.140006][ T5285] BTRFS info (device loop7): disabling free space tree [ 130.147096][ T5285] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.191807][ T5285] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.500084][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 130.544914][ T5287] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.599931][ T5287] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.632283][ T5287] device bridge_slave_0 entered promiscuous mode [ 130.701725][ T5287] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.709006][ T5287] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.769622][ T5287] device bridge_slave_1 entered promiscuous mode [ 130.804837][ T4835] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.193411][ T5339] loop6: detected capacity change from 0 to 32768 [ 131.301871][ T5339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.241 (5339) [ 131.367257][ T5339] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.406345][ T5339] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 131.426110][ T5339] BTRFS info (device loop6): using free space tree [ 131.436612][ T5287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.519904][ T5360] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 131.624356][ T5339] BTRFS info (device loop6): enabling ssd optimizations [ 131.627456][ T9] device hsr_slave_0 left promiscuous mode [ 131.692074][ T9] device hsr_slave_1 left promiscuous mode [ 131.727543][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.735712][ T5360] usb 2-1: Using ep0 maxpacket: 8 [ 131.748837][ T5360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 131.768251][ T26] audit: type=1800 audit(1754530089.819:6): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.241" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 131.771261][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.812171][ T5360] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 131.842846][ T5360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.870654][ T5360] usb 2-1: Product: syz [ 131.891415][ T5360] usb 2-1: Manufacturer: syz [ 131.896209][ T5360] usb 2-1: SerialNumber: syz [ 131.921375][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.928884][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.950652][ T5360] usb 2-1: config 0 descriptor?? [ 131.977104][ T5360] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 132.002160][ T5339] BTRFS info (device loop6): balance: start -sconvert=raid0,soft [ 132.018153][ T9] device bridge_slave_1 left promiscuous mode [ 132.056200][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.126691][ T9] device bridge_slave_0 left promiscuous mode [ 132.136942][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.235162][ T5339] BTRFS info (device loop6): relocating block group 1048576 flags system [ 132.314190][ T9] device veth1_macvtap left promiscuous mode [ 132.329497][ T9] device veth0_macvtap left promiscuous mode [ 132.359488][ T9] device veth1_vlan left promiscuous mode [ 132.384176][ T9] device veth0_vlan left promiscuous mode [ 132.581263][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 132.589517][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.596155][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.658505][ T5339] BTRFS info (device loop6): balance: ended with status: 0 [ 132.985988][ T4790] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.034468][ T5360] gspca_zc3xx: reg_w_i err -71 [ 133.680078][ T5360] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 133.686475][ T5360] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 133.728040][ T5360] usb 2-1: USB disconnect, device number 5 [ 134.081490][ T5410] loop7: detected capacity change from 0 to 1024 [ 134.391008][ T5416] loop5: detected capacity change from 0 to 1024 [ 134.508867][ T5416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 134.599624][ T5416] loop5: detected capacity change from 1024 to 64 [ 134.659920][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 134.695823][ T5420] syz.5.255: attempt to access beyond end of device [ 134.695823][ T5420] loop5: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 134.709955][ T5420] EXT4-fs warning (device loop5): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 113) [ 134.722509][ T5420] Buffer I/O error on device loop5, logical block 113 [ 134.745242][ T5420] syz.5.255: attempt to access beyond end of device [ 134.745242][ T5420] loop5: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 134.787055][ T5420] EXT4-fs warning (device loop5): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 113) [ 134.826414][ T5420] Buffer I/O error on device loop5, logical block 113 [ 134.981482][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.029582][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.088277][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.116248][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.135701][ T9] team0 (unregistering): Port device team_slave_1 removed [ 135.160740][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.195968][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.210811][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.225448][ T4718] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 135.573164][ T9] team0 (unregistering): Port device team_slave_0 removed [ 135.712306][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.896718][ T5435] loop6: detected capacity change from 0 to 8192 [ 135.935810][ T5435] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.021352][ T5435] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 136.031409][ T5435] REISERFS (device loop6): using ordered data mode [ 136.049785][ T5435] reiserfs: using flush barriers [ 136.069037][ T5435] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.087296][ T5435] REISERFS (device loop6): checking transaction log (loop6) [ 136.116526][ T5435] REISERFS (device loop6): Using r5 hash to sort names [ 136.136236][ T5435] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 136.741922][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 136.954243][ T9] bond0 (unregistering): Released all slaves [ 137.037704][ T5287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.067982][ T5413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.254'. [ 137.088468][ T5413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.254'. [ 137.122399][ T5413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.254'. [ 137.456736][ T5287] team0: Port device team_slave_0 added [ 137.460014][ T4718] EXT4-fs (loop5): unmounting filesystem. [ 137.506466][ T5417] kmmpd-loop5: attempt to access beyond end of device [ 137.506466][ T5417] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 137.534854][ T5287] team0: Port device team_slave_1 added [ 137.558622][ T5417] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 137.717261][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.746182][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.822159][ T5287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.865060][ T5287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.927642][ T5287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.984541][ T5287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.155707][ T5287] device hsr_slave_0 entered promiscuous mode [ 138.191305][ T5287] device hsr_slave_1 entered promiscuous mode [ 138.215425][ T5287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.249989][ T5287] Cannot create hsr debugfs directory [ 138.459419][ T5452] loop1: detected capacity change from 0 to 40427 [ 138.510332][ T5452] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 138.529725][ T5452] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.561539][ T5452] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 138.636420][ T5452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.877428][ T5452] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.897528][ T5452] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.923211][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.141699][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.227800][ T5484] loop7: detected capacity change from 0 to 1024 [ 139.262850][ T5484] EXT4-fs: Ignoring removed orlov option [ 139.266204][ T5467] f2fs_ckpt-7:1: attempt to access beyond end of device [ 139.266204][ T5467] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.308985][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.320687][ T5484] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 139.330084][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.341016][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.364825][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.367466][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.372764][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.390728][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.424083][ T5287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.472279][ T26] audit: type=1800 audit(1754530097.529:7): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.278" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 139.561020][ T4835] EXT4-fs (loop7): unmounting filesystem. [ 139.608152][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.678606][ T5287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.734612][ T5287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.759638][ T5287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 140.361739][ T5287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.379929][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.405409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.444304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.470911][ T5287] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.510434][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.569929][ T126] usb 2-1: Using ep0 maxpacket: 16 [ 140.571716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.577525][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.615144][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.622382][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.653400][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.656343][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.671675][ T126] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 140.689774][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.709501][ T5483] chnl_net:caif_netlink_parms(): no params data found [ 140.728869][ T126] usb 2-1: config 0 descriptor?? [ 140.733872][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.734640][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.773744][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.780967][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.810112][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.838642][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.006041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.017773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.026917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.098411][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.120353][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.199491][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.218847][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.234984][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.243796][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.253626][ T5483] device bridge_slave_0 entered promiscuous mode [ 141.265818][ T5287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.271394][ T4681] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 141.306932][ T5287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.340150][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.351835][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.361955][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.371008][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.381826][ T5483] device bridge_slave_1 entered promiscuous mode [ 141.469066][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 141.480180][ T4681] usb 8-1: Using ep0 maxpacket: 8 [ 141.487341][ T4681] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.533282][ T5483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.569814][ T4681] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.578929][ T4681] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.610167][ T5483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.670859][ T4681] usb 8-1: config 0 descriptor?? [ 141.774780][ T126] letsketch 0003:6161:4D15.0002: Device info: ఁ [ 141.792193][ T5483] team0: Port device team_slave_0 added [ 141.821217][ T5483] team0: Port device team_slave_1 added [ 141.899337][ T4681] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 142.012448][ T126] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 142.030168][ T126] letsketch: probe of 0003:6161:4D15.0002 failed with error -71 [ 142.066285][ T126] usb 2-1: USB disconnect, device number 6 [ 142.136382][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.155825][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.219195][ T5483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.245251][ T5538] netlink: 'syz.6.286': attribute type 1 has an invalid length. [ 142.292329][ T5538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.322212][ T5540] bond1: (slave ip6gretap1): making interface the new active one [ 142.333799][ T5540] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 142.396339][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.403968][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.430747][ T5483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.445218][ T4681] usb 8-1: USB disconnect, device number 4 [ 142.501688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 142.652640][ T5483] device hsr_slave_0 entered promiscuous mode [ 142.680805][ T5483] device hsr_slave_1 entered promiscuous mode [ 142.687687][ T5483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.719774][ T5483] Cannot create hsr debugfs directory [ 142.808320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.842415][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.936182][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.289'. [ 143.120509][ T5287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.278589][ T5562] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 143.539858][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 144.009774][ T4684] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 144.077782][ T9] device hsr_slave_0 left promiscuous mode [ 144.095069][ T9] device hsr_slave_1 left promiscuous mode [ 144.096490][ T5556] loop1: detected capacity change from 0 to 40427 [ 144.116563][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.128437][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.147158][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.156858][ T5556] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 144.168349][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.178048][ T5556] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.189057][ T9] device bridge_slave_1 left promiscuous mode [ 144.218060][ T5556] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 144.221038][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.239479][ T4684] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 144.249636][ T4684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.257844][ T4684] usb 7-1: Product: syz [ 144.262758][ T5556] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 144.271208][ T5556] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5 [ 144.279159][ T4684] usb 7-1: Manufacturer: syz [ 144.283940][ T4684] usb 7-1: SerialNumber: syz [ 144.296014][ T4684] usb 7-1: config 0 descriptor?? [ 144.304505][ T5556] F2FS-fs (loop1): invalid crc value [ 144.318306][ T9] device bridge_slave_0 left promiscuous mode [ 144.339651][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.387237][ T5556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.454983][ T9] device veth1_macvtap left promiscuous mode [ 144.475303][ T9] device veth0_macvtap left promiscuous mode [ 144.506092][ T9] device veth1_vlan left promiscuous mode [ 144.529898][ T4684] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.551294][ T9] device veth0_vlan left promiscuous mode [ 144.566566][ T5556] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 144.582542][ T5556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.989062][ T4265] syz-executor: attempt to access beyond end of device [ 144.989062][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.161713][ T4684] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 145.196736][ T4684] usb 7-1: USB disconnect, device number 2 [ 145.625964][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 145.868986][ T5584] loop7: detected capacity change from 0 to 65536 [ 145.972780][ T5584] XFS (loop7): Mounting V5 Filesystem [ 146.068372][ T5584] XFS (loop7): Ending clean mount [ 146.208115][ T5598] loop1: detected capacity change from 0 to 32768 [ 146.250990][ T5598] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.297 (5598) [ 146.322441][ T5598] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 146.345607][ T5598] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 146.363011][ T5598] BTRFS info (device loop1): using free space tree [ 146.399510][ T4835] XFS (loop7): Unmounting Filesystem [ 146.671983][ T5598] BTRFS info (device loop1): enabling ssd optimizations [ 146.730521][ T26] audit: type=1800 audit(1754530104.789:8): pid=5598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.297" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 146.870041][ T126] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 146.934763][ T9] team0 (unregistering): Port device team_slave_1 removed [ 147.091514][ T4265] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 147.095213][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 147.127206][ T126] usb 7-1: config 2 has an invalid interface number: 69 but max is 0 [ 147.146066][ T126] usb 7-1: config 2 has no interface number 0 [ 147.156008][ T126] usb 7-1: config 2 interface 69 has no altsetting 0 [ 147.183983][ T126] usb 7-1: New USB device found, idVendor=19d2, idProduct=ff55, bcdDevice=f8.ed [ 147.204055][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.216040][ T126] usb 7-1: Product: syz [ 147.226168][ T126] usb 7-1: Manufacturer: syz [ 147.236302][ T126] usb 7-1: SerialNumber: syz [ 147.477973][ T126] usb-storage 7-1:2.69: USB Mass Storage device detected [ 147.487413][ T9] team0 (unregistering): Port device team_slave_0 removed [ 147.614934][ T126] usb 7-1: USB disconnect, device number 3 [ 147.699970][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 147.758828][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.932985][ T5652] loop7: detected capacity change from 0 to 512 [ 147.946180][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.952288][ T5652] EXT4-fs: Ignoring removed bh option [ 148.029456][ T5652] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 148.182849][ T5652] EXT4-fs (loop7): 1 truncate cleaned up [ 148.188586][ T5652] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 148.498915][ T4835] EXT4-fs (loop7): unmounting filesystem. [ 149.107204][ T5666] loop6: detected capacity change from 0 to 32768 [ 149.207702][ T5666] XFS (loop6): Mounting V5 Filesystem [ 149.341952][ T5666] XFS (loop6): Ending clean mount [ 149.403825][ T5666] XFS (loop6): Quotacheck needed: Please wait. [ 149.563072][ T5666] XFS (loop6): Quotacheck: Done. [ 149.777979][ T4790] XFS (loop6): Unmounting Filesystem [ 150.007286][ T9] bond0 (unregistering): Released all slaves [ 150.477334][ T5483] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 150.545899][ T5483] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 150.603630][ T5483] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 150.643640][ T5483] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 150.733212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.785505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.983729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.050576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.113454][ T5287] device veth0_vlan entered promiscuous mode [ 151.134769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.154307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.205454][ T5287] device veth1_vlan entered promiscuous mode [ 151.236747][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 151.335647][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.356461][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.406021][ T5483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.432497][ T5287] device veth0_macvtap entered promiscuous mode [ 151.472968][ T5697] loop6: detected capacity change from 0 to 32768 [ 151.504287][ T5287] device veth1_macvtap entered promiscuous mode [ 151.517528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.536966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.572009][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.592423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.628695][ T5483] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.696737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.733084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.769636][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.777290][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.794562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.830263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.857102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.883696][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.890982][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.910919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.929106][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.979829][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.009790][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.039820][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.045691][ T5721] loop6: detected capacity change from 0 to 4096 [ 152.074253][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.098282][ T5721] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 152.109736][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.151997][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.173648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.247261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.288926][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.328541][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.377078][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.401004][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.442485][ T5287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.479803][ T5287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.510964][ T4790] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 152.520606][ T5287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.536391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.563711][ T4790] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 152.600243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.629874][ T4790] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 152.653772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.710654][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.758102][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.794116][ T5287] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.829841][ T5287] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.856950][ T5724] loop7: detected capacity change from 0 to 32768 [ 152.863676][ T5287] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.909853][ T5724] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop7 scanned by syz.7.325 (5724) [ 152.931291][ T5287] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.963356][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.978277][ T5724] BTRFS info (device loop7): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 152.997635][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.024717][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.041417][ T5724] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.070240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.085613][ T5724] BTRFS info (device loop7): using free space tree [ 153.092871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.140484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.157852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.192845][ T5483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.430088][ T5724] BTRFS info (device loop7): enabling ssd optimizations [ 153.574113][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.616193][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.726484][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.765880][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.830203][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.875783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.978329][ T4835] BTRFS info (device loop7): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 153.996417][ T5735] loop6: detected capacity change from 0 to 32768 [ 154.302255][ T4376] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 10 /dev/loop7 scanned by udevd (4376) [ 154.680787][ T5782] loop8: detected capacity change from 0 to 764 [ 154.789598][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.797850][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.837978][ T5735] XFS (loop6): Mounting V5 Filesystem [ 154.861740][ T5483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.916289][ T5782] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 155.081514][ T5735] XFS (loop6): Ending clean mount [ 155.120403][ T5735] XFS (loop6): Quotacheck needed: Please wait. [ 155.254840][ T5735] XFS (loop6): Quotacheck: Done. [ 155.885747][ T4790] XFS (loop6): Unmounting Filesystem [ 156.130109][ T5810] capability: warning: `syz.8.338' uses 32-bit capabilities (legacy support in use) [ 156.246816][ T5780] loop1: detected capacity change from 0 to 40427 [ 156.287471][ T5780] F2FS-fs (loop1): invalid crc value [ 156.387359][ T5780] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.576676][ T5780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.724325][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.778179][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.833244][ T5815] f2fs_ckpt-7:1: attempt to access beyond end of device [ 156.833244][ T5815] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 156.889161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.923146][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.955261][ T5483] device veth0_vlan entered promiscuous mode [ 156.968999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.989973][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.018462][ T5483] device veth1_vlan entered promiscuous mode [ 157.087889][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.106711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.124057][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.143238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.166120][ T5483] device veth0_macvtap entered promiscuous mode [ 157.188051][ T5483] device veth1_macvtap entered promiscuous mode [ 157.236528][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.277873][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.315884][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.339869][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.388335][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.448097][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.494372][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.533255][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.582165][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.614626][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.629054][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.664480][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.706951][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.748475][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.780717][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.809809][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.860137][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.894389][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.918044][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.935869][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.954850][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.986938][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.025594][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.062879][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.139257][ T5483] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.158284][ T5483] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.194037][ T5483] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.204964][ T5483] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.498360][ T4360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.559105][ T4360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.642395][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.674250][ T4360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.714202][ T4360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.785542][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.812134][ T5877] use of bytesused == 0 is deprecated and will be removed in the future, [ 158.829768][ T5877] use the actual size instead. [ 159.186029][ T5883] loop6: detected capacity change from 0 to 1024 [ 159.235501][ T5883] EXT4-fs: Ignoring removed nobh option [ 159.249393][ T5883] EXT4-fs: Ignoring removed bh option [ 159.307233][ T5883] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.426430][ T5883] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 159.496577][ T5870] loop1: detected capacity change from 0 to 32768 [ 159.510386][ T5870] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.354 (5870) [ 159.559986][ T5870] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 159.580340][ T5892] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 159.609909][ T5870] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 159.626205][ T5870] BTRFS info (device loop1): using free space tree [ 159.730494][ T4790] EXT4-fs (loop6): unmounting filesystem. [ 159.984965][ T5870] BTRFS info (device loop1): enabling ssd optimizations [ 160.245142][ T5926] loop9: detected capacity change from 0 to 512 [ 160.268092][ T5358] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 160.324005][ T5926] EXT4-fs: Ignoring removed i_version option [ 160.338567][ T5927] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.374068][ T5926] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 160.423417][ T5927] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 160.443687][ T5926] EXT4-fs (loop9): 1 truncate cleaned up [ 160.459970][ T5358] usb 8-1: Using ep0 maxpacket: 8 [ 160.465973][ T5926] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 160.494046][ T5358] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 160.549919][ T5358] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.594214][ T5358] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.624870][ T5358] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.657559][ T5358] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.703052][ T5358] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.727466][ T5358] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.787937][ T4265] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 160.974441][ T5358] usb 8-1: GET_CAPABILITIES returned 0 [ 160.980197][ T5358] usbtmc 8-1:16.0: can't read capabilities [ 161.156418][ T4376] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4376) [ 161.225456][ T5641] usb 8-1: USB disconnect, device number 5 [ 161.494874][ T5483] EXT4-fs (loop9): unmounting filesystem. [ 162.112903][ T5940] loop6: detected capacity change from 0 to 32768 [ 162.155075][ T5940] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop6 scanned by syz.6.369 (5940) [ 162.258280][ T5940] BTRFS info (device loop6): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 162.318381][ T5940] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 162.360199][ T5940] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 162.388252][ T5940] BTRFS info (device loop6): use lzo compression, level 0 [ 162.406855][ C1] Unknown status report in ack skb [ 162.414796][ T5969] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.374'. [ 162.439931][ T5940] BTRFS info (device loop6): using free space tree [ 162.640010][ T126] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 162.673123][ T5987] netlink: 104 bytes leftover after parsing attributes in process `syz.9.378'. [ 162.720380][ T5993] loop1: detected capacity change from 0 to 512 [ 162.741517][ T5993] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 162.764686][ T5940] BTRFS info (device loop6): enabling ssd optimizations [ 162.778195][ T5993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 162.792681][ T5993] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.379: corrupted in-inode xattr [ 162.829777][ T126] usb 9-1: Using ep0 maxpacket: 8 [ 162.837126][ T126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.882418][ T5993] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.379: couldn't read orphan inode 15 (err -117) [ 162.904868][ T126] usb 9-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 162.926439][ T5993] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.962892][ T26] audit: type=1804 audit(1754530120.999:9): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.369" name="/newroot/53/file0/file1" dev="loop6" ino=260 res=1 errno=0 [ 162.965511][ T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.116748][ T126] usb 9-1: config 0 descriptor?? [ 163.160211][ T6004] loop9: detected capacity change from 0 to 16 [ 163.340385][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 163.358316][ T4790] BTRFS info (device loop6): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 163.452384][ T6004] erofs: (device loop9): mounted with root inode @ nid 36. [ 163.598071][ T126] logitech 0003:046D:C20E.0003: rdesc size test failed for formula gp [ 163.627323][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.649345][ T4273] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 163.666211][ T6004] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 163.670415][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.685572][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.693516][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.704647][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.712126][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.719868][ T126] logitech 0003:046D:C20E.0003: unknown main item tag 0x0 [ 163.727084][ T126] logitech 0003:046D:C20E.0003: item fetching failed at offset 10/11 [ 163.736365][ T126] logitech 0003:046D:C20E.0003: parse failed [ 163.742617][ T126] logitech: probe of 0003:046D:C20E.0003 failed with error -22 [ 163.982617][ T5362] usb 9-1: USB disconnect, device number 2 [ 164.022992][ T6009] device syz_tun entered promiscuous mode [ 164.087321][ T6009] device batadv_slave_0 entered promiscuous mode [ 164.800180][ T5362] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 164.989794][ T5362] usb 7-1: Using ep0 maxpacket: 8 [ 165.002171][ T5362] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 165.029809][ T5362] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.048273][ T5362] usb 7-1: Product: syz [ 165.058458][ T5362] usb 7-1: Manufacturer: syz [ 165.071023][ T5362] usb 7-1: SerialNumber: syz [ 165.101327][ T5362] usb 7-1: config 0 descriptor?? [ 165.119996][ T5362] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 165.289609][ T6022] loop9: detected capacity change from 0 to 32768 [ 165.292625][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880575fdc00: rx timeout, send abort [ 165.308421][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058985800: rx timeout, send abort [ 165.323659][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880575fdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.341708][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058985800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 165.550508][ T6022] XFS (loop9): Mounting V5 Filesystem [ 165.620922][ T4375] kernel read not supported for file /270/oom_adj (pid: 4375 comm: kworker/1:5) [ 165.791595][ T6022] XFS (loop9): Ending clean mount [ 165.851354][ T6022] XFS (loop9): Quotacheck needed: Please wait. [ 166.008408][ T6022] XFS (loop9): Quotacheck: Done. [ 166.165030][ T6034] loop7: detected capacity change from 0 to 32768 [ 166.387428][ T5362] gspca_sonixj: reg_w1 err -71 [ 166.399699][ T6034] XFS (loop7): Mounting V5 Filesystem [ 166.408274][ T5483] XFS (loop9): Unmounting Filesystem [ 166.461428][ T5362] sonixj: probe of 7-1:0.0 failed with error -71 [ 166.504912][ T5362] usb 7-1: USB disconnect, device number 4 [ 166.665454][ T6034] XFS (loop7): Ending clean mount [ 166.680585][ T6034] XFS (loop7): Quotacheck needed: Please wait. [ 166.864844][ T6034] XFS (loop7): Quotacheck: Done. [ 166.874781][ T6080] loop1: detected capacity change from 0 to 512 [ 166.931778][ T6080] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.401: inode #1: comm syz.1.401: iget: illegal inode # [ 166.959544][ T6080] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.401: error while reading EA inode 1 err=-117 [ 167.113454][ T6080] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.401: inode #1: comm syz.1.401: iget: illegal inode # [ 167.128877][ T4835] XFS (loop7): Unmounting Filesystem [ 167.197632][ T6080] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.401: error while reading EA inode 1 err=-117 [ 167.311334][ T6080] EXT4-fs (loop1): 1 orphan inode deleted [ 167.317280][ T6080] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.511644][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 168.333383][ T6109] loop1: detected capacity change from 0 to 4096 [ 168.475705][ T6121] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.541308][ T26] audit: type=1800 audit(1754530382.602:10): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.409" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 168.563201][ T6118] ptrace attach of "./syz-executor exec"[6120] was attempted by "./syz-executor exec"[6118] [ 169.891431][ T6146] loop7: detected capacity change from 0 to 2048 [ 169.945933][ T6146] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.064531][ T6151] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.117388][ T6156] loop1: detected capacity change from 0 to 128 [ 170.117619][ T6152] loop9: detected capacity change from 0 to 256 [ 170.212941][ T6152] FAT-fs (loop9): Unrecognized mount option "0xffffffffffffffff00000000000000000000" or missing value [ 170.239903][ T6146] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 170.341897][ T6146] Remounting filesystem read-only [ 170.355849][ T6146] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 170.381186][ T6146] NILFS error (device loop7): nilfs_readdir: bad page in #12 [ 170.458871][ T6160] netlink: 56 bytes leftover after parsing attributes in process `syz.8.422'. [ 170.527721][ T6160] netlink: 56 bytes leftover after parsing attributes in process `syz.8.422'. [ 171.699913][ T5641] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 171.909794][ T5641] usb 10-1: Using ep0 maxpacket: 16 [ 171.936186][ T5641] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.976873][ T5641] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.073877][ T5641] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.099685][ C1] sched: RT throttling activated [ 172.115343][ T4375] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 172.118098][ T5641] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.225347][ T5641] usb 10-1: Product: syz [ 172.256006][ T5641] usb 10-1: Manufacturer: syz [ 172.313256][ T5641] usb 10-1: SerialNumber: syz [ 172.623016][ T5641] usb 10-1: 0:2 : does not exist [ 172.698403][ T5641] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 172.857458][ T6210] loop7: detected capacity change from 0 to 512 [ 172.940871][ T6210] EXT4-fs: Ignoring removed orlov option [ 173.021644][ T5641] usb 10-1: USB disconnect, device number 2 [ 173.058983][ T6210] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 173.230970][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.271272][ T6210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 173.287463][ T6183] loop1: detected capacity change from 0 to 262144 [ 173.351739][ T6210] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.438: corrupted in-inode xattr [ 173.378525][ T6210] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.438: couldn't read orphan inode 15 (err -117) [ 173.390544][ T6183] F2FS-fs (loop1): invalid crc value [ 173.396577][ T4375] usb 7-1: Using ep0 maxpacket: 32 [ 173.412511][ T4375] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 173.419904][ T6210] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 173.467146][ T4375] usb 7-1: config 0 has no interface number 0 [ 173.477430][ T6183] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.549838][ T4375] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.568226][ T6183] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.646282][ T4375] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 173.670709][ T4835] EXT4-fs (loop7): unmounting filesystem. [ 173.692898][ T4375] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.741799][ T4375] usb 7-1: Product: syz [ 173.759605][ T4375] usb 7-1: Manufacturer: syz [ 173.764471][ T4375] usb 7-1: SerialNumber: syz [ 173.807651][ T4375] usb 7-1: config 0 descriptor?? [ 173.846903][ T4375] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 173.897378][ T4375] em28xx 7-1:0.132: Video interface 132 found: [ 173.958447][ T6226] netlink: 'syz.8.442': attribute type 18 has an invalid length. [ 174.000584][ T4375] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 174.083850][ T4375] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 174.113306][ T4375] em28xx 7-1:0.132: board has no eeprom [ 174.219760][ T4375] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 174.227706][ T4375] em28xx 7-1:0.132: analog set to bulk mode. [ 174.274894][ T27] em28xx 7-1:0.132: Registering V4L2 extension [ 174.316737][ T4375] usb 7-1: USB disconnect, device number 5 [ 174.364094][ T4375] em28xx 7-1:0.132: Disconnecting em28xx [ 174.609981][ T4685] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 174.811965][ T4685] usb 9-1: config 150 has an invalid interface number: 204 but max is 1 [ 174.843225][ T4685] usb 9-1: config 150 has no interface number 0 [ 174.867998][ T4685] usb 9-1: config 150 interface 204 has no altsetting 0 [ 174.907540][ T4685] usb 9-1: config 150 interface 1 has no altsetting 0 [ 174.937789][ T26] audit: type=1326 audit(1754530388.992:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 174.954222][ T4685] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 174.989777][ T4685] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.997865][ T4685] usb 9-1: Product: syz [ 175.030066][ T22] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 175.033035][ T4685] usb 9-1: Manufacturer: syz [ 175.063412][ T26] audit: type=1326 audit(1754530388.992:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.099722][ T4685] usb 9-1: SerialNumber: syz [ 175.126288][ T27] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 175.150134][ T27] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 175.185911][ T27] em28xx 7-1:0.132: No AC97 audio processor [ 175.197597][ T26] audit: type=1326 audit(1754530388.992:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.220827][ T27] usb 7-1: Decoder not found [ 175.241710][ T22] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.263364][ T27] em28xx 7-1:0.132: failed to create media graph [ 175.304191][ T22] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.317683][ T26] audit: type=1326 audit(1754530388.992:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.329908][ T27] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 175.355214][ T4685] xr_serial 9-1:150.204: xr_serial converter detected [ 175.398772][ T22] usb 8-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 175.408840][ T27] em28xx 7-1:0.132: Remote control support is not available for this card. [ 175.419777][ T26] audit: type=1326 audit(1754530388.992:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.449919][ T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.460583][ T4375] em28xx 7-1:0.132: Closing input extension [ 175.491114][ T4375] em28xx 7-1:0.132: Freeing device [ 175.497579][ T22] usb 8-1: config 0 descriptor?? [ 175.539725][ T26] audit: type=1326 audit(1754530388.992:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.604973][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.451'. [ 175.662956][ T26] audit: type=1326 audit(1754530388.992:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.787904][ T26] audit: type=1326 audit(1754530388.992:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.924715][ T26] audit: type=1326 audit(1754530388.992:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 175.962812][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 175.995312][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 176.023621][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 176.069570][ T26] audit: type=1326 audit(1754530388.992:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee0b18ebe9 code=0x7fc00000 [ 176.111215][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 176.139049][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 176.181405][ T4685] usb 9-1: xr_serial converter now attached to ttyUSB0 [ 176.181992][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 176.235048][ T22] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 176.335416][ T22] aureal 0003:0755:2626.0004: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.7-1/input0 [ 176.414969][ T4685] usb 9-1: USB disconnect, device number 3 [ 176.428789][ T22] usb 8-1: USB disconnect, device number 6 [ 176.455926][ T4685] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 176.527826][ T4685] xr_serial 9-1:150.204: device disconnected [ 176.844906][ T6283] device gretap0 entered promiscuous mode [ 176.924366][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 177.015600][ T6282] device gretap0 left promiscuous mode [ 177.583865][ T6297] loop1: detected capacity change from 0 to 4096 [ 177.644380][ T6297] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 177.859880][ T4685] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 178.059759][ T4685] usb 8-1: Using ep0 maxpacket: 16 [ 178.071697][ T4685] usb 8-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.134491][ T4685] usb 8-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 178.170049][ T4685] usb 8-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 178.211984][ T4685] usb 8-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.265888][ T4685] usb 8-1: config 1 interface 0 has no altsetting 0 [ 178.300033][ T4685] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.322136][ T4685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.366583][ T4685] usb 8-1: SerialNumber: syz [ 178.401332][ T6300] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 178.418167][ T6300] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 178.492692][ T6288] loop6: detected capacity change from 0 to 40427 [ 178.584026][ T6288] F2FS-fs (loop6): invalid crc value [ 178.648108][ T6288] F2FS-fs (loop6): Found nat_bits in checkpoint [ 178.908627][ T6288] F2FS-fs (loop6): Start checkpoint disabled! [ 178.959086][ T6288] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 179.525743][ T4440] kworker/u4:8: attempt to access beyond end of device [ 179.525743][ T4440] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.652853][ T4685] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 180.697561][ T4685] usb 8-1: USB disconnect, device number 7 [ 181.838339][ T6374] 9pnet_fd: Insufficient options for proto=fd [ 181.877785][ T6376] loop7: detected capacity change from 0 to 47 [ 182.037014][ T6345] loop1: detected capacity change from 0 to 40427 [ 182.103544][ T6345] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 182.177522][ T6345] F2FS-fs (loop1): invalid crc value [ 182.248864][ T6345] F2FS-fs (loop1): Found nat_bits in checkpoint [ 182.492985][ T6345] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.830894][ T4265] syz-executor: attempt to access beyond end of device [ 182.830894][ T4265] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.864385][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.493'. [ 183.773079][ T6417] netlink: 'syz.1.495': attribute type 10 has an invalid length. [ 183.794465][ T6413] loop6: detected capacity change from 0 to 8192 [ 183.824290][ T6413] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 183.851598][ T6413] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 183.883209][ T6413] REISERFS (device loop6): using ordered data mode [ 183.891277][ T6413] reiserfs: using flush barriers [ 183.910075][ T6413] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 183.926981][ T6413] REISERFS (device loop6): checking transaction log (loop6) [ 183.936616][ T6417] team0: Port device dummy0 added [ 183.948082][ T6413] REISERFS (device loop6): Using r5 hash to sort names [ 183.950604][ T6419] netlink: 'syz.1.495': attribute type 10 has an invalid length. [ 183.956150][ T6413] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 183.999506][ T6413] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 253, free_space(entry_count) 2 [ 184.051376][ T6413] REISERFS error (device loop6): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 184.067578][ T6419] team0: Port device dummy0 removed [ 184.077816][ T6413] REISERFS (device loop6): Remounting filesystem read-only [ 184.102545][ T6419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 184.128709][ T6413] overlayfs: upper fs is r/o, try multi-lower layers mount [ 184.161290][ T6365] loop9: detected capacity change from 0 to 40427 [ 184.224921][ T6365] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 184.281807][ T6365] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 184.367101][ T6365] F2FS-fs (loop9): invalid crc value [ 184.434214][ T6365] F2FS-fs (loop9): Found nat_bits in checkpoint [ 184.769991][ T27] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 184.970210][ T27] usb 9-1: Using ep0 maxpacket: 8 [ 184.988540][ T27] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 185.018477][ T27] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.065087][ T27] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.120851][ T27] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.175778][ T27] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.219859][ T27] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 185.229031][ T27] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.409839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 185.471308][ T27] usb 9-1: usb_control_msg returned -32 [ 185.478071][ T27] usbtmc 9-1:16.0: can't read capabilities [ 185.700381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 186.062761][ T6435] loop6: detected capacity change from 0 to 32768 [ 186.171576][ T6435] XFS (loop6): Mounting V5 Filesystem [ 186.262131][ T6472] device batadv_slave_1 entered promiscuous mode [ 186.271259][ T6471] device batadv_slave_1 left promiscuous mode [ 186.455126][ T6435] XFS (loop6): Ending clean mount [ 186.524274][ T6435] XFS (loop6): Quotacheck needed: Please wait. [ 186.684543][ T6435] XFS (loop6): Quotacheck: Done. [ 186.950798][ T4790] XFS (loop6): Unmounting Filesystem [ 187.557668][ T4315] usb 9-1: USB disconnect, device number 4 [ 187.904384][ T6478] loop9: detected capacity change from 0 to 32768 [ 187.943673][ T6478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.518 (6478) [ 188.017588][ T6478] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.079093][ T6478] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 188.139969][ T6478] BTRFS info (device loop9): setting nodatacow, compression disabled [ 188.194908][ T6478] BTRFS info (device loop9): max_inline at 0 [ 188.213730][ T6478] BTRFS info (device loop9): enabling disk space caching [ 188.264283][ T6478] BTRFS info (device loop9): turning off barriers [ 188.295654][ T6478] BTRFS info (device loop9): turning on flush-on-commit [ 188.329745][ T6478] BTRFS info (device loop9): doing ref verification [ 188.343773][ T6478] BTRFS info (device loop9): force clearing of disk cache [ 188.401794][ T6483] loop7: detected capacity change from 0 to 32768 [ 188.404071][ T6478] BTRFS info (device loop9): enabling ssd optimizations [ 188.450110][ T6478] BTRFS info (device loop9): max_inline at 4096 [ 188.477135][ T6478] BTRFS info (device loop9): disk space caching is enabled [ 188.494754][ T6483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.520 (6483) [ 188.526451][ T6483] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 188.537002][ T6483] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 188.545878][ T6483] BTRFS info (device loop7): enabling disk space caching [ 188.554738][ T6483] BTRFS info (device loop7): metadata ratio 3 [ 188.561908][ T6483] BTRFS info (device loop7): doing ref verification [ 188.568675][ T6483] BTRFS info (device loop7): use no compression [ 188.575113][ T6483] BTRFS info (device loop7): force clearing of disk cache [ 188.582635][ T6483] BTRFS info (device loop7): disabling disk space caching [ 188.664608][ T6483] BTRFS info (device loop7): enabling ssd optimizations [ 188.684004][ T6483] BTRFS info (device loop7): rebuilding free space tree [ 188.749916][ T4315] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 188.773677][ T6540] loop1: detected capacity change from 0 to 256 [ 188.821372][ T6478] BTRFS info (device loop9): rebuilding free space tree [ 188.877125][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 188.877146][ T26] audit: type=1800 audit(1754530402.932:71): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="file2" dev="loop1" ino=1048615 res=0 errno=0 [ 188.880489][ T6478] BTRFS info (device loop9): disabling free space tree [ 188.892854][ T6540] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 188.905974][ T6483] BTRFS info (device loop7): disabling free space tree [ 188.942047][ T4315] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.972861][ T4315] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.979372][ T6483] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.996789][ T6540] FAT-fs (loop1): Filesystem has been set read-only [ 189.020654][ T4315] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.030422][ T6478] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 189.056149][ T6483] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.061134][ T6478] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 189.087095][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.117464][ T4315] usb 9-1: SerialNumber: syz [ 189.388939][ T4315] usb 9-1: 0:2 : does not exist [ 189.489130][ T4315] usb 9-1: USB disconnect, device number 5 [ 189.708985][ T5483] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.792111][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.975577][ T6500] loop6: detected capacity change from 0 to 32768 [ 190.013323][ T6500] XFS: noikeep mount option is deprecated. [ 190.123570][ T6555] loop1: detected capacity change from 0 to 4096 [ 190.215485][ T6555] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 190.285371][ T6500] XFS (loop6): Mounting V5 Filesystem [ 190.344698][ T6566] loop8: detected capacity change from 0 to 256 [ 190.397028][ T6500] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 190.420314][ T4835] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.430411][ T6555] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 190.466046][ T6555] ntfs3: loop1: Failed to load $Extend. [ 190.475554][ T6500] XFS (loop6): Starting recovery (logdev: internal) [ 190.503004][ T6566] exfat: Deprecated parameter 'namecase' [ 190.754785][ T6566] exFAT-fs (loop8): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 190.958991][ T6574] Bluetooth: MGMT ver 1.22 [ 191.024877][ T6574] Bluetooth: hci0: too big key_count value 32767 [ 191.294868][ T6500] XFS (loop6): Ending recovery (logdev: internal) [ 191.552850][ T4790] XFS (loop6): Unmounting Filesystem [ 191.833108][ T6592] loop8: detected capacity change from 0 to 256 [ 191.880440][ T6594] loop7: detected capacity change from 0 to 512 [ 191.898155][ T6592] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 191.957872][ T6594] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 191.998306][ T6594] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.033065][ T26] audit: type=1800 audit(1754530406.092:72): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.540" name="file1" dev="loop8" ino=1048616 res=0 errno=0 [ 192.592059][ T4835] VFS: Lookup of '' in ext4 loop7 would have caused loop [ 192.604004][ T4835] VFS: Lookup of '' in ext4 loop7 would have caused loop [ 192.841411][ T6615] loop6: detected capacity change from 0 to 64 [ 193.121989][ T4835] EXT4-fs (loop7): unmounting filesystem. [ 193.433199][ T4440] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.636615][ T4440] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.803356][ T6638] loop1: detected capacity change from 0 to 2048 [ 193.803799][ T4440] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.832835][ T6642] "syz.8.557" (6642) uses obsolete ecb(arc4) skcipher [ 193.930083][ T6638] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 193.998263][ T6638] UDF-fs: Scanning with blocksize 512 failed [ 194.028930][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.035368][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.064362][ T6638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.122314][ T4440] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.377079][ T6654] loop9: detected capacity change from 0 to 2048 [ 194.437743][ T6654] UDF-fs: bad mount option "WLǗ̜+?xkƌ}AJCrev\JU{' u4EXa-kŦ+L?2(4(j&eսGHX;C3@bg3xV$옊R=2Ӭ85qM3mhƄ;e4s{*lLD00000000000000000000" or missing value [ 194.528774][ T6656] loop8: detected capacity change from 0 to 1024 [ 194.660204][ T6656] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 194.711439][ T6656] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.876631][ T6656] EXT4-fs error (device loop8): ext4_free_blocks:6210: comm syz.8.561: Freeing blocks not in datazone - block = 0, count = 16 [ 194.932362][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.946392][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.957802][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.972385][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.988922][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 194.996459][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.045516][ T22] kernel write not supported for file /353/attr/prev (pid: 22 comm: kworker/1:0) [ 195.286364][ T36] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 195.332697][ T36] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 195.349894][ T36] EXT4-fs (loop8): This should not happen!! Data will be lost [ 195.349894][ T36] [ 195.359795][ T36] EXT4-fs (loop8): Total free blocks count 0 [ 195.367811][ T36] EXT4-fs (loop8): Free/Dirty block details [ 195.374030][ T36] EXT4-fs (loop8): free_blocks=4293918736 [ 195.379918][ T36] EXT4-fs (loop8): dirty_blocks=16 [ 195.385168][ T36] EXT4-fs (loop8): Block reservation details [ 195.391593][ T36] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 195.411093][ T5287] EXT4-fs (loop8): unmounting filesystem. [ 195.749721][ T6689] loop1: detected capacity change from 0 to 512 [ 195.788187][ T6689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.897908][ T6689] EXT4-fs error (device loop1): __ext4_iget:5077: inode #16: block 256: comm syz.1.572: invalid block [ 195.975665][ T6689] EXT4-fs (loop1): Remounting filesystem read-only [ 196.031337][ T5362] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 196.049222][ T6689] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.572: couldn't read orphan inode 16 (err -117) [ 196.095553][ T6689] EXT4-fs (loop1): Remounting filesystem read-only [ 196.102748][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 196.119760][ T6689] EXT4-fs (loop1): 1 orphan inode deleted [ 196.126180][ T6689] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.249878][ T5362] usb 7-1: Using ep0 maxpacket: 32 [ 196.257116][ T5362] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 196.277227][ T6689] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.572: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 196.318214][ T5362] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.349003][ T5362] usb 7-1: config 0 descriptor?? [ 196.358732][ T6689] EXT4-fs (loop1): Remounting filesystem read-only [ 196.377960][ T5362] gspca_main: sq930x-2.14.0 probing 041e:403c [ 196.433624][ T6665] chnl_net:caif_netlink_parms(): no params data found [ 196.482054][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 196.507639][ T22] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 196.657548][ T6686] loop8: detected capacity change from 0 to 32768 [ 196.739566][ T6686] XFS (loop8): Mounting V5 Filesystem [ 196.769879][ T22] usb 10-1: Using ep0 maxpacket: 32 [ 196.778922][ T22] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.804277][ T22] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.814765][ T22] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 196.823631][ T22] usb 10-1: Product: syz [ 196.828287][ T22] usb 10-1: Manufacturer: syz [ 196.833158][ T22] usb 10-1: SerialNumber: syz [ 196.855020][ T22] usb 10-1: config 0 descriptor?? [ 196.861503][ T6698] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 196.939030][ T6686] XFS (loop8): Ending clean mount [ 196.949959][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.960872][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.983432][ T6686] XFS (loop8): Quotacheck needed: Please wait. [ 197.017770][ T6665] device bridge_slave_0 entered promiscuous mode [ 197.059988][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 197.079228][ T6686] XFS (loop8): Quotacheck: Done. [ 197.123219][ T5641] usb 10-1: USB disconnect, device number 3 [ 197.304160][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.319860][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.323190][ T5287] XFS (loop8): Unmounting Filesystem [ 197.331574][ T6665] device bridge_slave_1 entered promiscuous mode [ 197.533286][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.567045][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.629782][ T5362] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 197.635842][ T22] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 197.643672][ T5362] sq930x: probe of 7-1:0.0 failed with error -71 [ 197.654467][ T5362] usb 7-1: USB disconnect, device number 6 [ 197.668492][ T4440] device hsr_slave_0 left promiscuous mode [ 197.676273][ T4440] device hsr_slave_1 left promiscuous mode [ 197.693573][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.703339][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.713495][ T4440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.721324][ T4440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.731118][ T4440] device bridge_slave_1 left promiscuous mode [ 197.737611][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.772155][ T4440] device bridge_slave_0 left promiscuous mode [ 197.778527][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.832837][ T22] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.852119][ T4440] device veth1_macvtap left promiscuous mode [ 197.858522][ T4440] device veth0_macvtap left promiscuous mode [ 197.867175][ T4440] device veth1_vlan left promiscuous mode [ 197.874144][ T4440] device veth0_vlan left promiscuous mode [ 197.880971][ T22] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 197.890795][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 197.901585][ T22] usb 2-1: Product: syz [ 197.905905][ T22] usb 2-1: Manufacturer: syz [ 197.911218][ T22] usb 2-1: SerialNumber: syz [ 198.138321][ T22] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.068463][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 199.133479][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 199.141069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.151026][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 199.231160][ T4440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.307794][ T4440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.209236][ T4440] bond0 (unregistering): Released all slaves [ 200.331952][ T6665] team0: Port device team_slave_0 added [ 200.386620][ T6665] team0: Port device team_slave_1 added [ 200.490943][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.498001][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.569825][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.618359][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.660252][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.793975][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.943379][ T6740] loop6: detected capacity change from 0 to 8192 [ 200.976971][ T6665] device hsr_slave_0 entered promiscuous mode [ 201.044358][ T6665] device hsr_slave_1 entered promiscuous mode [ 201.155107][ T6740] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 201.220286][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 201.239816][ T6740] FAT-fs (loop6): Filesystem has been set read-only [ 201.529741][ T4315] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 201.709993][ T4315] usb 9-1: Using ep0 maxpacket: 16 [ 201.730888][ T4315] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 201.755327][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.789269][ T4315] usb 9-1: config 0 descriptor?? [ 201.852202][ T4315] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 202.061143][ T6771] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 203.068233][ T4315] gspca_sonixj: reg_w1 err -71 [ 203.102585][ T4315] sonixj: probe of 9-1:0.0 failed with error -71 [ 203.132753][ T4315] usb 9-1: USB disconnect, device number 6 [ 203.300194][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 203.511964][ T6665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.570322][ T6775] loop9: detected capacity change from 0 to 40427 [ 203.577510][ T6665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.627893][ T6775] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 203.656294][ T6665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.685934][ T6775] F2FS-fs (loop9): invalid crc value [ 203.699115][ T6665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.751828][ T6775] F2FS-fs (loop9): Found nat_bits in checkpoint [ 203.997032][ T6775] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 204.181791][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.218019][ T6775] syz.9.588: attempt to access beyond end of device [ 204.218019][ T6775] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.257459][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.273081][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.294033][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.325059][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.366076][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.411791][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.419004][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.449871][ T5359] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 204.458742][ T5483] syz-executor: attempt to access beyond end of device [ 204.458742][ T5483] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 204.501141][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.520035][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.540369][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.560302][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.567559][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.610308][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.639838][ T5359] usb 7-1: Using ep0 maxpacket: 32 [ 204.652038][ T5359] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 204.657898][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.670444][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.698681][ T5359] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 204.720781][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.744883][ T5359] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 204.761722][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.783591][ T5359] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 204.790807][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.836614][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.847048][ T5359] usb 7-1: config 0 interface 0 has no altsetting 0 [ 204.862211][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.881576][ T5359] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 204.911546][ T5359] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 204.920673][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.950682][ T5359] usb 7-1: Product: syz [ 204.954915][ T6665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.955831][ T6665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.006676][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.021007][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.043163][ T5359] usb 7-1: Manufacturer: syz [ 205.047936][ T5359] usb 7-1: SerialNumber: syz [ 205.075572][ T5359] usb 7-1: config 0 descriptor?? [ 205.082158][ T4679] usb 2-1: USB disconnect, device number 7 [ 205.102714][ T4679] usblp0: removed [ 205.144294][ T5359] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 205.209540][ T5359] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 205.563141][ T6802] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 205.580804][ T4378] usb 7-1: USB disconnect, device number 7 [ 205.580881][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 205.606429][ T6815] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 205.649476][ T6820] loop9: detected capacity change from 0 to 512 [ 205.674753][ T4378] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 205.719846][ T6820] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 205.778991][ T6820] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.592: bg 0: block 104: invalid block bitmap [ 205.807694][ T6820] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 205.847665][ T6820] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.592: invalid indirect mapped block 1 (level 1) [ 205.894956][ T6826] loop8: detected capacity change from 0 to 128 [ 205.935770][ T6820] EXT4-fs (loop9): 1 truncate cleaned up [ 205.990259][ T6820] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 206.207893][ T5483] EXT4-fs (loop9): unmounting filesystem. [ 206.470779][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.478456][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.547174][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.647997][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.664823][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.733769][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 206.745810][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 206.775033][ T4685] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 206.785628][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 206.825854][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 206.866628][ T6665] device veth0_vlan entered promiscuous mode [ 206.930916][ T6665] device veth1_vlan entered promiscuous mode [ 206.967576][ T6851] device bond_slave_0 entered promiscuous mode [ 206.974545][ T6851] device bond_slave_1 entered promiscuous mode [ 207.001583][ T6851] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.011951][ T6851] bridge0: port 3(macvlan2) entered blocking state [ 207.016744][ T4685] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.036748][ T6851] bridge0: port 3(macvlan2) entered disabled state [ 207.048968][ T4685] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.077596][ T6851] device macvlan2 entered promiscuous mode [ 207.099442][ T6851] device bond0 entered promiscuous mode [ 207.109224][ T4685] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.126565][ T6851] bridge0: port 3(macvlan2) entered blocking state [ 207.135312][ T6851] bridge0: port 3(macvlan2) entered forwarding state [ 207.147821][ T4685] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.157026][ T4685] usb 10-1: SerialNumber: syz [ 207.207386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.225103][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.237433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.264613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.312439][ T6665] device veth0_macvtap entered promiscuous mode [ 207.334188][ T6665] device veth1_macvtap entered promiscuous mode [ 207.384948][ T4685] usb 10-1: 0:2 : does not exist [ 207.435255][ T6860] 9pnet: p9_errstr2errno: server reported unknown error  [ 207.450811][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.490961][ T4685] usb 10-1: USB disconnect, device number 4 [ 207.495318][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.536804][ T6865] loop8: detected capacity change from 0 to 1024 [ 207.543683][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.582463][ T6865] EXT4-fs: Ignoring removed nobh option [ 207.588245][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.608531][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.648739][ T6865] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.679746][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.700021][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.720372][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.733840][ T6865] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 207.744215][ T6868] loop6: detected capacity change from 0 to 2048 [ 207.752640][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.789816][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.824674][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.833013][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.902097][ T6868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.914521][ T6865] EXT4-fs warning (device loop8): ext4_rename_delete:3778: inode #12: comm syz.8.609: Deleting old file: nlink 3, error=-2 [ 207.937591][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.977985][ T5570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.053903][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.089714][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.159730][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.179790][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.204792][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.233244][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.274021][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.299789][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.333234][ T5287] EXT4-fs (loop8): unmounting filesystem. [ 208.333849][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.422956][ T6665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.483146][ T6665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.496071][ T6665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.505679][ T6665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.517511][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.528538][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.658471][ T6888] mmap: syz.8.614 (6888) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 208.782228][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.815907][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.837991][ T6894] loop9: detected capacity change from 0 to 128 [ 208.871229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.935736][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.944384][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.961206][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.739950][ T4315] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 209.772887][ T6920] loop8: detected capacity change from 0 to 4096 [ 209.879518][ T6920] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 209.908469][ T6920] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 209.933351][ T6920] ntfs: (device loop8): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 209.958153][ T6920] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 209.974643][ T4315] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.995905][ T4315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.016672][ T6920] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 210.053144][ T6920] ntfs: volume version 3.1. [ 210.059692][ T4315] usb 10-1: config 0 descriptor?? [ 210.078547][ T4315] cp210x 10-1:0.0: cp210x converter detected [ 210.078624][ T6920] ntfs: (device loop8): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 210.130454][ T6920] ntfs: (device loop8): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 210.180702][ T4679] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 210.191062][ T6920] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 210.218020][ T6932] loop1: detected capacity change from 0 to 256 [ 210.220266][ T6920] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 210.303976][ T6920] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 210.401409][ T4679] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 210.420336][ T4679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.450082][ T4679] usb 7-1: Product: syz [ 210.466820][ T4679] usb 7-1: Manufacturer: syz [ 210.483939][ T4679] usb 7-1: SerialNumber: syz [ 210.497226][ T4315] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 210.532558][ T4679] usb 7-1: config 0 descriptor?? [ 210.552493][ T4315] usb 10-1: cp210x converter now attached to ttyUSB0 [ 210.727774][ T4315] usb 10-1: USB disconnect, device number 5 [ 210.750863][ T4315] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 210.868689][ T4315] cp210x 10-1:0.0: device disconnected [ 210.976360][ T4679] usb 7-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88) [ 211.121026][ T6941] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 211.136220][ T6943] loop1: detected capacity change from 0 to 1024 [ 211.144905][ T6943] EXT4-fs: Ignoring removed bh option [ 211.182901][ T4679] usb 7-1: Read permanent extended address ec:74:80:5a:bc:49:aa:22 from device [ 211.206926][ T4679] usb 7-1: atusb_probe: initialization failed, error = -524 [ 211.246015][ T4679] atusb: probe of 7-1:0.0 failed with error -524 [ 211.250664][ T6945] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 211.267200][ T6943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 211.424473][ T4679] usb 7-1: USB disconnect, device number 8 [ 211.786654][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.855384][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 211.895821][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 211.909819][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 211.980351][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 211.987176][ T4265] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 212.075487][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.092445][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.111934][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 212.121641][ T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 212.137775][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.157276][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 212.201166][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.253456][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.269125][ T22] usb 1-1: Product: syz [ 212.299871][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.329902][ T22] usb 1-1: Manufacturer: syz [ 212.340513][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.344827][ T22] usb 1-1: SerialNumber: syz [ 212.347347][ T4265] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 212.373472][ T22] usb 1-1: config 0 descriptor?? [ 212.374188][ T6970] device gretap0 entered promiscuous mode [ 212.402648][ T22] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 212.415335][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.428558][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.446520][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.471871][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.478588][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.506333][ T6954] loop9: detected capacity change from 0 to 32768 [ 212.515296][ T6968] device gretap0 left promiscuous mode [ 212.543124][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.588087][ T6954] XFS (loop9): Mounting V5 Filesystem [ 212.594206][ T4265] EXT4-fs error (device loop1): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 212.703113][ T4265] EXT4-fs (loop1): Remounting filesystem read-only [ 212.740329][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 212.756488][ T6954] XFS (loop9): Ending clean mount [ 212.787920][ T4265] EXT4-fs error (device loop1): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 212.896419][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.005820][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.054793][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.057116][ T5483] XFS (loop9): Unmounting Filesystem [ 213.140531][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.167553][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.262780][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.287245][ T4265] EXT4-fs warning (device loop1): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 213.442006][ T22] gspca_zc3xx: reg_w_i err -71 [ 213.481557][ T6998] netlink: 'syz.6.642': attribute type 1 has an invalid length. [ 213.489386][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.642'. [ 213.516541][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.6.642'. [ 213.536993][ T6998] netlink: 'syz.6.642': attribute type 1 has an invalid length. [ 213.565089][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.642'. [ 213.935793][ T4265] device syz_tun left promiscuous mode [ 213.967515][ T7009] loop8: detected capacity change from 0 to 128 [ 214.038984][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.644'. [ 214.059790][ T22] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 214.066151][ T22] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 214.098006][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.644'. [ 214.133940][ T22] usb 1-1: USB disconnect, device number 3 [ 214.220994][ T7013] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 214.275496][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.484218][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.818911][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.952609][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.301337][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.312568][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.323663][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.337318][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.346570][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.354078][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.780258][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.781425][ T4268] Bluetooth: hci5: command 0x1003 tx timeout [ 216.233790][ T7066] loop0: detected capacity change from 0 to 512 [ 216.300767][ T7066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.355012][ T7066] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.369749][ T4683] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 216.550579][ T7066] loop0: detected capacity change from 512 to 0 [ 216.564050][ C1] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 216.583275][ T4683] usb 7-1: config 8 has an invalid interface number: 22 but max is 0 [ 216.590813][ T7073] EXT4-fs error (device loop0): __ext4_find_entry:1685: inode #2: comm syz.0.661: reading directory lblock 0 [ 216.598567][ T4683] usb 7-1: config 8 has no interface number 0 [ 216.607861][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 216.628776][ T4683] usb 7-1: config 8 interface 22 has no altsetting 0 [ 216.659244][ T4683] usb 7-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 216.678945][ T4683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.690464][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 216.697417][ T4683] usb 7-1: Product: syz [ 216.699171][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 216.711407][ T4683] usb 7-1: Manufacturer: syz [ 216.712896][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 216.724568][ T4683] usb 7-1: SerialNumber: syz [ 216.727527][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 216.740956][ T7073] EXT4-fs (loop0): I/O error while writing superblock [ 216.872556][ C1] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 216.890196][ C0] I/O error, dev loop0, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 216.899999][ T6665] EXT4-fs error (device loop0): ext4_get_inode_loc:4645: inode #2: block 35: comm syz-executor: unable to read itable block [ 216.920747][ C0] I/O error, dev loop0, sector 72 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 216.946918][ T4366] loop: Write error at byte offset 9223372036854776831, length 1024. [ 217.009975][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.019582][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.029105][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 217.033904][ T4683] usb 7-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 217.037551][ T6665] EXT4-fs (loop0): I/O error while writing superblock [ 217.065863][ T6665] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5915: IO failure [ 217.103367][ T4683] usb 7-1: USB disconnect, device number 9 [ 217.118030][ T11] loop: Write error at byte offset 9223372036854776831, length 1024. [ 217.139468][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.149164][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 217.158767][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 217.177790][ T6665] EXT4-fs (loop0): I/O error while writing superblock [ 217.187219][ T6665] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 217.237952][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 217.246690][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 217.259795][ T6665] EXT4-fs (loop0): I/O error while writing superblock [ 217.274603][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.301226][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.331849][ T7037] device bridge_slave_0 entered promiscuous mode [ 217.335828][ T9] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4630: inode #2: block 35: comm kworker/u4:0: unable to read itable block [ 217.372612][ T4366] loop: Write error at byte offset 9223372036854776831, length 1024. [ 217.381503][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 217.415645][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 217.424063][ T9] EXT4-fs (loop0): I/O error while writing superblock [ 217.447753][ T6665] EXT4-fs (loop0): unmounting filesystem. [ 217.489351][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 217.497852][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 217.506269][ T6665] EXT4-fs (loop0): I/O error while writing superblock [ 217.535150][ T4366] loop: Write error at byte offset 9223372036854793215, length 1024. [ 217.547161][ C1] Buffer I/O error on dev loop0, logical block 17, lost sync page write [ 217.604323][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.621067][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.655669][ T7037] device bridge_slave_1 entered promiscuous mode [ 217.679744][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz.9.666'. [ 217.730045][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz.9.666'. [ 217.746497][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz.9.666'. [ 217.809522][ T7100] loop6: detected capacity change from 0 to 1024 [ 217.917637][ T7100] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 218.026367][ T7100] loop6: detected capacity change from 1024 to 64 [ 218.034923][ T7100] syz.6.668: attempt to access beyond end of device [ 218.034923][ T7100] loop6: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 218.089763][ T7100] EXT4-fs warning (device loop6): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 113) [ 218.089805][ T7100] Buffer I/O error on device loop6, logical block 113 [ 218.090030][ T7100] syz.6.668: attempt to access beyond end of device [ 218.090030][ T7100] loop6: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 218.090059][ T7100] EXT4-fs warning (device loop6): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 113) [ 218.090087][ T7100] Buffer I/O error on device loop6, logical block 113 [ 218.209438][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.210978][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.213846][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.214367][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.214823][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.473386][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.473919][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.477892][ T4790] EXT4-fs warning (device loop6): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 218.488407][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.502895][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.684426][ T7037] team0: Port device team_slave_0 added [ 218.688561][ T7037] team0: Port device team_slave_1 added [ 218.838757][ T36] device batadv_slave_0 left promiscuous mode [ 218.850219][ T36] device hsr_slave_0 left promiscuous mode [ 218.855030][ T36] device hsr_slave_1 left promiscuous mode [ 218.865525][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.865586][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.866815][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.866846][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.868859][ T36] device bridge_slave_1 left promiscuous mode [ 218.869010][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.880317][ T36] device bridge_slave_0 left promiscuous mode [ 218.880491][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.093083][ T36] device veth1_macvtap left promiscuous mode [ 219.093144][ T36] device veth0_macvtap left promiscuous mode [ 219.093246][ T36] device veth1_vlan left promiscuous mode [ 219.093330][ T36] device veth0_vlan left promiscuous mode [ 219.459832][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 219.647510][ T4276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.677876][ T4276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.690152][ T4276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.704585][ T4276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.718101][ T4276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.728917][ T4276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.159762][ T4378] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 220.392921][ T4378] usb 9-1: config 8 has an invalid interface number: 22 but max is 0 [ 220.415672][ T4378] usb 9-1: config 8 has no interface number 0 [ 220.422314][ T4378] usb 9-1: config 8 interface 22 has no altsetting 0 [ 220.443273][ T4378] usb 9-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 220.452480][ T4378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.461060][ T4378] usb 9-1: Product: syz [ 220.465277][ T4378] usb 9-1: Manufacturer: syz [ 220.470019][ T4378] usb 9-1: SerialNumber: syz [ 220.533601][ T5359] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 220.634934][ T36] team0 (unregistering): Port device team_slave_1 removed [ 220.693643][ T36] team0 (unregistering): Port device team_slave_0 removed [ 220.725070][ T5359] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.735850][ T4378] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 220.749244][ T5359] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.766685][ T4378] usb 9-1: USB disconnect, device number 7 [ 220.801478][ T5359] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.811750][ T5359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.812005][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.836999][ T5359] usb 10-1: Product: syz [ 220.845396][ T5359] usb 10-1: Manufacturer: syz [ 220.853630][ T5359] usb 10-1: SerialNumber: syz [ 220.901457][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.085365][ T5359] usb 10-1: 0:2 : does not exist [ 221.099403][ T5359] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 221.239254][ T5359] usb 10-1: USB disconnect, device number 6 [ 221.291047][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 221.482997][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.541145][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 221.772070][ T7161] loop9: detected capacity change from 0 to 512 [ 221.790028][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 221.922268][ T7161] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.683: inode #1: comm syz.9.683: iget: illegal inode # [ 222.006485][ T7161] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.683: error while reading EA inode 1 err=-117 [ 222.029433][ T7161] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.683: inode #1: comm syz.9.683: iget: illegal inode # [ 222.062417][ T7161] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.683: error while reading EA inode 1 err=-117 [ 222.094459][ T7161] EXT4-fs (loop9): 1 orphan inode deleted [ 222.119080][ T7161] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 222.219035][ T5483] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 222.416631][ T36] bond0 (unregistering): Released all slaves [ 222.594931][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.608001][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.643316][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.799097][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.812941][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.842859][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.874850][ T4790] EXT4-fs (loop6): unmounting filesystem. [ 222.910119][ T7102] kmmpd-loop6: attempt to access beyond end of device [ 222.910119][ T7102] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 222.924967][ T7102] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 222.934781][ T7102] EXT4-fs error (device loop6): kmmpd:186: comm kmmpd-loop6: Error writing to MMP block [ 222.965553][ T7102] kmmpd-loop6: attempt to access beyond end of device [ 222.965553][ T7102] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 223.029323][ T7102] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 223.045983][ T5483] EXT4-fs (loop9): unmounting filesystem. [ 223.061663][ T7037] device hsr_slave_0 entered promiscuous mode [ 223.066362][ T4790] ------------[ cut here ]------------ [ 223.073655][ T4790] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x480 [ 223.085195][ T7037] device hsr_slave_1 entered promiscuous mode [ 223.092866][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.108117][ T7037] Cannot create hsr debugfs directory [ 223.114531][ T4790] WARNING: CPU: 0 PID: 4790 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 223.124850][ T4790] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.128813][ T4790] CPU: 0 PID: 4790 Comm: syz-executor Not tainted 6.1.147-syzkaller #0 [ 223.137232][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.147492][ T4790] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 223.153957][ T4790] Code: ef e8 e8 fd c5 fd 4c 8b 45 00 48 c7 c7 80 fc de 8a 48 c7 c6 40 f9 de 8a 48 c7 c2 e0 fd de 8a 8b 0c 24 4d 89 e9 e8 84 03 42 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d5 9a 14 [ 223.173683][ T4790] RSP: 0018:ffffc900032f7a88 EFLAGS: 00010246 [ 223.179862][ T4790] RAX: ab228135d0263500 RBX: ffffffff96e9d5c8 RCX: ffff888054230000 [ 223.187886][ T4790] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 223.195973][ T4790] RBP: ffffffff8a8de180 R08: dffffc0000000000 R09: fffff5200065eef1 [ 223.204045][ T4790] R10: fffff5200065eef1 R11: 1ffff9200065eef0 R12: ffff88801d671000 [ 223.212215][ T4790] R13: ffffffff8231b600 R14: ffff88801d670000 R15: ffff88801d670698 [ 223.220272][ T4790] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 223.229257][ T4790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.236097][ T4790] CR2: 00007efda7d72020 CR3: 000000002f988000 CR4: 00000000003506f0 [ 223.244189][ T4790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.252262][ T4790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.260773][ T4790] Call Trace: [ 223.264179][ T4790] [ 223.267155][ T4790] slab_free_freelist_hook+0xd2/0x1a0 [ 223.272654][ T4790] ? generic_shutdown_super+0x130/0x340 [ 223.278268][ T4790] __kmem_cache_free+0xb6/0x1f0 [ 223.283244][ T4790] ? ext4_drop_inode+0x2b0/0x2b0 [ 223.288240][ T4790] generic_shutdown_super+0x130/0x340 [ 223.293821][ T4790] kill_block_super+0x7c/0xe0 [ 223.298545][ T4790] deactivate_locked_super+0x93/0xf0 [ 223.303967][ T4790] cleanup_mnt+0x463/0x4f0 [ 223.308440][ T4790] ? lockdep_hardirqs_on+0x94/0x140 [ 223.313778][ T4790] task_work_run+0x1ca/0x250 [ 223.318428][ T4790] ? task_work_cancel+0x230/0x230 [ 223.323581][ T4790] ? do_exit+0x939/0x2400 [ 223.327961][ T4790] ? kmem_cache_free+0xf7/0x290 [ 223.332936][ T4790] do_exit+0x93e/0x2400 [ 223.337158][ T4790] ? put_task_struct+0x80/0x80 [ 223.342040][ T4790] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.348080][ T4790] ? lock_chain_count+0x20/0x20 [ 223.353038][ T4790] ? _raw_spin_lock_irq+0xab/0xe0 [ 223.358114][ T4790] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 223.363597][ T4790] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.369773][ T4790] ? _raw_spin_unlock_irq+0x1f/0x40 [ 223.375031][ T4790] ? lockdep_hardirqs_on+0x94/0x140 [ 223.380351][ T4790] do_group_exit+0x217/0x2d0 [ 223.385089][ T4790] __x64_sys_exit_group+0x3b/0x40 [ 223.390241][ T4790] do_syscall_64+0x4c/0xa0 [ 223.394805][ T4790] ? clear_bhb_loop+0x60/0xb0 [ 223.399514][ T4790] ? clear_bhb_loop+0x60/0xb0 [ 223.404376][ T4790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.410449][ T4790] RIP: 0033:0x7fee0b18ebe9 [ 223.414911][ T4790] Code: Unable to access opcode bytes at 0x7fee0b18ebbf. [ 223.422137][ T4790] RSP: 002b:00007fff7f52fbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 223.430741][ T4790] RAX: ffffffffffffffda RBX: 00007fee0b211c89 RCX: 00007fee0b18ebe9 [ 223.438760][ T4790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 223.446842][ T4790] RBP: 0000000000000027 R08: 00007fff7f52d966 R09: 00007fff7f530e80 [ 223.454908][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7f530e80 [ 223.462991][ T4790] R13: 00007fee0b211c05 R14: 0000555573d8a4a8 R15: 00007fff7f533040 [ 223.471079][ T4790] [ 223.474221][ T4790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.481525][ T4790] CPU: 0 PID: 4790 Comm: syz-executor Not tainted 6.1.147-syzkaller #0 [ 223.489885][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.501371][ T4790] Call Trace: [ 223.504686][ T4790] [ 223.507658][ T4790] dump_stack_lvl+0x168/0x22e [ 223.512366][ T4790] ? memcpy+0x3c/0x60 [ 223.516461][ T4790] ? show_regs_print_info+0x12/0x12 [ 223.521699][ T4790] ? load_image+0x3b0/0x3b0 [ 223.526237][ T4790] panic+0x2c9/0x710 [ 223.530162][ T4790] ? bpf_jit_dump+0xd0/0xd0 [ 223.534702][ T4790] __warn+0x2f8/0x4f0 [ 223.538708][ T4790] ? debug_check_no_obj_freed+0x43c/0x530 [ 223.544452][ T4790] ? debug_check_no_obj_freed+0x43c/0x530 [ 223.550189][ T4790] report_bug+0x2ba/0x4f0 [ 223.554541][ T4790] ? debug_check_no_obj_freed+0x43c/0x530 [ 223.560293][ T4790] handle_bug+0x3a/0x70 [ 223.564486][ T4790] exc_invalid_op+0x16/0x40 [ 223.569051][ T4790] asm_exc_invalid_op+0x16/0x20 [ 223.573948][ T4790] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 223.580296][ T4790] Code: ef e8 e8 fd c5 fd 4c 8b 45 00 48 c7 c7 80 fc de 8a 48 c7 c6 40 f9 de 8a 48 c7 c2 e0 fd de 8a 8b 0c 24 4d 89 e9 e8 84 03 42 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d5 9a 14 [ 223.599917][ T4790] RSP: 0018:ffffc900032f7a88 EFLAGS: 00010246 [ 223.606087][ T4790] RAX: ab228135d0263500 RBX: ffffffff96e9d5c8 RCX: ffff888054230000 [ 223.614073][ T4790] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 223.622066][ T4790] RBP: ffffffff8a8de180 R08: dffffc0000000000 R09: fffff5200065eef1 [ 223.630079][ T4790] R10: fffff5200065eef1 R11: 1ffff9200065eef0 R12: ffff88801d671000 [ 223.638070][ T4790] R13: ffffffff8231b600 R14: ffff88801d670000 R15: ffff88801d670698 [ 223.646060][ T4790] ? ext4_group_desc_init+0x1ff0/0x1ff0 [ 223.651663][ T4790] ? debug_check_no_obj_freed+0x43c/0x530 [ 223.657413][ T4790] slab_free_freelist_hook+0xd2/0x1a0 [ 223.662808][ T4790] ? generic_shutdown_super+0x130/0x340 [ 223.668365][ T4790] __kmem_cache_free+0xb6/0x1f0 [ 223.673257][ T4790] ? ext4_drop_inode+0x2b0/0x2b0 [ 223.678208][ T4790] generic_shutdown_super+0x130/0x340 [ 223.683600][ T4790] kill_block_super+0x7c/0xe0 [ 223.688471][ T4790] deactivate_locked_super+0x93/0xf0 [ 223.693861][ T4790] cleanup_mnt+0x463/0x4f0 [ 223.698290][ T4790] ? lockdep_hardirqs_on+0x94/0x140 [ 223.703506][ T4790] task_work_run+0x1ca/0x250 [ 223.708119][ T4790] ? task_work_cancel+0x230/0x230 [ 223.713160][ T4790] ? do_exit+0x939/0x2400 [ 223.717509][ T4790] ? kmem_cache_free+0xf7/0x290 [ 223.722398][ T4790] do_exit+0x93e/0x2400 [ 223.726578][ T4790] ? put_task_struct+0x80/0x80 [ 223.731361][ T4790] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.737363][ T4790] ? lock_chain_count+0x20/0x20 [ 223.742229][ T4790] ? _raw_spin_lock_irq+0xab/0xe0 [ 223.747276][ T4790] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 223.752756][ T4790] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.758769][ T4790] ? _raw_spin_unlock_irq+0x1f/0x40 [ 223.763983][ T4790] ? lockdep_hardirqs_on+0x94/0x140 [ 223.769197][ T4790] do_group_exit+0x217/0x2d0 [ 223.773922][ T4790] __x64_sys_exit_group+0x3b/0x40 [ 223.778970][ T4790] do_syscall_64+0x4c/0xa0 [ 223.783398][ T4790] ? clear_bhb_loop+0x60/0xb0 [ 223.788086][ T4790] ? clear_bhb_loop+0x60/0xb0 [ 223.792780][ T4790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.798804][ T4790] RIP: 0033:0x7fee0b18ebe9 [ 223.803233][ T4790] Code: Unable to access opcode bytes at 0x7fee0b18ebbf. [ 223.810271][ T4790] RSP: 002b:00007fff7f52fbc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 223.818788][ T4790] RAX: ffffffffffffffda RBX: 00007fee0b211c89 RCX: 00007fee0b18ebe9 [ 223.826791][ T4790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 223.834774][ T4790] RBP: 0000000000000027 R08: 00007fff7f52d966 R09: 00007fff7f530e80 [ 223.842778][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7f530e80 [ 223.850857][ T4790] R13: 00007fee0b211c05 R14: 0000555573d8a4a8 R15: 00007fff7f533040 [ 223.858856][ T4790] [ 223.862165][ T4790] Kernel Offset: disabled [ 223.866550][ T4790] Rebooting in 86400 seconds..