last executing test programs: 4m10.76756563s ago: executing program 32 (id=245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 3m38.176897808s ago: executing program 33 (id=376): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m55.472632299s ago: executing program 3 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000006"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) 2m55.016732416s ago: executing program 3 (id=607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) 2m54.406129096s ago: executing program 3 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x3, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 2m53.684176623s ago: executing program 3 (id=617): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f09002c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104a5d3eaff1a766dce0c557b956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6e6, &(0x7f0000000f40)="$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") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x11, 0x0) 2m52.6411087s ago: executing program 3 (id=621): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1081e, &(0x7f0000000100)={[{}, {@resgid={'resgid', 0x3d, 0xee01}}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) lstat(&(0x7f0000000400)='./control/file0\x00', &(0x7f0000000440)) 2m51.182836757s ago: executing program 3 (id=630): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m35.859974216s ago: executing program 34 (id=630): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f00000000c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)={0xef000000, 0x1000, 0x2}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m21.847824316s ago: executing program 1 (id=719): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.882298682s ago: executing program 1 (id=724): syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000400)={r3}) 2m20.364057391s ago: executing program 1 (id=725): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000280)="c021", 0x2}], 0x1) 2m19.711844934s ago: executing program 1 (id=727): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRESDEC], 0x2, 0xc3b, &(0x7f0000000480)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkL8x9IqpGNtGB66aGHAEXRQ04EWqNAigZG0wY9Mq0LJBcfipx6IlrYSIse2CJATgGDmX0rLmnSYkRSoqzPxya/u7Pvzb43bz1DE3zzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI+L1XLp0+kx52KwCAB+nKyJdPn3X9B4DHyjX//w8AAAAAAAAAAAAAAAddiiKejBSzV1bTWPW8o3653Xf7zujQ8NbVjqSq5qGqfPlVP3P23PkvvDB4oZuX29MfUn+vfTpeG7l2qfHyzNTs3MT8/MR4Y3S6fWNmfGLHe9ht/c1OVgegMfX67fGbN+cbZ58/t+HlOwPv9z9xfODi4LOnnumWHR0aHh5ZL1LvLV+774Z0bDfD43AUcSpSPPedH6dWRBSx+2NRf7Bjv9mRqhMnq06MDg1XHZlst6YXyhevdg9EEdHoqdTsHqOtxyJqfQ+0D9trRiyWzS8bfLLs3shsa651fXKicbU1t9BeaM9MX02d1pb9aUQRF1LEUkSs9H9wd31RRC1SfOvYaroeEYe6x+Hz1cTg7dtR7GMfd6BsZ6MvYql4BMbsAOuPIl6NFD9550TcyOeZ6lzzuYhXy/xexFtlvhSRyg/G+Yj3tvgc8WiqRRF/Xo7/xdU0Xp0PuueVy19pfGn65kxP2e555Re8PlRnit7rz0O6PhzZlA/GAT831aOIVjU6q+n+f9gBAAAAAAAAAAAAAAAAYK8diSI+FSle+fc/quYVRzUv/djFwd8f+OXeOXtP32M/ZdnnI2Kx2Nmc3MN5YuDVdDWlhzyX+HFWjyL+OM//+8bDbgwAAAAAAAAAAAAAAAAAAMBjrYgfRYoX3z2RlqJ3TfH29K3Gtdb1yc6qsN21f7trpq+tra01UiebOcdyLuZcyrmccyVnFLl+zmbOsZyLOZdyLudcyRmHcv2czZxjORdzLuVczrmSM2q5fs5mzrGcizmXci7nXMkZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5IiivhZpPjm11ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyriu5Gi8QfNu9tqEZGqfztOlN/OR/NwmR+P5mCZL0XzUs5WlbXmNx5C+9mdvlTEDyNFf/3tuwOex7+v8+zuxyDe+vr6s0/XOnmo++LA+/1PHD92cXD4157e7nHaqgEnL7enb99pjA4ND4/0bK7ld/94z7aB/L7F3nSdiJh/483XW5OTE3P3/6D8COyi+iP0INUel556UD2I2oFoxsPpO4+B8vr/XqT47Xf/o3vB71z/6/FLnWd3r/Dx0z9Zv/6/uHlHO7z+1zbXy9f/8pq+1fX/yZ5tL+afRvpqEfWFqdm+4xH1+TfePNWeat2auDUxff706S8ODn7x3Om+wxH1m+3JiZ5He3K4AAAAAAAAAAAAAAAAAB6cVMTvRorWD1dTIyLuVPO1Bi4OPnvqmUNxqJpvtWHe9msj1y41Xp6Zmp2bmJ+fGG+MTrdvzIxP7PTt6tV0r9Gh4X3pzD0d2Vn7/3vbHdyj/UfqL8/MvjHXvvWHC1u+frR+6fr8wlzrxtYvx5EoIpq9W05WDR4dGq4aPdluTVdVr245mf4X15eK+M9IceN8I302b8vz/zfP8N8w/39x8472af7/x3q2le+ZUhE/jRS/9RdPT/1T1c6j8YFjlsv9TaQ4eeEz8dlOfw6X5bpt6NxXoDMzsCz7f5HiH362sWx3PuST62XP7PjAPiLK8T8WKb77Z9+OX8/bNt7/YevxP7p5R/s0/k/1bDu64X4Fu+46efxPRYqXnnw7fiNv+7D7f3TvvXEiF757f459Gv9P9GwbyO/7m3vTdQAAAAAAAAAAgEdaXyribyPF94dr6YW8bSd//ze+tumvufbp778+2bNtfG/WK7rngz04rAAAAABwIPSlIn4UKW4tvH13DvXG+d898z9/Z33+51Da9Gr1e75fqe4bsJe//+s1kN93bPfdBgAAAAAAAAAAAAAAAAAAgAMlpSJe6KynXs2rTzG+7Xrqy5Hilf95LpdLx8ty3XXgB6rv9Ssz06cuTU7O3GgttK5PTjRGZls3Jsq6T0WK1b/+TK5bVOurd9eb76zxvr4W+1ykGP67btnOWuzdtcmfWi97piz7sUjxX3+/sWx3HetPrJc9W5b9q0jx1X/euuzx9bLnyrLfjhQ/+GqjW/ZoWbZ7f9RPrpd9/sZMsQ+jAgAAAAAAAAAAAAAAAAAAwOOmLxXxp5Hif6eW7s7lz+v/9/U8rbz19Z71/je5U63zP1Ct/7/d4/tZ/7+6r8Didu8KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfTSmKeDNSzF5ZTcv95fOO+uX29O07o0PDW1c7kqqah6ry5Vf9zNlz57/wwuCFbn54/b32qXht5NqlxsszU7NzE/PzE+ON0en2jZnxiR3vYbf1NztZHYDG1Ou3x2/enG+cff7chpfvDLzf/8TxgYuDz556plt2dGh4eKSnTK3vvt/9A9I22w9HEX8ZKZ77zo/T9/sjitj9sbjHZ2e/Hak6cbLqxOjQcNWRyXZreqF88Wr3QBQRjZ5Kze4xegBjsSvNiMWy+WWDT5bdG5ltzbWuT040rrbmFtoL7Znpq6nT2rI/jSjiQopYioiV/g/uri+KeD1SfOvYavqX/ohD3ePw+SsjXz59dvt2FPvYxx0o29noi1gqHoExO8D6o4h/jBQ/eedE/Gt/RC06X/G5iFfL/F7EW9EZ71R+MM5HvLfF54hHUy2K+P9y/C+upnf6y/NB97xy+SuNL03fnOkp2z2vPPLXhwfpgJ+b6lHED6oz/mr6N/9dAwAAAAAAAAAAAAAAABwgRfxqpHjx3ROpmh98d05xe/pW41rr+mRnWl937l93zvTa2tpaI3WymXMs52LOpZzLOVdyRpHr52yWWV9bG8vPF3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORdzLuVczrmSMw7I3D0AAAAAAAAAAAAAAAAAAOCjpaj+SfHNr62mtf7O+tJj0cll64F+5P08AAD//1Mq+5Y=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0/file0\x00', 0x0, 0x104000, 0x0) 2m18.312147579s ago: executing program 1 (id=732): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 2m17.788254262s ago: executing program 1 (id=735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x35, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000080)={0x0}) 2m16.535536423s ago: executing program 35 (id=735): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x5, 0x35, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000000080)={0x0}) 1m35.559046354s ago: executing program 8 (id=943): syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) setfsuid(0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 1m34.592819366s ago: executing program 8 (id=945): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x14) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m34.099220874s ago: executing program 8 (id=947): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1m33.555068838s ago: executing program 8 (id=950): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x101c08a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f00000005c0)="$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") r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000003a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9320d3, 0x0, 0xfb, 0x0, &(0x7f00000000c0)) 1m32.767466769s ago: executing program 8 (id=956): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m28.992133101s ago: executing program 8 (id=958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r2, 0xe85, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) 1m27.768199924s ago: executing program 36 (id=958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r2, 0xe85, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) 1m21.241428524s ago: executing program 4 (id=986): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x102001, 0x0) close(r0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x8004) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0xee01, r1, 0x0) setreuid(r1, 0x0) 1m20.786301607s ago: executing program 4 (id=990): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x4004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.284810664s ago: executing program 4 (id=991): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000200)='syscall\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/89, 0x59}], 0x1, 0x7, 0x126) 1m18.533092401s ago: executing program 4 (id=997): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x2004810, &(0x7f0000000040)=ANY=[], 0x4, 0x6a6, &(0x7f00000020c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 1m17.284858645s ago: executing program 4 (id=1001): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0xb00, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/158, 0x9e, 0x1, 0x0}, &(0x7f00000002c0)=0x40) 1m16.489659167s ago: executing program 4 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m15.80196636s ago: executing program 37 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 45.618174144s ago: executing program 2 (id=1100): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x50000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x8}}]}}]}, 0x3c}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.010913669s ago: executing program 2 (id=1104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESDEC], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 43.458574237s ago: executing program 2 (id=1108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0xb047e000) r3 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r3, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x20000000, 0x0, 0x0}, 0x20) 41.191827349s ago: executing program 2 (id=1117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 39.388644703s ago: executing program 2 (id=1122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x0, @private1}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r3}, &(0x7f00000003c0)=0x8) 37.384627788s ago: executing program 2 (id=1128): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfefffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xe, &(0x7f0000000140)) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000240)=[{}], 0x1, 0x0, &(0x7f00000002c0)={[0x2]}, 0x8) 35.329145726s ago: executing program 38 (id=1128): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfefffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xe, &(0x7f0000000140)) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000240)=[{}], 0x1, 0x0, &(0x7f00000002c0)={[0x2]}, 0x8) 24.347372892s ago: executing program 7 (id=1168): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x20042, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 23.268199136s ago: executing program 7 (id=1172): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{}, 0x0, 0x6, 0x0, 0x0, 0x0}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000004b80)) 21.9185546s ago: executing program 7 (id=1174): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x280c086, &(0x7f0000000380)=ANY=[], 0x97, 0x2a9, &(0x7f0000000500)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffd11, &(0x7f00000001c0)='*', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfed8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x103) 21.013521553s ago: executing program 7 (id=1176): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 19.358933859s ago: executing program 6 (id=1184): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x18490, &(0x7f00000003c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x77e, &(0x7f0000000f80)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r0, 0x1f) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 19.24240593s ago: executing program 7 (id=1185): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x8}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r1, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 18.204136552s ago: executing program 6 (id=1187): mount(0x0, 0x0, &(0x7f0000000300)='selinuxfs\x00', 0x2004040, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 17.139545666s ago: executing program 7 (id=1190): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.117256797s ago: executing program 6 (id=1191): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) 15.813101897s ago: executing program 39 (id=1190): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = io_uring_setup(0xdac, &(0x7f0000000180)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.624580871s ago: executing program 6 (id=1195): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@resgid={'resgid', 0x3d, 0xee00}}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003, 0x4000}) 13.667562608s ago: executing program 6 (id=1201): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000180)=0x4) 9.480832248s ago: executing program 6 (id=1209): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x2, 0x2, 0x73) fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r1, r4}}}], 0x20, 0x4000}}], 0x2, 0x0) 8.954376338s ago: executing program 9 (id=1212): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r0, 0x8, 0x2) write$binfmt_script(r4, 0x0, 0xfffffe48) write(r1, 0x0, 0x0) 8.464475412s ago: executing program 40 (id=1209): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x2, 0x2, 0x73) fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000008a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r1, r4}}}], 0x20, 0x4000}}], 0x2, 0x0) 8.086987582s ago: executing program 0 (id=1215): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 7.250721551s ago: executing program 0 (id=1216): ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{}, 0x1, &(0x7f0000000000)=[0xde], 0x29f9, 0x5}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20000000) 6.701574114s ago: executing program 5 (id=1218): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x40000582) inotify_rm_watch(r0, r1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6.508846697s ago: executing program 0 (id=1219): open(&(0x7f0000000000)='./file0\x00', 0x84ff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000080)) dup3(r2, r1, 0x0) 6.06974393s ago: executing program 9 (id=1220): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2000004c, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES8], 0xde, 0x1522, &(0x7f00000022c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r0, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.919079791s ago: executing program 0 (id=1221): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x0, 0x4}}], 0x48, 0x40841}, 0x0) 5.502714757s ago: executing program 5 (id=1222): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) write$binfmt_elf64(r0, 0x0, 0x40000) 5.245400302s ago: executing program 9 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffdffffffffffd) 5.007356703s ago: executing program 0 (id=1224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fchdir(r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x100) getdents64(r1, &(0x7f0000000080)=""/29, 0x1d) 4.358756487s ago: executing program 0 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000540)={[{@barrier}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x7}}, {@compress_algo={'compress', 0x3d, 'no'}}, {@compress}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74, 0x70]}}, {@noenospc_debug}, {@clear_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x6) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0x100000000}) creat(0x0, 0x0) 3.917403176s ago: executing program 5 (id=1226): socket$inet6(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000000)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="035931259edd0b00", 0x3}], 0x1}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x0) 2.459090865s ago: executing program 5 (id=1227): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000300)="96", 0x1, 0xfffffffffffffffc}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000000080)='\'', 0x1, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r3, 0x0, &(0x7f0000000100)='\x00', 0x1, 0x8}) 2.309594542s ago: executing program 9 (id=1228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001640), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x11a, 0x3, &(0x7f00000000c0), 0x4) 1.325491322s ago: executing program 5 (id=1229): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 946.415916ms ago: executing program 9 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 183.606206ms ago: executing program 5 (id=1231): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'pimreg0\x00', {0x3}, 0x43}) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=1232): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x8b}}, {@gid}, {@errors_continue}, {@discard}, {@namecase}, {@fmask={'fmask', 0x3d, 0x106}}, {@fmask={'fmask', 0x3d, 0x9}}, {@fmask={'fmask', 0x3d, 0x6}}, {@keep_last_dots}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f0000000b00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd344) kernel console output (not intermixed with test programs): EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.399799][ T4524] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.484045][ T4524] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.813090][ T4524] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.338331][ T7832] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 395.604369][ T4524] bridge_slave_1: left allmulticast mode [ 395.610654][ T4524] bridge_slave_1: left promiscuous mode [ 395.620945][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.746616][ T4524] bridge_slave_0: left allmulticast mode [ 395.753074][ T4524] bridge_slave_0: left promiscuous mode [ 395.760407][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.473975][ T5805] Bluetooth: hci2: command tx timeout [ 396.730974][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.833551][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.863207][ T4524] bond0 (unregistering): Released all slaves [ 396.982249][ T7812] chnl_net:caif_netlink_parms(): no params data found [ 397.188526][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 397.498817][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 397.530352][ T25] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 397.540059][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.548503][ T25] usb 7-1: Product: syz [ 397.552934][ T25] usb 7-1: Manufacturer: syz [ 397.558005][ T25] usb 7-1: SerialNumber: syz [ 397.631780][ T25] usb 7-1: config 0 descriptor?? [ 397.878805][ T25] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.930317][ T4524] hsr_slave_0: left promiscuous mode [ 397.972432][ T4524] hsr_slave_1: left promiscuous mode [ 398.013700][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.021776][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.069614][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.081683][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.169183][ T4524] veth1_macvtap: left promiscuous mode [ 398.178783][ T4524] veth0_macvtap: left promiscuous mode [ 398.184804][ T4524] veth1_vlan: left promiscuous mode [ 398.190567][ T4524] veth0_vlan: left promiscuous mode [ 398.272914][ T7873] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 398.542740][ T5816] Bluetooth: hci2: command tx timeout [ 398.899880][ T25] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 398.926319][ T25] usb 7-1: USB disconnect, device number 3 [ 399.009421][ T7880] loop5: detected capacity change from 0 to 128 [ 399.068944][ T7880] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 399.080545][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 399.142575][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 399.158097][ T7880] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 399.192491][ T7880] ext2 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 399.225319][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.660875][ T6659] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.941936][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.949994][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.957772][ T7812] bridge_slave_0: entered allmulticast mode [ 399.967045][ T7812] bridge_slave_0: entered promiscuous mode [ 399.992043][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.000114][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.008094][ T7812] bridge_slave_1: entered allmulticast mode [ 400.021718][ T7812] bridge_slave_1: entered promiscuous mode [ 400.194203][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.288950][ T5805] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 400.619030][ T5816] Bluetooth: hci2: command tx timeout [ 400.639188][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.812595][ T7812] team0: Port device team_slave_0 added [ 401.016323][ T7812] team0: Port device team_slave_1 added [ 401.066049][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.693'. [ 401.076016][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.693'. [ 401.182507][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.190141][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.217228][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.304094][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.311420][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.337974][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.667614][ T7812] hsr_slave_0: entered promiscuous mode [ 401.709580][ T7812] hsr_slave_1: entered promiscuous mode [ 401.750482][ T7812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.764178][ T7812] Cannot create hsr debugfs directory [ 401.799666][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.6.696'. [ 401.811010][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.6.696'. [ 401.835216][ T7910] erspan0: entered promiscuous mode [ 401.894548][ T7910] gretap0: entered promiscuous mode [ 401.904536][ T7910] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 401.912713][ T7910] Cannot create hsr debugfs directory [ 402.439693][ T7812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.448701][ T1981] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.483194][ T7812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.512964][ T7812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.542118][ T7812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.657836][ T1981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.669325][ T1981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.683988][ T1981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.698639][ T1981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.707996][ T1981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.732721][ T5816] Bluetooth: hci2: command tx timeout [ 402.789090][ T1981] usb 6-1: config 0 descriptor?? [ 403.223015][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.301767][ T7812] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.343666][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.351509][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.379735][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.387832][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.441503][ T1981] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 403.477085][ T1981] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 403.486461][ T7928] ipip0: entered promiscuous mode [ 403.506784][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.513608][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.559761][ T1981] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 403.797829][ T10] usb 6-1: USB disconnect, device number 2 [ 404.124294][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.132786][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.140758][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.148639][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.156365][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.164290][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.172153][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.180079][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.187879][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.196189][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.204099][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.212100][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.223231][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.231991][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.240014][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.248062][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.256069][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.264062][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.271927][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.279822][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.287612][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.295646][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.303556][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.311760][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.322837][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.331568][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.339566][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.347431][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.355368][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.363178][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.371333][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.379198][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.386962][ T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 404.572746][ T10] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.679042][ T1861] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 404.878764][ T1861] usb 2-1: config 0 has no interfaces? [ 404.884643][ T1861] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 404.894272][ T1861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.920301][ T1861] usb 2-1: config 0 descriptor?? [ 405.310943][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.612378][ T1861] usb 2-1: USB disconnect, device number 7 [ 405.667944][ T29] audit: type=1326 audit(1732668594.284:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.6.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a0337e819 code=0x0 [ 406.070104][ T7967] loop4: detected capacity change from 0 to 128 [ 406.188096][ T7812] veth0_vlan: entered promiscuous mode [ 406.220727][ T7812] veth1_vlan: entered promiscuous mode [ 406.232633][ T7967] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 406.345529][ T7812] veth0_macvtap: entered promiscuous mode [ 406.381227][ T7812] veth1_macvtap: entered promiscuous mode [ 406.430728][ T7967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.480469][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.492546][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.502734][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.513490][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.523793][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.538115][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.548768][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.559628][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.580166][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.598009][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.610211][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.621121][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.632824][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.643579][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.654343][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.664518][ T7812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.680112][ T7812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.696005][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.786769][ T7812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.796140][ T7812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.811411][ T7812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.820724][ T7812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.376917][ T7991] loop6: detected capacity change from 0 to 2048 [ 408.495341][ T7991] Dev loop6: RDB in block 1 has bad checksum [ 408.593147][ T7996] loop5: detected capacity change from 0 to 2048 [ 409.322572][ T8007] netlink: 'syz.6.726': attribute type 10 has an invalid length. [ 409.380944][ T8007] syz_tun: entered promiscuous mode [ 409.409459][ T8007] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 409.570977][ T6659] UDF-fs: warning (device loop5): udf_evict_inode: Inode 1367 (mode 100000) has inode size 528 different from extent length 1024. Filesystem need not be standards compliant. [ 409.766025][ T7978] loop4: detected capacity change from 0 to 32768 [ 409.933099][ T8010] loop1: detected capacity change from 0 to 2048 [ 410.046280][ T8010] UDF-fs: warning (device loop1): udf_fill_super: No fileset found [ 410.133663][ T8017] loop6: detected capacity change from 0 to 128 [ 410.235025][ T8017] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 410.811018][ T8017] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 411.142867][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.151142][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.316920][ T4076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.325341][ T4076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.791437][ T8047] fuse: root generation should be zero [ 413.092313][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 413.102428][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 413.113075][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 413.211717][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 413.223594][ T5805] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 413.238395][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 413.532511][ T8060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.743'. [ 413.769580][ T8058] 9pnet: p9_errstr2errno: server reported unknown error ™^PśŁ—Ż [ 414.095752][ T8070] loop4: detected capacity change from 0 to 64 [ 414.238646][ T8052] chnl_net:caif_netlink_parms(): no params data found [ 414.691711][ T8079] loop6: detected capacity change from 0 to 256 [ 414.816583][ T8079] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 415.300869][ T8090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.308579][ T8090] IPv6: NLM_F_CREATE should be set when creating new route [ 415.338681][ T5805] Bluetooth: hci0: command tx timeout [ 415.516882][ T8094] loop6: detected capacity change from 0 to 2048 [ 415.552385][ T8094] loop6: p3 < > p4 < > [ 415.556941][ T8094] loop6: partition table partially beyond EOD, truncated [ 415.564783][ T8094] loop6: p3 start 4284289 is beyond EOD, truncated [ 415.625816][ T8052] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.633760][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.641859][ T8052] bridge_slave_0: entered allmulticast mode [ 415.651082][ T8052] bridge_slave_0: entered promiscuous mode [ 415.677276][ T8052] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.694029][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.702167][ T8052] bridge_slave_1: entered allmulticast mode [ 415.711640][ T8052] bridge_slave_1: entered promiscuous mode [ 415.838084][ T8052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.861808][ T8052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.070394][ T8052] team0: Port device team_slave_0 added [ 416.116168][ T8052] team0: Port device team_slave_1 added [ 416.296527][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.309753][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.337156][ T8052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.464073][ T8052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.472076][ T8052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.498267][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.509467][ T8052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.744627][ T8111] loop7: detected capacity change from 0 to 128 [ 416.781690][ T8111] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 416.831117][ T8111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.833348][ T8052] hsr_slave_0: entered promiscuous mode [ 416.907531][ T29] audit: type=1800 audit(1732668605.494:65): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.761" name="file1" dev="loop7" ino=104 res=0 errno=0 [ 416.947495][ T8052] hsr_slave_1: entered promiscuous mode [ 416.961417][ T8052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.969863][ T8052] Cannot create hsr debugfs directory [ 417.409022][ T5805] Bluetooth: hci0: command tx timeout [ 417.816193][ T8052] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 417.872082][ T8052] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.912246][ T8052] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.957029][ T8126] 9pnet_fd: Insufficient options for proto=fd [ 418.299332][ T8052] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.495493][ T8129] loop6: detected capacity change from 0 to 512 [ 418.740870][ T8115] loop7: detected capacity change from 0 to 32768 [ 418.798462][ T8129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.952843][ T8136] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 418.995782][ T8115] bio_check_eod: 4 callbacks suppressed [ 418.995858][ T8115] syz.7.763: attempt to access beyond end of device [ 418.995858][ T8115] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 419.015660][ T8115] lbmIODone: I/O error in JFS log [ 419.021155][ T8115] *** Log Format Error ! *** [ 419.027482][ T8115] lmLogInit: exit(-22) [ 419.031979][ T8115] lmLogOpen: exit(-22) [ 419.406962][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.453032][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.506922][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.514747][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.531217][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.539016][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.539151][ T5805] Bluetooth: hci0: command tx timeout [ 419.643486][ T8052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.654502][ T8052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.316480][ T7030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.721084][ T8152] loop4: detected capacity change from 0 to 256 [ 420.747920][ T8152] exfat: Deprecated parameter 'utf8' [ 420.753963][ T8152] exfat: Deprecated parameter 'namecase' [ 420.760490][ T8152] exfat: Deprecated parameter 'utf8' [ 420.858905][ T8157] loop7: detected capacity change from 0 to 128 [ 420.977252][ T8157] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.015471][ T8157] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.021378][ T8152] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 421.203164][ T8052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.568654][ T5805] Bluetooth: hci0: command tx timeout [ 421.651105][ T7812] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 421.677649][ T8168] loop6: detected capacity change from 0 to 128 [ 421.775428][ T8168] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.817357][ T8168] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.922876][ T8175] loop4: detected capacity change from 0 to 512 [ 421.953903][ T8175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 422.043619][ T8175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 422.112088][ T8175] System zones: 1-12 [ 422.118642][ T8175] EXT4-fs (loop4): 1 truncate cleaned up [ 422.126351][ T8175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.320993][ T7030] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.592967][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.604714][ T8184] loop6: detected capacity change from 0 to 256 [ 422.823975][ T8052] veth0_vlan: entered promiscuous mode [ 422.825461][ T8184] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 422.939986][ T8052] veth1_vlan: entered promiscuous mode [ 423.133913][ T8052] veth0_macvtap: entered promiscuous mode [ 423.173121][ T8052] veth1_macvtap: entered promiscuous mode [ 423.231411][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.243155][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.253618][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.269112][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.280715][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.291911][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.302158][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.312944][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.323307][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.334439][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.349364][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.374476][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.385405][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.396058][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.406924][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.417081][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.427992][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.438263][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.449019][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.459500][ T8052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.474934][ T8052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.491094][ T8052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.558505][ T8052] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.567610][ T8052] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.582341][ T8052] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.592987][ T8052] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.319056][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 428.087130][ T8276] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 428.387441][ T8284] loop5: detected capacity change from 0 to 256 [ 428.409392][ T8284] exfat: Deprecated parameter 'namecase' [ 428.543184][ T8287] loop7: detected capacity change from 0 to 128 [ 428.641027][ T8284] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 428.782160][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.790341][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.837539][ T8287] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.863099][ T7738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.871361][ T7738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.951078][ T8287] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.185597][ T7812] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.372334][ T8296] 9pnet: p9_errstr2errno: server reported unknown error ťč˝FcÇgĺKIeÎ˙B$·*Ůqg•É!Űk˙H [ 429.765677][ T8300] loop8: detected capacity change from 0 to 1024 [ 429.951567][ T8307] netlink: 'syz.5.823': attribute type 4 has an invalid length. [ 430.792508][ T8309] loop6: detected capacity change from 0 to 32768 [ 431.339656][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 431.548799][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 431.592026][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 431.601755][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.610854][ T10] usb 5-1: Product: syz [ 431.615289][ T10] usb 5-1: Manufacturer: syz [ 431.620475][ T10] usb 5-1: SerialNumber: syz [ 431.700375][ T10] usb 5-1: config 0 descriptor?? [ 431.929372][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 432.373273][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 432.405600][ T10] usb 5-1: USB disconnect, device number 6 [ 432.437153][ T8337] syzkaller1: entered promiscuous mode [ 432.443222][ T8337] syzkaller1: entered allmulticast mode [ 433.712471][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 433.894658][ T10] usb 9-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 433.905508][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.962913][ T10] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.972540][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.981224][ T10] usb 9-1: SerialNumber: syz [ 434.230909][ T10] usb 9-1: 0:2 : does not exist [ 434.236126][ T10] usb 9-1: unit 255 not found! [ 434.340168][ T10] usb 9-1: USB disconnect, device number 2 [ 434.493704][ T8376] loop7: detected capacity change from 0 to 164 [ 434.512554][ T8376] Unable to read rock-ridge attributes [ 434.524947][ T8376] Unable to read rock-ridge attributes [ 435.933738][ T8386] loop6: detected capacity change from 0 to 32768 [ 435.992615][ T8394] loop7: detected capacity change from 0 to 2048 [ 436.297351][ T8394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.417143][ T8386] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 436.580349][ T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 436.724214][ T7030] ocfs2: Unmounting device (7,6) on (node local) [ 436.834778][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.846194][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.856677][ T25] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 436.866791][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.110394][ T8415] loop5: detected capacity change from 0 to 512 [ 437.240183][ T25] usb 9-1: config 0 descriptor?? [ 437.318937][ T8415] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.869: casefold flag without casefold feature [ 437.340366][ T8415] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.869: couldn't read orphan inode 15 (err -117) [ 437.365647][ T8415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.826995][ T25] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 437.835412][ T25] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 437.842851][ T25] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 437.850347][ T25] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 437.857626][ T25] lenovo 0003:17EF:6047.000C: unknown main item tag 0x0 [ 437.953444][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.971760][ T25] lenovo 0003:17EF:6047.000C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 438.538639][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 438.699209][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 438.713934][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.730458][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.742497][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.755931][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 438.765440][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.784551][ T10] usb 6-1: config 0 descriptor?? [ 438.851909][ T5861] usb 9-1: USB disconnect, device number 3 [ 439.224006][ T10] koneplus 0003:1E7D:2E22.000D: unknown main item tag 0x0 [ 439.271768][ T10] koneplus 0003:1E7D:2E22.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 439.301532][ T8438] loop7: detected capacity change from 0 to 1024 [ 439.437918][ T8438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.456407][ T8438] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.470342][ T10] koneplus 0003:1E7D:2E22.000D: couldn't init struct koneplus_device [ 439.479168][ T10] koneplus 0003:1E7D:2E22.000D: couldn't install mouse [ 439.493086][ T10] koneplus 0003:1E7D:2E22.000D: probe with driver koneplus failed with error -5 [ 439.700182][ T25] usb 6-1: USB disconnect, device number 3 [ 439.786493][ T7812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.361042][ T8452] loop4: detected capacity change from 0 to 1024 [ 440.608480][ T8456] loop5: detected capacity change from 0 to 512 [ 440.630529][ T8456] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 440.667639][ T8456] EXT4-fs (loop5): 1 truncate cleaned up [ 440.680874][ T8456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.836069][ T8456] syz.5.883 (pid 8456) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 441.394951][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.679494][ T8475] unknown channel width for channel at 909000KHz? [ 443.135227][ T8490] loop7: detected capacity change from 0 to 32768 [ 443.154649][ T8490] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.894 (8490) [ 443.239064][ T8490] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 443.251909][ T8490] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 443.262345][ T8490] BTRFS info (device loop7): using free-space-tree [ 443.521517][ T8508] loop6: detected capacity change from 0 to 2048 [ 443.787182][ T8490] BTRFS info (device loop7): rebuilding free space tree [ 444.124923][ T7812] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 445.366561][ T8534] loop8: detected capacity change from 0 to 1024 [ 445.399509][ T8534] EXT4-fs (loop8): Can't support bigalloc feature without extents feature [ 445.399509][ T8534] [ 445.411168][ T8534] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 445.739084][ T8534] loop8: detected capacity change from 0 to 128 [ 446.571825][ T8544] loop6: detected capacity change from 0 to 32768 [ 446.746559][ T8544] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 446.897568][ T8557] loop8: detected capacity change from 0 to 1024 [ 446.907800][ T8557] EXT4-fs: Ignoring removed orlov option [ 446.914053][ T8557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.986664][ T7030] ocfs2: Unmounting device (7,6) on (node local) [ 447.210152][ T8561] Illegal XDP return value 4294967274 on prog (id 112) dev N/A, expect packet loss! [ 447.322159][ T8557] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 447.412364][ T8557] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.442477][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 447.640311][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 447.775983][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 447.785767][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.794239][ T10] usb 8-1: Product: syz [ 447.798862][ T10] usb 8-1: Manufacturer: syz [ 447.803700][ T10] usb 8-1: SerialNumber: syz [ 447.813140][ T8557] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 447.826079][ T8557] EXT4-fs (loop8): This should not happen!! Data will be lost [ 447.826079][ T8557] [ 447.826431][ T8560] loop5: detected capacity change from 0 to 32768 [ 447.836157][ T8557] EXT4-fs (loop8): Total free blocks count 0 [ 447.856032][ T8557] EXT4-fs (loop8): Free/Dirty block details [ 447.863066][ T8557] EXT4-fs (loop8): free_blocks=0 [ 447.868375][ T8557] EXT4-fs (loop8): dirty_blocks=0 [ 447.873632][ T8557] EXT4-fs (loop8): Block reservation details [ 447.880024][ T8557] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 447.947938][ T10] usb 8-1: config 0 descriptor?? [ 447.964504][ T10] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 448.001929][ T8560] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 448.276570][ T8052] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.404779][ T6659] ocfs2: Unmounting device (7,5) on (node local) [ 449.436883][ T10] usb 8-1: USB disconnect, device number 2 [ 449.994572][ T8584] loop5: detected capacity change from 0 to 1024 [ 450.024405][ T8584] EXT4-fs: Ignoring removed nobh option [ 450.246271][ T8584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.552084][ T8597] netlink: 16 bytes leftover after parsing attributes in process `syz.6.928'. [ 450.712109][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.886816][ T8600] netlink: 'syz.7.929': attribute type 13 has an invalid length. [ 451.879316][ T8603] loop5: detected capacity change from 0 to 32768 [ 452.062995][ T8610] loop8: detected capacity change from 0 to 512 [ 452.099541][ T8610] EXT4-fs (loop8): blocks per group (255) and clusters per group (8192) inconsistent [ 452.505585][ T29] audit: type=1326 audit(1732668641.114:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.529435][ T29] audit: type=1326 audit(1732668641.124:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.556705][ T29] audit: type=1326 audit(1732668641.124:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.581063][ T29] audit: type=1326 audit(1732668641.124:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.604758][ T29] audit: type=1326 audit(1732668641.124:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.627501][ T29] audit: type=1326 audit(1732668641.174:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.650295][ T29] audit: type=1326 audit(1732668641.174:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.677308][ T29] audit: type=1326 audit(1732668641.204:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.702962][ T29] audit: type=1326 audit(1732668641.204:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.726935][ T29] audit: type=1326 audit(1732668641.204:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.4.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ddb7e819 code=0x7ffc0000 [ 452.804321][ T8608] vlan1: entered promiscuous mode [ 452.852318][ T8608] vlan1: left promiscuous mode [ 453.480038][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 453.581707][ T8627] loop7: detected capacity change from 0 to 1024 [ 453.591014][ T8627] EXT4-fs: Ignoring removed orlov option [ 453.597025][ T8627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.716302][ T8631] loop8: detected capacity change from 0 to 256 [ 453.739296][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 453.763242][ T25] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 453.772937][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.837410][ T25] usb 5-1: config 0 descriptor?? [ 453.914989][ T8631] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 453.953010][ T8627] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.151362][ T8627] Process accounting resumed [ 454.422144][ T7812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.962042][ T8652] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 455.345001][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 455.356028][ T25] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 455.367340][ T25] asix 5-1:0.0: probe with driver asix failed with error -71 [ 455.439046][ T25] usb 5-1: USB disconnect, device number 7 [ 455.792115][ T8660] loop8: detected capacity change from 0 to 256 [ 456.099819][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 456.206901][ T8052] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 456.254616][ T8052] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 456.308624][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 456.350503][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.362628][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.373079][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 456.382778][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.495520][ T10] usb 6-1: config 0 descriptor?? [ 456.539842][ T8674] loop4: detected capacity change from 0 to 512 [ 456.710159][ T8674] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 456.719211][ T8674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 456.769627][ T8674] System zones: 0-1, 15-15, 18-18, 34-34 [ 456.775306][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 456.777463][ T8674] EXT4-fs (loop4): orphan cleanup on readonly fs [ 456.790866][ T8674] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 456.806636][ T8674] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 456.950111][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.000E/input/input18 [ 457.071744][ T10] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 457.667419][ T25] usb 6-1: USB disconnect, device number 4 [ 460.182414][ T8674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.955: bg 0: block 40: padding at end of block bitmap is not set [ 460.233813][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 460.407750][ T8674] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 460.478552][ T8674] EXT4-fs (loop4): 1 truncate cleaned up [ 460.486136][ T8674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.306485][ T8784] loop6: detected capacity change from 0 to 256 [ 461.521592][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.533731][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.544053][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.557472][ T25] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.571725][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.651001][ T25] usb 8-1: config 0 descriptor?? [ 461.698571][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.795114][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.812854][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.829067][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.841957][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.844414][ T8784] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 461.919758][ T5816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 462.030966][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.101908][ T25] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 462.115233][ T25] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 462.159409][ T25] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 463.001373][ T8791] loop4: detected capacity change from 0 to 32768 [ 463.268554][ T1981] usb 8-1: USB disconnect, device number 3 [ 463.282469][ T8791] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 463.391096][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 463.875289][ T5808] ocfs2: Unmounting device (7,4) on (node local) [ 464.213432][ T5816] Bluetooth: hci0: command tx timeout [ 464.771116][ T8823] loop5: detected capacity change from 0 to 4096 [ 464.895886][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.903941][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.969475][ T8821] loop4: detected capacity change from 0 to 2048 [ 465.023536][ T8825] loop6: detected capacity change from 0 to 2048 [ 465.068921][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.076824][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.086289][ T8785] bridge_slave_0: entered allmulticast mode [ 465.092018][ T8821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.095922][ T8785] bridge_slave_0: entered promiscuous mode [ 465.127923][ T8825] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 465.176901][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.185009][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.193237][ T8785] bridge_slave_1: entered allmulticast mode [ 465.202688][ T8785] bridge_slave_1: entered promiscuous mode [ 465.207262][ T8825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.447971][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.528001][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.910537][ T8834] loop6: detected capacity change from 0 to 512 [ 466.012496][ T8785] team0: Port device team_slave_0 added [ 466.030558][ T8785] team0: Port device team_slave_1 added [ 466.110655][ T8834] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.976: corrupted in-inode xattr: invalid ea_ino [ 466.209646][ T8834] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.976: couldn't read orphan inode 15 (err -117) [ 466.259314][ T8834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.300518][ T5816] Bluetooth: hci0: command tx timeout [ 466.320535][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.327859][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.356089][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.380808][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.388018][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.415345][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.792334][ T8785] hsr_slave_0: entered promiscuous mode [ 466.810724][ T8785] hsr_slave_1: entered promiscuous mode [ 466.840147][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.848050][ T8785] Cannot create hsr debugfs directory [ 466.856423][ T8847] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 466.863243][ T8847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 466.872514][ T8847] vhci_hcd vhci_hcd.0: Device attached [ 467.087606][ T7030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.128762][ T10] vhci_hcd: vhci_device speed not set [ 467.160192][ T8849] vhci_hcd: connection closed [ 467.168061][ T8741] vhci_hcd: stop threads [ 467.178505][ T8741] vhci_hcd: release socket [ 467.183188][ T8741] vhci_hcd: disconnect device [ 467.188549][ T10] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 467.201114][ T10] usb 43-1: enqueue for inactive port 0 [ 467.291772][ T10] vhci_hcd: vhci_device speed not set [ 468.137198][ T8866] loop6: detected capacity change from 0 to 16 [ 468.170187][ T8785] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 468.187028][ T8866] erofs (device loop6): mounted with root inode @ nid 36. [ 468.253566][ T8785] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.306357][ T8785] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.369497][ T1861] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 468.380512][ T5816] Bluetooth: hci0: command tx timeout [ 468.413779][ T8785] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 468.569303][ T1861] usb 8-1: Using ep0 maxpacket: 16 [ 468.604979][ T1861] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 468.666269][ T1861] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 468.676027][ T1861] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.684590][ T1861] usb 8-1: Product: syz [ 468.690079][ T1861] usb 8-1: Manufacturer: syz [ 468.694941][ T1861] usb 8-1: SerialNumber: syz [ 468.763794][ T1861] usb 8-1: config 0 descriptor?? [ 468.781733][ T1861] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 468.791817][ T1861] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 469.204706][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.234896][ T8878] loop4: detected capacity change from 0 to 512 [ 469.277342][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.298542][ T8878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 469.305771][ T8878] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.357075][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.364986][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.451492][ T1861] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 469.483022][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.490838][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.672940][ T8878] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 469.681695][ T8878] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 469.826208][ T8878] EXT4-fs (loop4): 1 truncate cleaned up [ 469.834352][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.128734][ T1861] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 470.137062][ T1861] em28xx 8-1:0.0: board has no eeprom [ 470.229191][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 470.238782][ T8890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.246580][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.254720][ T1861] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 470.265651][ T1861] em28xx 8-1:0.0: dvb set to bulk mode. [ 470.283133][ T10] em28xx 8-1:0.0: Binding DVB extension [ 470.318545][ T8890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.326543][ T8890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.344645][ T1861] usb 8-1: USB disconnect, device number 4 [ 470.352387][ T1861] em28xx 8-1:0.0: Disconnecting em28xx [ 470.451793][ T5816] Bluetooth: hci0: command tx timeout [ 470.526402][ T10] em28xx 8-1:0.0: Registering input extension [ 470.527794][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.610980][ T1861] em28xx 8-1:0.0: Closing input extension [ 470.858913][ T1861] em28xx 8-1:0.0: Freeing device [ 471.133032][ T8899] loop4: detected capacity change from 0 to 1024 [ 471.580668][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.784724][ T5808] hfsplus: request for non-existent node 33554434 in B*Tree [ 471.793864][ T5808] hfsplus: request for non-existent node 33554434 in B*Tree [ 472.433182][ T4076] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.653411][ T4076] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.102982][ T4076] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.370090][ T4076] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.737246][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.851410][ T4076] bridge_slave_1: left allmulticast mode [ 473.859024][ T4076] bridge_slave_1: left promiscuous mode [ 473.865708][ T4076] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.879733][ T4076] bridge_slave_0: left allmulticast mode [ 473.885633][ T4076] bridge_slave_0: left promiscuous mode [ 473.892494][ T4076] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.017689][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.030458][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.062617][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.074148][ T5807] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 474.084984][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.610622][ T8933] loop7: detected capacity change from 0 to 1024 [ 474.621398][ T8933] EXT4-fs: Ignoring removed orlov option [ 474.627454][ T8933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.316653][ T4076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.349509][ T4076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.401698][ T4076] bond0 (unregistering): Released all slaves [ 476.071085][ T8931] infiniband syz1: set active [ 476.076077][ T8931] infiniband syz1: added team_slave_0 [ 476.147044][ T5807] Bluetooth: hci4: command tx timeout [ 476.330587][ T8931] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 476.381693][ T8933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.426227][ T8931] infiniband syz1: Couldn't open port 1 [ 476.539773][ T8931] RDS/IB: syz1: added [ 476.544090][ T8931] smc: adding ib device syz1 with port count 1 [ 476.550791][ T8931] smc: ib device syz1 port 1 has pnetid [ 477.219679][ T7812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.752936][ T8785] veth0_vlan: entered promiscuous mode [ 477.796966][ T8785] veth1_vlan: entered promiscuous mode [ 478.043266][ T8785] veth0_macvtap: entered promiscuous mode [ 478.139759][ T8785] veth1_macvtap: entered promiscuous mode [ 478.247466][ T5807] Bluetooth: hci4: command tx timeout [ 478.367248][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 478.442559][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.453644][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.468785][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.481222][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.491594][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.502651][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.512989][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.524025][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.534326][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.545238][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.567037][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.863734][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.879229][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.890770][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.901596][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.911801][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.922740][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.933919][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.946515][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.963106][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.978884][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.995453][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.044504][ T8785] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.053700][ T8785] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.062923][ T8785] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.077591][ T8785] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.618570][ T1981] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 480.327618][ T1981] usb 8-1: Using ep0 maxpacket: 16 [ 480.342832][ T1981] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 480.352260][ T1981] usb 8-1: config 0 has no interface number 0 [ 480.358904][ T1981] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 480.369327][ T1981] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 480.374609][ T5807] Bluetooth: hci4: command tx timeout [ 480.379736][ T1981] usb 8-1: config 0 interface 41 has no altsetting 0 [ 480.671498][ T1981] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 480.681007][ T1981] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.689906][ T1981] usb 8-1: Product: syz [ 480.694329][ T1981] usb 8-1: Manufacturer: syz [ 480.699315][ T1981] usb 8-1: SerialNumber: syz [ 480.714216][ T1981] usb 8-1: config 0 descriptor?? [ 480.726244][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.730352][ T8953] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 480.734456][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.749610][ T8928] bridge_slave_0: entered allmulticast mode [ 480.761113][ T8928] bridge_slave_0: entered promiscuous mode [ 480.779800][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.788147][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.796612][ T8928] bridge_slave_1: entered allmulticast mode [ 480.819462][ T8928] bridge_slave_1: entered promiscuous mode [ 480.855041][ T8953] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 481.164518][ T8953] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 481.176996][ T8953] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 481.186615][ T8971] input: syz1 as /devices/virtual/input/input20 [ 481.273305][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.404385][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.786281][ T1981] Error reading MAC address [ 481.841479][ T8953] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 481.853705][ T8953] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 481.932092][ T8928] team0: Port device team_slave_0 added [ 482.306696][ T8928] team0: Port device team_slave_1 added [ 482.451078][ T8975] loop5: detected capacity change from 0 to 2048 [ 482.540813][ T5807] Bluetooth: hci4: command tx timeout [ 482.602135][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.609655][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.636381][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.722226][ T1981] sr9700 8-1:0.41 eth17: register 'sr9700' at usb-dummy_hcd.7-1, CoreChip SR9700 USB Ethernet, fe:c9:d2:b5:1b:41 [ 482.751712][ T1981] usb 8-1: USB disconnect, device number 5 [ 482.763547][ T1981] sr9700 8-1:0.41 eth17: unregister 'sr9700' usb-dummy_hcd.7-1, CoreChip SR9700 USB Ethernet [ 482.848001][ T4076] hsr_slave_0: left promiscuous mode [ 482.873427][ T8975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.913820][ T4076] hsr_slave_1: left promiscuous mode [ 482.942196][ T4076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.950358][ T4076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.991012][ T4076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.998969][ T4076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.999291][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 482.999362][ T29] audit: type=1800 audit(1732668671.614:80): pid=8975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1019" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 483.058014][ T4076] veth0_macvtap: left promiscuous mode [ 483.070645][ T4076] veth1_vlan: left promiscuous mode [ 483.076268][ T4076] veth0_vlan: left promiscuous mode [ 483.107350][ T8975] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 483.215154][ T8975] EXT4-fs (loop5): Remounting filesystem read-only [ 483.635136][ T8986] loop7: detected capacity change from 0 to 1024 [ 483.656427][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.686618][ T8986] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 483.776040][ T4076] team0 (unregistering): Port device team_slave_1 removed [ 483.796316][ T8986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.831993][ T4076] team0 (unregistering): Port device team_slave_0 removed [ 484.073854][ T8989] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 484.197630][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.205091][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.231936][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.591178][ T8995] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 484.821831][ T8928] hsr_slave_0: entered promiscuous mode [ 484.870075][ T8928] hsr_slave_1: entered promiscuous mode [ 484.895895][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.904630][ T8928] Cannot create hsr debugfs directory [ 484.967397][ T7812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.204263][ T4076] IPVS: stop unused estimator thread 0... [ 486.320516][ T9014] bond0: (slave syz_tun): Releasing backup interface [ 486.387091][ T9014] bridge_slave_0: left allmulticast mode [ 486.393198][ T9014] bridge_slave_0: left promiscuous mode [ 486.400103][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.500925][ T9014] bridge_slave_1: left allmulticast mode [ 486.516531][ T9014] bridge_slave_1: left promiscuous mode [ 486.524108][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.580638][ T9014] bond0: (slave bond_slave_0): Releasing backup interface [ 486.704153][ T9014] bond0: (slave bond_slave_1): Releasing backup interface [ 486.815577][ T9014] infiniband syz1: set down [ 486.824921][ T9014] team0: Port device team_slave_0 removed [ 486.983031][ T9014] team0: Port device team_slave_1 removed [ 487.370027][ T9019] loop5: detected capacity change from 0 to 4096 [ 487.611636][ T9027] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 487.871031][ T9031] loop6: detected capacity change from 0 to 256 [ 488.001432][ T8731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.009758][ T8731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.059976][ T9031] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 488.073523][ T9031] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 488.151641][ T8722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.160270][ T8722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.182309][ T8928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 488.263908][ T8928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 488.310501][ T9031] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000006) [ 488.320420][ T9031] exFAT-fs (loop6): Filesystem has been set read-only [ 488.355962][ T8928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 488.431932][ T9031] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000006) [ 488.432155][ T8928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.545385][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.597585][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.665841][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.673669][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.690841][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.698647][ T8771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.019711][ T1861] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 490.188596][ T1861] usb 10-1: Using ep0 maxpacket: 16 [ 490.216385][ T1861] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.229584][ T1861] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.243994][ T1861] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 490.259174][ T1861] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 490.269024][ T1861] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.456658][ T1861] usb 10-1: config 0 descriptor?? [ 491.104999][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.112792][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.120592][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.128141][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.135939][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.144832][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.159294][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.166942][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.176972][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.184730][ T1861] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 491.221546][ T1861] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0010/input/input21 [ 491.403469][ T1861] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 491.546048][ T9055] loop9: detected capacity change from 0 to 2048 [ 491.609363][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.620657][ T9055] udf: Unknown parameter '01777777777777777777777˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 491.731742][ T9075] loop5: detected capacity change from 0 to 256 [ 491.940176][ T25] usb 10-1: USB disconnect, device number 2 [ 492.203721][ T8928] veth0_vlan: entered promiscuous mode [ 492.305679][ T8928] veth1_vlan: entered promiscuous mode [ 492.317229][ T9081] loop7: detected capacity change from 0 to 256 [ 492.655028][ T9083] loop5: detected capacity change from 0 to 2048 [ 492.701034][ T8928] veth0_macvtap: entered promiscuous mode [ 492.739120][ T8928] veth1_macvtap: entered promiscuous mode [ 492.812694][ T9083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.830216][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.841145][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.851417][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.862860][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.873269][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.884161][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.901267][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.914102][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.924320][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.935365][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.965548][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.983941][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.996167][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.017574][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.028667][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.038939][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.049726][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.059862][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.070601][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.080826][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.091762][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.114784][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.254871][ T8928] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.264187][ T8928] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.273593][ T8928] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.282807][ T8928] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.335203][ T8731] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 493.363022][ T8731] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 27 with error 28 [ 493.376417][ T8731] EXT4-fs (loop5): This should not happen!! Data will be lost [ 493.376417][ T8731] [ 493.386962][ T8731] EXT4-fs (loop5): Total free blocks count 0 [ 493.393281][ T8731] EXT4-fs (loop5): Free/Dirty block details [ 493.399520][ T8731] EXT4-fs (loop5): free_blocks=2415919104 [ 493.410423][ T8731] EXT4-fs (loop5): dirty_blocks=32 [ 493.415782][ T8731] EXT4-fs (loop5): Block reservation details [ 493.427146][ T8731] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 493.484624][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.853445][ T9098] netlink: 'syz.9.1054': attribute type 1 has an invalid length. [ 493.861751][ T9098] netlink: 'syz.9.1054': attribute type 2 has an invalid length. [ 493.869905][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1054'. [ 493.908844][ T5858] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 494.077898][ T5858] usb 8-1: Using ep0 maxpacket: 16 [ 494.104642][ T5858] usb 8-1: config 0 has an invalid interface number: 180 but max is 0 [ 494.113699][ T5858] usb 8-1: config 0 has no interface number 0 [ 494.120371][ T5858] usb 8-1: config 0 interface 180 has no altsetting 0 [ 494.183949][ T9103] loop6: detected capacity change from 0 to 64 [ 494.217817][ T5858] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 494.231882][ T5858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.241618][ T5858] usb 8-1: Product: syz [ 494.246330][ T5858] usb 8-1: Manufacturer: syz [ 494.251411][ T5858] usb 8-1: SerialNumber: syz [ 494.315745][ T5858] usb 8-1: config 0 descriptor?? [ 494.494871][ T9103] syz.6.1055: attempt to access beyond end of device [ 494.494871][ T9103] loop6: rw=2049, sector=163, nr_sectors = 97 limit=64 [ 494.858803][ T5858] viperboard 8-1:0.180: version 0.00 found at bus 008 address 006 [ 494.905398][ T5858] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 494.914778][ T5858] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 495.059774][ T5858] usb 8-1: USB disconnect, device number 6 [ 495.372886][ T9116] netlink: 'syz.5.1059': attribute type 1 has an invalid length. [ 495.463388][ T9116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.520230][ T9120] bond1: (slave gretap1): making interface the new active one [ 495.532449][ T9120] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 497.309948][ T9136] ceph: No mds server is up or the cluster is laggy [ 498.121035][ T5858] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 498.309192][ T5858] usb 6-1: Using ep0 maxpacket: 8 [ 498.351595][ T5858] usb 6-1: config 0 has no interfaces? [ 498.357410][ T5858] usb 6-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 498.367733][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.484430][ T5858] usb 6-1: config 0 descriptor?? [ 498.864310][ T9174] loop9: detected capacity change from 0 to 128 [ 498.906055][ T25] usb 6-1: USB disconnect, device number 5 [ 499.054284][ T8731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.062961][ T8731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.137001][ T9174] syz.9.1072: attempt to access beyond end of device [ 499.137001][ T9174] loop9: rw=2049, sector=145, nr_sectors = 112 limit=128 [ 499.278601][ T8716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.286806][ T8716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.444297][ T9177] loop6: detected capacity change from 0 to 128 [ 499.492900][ T9177] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 499.599885][ T9177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.458465][ T29] audit: type=1326 audit(1732668690.024:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.481397][ T29] audit: type=1326 audit(1732668690.064:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.513085][ T29] audit: type=1326 audit(1732668690.064:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.630367][ T29] audit: type=1326 audit(1732668690.254:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.762897][ T29] audit: type=1326 audit(1732668690.374:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.786153][ T29] audit: type=1326 audit(1732668690.374:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.814033][ T29] audit: type=1326 audit(1732668690.384:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.836984][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.845210][ T29] audit: type=1326 audit(1732668690.384:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.868071][ T29] audit: type=1326 audit(1732668690.414:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.890663][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.897307][ T29] audit: type=1326 audit(1732668690.414:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.7.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4957e819 code=0x7ffc0000 [ 501.919843][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.176319][ T9224] loop9: detected capacity change from 0 to 128 [ 502.201907][ T9224] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 502.304856][ T9224] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 503.737222][ T9247] netlink: 'syz.5.1101': attribute type 1 has an invalid length. [ 503.835189][ T9247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.036247][ T9247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.045452][ T9247] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 504.069590][ T9247] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 505.020156][ T9259] loop2: detected capacity change from 0 to 40427 [ 505.074204][ T9259] F2FS-fs (loop2): invalid crc value [ 505.177304][ T9259] F2FS-fs (loop2): Found nat_bits in checkpoint [ 505.427982][ T9259] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 505.748624][ T8928] syz-executor: attempt to access beyond end of device [ 505.748624][ T8928] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.763326][ T8928] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 505.982485][ T9249] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 507.312073][ T9283] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 508.040158][ T9288] loop5: detected capacity change from 0 to 4096 [ 508.068665][ T9288] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 508.524684][ T9298] loop2: detected capacity change from 0 to 1024 [ 508.907792][ T9298] EXT4-fs: Ignoring removed orlov option [ 508.914300][ T9298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 509.131572][ T9298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.358766][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 509.358943][ T29] audit: type=1800 audit(1732668697.964:95): pid=9306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1117" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 509.468809][ T9298] loop2: detected capacity change from 1024 to 64 [ 509.508832][ T9288] ntfs3(loop5): failed to convert "c46c" to cp1251 [ 509.749476][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 509.827391][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 509.880309][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 509.950126][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.003737][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.066637][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.126404][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.148713][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 510.207420][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.260023][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.276179][ T8928] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 510.328925][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 510.343002][ T25] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.354581][ T25] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.383430][ T25] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 510.393264][ T25] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 510.402121][ T25] usb 8-1: Product: syz [ 510.412330][ T25] usb 8-1: Manufacturer: syz [ 510.452369][ T25] hub 8-1:4.0: USB hub found [ 510.498788][ T5858] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 510.558897][ T1981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 510.682866][ T25] hub 8-1:4.0: 2 ports detected [ 510.696889][ T5858] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.707936][ T5858] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 510.718820][ T1981] usb 6-1: Using ep0 maxpacket: 16 [ 510.725387][ T5858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 510.738762][ T5858] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 510.749158][ T5858] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 510.769610][ T1981] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.778510][ T1981] usb 6-1: config 0 has no interface number 0 [ 510.812162][ T1981] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 510.827186][ T1981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.833809][ T5858] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 510.837342][ T1981] usb 6-1: Product: syz [ 510.844759][ T5858] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 510.849308][ T1981] usb 6-1: Manufacturer: syz [ 510.857345][ T5858] usb 10-1: Product: syz [ 510.862250][ T1981] usb 6-1: SerialNumber: syz [ 510.866429][ T5858] usb 10-1: Manufacturer: syz [ 510.876995][ T5858] usb 10-1: SerialNumber: syz [ 510.970718][ T1981] usb 6-1: config 0 descriptor?? [ 510.984654][ T5858] usb 10-1: config 0 descriptor?? [ 511.140874][ T1981] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 511.163632][ T25] hub 8-1:4.0: set hub depth failed [ 511.219390][ T25] usb 8-1: USB disconnect, device number 7 [ 511.256827][ T5858] radio-si470x 10-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 511.376680][ T3579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.403506][ T8928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.489154][ T5858] radio-si470x 10-1:0.0: software version 100, hardware version 101 [ 511.511805][ T3579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.515062][ T9303] kmmpd-loop2: attempt to access beyond end of device [ 511.515062][ T9303] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 511.542664][ T9303] buffer_io_error: 4 callbacks suppressed [ 511.542740][ T9303] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 511.685466][ T5858] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 511.754646][ T3579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.014905][ T3579] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.396397][ T9325] loop6: detected capacity change from 0 to 256 [ 512.485237][ T3579] bridge_slave_1: left allmulticast mode [ 512.491681][ T3579] bridge_slave_1: left promiscuous mode [ 512.499705][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.504842][ T1981] gspca_spca1528: reg_w err -71 [ 512.512553][ T1981] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 512.570179][ T1981] usb 6-1: USB disconnect, device number 6 [ 512.590916][ T3579] bridge_slave_0: left allmulticast mode [ 512.597031][ T3579] bridge_slave_0: left promiscuous mode [ 512.599068][ T9325] loop6: detected capacity change from 0 to 256 [ 512.604327][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.620464][ T5858] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 512.631424][ T5858] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 512.675757][ T5858] usb 10-1: USB disconnect, device number 3 [ 512.680277][ T9325] exfat: Deprecated parameter 'utf8' [ 512.689608][ T9325] exfat: Deprecated parameter 'namecase' [ 512.695904][ T9325] exfat: Deprecated parameter 'utf8' [ 512.894940][ T9325] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 513.210731][ T3579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.242686][ T3579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.314417][ T3579] bond0 (unregistering): Released all slaves [ 514.149011][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.230318][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.243036][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.257022][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.300501][ T1861] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 514.339937][ T5816] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 514.351542][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.468795][ T1861] usb 7-1: Using ep0 maxpacket: 16 [ 514.514530][ T1861] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.525327][ T1861] usb 7-1: config 0 interface 0 has no altsetting 0 [ 514.532607][ T1861] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 514.542232][ T1861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.601391][ T1861] usb 7-1: config 0 descriptor?? [ 514.633176][ T3579] hsr_slave_0: left promiscuous mode [ 514.644369][ T3579] hsr_slave_1: left promiscuous mode [ 514.672279][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.680916][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.773819][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.782411][ T3579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.855034][ T3579] veth1_macvtap: left promiscuous mode [ 514.861059][ T3579] veth0_macvtap: left promiscuous mode [ 514.866961][ T3579] veth1_vlan: left promiscuous mode [ 514.872720][ T3579] veth0_vlan: left promiscuous mode [ 515.103158][ T1861] hid (null): global environment stack underflow [ 515.112352][ T1861] hid (null): unknown global tag 0x84 [ 515.126740][ T1861] hid (null): report_id 0 is invalid [ 515.136321][ T1861] hid (null): unknown global tag 0xc [ 515.143129][ T1861] hid (null): unknown global tag 0xd [ 515.148842][ T1861] hid (null): report_id 2863014418 is invalid [ 515.155400][ T1861] hid (null): report_id 2384115945 is invalid [ 515.176906][ T9338] loop5: detected capacity change from 0 to 4096 [ 515.253934][ T9338] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 515.290284][ T1861] cougar 0003:060B:500A.0011: unknown main item tag 0x3 [ 515.297998][ T1861] cougar 0003:060B:500A.0011: unknown main item tag 0x4 [ 515.305638][ T1861] cougar 0003:060B:500A.0011: unexpected long global item [ 515.452500][ T1861] cougar 0003:060B:500A.0011: parse failed [ 515.459193][ T1861] cougar 0003:060B:500A.0011: probe with driver cougar failed with error -22 [ 515.546545][ T1861] usb 7-1: USB disconnect, device number 4 [ 515.673492][ T29] audit: type=1800 audit(1732668704.294:96): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1133" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 515.886564][ T3579] team0 (unregistering): Port device team_slave_1 removed [ 515.905096][ T3579] team0 (unregistering): Port device team_slave_0 removed [ 516.628642][ T5807] Bluetooth: hci4: command tx timeout [ 517.429155][ T9360] netlink: 'syz.6.1141': attribute type 10 has an invalid length. [ 517.637373][ T9360] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 517.647688][ T9360] team0: Failed to send options change via netlink (err -105) [ 517.655625][ T9360] team0: Port device netdevsim3 added [ 517.710534][ T4985] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 517.738482][ T9331] chnl_net:caif_netlink_parms(): no params data found [ 518.131345][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 518.684144][ T9379] loop7: detected capacity change from 0 to 128 [ 518.693549][ T5807] Bluetooth: hci4: command tx timeout [ 518.887460][ T9381] mkiss: ax0: crc mode is auto. [ 518.887860][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.911913][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.920069][ T9331] bridge_slave_0: entered allmulticast mode [ 518.929542][ T9331] bridge_slave_0: entered promiscuous mode [ 518.950130][ T25] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 518.987349][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.995955][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.004172][ T9331] bridge_slave_1: entered allmulticast mode [ 519.020010][ T9331] bridge_slave_1: entered promiscuous mode [ 519.136044][ T7812] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 519.144482][ T7812] FAT-fs (loop7): Filesystem has been set read-only [ 519.208640][ T9386] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.215952][ T9386] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.291865][ T9386] hsr_slave_0: left promiscuous mode [ 519.308507][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 519.355553][ T9386] hsr_slave_1: left promiscuous mode [ 519.446219][ T25] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.456966][ T25] usb 10-1: config 0 has no interfaces? [ 519.463242][ T25] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 519.472881][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.514443][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.533370][ T25] usb 10-1: config 0 descriptor?? [ 519.594262][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.757892][ T25] usb 10-1: USB disconnect, device number 4 [ 519.764078][ T9331] team0: Port device team_slave_0 added [ 519.794791][ T9331] team0: Port device team_slave_1 added [ 519.914907][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.922335][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.954015][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.020335][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.027970][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.054341][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.065473][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.293010][ T9331] hsr_slave_0: entered promiscuous mode [ 520.314923][ T9331] hsr_slave_1: entered promiscuous mode [ 520.333118][ T9331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.346370][ T9331] Cannot create hsr debugfs directory [ 520.698688][ T9392] loop5: detected capacity change from 0 to 128 [ 520.768948][ T5807] Bluetooth: hci4: command tx timeout [ 521.897938][ T9331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 522.006906][ T9331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.189917][ T9331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.330536][ T9331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 522.850073][ T5807] Bluetooth: hci4: command tx timeout [ 523.169703][ T9416] netlink: 'syz.9.1161': attribute type 3 has an invalid length. [ 523.362425][ T9418] loop7: detected capacity change from 0 to 128 [ 523.455122][ T9418] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 523.483746][ T9331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.600009][ T9331] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.603717][ T9418] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 523.638718][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.651018][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.658849][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.781823][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.789816][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.016836][ T9429] loop6: detected capacity change from 0 to 1024 [ 524.150014][ T9429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.283363][ T7812] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 524.679902][ T1981] ------------[ cut here ]------------ [ 524.685618][ T1981] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 524.701349][ T1981] WARNING: CPU: 1 PID: 1981 at net/mac80211/rate.c:404 __rate_control_send_low+0x892/0x8e0 [ 524.711877][ T1981] Modules linked in: [ 524.716041][ T1981] CPU: 1 UID: 0 PID: 1981 Comm: kworker/1:2 Not tainted 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 524.726924][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.737480][ T1981] Workqueue: mld mld_ifc_work [ 524.742639][ T1981] RIP: 0010:__rate_control_send_low+0x892/0x8e0 [ 524.749420][ T1981] Code: 8b 5d a8 75 32 45 85 e4 75 3b 83 7d c4 00 75 47 48 c7 c7 e1 a7 38 91 44 89 fa 89 d9 44 8b 45 94 44 8b 4d a4 e8 2f 4c 31 f2 90 <0f> 0b 90 90 48 8b 5d b8 e9 6e fd ff ff e8 1c 66 27 f3 48 8b 75 b0 [ 524.769515][ T1981] RSP: 0018:ffff88810aa7a708 EFLAGS: 00010293 [ 524.775920][ T1981] RAX: ffffffff8159ebe9 RBX: 0000000000000000 RCX: ffff88810aaba0c0 [ 524.784315][ T1981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 524.792685][ T1981] RBP: ffff88810aa7a7c0 R08: ffffffff8159ebdf R09: 0000000000000000 [ 524.801153][ T1981] R10: ffff88810a27a350 R11: 0000000000000004 R12: 0000000000000000 [ 524.809515][ T1981] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffff [ 524.817754][ T1981] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 524.827111][ T1981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.834062][ T1981] CR2: 0000001b33514ff8 CR3: 000000013e4b8000 CR4: 00000000003526f0 [ 524.842420][ T1981] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 524.850769][ T1981] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 524.859193][ T1981] Call Trace: [ 524.862682][ T1981] [ 524.865805][ T1981] ? show_trace_log_lvl+0x268/0x3d0 [ 524.871443][ T1981] ? rate_control_send_low+0x26f/0xa50 [ 524.877315][ T1981] ? show_regs+0xb4/0xe0 [ 524.881995][ T1981] ? __warn+0x2c7/0x780 [ 524.886439][ T1981] ? __rate_control_send_low+0x892/0x8e0 [ 524.892501][ T1981] ? report_bug+0x929/0xbd0 [ 524.897332][ T1981] ? __rate_control_send_low+0x892/0x8e0 [ 524.903401][ T1981] ? handle_bug+0x6d/0x90 [ 524.908057][ T1981] ? exc_invalid_op+0x1f/0x50 [ 524.913156][ T1981] ? asm_exc_invalid_op+0x1f/0x30 [ 524.918588][ T1981] ? __warn_printk+0x43f/0x470 [ 524.923672][ T1981] ? __warn_printk+0x449/0x470 [ 524.928854][ T1981] ? __rate_control_send_low+0x892/0x8e0 [ 524.934878][ T1981] ? __rate_control_send_low+0x891/0x8e0 [ 524.941070][ T1981] rate_control_send_low+0x26f/0xa50 [ 524.946762][ T1981] rate_control_get_rate+0x1bb/0xc90 [ 524.952485][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 524.958763][ T1981] ieee80211_tx_h_rate_ctrl+0x1278/0x1ca0 [ 524.964827][ T1981] invoke_tx_handlers_late+0xd9/0x2960 [ 524.970703][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 524.976877][ T1981] ? ieee80211_tx_h_select_key+0xfc9/0x1c90 [ 524.983223][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 524.989563][ T1981] ieee80211_tx_dequeue+0x55eb/0x7260 [ 524.995280][ T1981] ? filter_irq_stacks+0x164/0x1a0 [ 525.001281][ T1981] ieee80211_handle_wake_tx_queue+0x152/0x3b0 [ 525.007719][ T1981] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 525.014855][ T1981] ieee80211_queue_skb+0x2e74/0x3ac0 [ 525.020576][ T1981] ieee80211_tx+0x406/0x570 [ 525.025547][ T1981] ieee80211_xmit+0x54a/0x5b0 [ 525.030720][ T1981] __ieee80211_subif_start_xmit+0x1413/0x1c40 [ 525.037232][ T1981] ieee80211_subif_start_xmit+0xab/0x680 [ 525.043370][ T1981] ? kmsan_get_metadata+0x13e/0x1c0 [ 525.049044][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 525.055400][ T1981] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 525.062168][ T1981] dev_hard_start_xmit+0x247/0xa20 [ 525.067621][ T1981] __dev_queue_xmit+0x366a/0x57d0 [ 525.073401][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 525.079745][ T1981] ? kmsan_get_metadata+0x13e/0x1c0 [ 525.085305][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 525.091594][ T1981] ? kmsan_get_metadata+0x13e/0x1c0 [ 525.097133][ T1981] ? __dev_queue_xmit+0x3d6/0x57d0 [ 525.102785][ T1981] neigh_resolve_output+0x9d0/0xaf0 [ 525.108424][ T1981] ? __pfx_eth_header+0x10/0x10 [ 525.113598][ T1981] ? __pfx_neigh_resolve_output+0x10/0x10 [ 525.119774][ T1981] ip6_finish_output2+0x2429/0x2c30 [ 525.125369][ T1981] ip6_finish_output+0xbb8/0x1560 [ 525.130930][ T1981] ip6_output+0x356/0x620 [ 525.135622][ T1981] ? __pfx_ip6_finish_output+0x10/0x10 [ 525.141705][ T1981] ? __pfx_ip6_output+0x10/0x10 [ 525.146843][ T1981] mld_sendpack+0xcb2/0x1530 [ 525.152072][ T1981] ? __pfx_dst_output+0x10/0x10 [ 525.157280][ T1981] mld_ifc_work+0x1250/0x18c0 [ 525.162490][ T1981] ? kmsan_get_metadata+0x13e/0x1c0 [ 525.168054][ T1981] ? __pfx_mld_ifc_work+0x10/0x10 [ 525.173596][ T1981] process_scheduled_works+0xae0/0x1c40 [ 525.179639][ T1981] worker_thread+0xea7/0x14f0 [ 525.184644][ T1981] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 525.191033][ T1981] kthread+0x3e2/0x540 [ 525.195436][ T1981] ? __pfx_worker_thread+0x10/0x10 [ 525.201099][ T1981] ? __pfx_kthread+0x10/0x10 [ 525.205985][ T1981] ret_from_fork+0x6d/0x90 [ 525.210871][ T1981] ? __pfx_kthread+0x10/0x10 [ 525.215754][ T1981] ret_from_fork_asm+0x1a/0x30 [ 525.221051][ T1981] [ 525.224283][ T1981] ---[ end trace 0000000000000000 ]--- [ 525.500623][ T9439] loop9: detected capacity change from 0 to 1024 [ 525.914852][ T9331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.084741][ T9331] veth0_vlan: entered promiscuous mode [ 526.115226][ T9331] veth1_vlan: entered promiscuous mode [ 526.350328][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.352260][ T9331] veth0_macvtap: entered promiscuous mode [ 526.357120][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.404908][ T9331] veth1_macvtap: entered promiscuous mode [ 526.455909][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.466746][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.476956][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.491646][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.503908][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.514693][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.524900][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.535938][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.546181][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.556995][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.571900][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.595531][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.606406][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.616644][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.627470][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.637666][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.648883][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.659152][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.669953][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.680384][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.696935][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.713580][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.732694][ T9331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.742001][ T9331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.751276][ T9331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.760417][ T9331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.042001][ T9439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0008-0000-000000000000 r/w without journal. Quota mode: none. [ 527.654056][ T9461] loop7: detected capacity change from 0 to 256 [ 527.899325][ T29] audit: type=1326 audit(1732668716.504:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.6.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0337e819 code=0x7ffc0000 [ 527.927864][ T29] audit: type=1326 audit(1732668716.504:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9463 comm="syz.6.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a0337e819 code=0x7ffc0000 [ 528.195730][ T8785] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0008-0000-000000000000. [ 528.366402][ T9469] loop7: detected capacity change from 0 to 1024 [ 528.391144][ T9469] EXT4-fs: Ignoring removed orlov option [ 528.397221][ T9469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.832650][ T9480] loop9: detected capacity change from 0 to 4096 [ 528.980406][ T9469] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.055462][ T9484] loop6: detected capacity change from 0 to 64 [ 529.086027][ T9484] hfs: get root inode failed [ 529.168031][ T9485] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 529.229659][ T29] audit: type=1800 audit(1732668717.844:99): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1176" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 529.299168][ T9469] loop7: detected capacity change from 1024 to 64 [ 529.777579][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 529.823029][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 529.837352][ T9494] input: syz1 as /devices/virtual/input/input22 [ 529.908752][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 529.973590][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.028419][ T9492] loop6: detected capacity change from 0 to 2048 [ 530.030775][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.108019][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.183300][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.220504][ T9492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.245929][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.343260][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.382743][ T7812] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 530.426755][ T9492] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 530.449757][ T9492] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 530.462613][ T9492] EXT4-fs (loop6): This should not happen!! Data will be lost [ 530.462613][ T9492] [ 530.473050][ T9492] EXT4-fs (loop6): Total free blocks count 0 [ 530.483153][ T9492] EXT4-fs (loop6): Free/Dirty block details [ 530.490867][ T9492] EXT4-fs (loop6): free_blocks=2415919104 [ 530.496857][ T9492] EXT4-fs (loop6): dirty_blocks=16 [ 530.502469][ T9492] EXT4-fs (loop6): Block reservation details [ 530.508899][ T9492] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 530.659463][ T7030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.629532][ T7812] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.661239][ T8716] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.729560][ T9473] kmmpd-loop7: attempt to access beyond end of device [ 531.729560][ T9473] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 531.744094][ T9473] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 532.006198][ T8716] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.261739][ T8716] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.403202][ T8716] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.642288][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.651012][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.090267][ T8716] bridge_slave_1: left allmulticast mode [ 533.096363][ T8716] bridge_slave_1: left promiscuous mode [ 533.103458][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.235209][ T8716] bridge_slave_0: left allmulticast mode [ 533.249501][ T8716] bridge_slave_0: left promiscuous mode [ 533.256227][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.740235][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.925094][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.970262][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.983632][ T9533] loop6: detected capacity change from 0 to 512 [ 533.998064][ T9533] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 534.046077][ T8716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.100637][ T8716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.118051][ T9534] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.131878][ T8716] bond0 (unregistering): Released all slaves [ 534.151649][ T9534] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 534.176553][ T9534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.178690][ T9533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 534.187999][ T8735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.200115][ T8735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.239112][ T9533] System zones: 1-12 [ 534.345361][ T9533] EXT4-fs (loop6): 1 truncate cleaned up [ 534.379696][ T9533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.668454][ T9533] loop6: detected capacity change from 512 to 64 [ 534.762471][ T9533] syz.6.1195: attempt to access beyond end of device [ 534.762471][ T9533] loop6: rw=3, sector=76, nr_sectors = 4 limit=64 [ 534.783577][ T9533] syz.6.1195: attempt to access beyond end of device [ 534.783577][ T9533] loop6: rw=2051, sector=80, nr_sectors = 432 limit=64 [ 535.370023][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.432980][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.485211][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.669386][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.740622][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 535.774268][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.814839][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.853678][ T8716] hsr_slave_0: left promiscuous mode [ 535.865932][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 535.948685][ T8716] hsr_slave_1: left promiscuous mode [ 535.962105][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 536.013480][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 536.028562][ T8716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.036449][ T8716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.076439][ T7030] EXT4-fs warning (device loop6): ext4_empty_dir:3124: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 536.081151][ T8716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.098150][ T8716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.192946][ T8716] veth1_macvtap: left promiscuous mode [ 536.199265][ T8716] veth0_macvtap: left promiscuous mode [ 536.205398][ T8716] veth1_vlan: left promiscuous mode [ 536.213757][ T8716] veth0_vlan: left promiscuous mode [ 536.439567][ T9534] Bluetooth: hci2: command tx timeout [ 537.056812][ T9560] loop9: detected capacity change from 0 to 32768 [ 537.203204][ T9564] loop5: detected capacity change from 0 to 512 [ 537.221015][ T9564] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 537.272591][ T9560] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 537.315547][ T9560] (syz.9.1204,9560,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 537.320455][ T9564] EXT4-fs (loop5): 1 truncate cleaned up [ 537.324089][ T9560] (syz.9.1204,9560,0):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 124554051584 failed -12 [ 537.331282][ T9564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.342888][ T9560] (syz.9.1204,9560,0):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 537.343061][ T9560] (syz.9.1204,9560,0):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 537.343222][ T9560] (syz.9.1204,9560,0):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 537.343375][ T9560] (syz.9.1204,9560,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 537.542928][ T8785] ocfs2: Unmounting device (7,9) on (node local) [ 537.698699][ T29] audit: type=1804 audit(1732668726.214:100): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1205" name="/newroot/212/bus/bus" dev="loop5" ino=18 res=1 errno=0 [ 537.720319][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.727204][ T29] audit: type=1800 audit(1732668726.214:101): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1205" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 537.815478][ T8716] team0 (unregistering): Port device team_slave_1 removed [ 537.920768][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.930627][ T8716] team0 (unregistering): Port device team_slave_0 removed [ 538.453752][ T9534] Bluetooth: hci2: command tx timeout [ 538.749548][ T7030] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.915807][ T4076] team0: Port device netdevsim3 removed [ 538.933354][ T4076] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.194117][ T4076] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.502595][ T9571] loop9: detected capacity change from 0 to 32768 [ 539.512832][ T4076] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.562104][ T9571] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 539.733456][ T4076] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.936182][ T9582] loop5: detected capacity change from 0 to 128 [ 540.288599][ T29] audit: type=1804 audit(1732668728.874:102): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1210" name="/newroot/214/file0/file0" dev="loop5" ino=1048709 res=1 errno=0 [ 540.415354][ T29] audit: type=1804 audit(1732668728.984:103): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1210" name="/newroot/214/file0/file0" dev="loop5" ino=1048709 res=1 errno=0 [ 540.529317][ T9534] Bluetooth: hci2: command tx timeout [ 540.542549][ T8785] ocfs2: Unmounting device (7,9) on (node local) [ 540.601978][ T9529] chnl_net:caif_netlink_parms(): no params data found [ 541.374600][ T4076] erspan0 (unregistering): left promiscuous mode [ 541.465878][ T4076] gretap0 (unregistering): left promiscuous mode [ 541.609483][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.658463][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.695219][ T4076] bond0 (unregistering): Released all slaves [ 541.750642][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.866026][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.032949][ T5807] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 542.078998][ T4076] tipc: Left network mode [ 542.112244][ T9603] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1217'. [ 542.137040][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 542.452387][ T9607] loop5: detected capacity change from 0 to 512 [ 542.629592][ T5807] Bluetooth: hci2: command tx timeout [ 542.662958][ T9607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 542.676244][ T9607] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.528819][ T9618] loop9: detected capacity change from 0 to 256 [ 543.560111][ T4076] hsr_slave_0: left promiscuous mode [ 543.576904][ T9618] exfat: Unknown parameter '˙˙˙' [ 543.602081][ T9618] Bluetooth: MGMT ver 1.23 [ 543.644934][ T4076] hsr_slave_1: left promiscuous mode [ 543.701139][ T4076] veth1_macvtap: left promiscuous mode [ 543.706948][ T4076] veth0_macvtap: left promiscuous mode [ 543.713108][ T4076] veth1_vlan: left promiscuous mode [ 543.718929][ T4076] veth0_vlan: left promiscuous mode [ 543.979598][ T6659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 544.079971][ T9624] loop0: detected capacity change from 0 to 512 [ 544.114382][ T9624] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 544.169677][ T9624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 544.189625][ T9624] System zones: 1-12 [ 544.207821][ T9624] EXT4-fs (loop0): 1 truncate cleaned up [ 544.215562][ T9624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.330019][ T5807] Bluetooth: hci3: command tx timeout [ 544.399049][ T4985] smc: removing ib device syz1 [ 544.715521][ T9331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.990191][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.998117][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.006116][ T9529] bridge_slave_0: entered allmulticast mode [ 545.017851][ T9529] bridge_slave_0: entered promiscuous mode [ 545.044724][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.052682][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.062678][ T9529] bridge_slave_1: entered allmulticast mode [ 545.073945][ T9529] bridge_slave_1: entered promiscuous mode [ 545.091666][ T9625] tun0: tun_chr_ioctl cmd 1074025675 [ 545.097254][ T9625] tun0: persist enabled [ 545.102902][ T9627] tun0: tun_chr_ioctl cmd 1074025675 [ 545.108758][ T9627] tun0: persist enabled [ 546.411355][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.454373][ T5807] Bluetooth: hci3: command tx timeout [ 547.281406][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.643035][ T4076] IPVS: stop unused estimator thread 0... [ 547.876985][ T9529] team0: Port device team_slave_0 added [ 547.954481][ T9529] team0: Port device team_slave_1 added [ 548.160733][ T9645] block nbd5: shutting down sockets [ 548.308516][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.315722][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.342827][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.527446][ T9593] chnl_net:caif_netlink_parms(): no params data found [ 548.559967][ T5807] Bluetooth: hci3: command tx timeout [ 548.643477][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.650957][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.677744][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.051768][ T9529] hsr_slave_0: entered promiscuous mode [ 549.079840][ T9529] hsr_slave_1: entered promiscuous mode [ 549.239881][ T9651] ===================================================== [ 549.247205][ T9651] BUG: KMSAN: uninit-value in io_nop+0x549/0x8a0 [ 549.254329][ T9651] io_nop+0x549/0x8a0 [ 549.258643][ T9651] io_issue_sqe+0x420/0x2130 [ 549.263430][ T9651] io_submit_sqes+0x11bc/0x2f80 [ 549.265120][ T9654] loop9: detected capacity change from 0 to 256 [ 549.268562][ T9651] __se_sys_io_uring_enter+0x423/0x4aa0 [ 549.268694][ T9651] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 549.268805][ T9651] x64_sys_call+0xce5/0x3c30 [ 549.268940][ T9651] do_syscall_64+0xcd/0x1e0 [ 549.269070][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.269221][ T9651] [ 549.298373][ T9654] exfat: Deprecated parameter 'namecase' [ 549.304164][ T9651] Uninit was created at: [ 549.322784][ T9651] __alloc_pages_noprof+0x9a7/0xe00 [ 549.330437][ T9651] alloc_pages_mpol_noprof+0x299/0x990 [ 549.336292][ T9651] alloc_pages_noprof+0x1bf/0x1e0 [ 549.341709][ T9651] allocate_slab+0x320/0x12e0 [ 549.346578][ T9651] ___slab_alloc+0x12ef/0x35e0 [ 549.351960][ T9651] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 549.359679][ T9651] __io_alloc_req_refill+0x84/0x5b0 [ 549.365307][ T9651] io_submit_sqes+0x9a2/0x2f80 [ 549.370503][ T9651] __se_sys_io_uring_enter+0x423/0x4aa0 [ 549.376356][ T9651] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 549.382359][ T9651] x64_sys_call+0xce5/0x3c30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 549.387188][ T9651] do_syscall_64+0xcd/0x1e0 [ 549.392121][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.398468][ T9651] [ 549.400922][ T9651] CPU: 1 UID: 0 PID: 9651 Comm: syz.5.1231 Tainted: G W 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 549.413289][ T9651] Tainted: [W]=WARN [ 549.417217][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.433686][ T9651] ===================================================== [ 549.442584][ T9651] Disabling lock debugging due to kernel taint [ 549.449154][ T9651] Kernel panic - not syncing: kmsan.panic set ... [ 549.455720][ T9651] CPU: 1 UID: 0 PID: 9651 Comm: syz.5.1231 Tainted: G B W 6.12.0-syzkaller-09567-g7eef7e306d3c #0 [ 549.467840][ T9651] Tainted: [B]=BAD_PAGE, [W]=WARN [ 549.472973][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 549.483174][ T9651] Call Trace: [ 549.486576][ T9651] [ 549.489640][ T9651] dump_stack_lvl+0x216/0x2d0 [ 549.494534][ T9651] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 549.500588][ T9651] dump_stack+0x1e/0x30 [ 549.505028][ T9651] panic+0x4e2/0xcf0 [ 549.509146][ T9651] ? kmsan_get_metadata+0x51/0x1c0 [ 549.514502][ T9651] kmsan_report+0x2c7/0x2d0 [ 549.519243][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.524670][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.530095][ T9651] ? __msan_warning+0x95/0x120 [ 549.535052][ T9651] ? io_nop+0x549/0x8a0 [ 549.539386][ T9651] ? io_issue_sqe+0x420/0x2130 [ 549.544319][ T9651] ? io_submit_sqes+0x11bc/0x2f80 [ 549.549511][ T9651] ? __se_sys_io_uring_enter+0x423/0x4aa0 [ 549.555507][ T9651] ? __x64_sys_io_uring_enter+0x11f/0x1a0 [ 549.561497][ T9651] ? x64_sys_call+0xce5/0x3c30 [ 549.566465][ T9651] ? do_syscall_64+0xcd/0x1e0 [ 549.571345][ T9651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.577785][ T9651] ? mod_objcg_state+0x6ee/0xe00 [ 549.582899][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.588314][ T9651] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 549.594362][ T9651] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 549.600812][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.606221][ T9651] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 549.612258][ T9651] __msan_warning+0x95/0x120 [ 549.617051][ T9651] io_nop+0x549/0x8a0 [ 549.621199][ T9651] ? __pfx_io_nop+0x10/0x10 [ 549.626118][ T9651] io_issue_sqe+0x420/0x2130 [ 549.630881][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.636302][ T9651] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 549.642354][ T9651] io_submit_sqes+0x11bc/0x2f80 [ 549.647418][ T9651] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 549.654076][ T9651] __se_sys_io_uring_enter+0x423/0x4aa0 [ 549.659822][ T9651] ? futex_wait+0x2bf/0x360 [ 549.664509][ T9651] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 549.671056][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.676479][ T9651] ? do_futex+0x341/0x4a0 [ 549.680966][ T9651] ? kmsan_get_metadata+0x13e/0x1c0 [ 549.686383][ T9651] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 549.692458][ T9651] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 549.698503][ T9651] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 549.704267][ T9651] x64_sys_call+0xce5/0x3c30 [ 549.709189][ T9651] do_syscall_64+0xcd/0x1e0 [ 549.713891][ T9651] ? clear_bhb_loop+0x25/0x80 [ 549.718793][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.724875][ T9651] RIP: 0033:0x7f9367d7e819 [ 549.729443][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.749767][ T9651] RSP: 002b:00007f9368ba2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 549.758458][ T9651] RAX: ffffffffffffffda RBX: 00007f9367f35fa0 RCX: 00007f9367d7e819 [ 549.766599][ T9651] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000003 [ 549.774708][ T9651] RBP: 00007f9367df175e R08: 0000000000000000 R09: 0000000000000000 [ 549.782825][ T9651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.790952][ T9651] R13: 0000000000000000 R14: 00007f9367f35fa0 R15: 00007ffe04c71f48 [ 549.799182][ T9651] [ 549.802710][ T9651] Kernel Offset: disabled [ 549.807105][ T9651] Rebooting in 86400 seconds..