last executing test programs: 9.716330543s ago: executing program 3 (id=453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0)=0x1, 0xfffdffff) 8.827612377s ago: executing program 0 (id=456): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'vlan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 8.210961178s ago: executing program 3 (id=459): sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 7.959744162s ago: executing program 0 (id=462): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 7.003943387s ago: executing program 0 (id=463): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) 6.870242549s ago: executing program 0 (id=465): r0 = socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) syz_usb_connect$cdc_ecm(0x7, 0x94, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) 6.112361462s ago: executing program 3 (id=468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) creat(0x0, 0xd931d3864d39ddd8) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) writev(r6, &(0x7f0000000340), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.667966389s ago: executing program 4 (id=470): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000004}, 0x16) 4.795952503s ago: executing program 3 (id=471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) syz_open_procfs(r1, &(0x7f00000001c0)='net/unix\x00') r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) unshare(0x2c000080) unshare(0x22020400) socket$kcm(0x10, 0x2, 0x0) 4.675128854s ago: executing program 4 (id=473): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 4.597283456s ago: executing program 4 (id=474): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001001a000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) 4.199738332s ago: executing program 1 (id=476): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0xffff8001}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a132", 0x2}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/211, 0xd3, 0x0, 0x0}, &(0x7f0000000400)=0x40) 3.870852788s ago: executing program 3 (id=477): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x300000a, &(0x7f00000001c0)={[{@nospace_cache}, {@thread_pool={'thread_pool', 0x3d, 0x1000003}}, {@enospc_debug}, {@skip_balance}, {@discard_async}, {@clear_cache}, {@ref_verify}, {@ssd_spread}, {@discard_async}, {@subvolid}, {@ssd_spread}, {@nodatacow}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x0, 0x8d) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockname(r2, 0x0, &(0x7f0000000240)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff658000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0xfd, 0x146, &(0x7f00000002c0)="$eJzsj79LOnEcxl/39de30jQwsKAIGhLDPE9sa9BIErKDwqUp0IsCTVEIx2pu6A9wKIImcYjGhrLJUgj7O9yCxuLjXYXQ0v55LXfv1/PwcLe20g3iAxsmq6ViuWJUq0Z+bkvPpLZvbu/GhXcB/weNYrkiynmzf5+AffG0Q//E1I+ef0DBWMqVCuLuJyAIJMdg78CBitkdFc4vXMGIWi44D61J02m/uJjlpu2Q9JpO7H1cwoLYm/jZewNqdYf1Z+HQ9YwtYR3U6ovNxtNmp50Oh2aNMy01deUO2MgaTkAR+WukHX6JNBu9biezoWf0bkzTlmNqVFXjPf25k44fn2Nfdx/BjjK85xQbWThVoK5AY5D3HxQP0Lp414tel38EOPSBMpwo1veZSW434PgyfL9IJBKJRCKRSCQSiUTyVz4DAAD//0wAXes=") execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.386642975s ago: executing program 0 (id=478): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x20050800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20b442, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r4}, 0xc) ioctl(0xffffffffffffffff, 0xfffff001, &(0x7f0000000000)="94d06c30df2aafdfce6b4a7fb14b02d900bbb07d1089c29d775248e7e2b85297c466a5a2c958e7638cf138e9877a5a4fbcf3") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r1, 0x584fa000) syz_emit_ethernet(0x7a, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000003100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x6, 0x71f2, 0x1, 0x3, 0x62bf, 0x7f, 0x2, 0x6, 0x409, 0xffffa804, 0xe838, 0x7ff, 0x2, 0x7ffc, 0x15, 0x21, {0x2}, 0x9, 0x7}}) 3.379861765s ago: executing program 4 (id=479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x181, &(0x7f00000001c0)="$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") llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.12722562s ago: executing program 2 (id=480): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000069000b000000000000000000070000000000000008000100010000"], 0x20}}, 0x4000000) 3.06846013s ago: executing program 4 (id=481): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.895568573s ago: executing program 1 (id=482): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x300000a, &(0x7f00000001c0)={[{@nospace_cache}, {@thread_pool={'thread_pool', 0x3d, 0x1000003}}, {@enospc_debug}, {@skip_balance}, {@discard_async}, {@clear_cache}, {@ref_verify}, {@ssd_spread}, {@discard_async}, {@subvolid}, {@ssd_spread}, {@nodatacow}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x0, 0x8d) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockname(r2, 0x0, &(0x7f0000000240)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff658000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f00000003c0)='./file2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.875630644s ago: executing program 2 (id=483): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r0, 0x20) 2.797280565s ago: executing program 0 (id=484): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0xb, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x100000004}, 0x16) 2.653201017s ago: executing program 2 (id=485): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.030005867s ago: executing program 4 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bb, &(0x7f0000000340)="$eJzs20tu2kAcx/GfMQZK369NV5W6aDeFlnbTXTlAL9AdAhehmrYq3YAqVT1Kb8JNegGQkl1WcWRjIkMMDCbBPL4fKclfGf9mxhETzywsAEfrQfjdkiUnrHzf//Nc0udPkvIZTw7AjfJ17gM4VvZJ1jMAkI1x3Q73AUNL+n/6uzmKvhzD/cO4npsUJUmxfME0/9cKfz7LS6NYvhh1uXL/8m+Sf6nZ/K01xy/P5csrctZlfnL/r17M5m9LuiPprqR7ku5HZ62Hkh4ljN+aG/+p4fyBTQSfvsqm+Q06CFbPl47nvklqtFfnnSj/Nrk59i9kmHhBIcrXDOe7KP8uZb4Y5SvN714roT2Xsl/ARC7j9W9LZ/78+v9ons8vX/8Aluj1B18bnuf+XKNwwqIY9bDs4uDpGPtNcPmaY1FkUZQSmpyUn5Z0RWE7dxo8vnbhD25YTFftNscCcKiqv7o/qr3+4HWn22i7bfdb7f2H6bE7PJdXF57OAey52c05AAAAAAAAAAAAAADYR48lPUkTNH3BDwAAAMDOuN53hhxJV5uyvkcAAAAAAAAAAAAAAAAAAADgUFwEAAD//312QIE=") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[], 0x10}, 0x40) getdents(r0, 0xfffffffffffffffd, 0x58) 1.415880687s ago: executing program 1 (id=487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1bb, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800001, 0x0, 0x0) 1.324387058s ago: executing program 2 (id=488): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f7", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.247972759s ago: executing program 3 (id=489): r0 = socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) syz_usb_connect$cdc_ecm(0x7, 0x94, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) 1.23022788s ago: executing program 1 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x891}, 0x20000000) 1.173484221s ago: executing program 2 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x49) 1.077874652s ago: executing program 1 (id=492): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000002140)='./file0\x00', 0x0, 0x0) 255.33µs ago: executing program 1 (id=493): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0) 0s ago: executing program 2 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x38}], 0x3, 0x2, 0x0) kernel console output (not intermixed with test programs): v: link becomes ready [ 60.370359][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.378870][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.446602][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.463384][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.478548][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.548150][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.548206][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.588406][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.606514][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.247648][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.257855][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.260206][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.275811][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.283726][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.331488][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.377173][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.406880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.424083][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.434393][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.492581][ T4259] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.534024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.236579][ T4265] loop3: detected capacity change from 0 to 1024 [ 62.383858][ T4211] Bluetooth: hci2: command 0x0419 tx timeout [ 62.390006][ T4211] Bluetooth: hci0: command 0x0419 tx timeout [ 62.396107][ T4211] Bluetooth: hci1: command 0x0419 tx timeout [ 62.404115][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 62.502953][ T4211] Bluetooth: hci3: command 0x0419 tx timeout [ 62.731289][ T4265] xt_l2tp: wrong L2TP version: 0 [ 62.839275][ T4280] loop1: detected capacity change from 0 to 64 [ 63.545357][ T4288] loop4: detected capacity change from 0 to 1024 [ 63.616347][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 63.766511][ T4288] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.263326][ T4288] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,dioread_nolock,stripe=0x0000000000000000,acl,debug_want_extra_isize=0x0000000000000080,lazytime,dax=never,stripe=0x0000000000000400,commit=0x0000000000000005,,errors=continue. Quota mode: none. [ 64.592241][ T4299] loop1: detected capacity change from 0 to 32768 [ 64.772737][ T4304] loop2: detected capacity change from 0 to 128 [ 64.803530][ T4299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.12 (4299) [ 64.908319][ T4299] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 64.917363][ T4299] BTRFS info (device loop1): disabling free space tree [ 64.924805][ T4299] BTRFS info (device loop1): turning on async discard [ 64.931624][ T4299] BTRFS info (device loop1): force clearing of disk cache [ 64.938736][ T4299] BTRFS info (device loop1): doing ref verification [ 64.945642][ T4299] BTRFS info (device loop1): enabling ssd optimizations [ 64.952639][ T4299] BTRFS info (device loop1): using spread ssd allocation scheme [ 64.960308][ T4299] BTRFS info (device loop1): setting nodatacow, compression disabled [ 64.968375][ T4299] BTRFS info (device loop1): has skinny extents [ 64.974682][ T4299] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 65.090197][ T4214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.189844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.198875][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.220424][ T4304] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 65.231281][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.269431][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.391993][ T4299] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 65.411528][ T4299] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 65.469581][ T4299] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 65.589706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 65.598706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 65.637730][ T4299] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 65.740985][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.759431][ T4299] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 65.823295][ T4299] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 65.829368][ T4214] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 66.164314][ T4299] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 66.175268][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.176117][ T4299] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 66.270289][ T4214] usb 5-1: config 0 descriptor?? [ 66.272698][ T1111] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.286160][ T4299] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 66.321048][ T4214] cp210x 5-1:0.0: cp210x converter detected [ 66.398483][ T4299] BTRFS info (device loop1): clearing free space tree [ 66.406369][ T4299] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.416242][ T4299] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.548262][ T4332] loop2: detected capacity change from 0 to 1024 [ 66.582059][ T4299] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 66.593301][ T4299] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 66.604720][ T4299] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 66.616444][ T4299] BTRFS info (device loop1): scrub: started on devid 1 [ 66.631258][ T4299] BTRFS info (device loop1): left=0, need=98304, flags=2 [ 66.638457][ T4299] BTRFS info (device loop1): space_info 2 has 0 free, is not full [ 66.646484][ T4299] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 66.660171][ T4299] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 851968 [ 66.669419][ T4299] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 66.677207][ T4299] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 66.684877][ T4299] BTRFS info (device loop1): delayed_block_rsv: size 32768 reserved 32768 [ 66.693445][ T4299] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0 [ 66.799320][ T4214] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 66.820014][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.833792][ T4299] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0 [ 66.852801][ T1111] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.889621][ T4299] process 'syz.1.12' launched './file2' with NULL argv: empty string added [ 66.927142][ T4214] usb 5-1: cp210x converter now attached to ttyUSB0 [ 66.959504][ T1111] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.983096][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.038356][ T1111] usb 4-1: SerialNumber: syz [ 67.145278][ T4214] usb 5-1: USB disconnect, device number 2 [ 67.246549][ T4214] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 67.387161][ T4214] cp210x 5-1:0.0: device disconnected [ 67.464752][ T1111] usb 4-1: 0:2 : does not exist [ 67.477166][ T1111] usb 4-1: unit 255 not found! [ 67.739452][ T4347] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.747305][ T1111] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 68.301193][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.319142][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.328123][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 68.644329][ T4356] loop4: detected capacity change from 0 to 512 [ 68.699859][ T1111] usb 4-1: USB disconnect, device number 2 [ 68.716282][ T4360] loop0: detected capacity change from 0 to 1024 [ 68.718362][ T4356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.755566][ T4356] EXT4-fs (loop4): 1 truncate cleaned up [ 68.761419][ T4356] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 68.903343][ T4347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.997426][ T4369] xt_l2tp: wrong L2TP version: 0 [ 69.107239][ T4214] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.655196][ T4370] loop3: detected capacity change from 0 to 64 [ 69.969237][ T4214] usb 3-1: Using ep0 maxpacket: 16 [ 70.249395][ T4214] usb 3-1: config 0 has no interfaces? [ 70.259619][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.260359][ T4347] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 70.285012][ T4347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.308042][ T4347] usb 2-1: config 0 descriptor?? [ 70.356459][ T4347] pwc: Askey VC010 type 2 USB webcam detected. [ 70.449346][ T4347] pwc: send_video_command error -71 [ 70.461752][ T4347] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 70.493838][ T4347] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 70.518149][ T4347] usb 2-1: USB disconnect, device number 2 [ 70.547695][ T4383] loop1: detected capacity change from 0 to 128 [ 70.550887][ T4214] usb 3-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 70.563694][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.572004][ T4214] usb 3-1: Product: syz [ 70.576256][ T4214] usb 3-1: Manufacturer: syz [ 70.580926][ T4214] usb 3-1: SerialNumber: syz [ 70.587285][ T4214] usb 3-1: config 0 descriptor?? [ 71.026564][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.033493][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.260446][ T4358] udc-core: couldn't find an available UDC or it's busy [ 71.285581][ T4358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.380003][ T4358] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.419604][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.474723][ T4389] tipc: Failed to remove unknown binding: 66,1,1/0:733238186/733238188 [ 71.501102][ T4216] usb 3-1: USB disconnect, device number 2 [ 71.760605][ T4391] netlink: 'syz.0.27': attribute type 12 has an invalid length. [ 72.070568][ T23] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 72.125518][ T23] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.257478][ T23] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.612710][ T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 74.625727][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.745841][ T23] usb 4-1: invalid MIDI out EP 0 [ 74.821923][ T23] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 74.845968][ T23] usb 4-1: USB disconnect, device number 3 [ 74.858789][ T4410] loop0: detected capacity change from 0 to 1024 [ 75.069241][ T4216] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.135371][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.439606][ T4216] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.454426][ T4216] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.539456][ T4216] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.548681][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.556754][ T4216] usb 2-1: SerialNumber: syz [ 75.771235][ T4421] loop2: detected capacity change from 0 to 1024 [ 75.851670][ T4216] usb 2-1: 0:2 : does not exist [ 75.856592][ T4216] usb 2-1: unit 255 not found! [ 75.909881][ T4421] xt_l2tp: wrong L2TP version: 0 [ 76.115017][ T4418] loop0: detected capacity change from 0 to 32768 [ 76.239476][ T1108] cfg80211: failed to load regulatory.db [ 76.259279][ T4216] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 76.411620][ T4428] loop2: detected capacity change from 0 to 64 [ 76.605004][ T4216] usb 2-1: USB disconnect, device number 3 [ 77.052718][ T4434] loop3: detected capacity change from 0 to 512 [ 77.132355][ T4418] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.48 (4418) [ 77.187336][ T4434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.217395][ T4418] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 77.254386][ T4418] BTRFS info (device loop0): using free space tree [ 77.290304][ T4418] BTRFS info (device loop0): has skinny extents [ 77.454532][ T4434] EXT4-fs (loop3): 1 truncate cleaned up [ 77.489446][ T4434] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,journal_ioprio=0x0000000000000002,debug_want_extra_isize=0x0000000000000068,lazytime,grpjquota=,quota,,errors=continue. Quota mode: writeback. [ 77.639255][ T4216] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.089248][ T4216] usb 2-1: Using ep0 maxpacket: 16 [ 78.379749][ T4216] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 78.483662][ T4216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.563594][ T4216] usb 2-1: Product: syz [ 78.579623][ T4216] usb 2-1: Manufacturer: syz [ 78.589162][ T4216] usb 2-1: SerialNumber: syz [ 78.606778][ T4216] usb 2-1: config 0 descriptor?? [ 78.811258][ T4216] as10x_usb: device has been detected [ 78.818155][ T4216] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 78.854062][ T4216] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 78.906746][ T4418] BTRFS error (device loop0): open_ctree failed: -12 [ 78.917974][ T4216] as10x_usb: error during firmware upload part1 [ 78.924762][ T4216] Registered device Sky IT Digital Key (green led) [ 78.938621][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 78.939726][ T4216] usb 2-1: USB disconnect, device number 4 [ 78.999267][ T4468] loop4: detected capacity change from 0 to 512 [ 79.011120][ T4216] Unregistered device Sky IT Digital Key (green led) [ 79.012721][ T4216] as10x_usb: device has been disconnected [ 79.057292][ T4468] ======================================================= [ 79.057292][ T4468] WARNING: The mand mount option has been deprecated and [ 79.057292][ T4468] and is ignored by this kernel. Remove the mand [ 79.057292][ T4468] option from the mount to silence this warning. [ 79.057292][ T4468] ======================================================= [ 79.155751][ T4470] capability: warning: `syz.0.50' uses deprecated v2 capabilities in a way that may be insecure [ 79.232365][ T4468] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 79.241321][ T4468] EXT4-fs (loop4): Unrecognized mount option "=" or missing value [ 79.827974][ T4487] loop4: detected capacity change from 0 to 32768 [ 79.915897][ T4487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.57 (4487) [ 79.945682][ T4490] loop3: detected capacity change from 0 to 512 [ 79.953421][ T4487] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 79.962114][ T4487] BTRFS info (device loop4): disabling free space tree [ 79.969245][ T4487] BTRFS info (device loop4): turning on async discard [ 79.976482][ T4487] BTRFS info (device loop4): force clearing of disk cache [ 79.983649][ T4487] BTRFS info (device loop4): doing ref verification [ 79.990318][ T4487] BTRFS info (device loop4): enabling ssd optimizations [ 79.997252][ T4487] BTRFS info (device loop4): using spread ssd allocation scheme [ 80.005744][ T4487] BTRFS info (device loop4): setting nodatacow, compression disabled [ 80.013935][ T4487] BTRFS info (device loop4): has skinny extents [ 80.021062][ T4487] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 80.032398][ T2377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.044036][ T4487] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 80.063559][ T4490] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 80.098880][ T4487] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 80.123923][ T4490] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 80.139659][ T4490] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.158143][ T4490] EXT4-fs (loop3): DAX unsupported by block device. [ 80.167262][ T4487] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 80.188833][ T4487] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 80.209002][ T4487] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 80.229343][ T4487] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 80.250283][ T4487] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 80.271588][ T4487] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 80.409330][ T2377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.429142][ T2377] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.499307][ T4487] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 80.512231][ T2377] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.602540][ T2377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.739758][ T2377] usb 1-1: SerialNumber: syz [ 80.895585][ T4487] BTRFS info (device loop4): clearing free space tree [ 80.903068][ T4487] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.912989][ T4487] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.054572][ T4487] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 81.065873][ T4487] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 81.077355][ T4487] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 81.089053][ T4487] BTRFS info (device loop4): scrub: started on devid 1 [ 81.098299][ T4487] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 81.105908][ T4487] BTRFS info (device loop4): space_info 2 has 0 free, is not full [ 81.113790][ T4487] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 81.127426][ T4487] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 81.136094][ T4487] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 81.143851][ T4487] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 81.151568][ T4487] BTRFS info (device loop4): delayed_block_rsv: size 32768 reserved 32768 [ 81.160117][ T4487] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 81.171621][ T2377] usb 1-1: 0:2 : does not exist [ 81.176717][ T2377] usb 1-1: unit 255 not found! [ 81.184116][ T4487] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 81.312818][ T4527] loop3: detected capacity change from 0 to 256 [ 81.389238][ T2377] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 81.418992][ T2377] usb 1-1: USB disconnect, device number 2 [ 81.481631][ T4527] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.629958][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.708158][ T4539] loop2: detected capacity change from 0 to 1024 [ 81.977896][ T26] audit: type=1800 audit(1745319072.884:2): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.65" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 82.898395][ T4549] loop3: detected capacity change from 0 to 512 [ 82.906666][ T4547] loop4: detected capacity change from 0 to 64 [ 83.561369][ T4549] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 83.570572][ T4549] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.578965][ T4549] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0). [ 83.589808][ T4549] EXT4-fs warning (device loop3): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.604432][ T4549] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 83.618804][ T4549] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.68: bg 0: block 40: padding at end of block bitmap is not set [ 83.642619][ T4549] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 83.654835][ T4549] EXT4-fs (loop3): 1 truncate cleaned up [ 83.660535][ T4549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.741333][ T4547] hfs: unable to parse mount options [ 83.860411][ T4555] loop0: detected capacity change from 0 to 64 [ 84.901265][ T4566] loop4: detected capacity change from 0 to 32768 [ 84.923698][ T4567] netlink: 'syz.2.69': attribute type 12 has an invalid length. [ 84.971571][ T4566] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.74 (4566) [ 85.560012][ T4571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.73'. [ 85.570110][ T4563] overlayfs: failed to resolve './file0': -2 [ 85.576791][ T4566] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 85.585929][ T4566] BTRFS info (device loop4): disabling free space tree [ 85.593207][ T4566] BTRFS info (device loop4): turning on async discard [ 85.600364][ T4566] BTRFS info (device loop4): force clearing of disk cache [ 85.607988][ T4566] BTRFS info (device loop4): doing ref verification [ 85.614634][ T4566] BTRFS info (device loop4): enabling ssd optimizations [ 85.621637][ T4566] BTRFS info (device loop4): using spread ssd allocation scheme [ 85.629324][ T4566] BTRFS info (device loop4): setting nodatacow, compression disabled [ 85.637391][ T4566] BTRFS info (device loop4): has skinny extents [ 85.643951][ T4566] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 85.660440][ T4571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.73'. [ 85.667113][ T4566] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 85.712290][ T4566] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 85.799850][ T4566] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 85.815676][ T4566] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 85.839061][ T4566] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 85.855851][ T4566] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 85.872603][ T4566] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 85.889424][ T4566] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 85.919235][ T4566] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 85.992319][ T4566] BTRFS info (device loop4): clearing free space tree [ 85.999233][ T4566] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.008868][ T4566] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.046326][ T4566] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 86.057747][ T4566] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 86.069438][ T4566] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 86.081245][ T4566] BTRFS info (device loop4): scrub: started on devid 1 [ 86.095538][ T4566] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 86.102806][ T4566] BTRFS info (device loop4): space_info 2 has 0 free, is not full [ 86.110771][ T4566] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 86.124822][ T4566] BTRFS info (device loop4): global_block_rsv: size 851968 reserved 851968 [ 86.133471][ T4566] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 86.141186][ T4566] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 86.148825][ T4566] BTRFS info (device loop4): delayed_block_rsv: size 32768 reserved 32768 [ 86.157383][ T4566] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 86.173899][ T4566] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 86.302843][ T4602] x_tables: duplicate underflow at hook 4 [ 86.319389][ T4576] loop1: detected capacity change from 0 to 32768 [ 86.504424][ T4576] XFS (loop1): Mounting V5 Filesystem [ 86.582865][ T4576] XFS (loop1): Ending clean mount [ 86.606355][ T4576] XFS (loop1): Quotacheck needed: Please wait. [ 86.659586][ T4576] XFS (loop1): Quotacheck: Done. [ 86.719203][ T4610] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.744803][ T4170] XFS (loop1): Unmounting Filesystem [ 86.952967][ T4627] loop1: detected capacity change from 0 to 64 [ 86.979364][ T2377] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.079458][ T4610] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.089962][ T4610] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.147602][ T4629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 87.169412][ T4610] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.178452][ T4610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.189469][ T4610] usb 5-1: SerialNumber: syz [ 87.229510][ T2377] usb 1-1: Using ep0 maxpacket: 16 [ 87.354071][ T2377] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 87.594009][ T4639] loop1: detected capacity change from 0 to 256 [ 87.653038][ T4637] loop3: detected capacity change from 0 to 32768 [ 87.676340][ T4639] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.681871][ T4610] usb 5-1: 0:2 : does not exist [ 87.691788][ T4610] usb 5-1: unit 255 not found! [ 87.709254][ T4637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.90 (4637) [ 87.739536][ T2377] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.758755][ T2377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.768372][ T2377] usb 1-1: Product: syz [ 87.774638][ T2377] usb 1-1: Manufacturer: syz [ 87.794619][ T2377] usb 1-1: SerialNumber: syz [ 87.804603][ T4635] loop2: detected capacity change from 0 to 32768 [ 87.816754][ T2377] usb 1-1: config 0 descriptor?? [ 87.832084][ T4637] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 87.841066][ T4637] BTRFS info (device loop3): disabling free space tree [ 87.847971][ T4637] BTRFS info (device loop3): turning on async discard [ 87.854845][ T4637] BTRFS info (device loop3): force clearing of disk cache [ 87.862552][ T4637] BTRFS info (device loop3): doing ref verification [ 87.869216][ T4637] BTRFS info (device loop3): enabling ssd optimizations [ 87.876170][ T4637] BTRFS info (device loop3): using spread ssd allocation scheme [ 87.883858][ T4637] BTRFS info (device loop3): setting nodatacow, compression disabled [ 87.892268][ T4637] BTRFS info (device loop3): has skinny extents [ 87.898558][ T4637] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 87.916029][ T4637] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 87.941022][ T4637] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 87.969339][ T4610] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 87.972720][ T4635] XFS (loop2): Mounting V5 Filesystem [ 87.995551][ T4610] usb 5-1: USB disconnect, device number 3 [ 88.052279][ T4653] 9pnet: p9_errstr2errno: server reported unknown error öv¤ùæ2É [ 88.057186][ T4637] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 88.083676][ T4637] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 88.084493][ T4660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.93'. [ 88.104937][ T4637] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 88.117683][ T4637] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 88.134922][ T4637] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 88.165527][ T4637] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 88.204668][ T4161] udevd[4161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.206523][ T4635] XFS (loop2): Ending clean mount [ 88.263398][ T4637] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 88.277481][ T4176] XFS (loop2): Unmounting Filesystem [ 88.462917][ T4637] BTRFS info (device loop3): clearing free space tree [ 88.470907][ T4680] loop4: detected capacity change from 0 to 64 [ 88.477599][ T4637] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 88.487723][ T4637] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 88.574005][ T4681] loop1: detected capacity change from 0 to 8 [ 88.633603][ T4681] unable to read inode lookup table [ 89.324983][ T4637] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 89.336582][ T4637] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 89.348547][ T4637] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 89.360256][ T4637] BTRFS info (device loop3): scrub: started on devid 1 [ 89.368844][ T4637] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 89.376510][ T4637] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 89.384416][ T4637] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 89.398501][ T4637] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 89.407229][ T4637] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 89.414909][ T4637] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 89.422628][ T4637] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 89.431170][ T4637] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 89.557663][ T4637] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 89.699415][ T4691] Zero length message leads to an empty skb [ 89.729002][ T4692] netlink: 'syz.1.99': attribute type 12 has an invalid length. [ 90.493072][ T4348] usb 1-1: USB disconnect, device number 3 [ 91.094839][ T4707] loop4: detected capacity change from 0 to 256 [ 91.223274][ T4707] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.299308][ T4699] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.349323][ T4705] loop3: detected capacity change from 0 to 32768 [ 91.413029][ T4705] XFS (loop3): Mounting V5 Filesystem [ 91.523625][ T4705] XFS (loop3): Starting recovery (logdev: internal) [ 91.559521][ T4705] XFS (loop3): Ending recovery (logdev: internal) [ 91.659267][ T4699] usb 1-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.678820][ T4699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 91.691711][ T4699] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 91.702434][ T4699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.708655][ T4168] XFS (loop3): Unmounting Filesystem [ 91.712668][ T4699] usb 1-1: config 0 descriptor?? [ 91.998480][ T4701] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 92.005371][ T4701] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 92.051913][ T4701] vhci_hcd vhci_hcd.0: Device attached [ 92.064459][ T4701] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.073884][ T4733] vhci_hcd: connection closed [ 92.078958][ T145] vhci_hcd: stop threads [ 92.098832][ T145] vhci_hcd: release socket [ 92.118548][ T4738] loop3: detected capacity change from 0 to 64 [ 92.136816][ T145] vhci_hcd: disconnect device [ 92.170003][ T4699] usbhid 1-1:0.0: can't add hid device: -71 [ 92.185693][ T4699] usbhid: probe of 1-1:0.0 failed with error -71 [ 92.306688][ T4699] usb 1-1: USB disconnect, device number 4 [ 93.108179][ T4755] loop0: detected capacity change from 0 to 64 [ 93.129485][ T4756] loop2: detected capacity change from 0 to 1024 [ 93.739368][ T4337] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.766393][ T4746] loop3: detected capacity change from 0 to 32768 [ 93.828631][ T4746] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.111 (4746) [ 93.879348][ T4699] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 93.904490][ T4746] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.923524][ T4746] BTRFS info (device loop3): force clearing of disk cache [ 93.944175][ T4746] BTRFS info (device loop3): enabling ssd optimizations [ 93.977536][ T4746] BTRFS info (device loop3): using spread ssd allocation scheme [ 94.006106][ T4746] BTRFS info (device loop3): enabling disk space caching [ 94.019222][ T4337] usb 3-1: Using ep0 maxpacket: 16 [ 94.037561][ T4746] BTRFS info (device loop3): turning on sync discard [ 94.057529][ T4746] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.094244][ T4746] BTRFS info (device loop3): use zstd compression, level 3 [ 94.113289][ T4746] BTRFS info (device loop3): setting nodatacow, compression disabled [ 94.136482][ T4746] BTRFS info (device loop3): disk space caching is enabled [ 94.159384][ T4746] BTRFS info (device loop3): has skinny extents [ 94.244538][ T4758] loop1: detected capacity change from 0 to 40427 [ 94.249488][ T4699] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 94.269848][ T4699] usb 1-1: config 179 has no interface number 0 [ 94.276232][ T4699] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 94.287557][ T4699] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 94.298705][ T4699] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 94.310123][ T4699] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 94.329745][ T4699] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 94.339394][ T4337] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 94.358045][ T4758] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 94.368070][ T4699] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 94.377741][ T4337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.390428][ T4337] usb 3-1: Product: syz [ 94.394721][ T4337] usb 3-1: Manufacturer: syz [ 94.403121][ T4337] usb 3-1: SerialNumber: syz [ 94.417059][ T4337] usb 3-1: config 0 descriptor?? [ 94.422252][ T4699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.448915][ T4746] BTRFS info (device loop3): clearing free space tree [ 94.461443][ T4746] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 94.469595][ T4765] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.486128][ T4337] as10x_usb: device has been detected [ 94.502717][ T4746] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 94.513203][ T4765] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 94.517877][ T4337] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 94.552465][ T4337] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 94.565840][ T4337] as10x_usb: error during firmware upload part1 [ 94.573607][ T4337] Registered device Sky IT Digital Key (green led) [ 95.165094][ T4765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 95.184068][ T4699] usb 3-1: USB disconnect, device number 3 [ 95.273470][ T4699] Unregistered device Sky IT Digital Key (green led) [ 95.319330][ T4699] as10x_usb: device has been disconnected [ 95.335867][ T4452] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4452) [ 96.064047][ T4802] loop1: detected capacity change from 0 to 64 [ 96.516034][ T4698] usb 1-1: USB disconnect, device number 5 [ 96.529188][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 97.089238][ T4812] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.649185][ T26] audit: type=1326 audit(1745319087.824:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4800 comm="syz.2.122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35ae1d7169 code=0x0 [ 99.024644][ T4815] device netdevsim0 entered promiscuous mode [ 99.719868][ T4823] loop0: detected capacity change from 0 to 1024 [ 99.813220][ T4834] netlink: 452 bytes leftover after parsing attributes in process `syz.2.132'. [ 100.073250][ T4836] loop2: detected capacity change from 0 to 32768 [ 100.090931][ T4839] IPv6: Can't replace route, no match found [ 100.157664][ T4836] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.134 (4836) [ 100.805785][ T4836] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 100.815306][ T4836] BTRFS info (device loop2): disabling free space tree [ 100.822290][ T4836] BTRFS info (device loop2): turning on async discard [ 100.829077][ T4836] BTRFS info (device loop2): force clearing of disk cache [ 100.836302][ T4836] BTRFS info (device loop2): doing ref verification [ 100.842933][ T4836] BTRFS info (device loop2): enabling ssd optimizations [ 100.849930][ T4836] BTRFS info (device loop2): using spread ssd allocation scheme [ 100.857575][ T4836] BTRFS info (device loop2): setting nodatacow, compression disabled [ 100.866281][ T4836] BTRFS info (device loop2): has skinny extents [ 100.872629][ T4836] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 100.910615][ T4842] netlink: 64 bytes leftover after parsing attributes in process `syz.4.136'. [ 100.929551][ T4836] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 100.959269][ T4836] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 101.029537][ T4836] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 101.051067][ T4836] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 101.084754][ T4836] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 101.105267][ T4836] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 101.172430][ T4836] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 101.207043][ T4836] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 101.275776][ T4836] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 101.398460][ T4868] loop4: detected capacity change from 0 to 64 [ 101.643666][ T4836] BTRFS info (device loop2): clearing free space tree [ 101.650606][ T4836] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.660354][ T4836] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.969960][ T4836] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 101.981232][ T4836] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 101.993104][ T4836] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 102.004885][ T4836] BTRFS info (device loop2): scrub: started on devid 1 [ 102.015880][ T4836] BTRFS info (device loop2): left=0, need=98304, flags=2 [ 102.023590][ T4836] BTRFS info (device loop2): space_info 2 has 0 free, is not full [ 102.031487][ T4836] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 102.045123][ T4836] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 102.053755][ T4836] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 102.061568][ T4836] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 102.069232][ T4836] BTRFS info (device loop2): delayed_block_rsv: size 32768 reserved 32768 [ 102.077741][ T4836] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 102.096957][ T4836] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 102.965254][ T4886] loop3: detected capacity change from 0 to 2048 [ 103.092679][ T4886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.780089][ T4897] loop4: detected capacity change from 0 to 1024 [ 103.790177][ T4901] loop2: detected capacity change from 0 to 64 [ 103.826956][ T4897] EXT4-fs (loop4): Ignoring removed bh option [ 103.843098][ T4903] loop3: detected capacity change from 0 to 1024 [ 103.961896][ T4897] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 104.643729][ T4913] loop1: detected capacity change from 0 to 256 [ 104.773761][ T4913] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 105.105665][ T4923] loop3: detected capacity change from 0 to 32768 [ 105.123593][ T4925] loop1: detected capacity change from 0 to 1024 [ 105.195984][ T4925] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.208414][ T4923] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.152 (4923) [ 105.225665][ T4923] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 105.234442][ T4923] BTRFS info (device loop3): disabling free space tree [ 105.241429][ T4923] BTRFS info (device loop3): turning on async discard [ 105.248196][ T4923] BTRFS info (device loop3): force clearing of disk cache [ 105.255429][ T4923] BTRFS info (device loop3): doing ref verification [ 105.256020][ T4925] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.262116][ T4923] BTRFS info (device loop3): enabling ssd optimizations [ 105.262135][ T4923] BTRFS info (device loop3): using spread ssd allocation scheme [ 105.287572][ T4923] BTRFS info (device loop3): setting nodatacow, compression disabled [ 105.295711][ T4923] BTRFS info (device loop3): has skinny extents [ 105.302055][ T4923] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 105.355662][ T4923] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 105.386043][ T4923] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 105.416005][ T4923] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 105.453199][ T4923] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 105.479376][ T4923] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 105.496130][ T4923] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 105.525744][ T4923] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 105.537652][ T4923] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 105.599917][ T4923] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 105.664067][ T4923] BTRFS info (device loop3): clearing free space tree [ 105.671104][ T4923] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.681301][ T4923] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.710033][ T4923] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 105.721229][ T4923] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 105.732681][ T4923] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 105.744524][ T4923] BTRFS info (device loop3): scrub: started on devid 1 [ 105.759311][ T4212] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 105.768393][ T4923] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 105.775588][ T4923] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 105.783915][ T4923] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 105.797855][ T4923] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 105.806850][ T4923] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 105.814585][ T4923] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 105.822383][ T4923] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 105.830930][ T4923] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 105.861501][ T4923] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 106.040366][ T4965] loop2: detected capacity change from 0 to 1024 [ 106.325181][ T4212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.399404][ T4212] usb 2-1: not running at top speed; connect to a high speed hub [ 106.509507][ T4212] usb 2-1: config 4 has an invalid interface number: 247 but max is 0 [ 106.525045][ T4974] loop4: detected capacity change from 0 to 4096 [ 106.530949][ T4212] usb 2-1: config 4 has no interface number 0 [ 106.537464][ T4212] usb 2-1: config 4 interface 247 has no altsetting 0 [ 106.663061][ T4979] loop3: detected capacity change from 0 to 64 [ 106.860035][ T4212] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=5f.d1 [ 106.922548][ T4212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.042871][ T4974] NILFS (loop4): invalid segment: Checksum error in segment payload [ 107.102470][ T4212] usb 2-1: Product: syz [ 107.232226][ T4974] NILFS (loop4): trying rollback from an earlier position [ 107.313441][ T4974] NILFS (loop4): recovery complete [ 107.330677][ T4212] usb 2-1: Manufacturer: syz [ 107.335441][ T4212] usb 2-1: SerialNumber: syz [ 107.426201][ T4982] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.552819][ T26] audit: type=1800 audit(1745319098.494:4): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.164" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 108.811574][ T4212] f81232 2-1:4.247: f81534a converter detected [ 108.859811][ T4212] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 108.876948][ T4212] f81534a: probe of ttyUSB0 failed with error -5 [ 108.895746][ T4212] usb 2-1: USB disconnect, device number 5 [ 108.906967][ T4212] f81232 2-1:4.247: device disconnected [ 109.090260][ T5007] loop3: detected capacity change from 0 to 32768 [ 109.131843][ T5007] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.173 (5007) [ 109.283310][ T5007] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 109.292165][ T5007] BTRFS info (device loop3): disabling free space tree [ 109.299070][ T5007] BTRFS info (device loop3): turning on async discard [ 109.305941][ T5007] BTRFS info (device loop3): force clearing of disk cache [ 109.313075][ T5007] BTRFS info (device loop3): doing ref verification [ 109.319715][ T5007] BTRFS info (device loop3): enabling ssd optimizations [ 109.326653][ T5007] BTRFS info (device loop3): using spread ssd allocation scheme [ 109.334330][ T5007] BTRFS info (device loop3): setting nodatacow, compression disabled [ 109.342500][ T5007] BTRFS info (device loop3): has skinny extents [ 109.348781][ T5007] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 109.795413][ T5007] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 109.807607][ T5007] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 109.858584][ T5007] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 109.886517][ T5007] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 109.914468][ T5007] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 109.938799][ T5007] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 109.958814][ T5007] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 110.057017][ T5007] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 110.069672][ T4249] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.092736][ T5007] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 110.233397][ T5007] BTRFS info (device loop3): clearing free space tree [ 110.240248][ T5007] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 110.250280][ T5007] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 110.756163][ T5007] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 110.767507][ T5007] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 110.778975][ T5007] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 110.790842][ T5007] BTRFS info (device loop3): scrub: started on devid 1 [ 110.807388][ T5007] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 110.814541][ T5007] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 110.822426][ T5007] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 110.836042][ T5007] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 110.844680][ T5007] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 110.852472][ T5007] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 110.860296][ T5007] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 110.868783][ T5007] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 110.965175][ T5007] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 111.122894][ T4249] usb 2-1: config 0 has no interfaces? [ 111.782347][ T4249] usb 2-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 111.871434][ T4249] usb 2-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 111.915434][ T4249] usb 2-1: Product: syz [ 111.926843][ T4249] usb 2-1: Manufacturer: syz [ 111.931721][ T4249] usb 2-1: SerialNumber: syz [ 111.940556][ T4249] usb 2-1: config 0 descriptor?? [ 112.195133][ T4791] usb 2-1: USB disconnect, device number 6 [ 112.326576][ T5064] loop3: detected capacity change from 0 to 4096 [ 113.490281][ T5077] loop0: detected capacity change from 0 to 32768 [ 114.526108][ T5077] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.191 (5077) [ 114.638367][ T5077] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 114.647615][ T5077] BTRFS info (device loop0): disabling free space tree [ 114.654572][ T5077] BTRFS info (device loop0): turning on async discard [ 114.661402][ T5077] BTRFS info (device loop0): force clearing of disk cache [ 114.668518][ T5077] BTRFS info (device loop0): doing ref verification [ 114.675152][ T5077] BTRFS info (device loop0): enabling ssd optimizations [ 114.682160][ T5077] BTRFS info (device loop0): using spread ssd allocation scheme [ 114.690390][ T5077] BTRFS info (device loop0): setting nodatacow, compression disabled [ 114.698466][ T5077] BTRFS info (device loop0): has skinny extents [ 114.705019][ T5077] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 114.752402][ T5091] netlink: 'syz.2.192': attribute type 12 has an invalid length. [ 114.799670][ T4168] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 114.824385][ T4168] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 114.982341][ T5077] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 115.006501][ T5077] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 115.235492][ T5077] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 115.256547][ T5077] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 115.283669][ T5077] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 115.296565][ T5077] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 115.309715][ T5077] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 115.321092][ T5077] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 115.335249][ T5077] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 115.335576][ T5111] loop2: detected capacity change from 0 to 256 [ 115.362995][ T5077] BTRFS info (device loop0): clearing free space tree [ 115.369926][ T5077] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.379977][ T5077] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.400747][ T5077] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 115.412323][ T5077] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 115.423781][ T5077] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 115.435487][ T5077] BTRFS info (device loop0): scrub: started on devid 1 [ 115.438143][ T5111] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.498519][ T5077] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 115.505912][ T5077] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 115.514331][ T5077] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 115.527948][ T5077] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 115.536566][ T5077] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 115.544294][ T5077] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 115.551979][ T5077] BTRFS info (device loop0): delayed_block_rsv: size 32768 reserved 32768 [ 115.560614][ T5077] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 115.570150][ T4249] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.598305][ T5077] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 115.819894][ T4249] usb 4-1: Using ep0 maxpacket: 8 [ 115.951739][ T4249] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.969224][ T4249] usb 4-1: config 179 has an invalid descriptor of length 57, skipping remainder of the config [ 115.981593][ T4249] usb 4-1: config 179 has no interface number 0 [ 115.987864][ T4249] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 115.999159][ T4249] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 116.012911][ T4249] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 116.023252][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.049471][ T5102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.144579][ T5124] loop0: detected capacity change from 0 to 8 [ 116.207702][ T26] audit: type=1800 audit(1745319107.144:5): pid=5124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.198" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 116.240560][ T5124] syz.0.198 (5124) used greatest stack depth: 19792 bytes left [ 119.101391][ T5147] loop2: detected capacity change from 0 to 64 [ 119.658277][ T5151] netlink: 'syz.0.207': attribute type 12 has an invalid length. [ 120.009367][ T4249] usb 4-1: string descriptor 0 read error: -71 [ 120.080904][ T4249] usb 4-1: USB disconnect, device number 4 [ 120.230824][ T5155] "syz.3.211" (5155) uses obsolete ecb(arc4) skcipher [ 121.423964][ T5168] loop3: detected capacity change from 0 to 2048 [ 121.488795][ T5168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.618119][ T5175] input: syz1 as /devices/virtual/input/input5 [ 121.721726][ T5178] loop1: detected capacity change from 0 to 128 [ 121.824525][ T5179] hub 2-0:1.0: USB hub found [ 121.831387][ T5179] hub 2-0:1.0: 1 port detected [ 122.006977][ T5178] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 122.754617][ T5192] loop2: detected capacity change from 0 to 64 [ 123.793730][ T5201] loop3: detected capacity change from 0 to 32768 [ 123.900396][ T5201] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.223 (5201) [ 124.021122][ T5201] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.030439][ T5201] BTRFS info (device loop3): disabling free space tree [ 124.037343][ T5201] BTRFS info (device loop3): turning on async discard [ 124.044199][ T5201] BTRFS info (device loop3): force clearing of disk cache [ 124.051407][ T5201] BTRFS info (device loop3): doing ref verification [ 124.058006][ T5201] BTRFS info (device loop3): enabling ssd optimizations [ 124.065749][ T5201] BTRFS info (device loop3): using spread ssd allocation scheme [ 124.073452][ T5201] BTRFS info (device loop3): setting nodatacow, compression disabled [ 124.081574][ T5201] BTRFS info (device loop3): has skinny extents [ 124.087852][ T5201] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 124.214587][ T5201] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 124.844707][ T5222] netlink: 'syz.1.230': attribute type 12 has an invalid length. [ 125.330018][ T5201] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 125.393564][ T5201] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 125.427746][ T5201] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 125.450288][ T5201] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 125.450668][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 125.503350][ T5201] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 125.533180][ T5201] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 125.545147][ T5232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 125.568622][ T5201] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 125.587914][ T5232] device syz_tun entered promiscuous mode [ 125.597684][ T5201] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 125.655703][ T5201] BTRFS info (device loop3): clearing free space tree [ 125.663503][ T5201] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.673178][ T5201] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.696905][ T5201] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 125.708348][ T5201] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 125.719828][ T5201] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 125.731530][ T5201] BTRFS info (device loop3): scrub: started on devid 1 [ 125.740221][ T5201] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 125.747673][ T5201] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 125.755825][ T5201] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 125.769434][ T5201] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 125.778030][ T5201] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 125.785730][ T5201] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 125.793459][ T5201] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 125.801997][ T5201] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 125.872120][ T5201] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 126.267814][ T4184] Bluetooth: hci4: link tx timeout [ 126.273208][ T4184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.344646][ T26] audit: type=1800 audit(1745319117.284:6): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.234" name="/" dev="fuse" ino=1 res=0 errno=0 [ 126.557964][ T5273] loop1: detected capacity change from 0 to 256 [ 126.653596][ T4181] Bluetooth: hci4: link tx timeout [ 126.658767][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.690311][ T4181] Bluetooth: hci4: link tx timeout [ 126.695487][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.869534][ T4181] Bluetooth: hci4: link tx timeout [ 126.875166][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.029818][ T4181] Bluetooth: hci4: link tx timeout [ 127.035075][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.161673][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 127.623044][ T5294] loop2: detected capacity change from 0 to 64 [ 128.121011][ T4181] Bluetooth: hci4: link tx timeout [ 128.126785][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.313059][ T4348] Bluetooth: hci4: command 0x0406 tx timeout [ 128.859210][ T5308] netlink: 'syz.1.243': attribute type 12 has an invalid length. [ 129.537893][ T5304] sched: RT throttling activated [ 129.552315][ T4181] Bluetooth: hci4: link tx timeout [ 129.557439][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.889976][ T4181] Bluetooth: hci4: link tx timeout [ 130.898800][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.915904][ T5334] loop3: detected capacity change from 0 to 64 [ 131.088143][ T4181] Bluetooth: hci4: link tx timeout [ 131.093717][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.928606][ T5347] loop2: detected capacity change from 0 to 64 [ 132.140271][ T5339] loop0: detected capacity change from 0 to 40427 [ 132.229256][ T5339] F2FS-fs (loop0): Unrecognized mount option "barrier" or missing value [ 132.258152][ T5334] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=08adface) [ 132.463347][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.470053][ T4698] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 132.480515][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.568935][ T4698] Bluetooth: hci0: Injecting HCI hardware error event [ 132.591597][ T4181] Bluetooth: hci0: hardware error 0x00 [ 132.860654][ T4609] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 132.914165][ T5334] loop3: detected capacity change from 0 to 16 [ 133.023191][ T5334] erofs: (device loop3): mounted with root inode @ nid 36. [ 133.139230][ T4609] usb 2-1: Using ep0 maxpacket: 32 [ 133.289539][ T4609] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 133.302989][ T4609] usb 2-1: config 0 has no interface number 0 [ 133.351331][ T5360] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36 [ 133.361691][ T5360] erofs: (device loop3): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 133.371148][ T5360] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 133.380837][ T5360] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 133.390027][ T5360] attempt to access beyond end of device [ 133.390027][ T5360] loop3: rw=524288, want=312, limit=16 [ 133.401250][ T5360] attempt to access beyond end of device [ 133.401250][ T5360] loop3: rw=524288, want=1049280, limit=16 [ 133.413037][ T5360] attempt to access beyond end of device [ 133.413037][ T5360] loop3: rw=524288, want=6536, limit=16 [ 133.424268][ T5360] attempt to access beyond end of device [ 133.424268][ T5360] loop3: rw=524288, want=34359736344, limit=16 [ 133.436966][ T5360] attempt to access beyond end of device [ 133.436966][ T5360] loop3: rw=524288, want=24, limit=16 [ 133.448050][ T5360] attempt to access beyond end of device [ 133.448050][ T5360] loop3: rw=524288, want=736, limit=16 [ 133.519318][ T5360] attempt to access beyond end of device [ 133.519318][ T5360] loop3: rw=524288, want=536576872, limit=16 [ 133.823663][ T4609] usb 2-1: config 0 interface 12 has no altsetting 0 [ 134.043696][ T5367] loop3: detected capacity change from 0 to 1024 [ 134.053305][ T5364] capability: warning: `syz.0.262' uses 32-bit capabilities (legacy support in use) [ 134.079586][ T5368] overlayfs: missing 'lowerdir' [ 134.120473][ T4609] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 134.234758][ T4609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.263770][ T5367] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.307530][ T4609] usb 2-1: Product: syz [ 134.450781][ T4609] usb 2-1: Manufacturer: syz [ 134.566353][ T4609] usb 2-1: SerialNumber: syz [ 135.000124][ T4609] usb 2-1: config 0 descriptor?? [ 135.709383][ T4609] usb 2-1: can't set config #0, error -71 [ 135.749560][ T4609] usb 2-1: USB disconnect, device number 7 [ 135.823869][ T5353] loop2: detected capacity change from 0 to 32768 [ 137.865253][ T5410] loop1: detected capacity change from 0 to 64 [ 138.321765][ T5403] loop0: detected capacity change from 0 to 4096 [ 138.386810][ T5403] ntfs3: Unknown parameter 'windows_names' [ 138.553176][ T5416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 139.277546][ T5427] loop0: detected capacity change from 0 to 1024 [ 139.728065][ T5430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 139.769586][ T4282] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 139.843706][ T4282] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.883676][ T4184] Bluetooth: hci4: link tx timeout [ 139.888805][ T4184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.078632][ T4250] hfsplus: b-tree write err: -5, ino 4 [ 140.132689][ T4184] Bluetooth: hci4: link tx timeout [ 140.137817][ T4184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.413641][ T5445] loop1: detected capacity change from 0 to 1024 [ 141.149215][ T5452] netlink: 'syz.4.279': attribute type 12 has an invalid length. [ 142.258731][ T5433] loop2: detected capacity change from 0 to 64 [ 142.309277][ T4348] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.532899][ T4184] Bluetooth: hci4: link tx timeout [ 142.538117][ T4184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.589376][ T4348] usb 1-1: Using ep0 maxpacket: 8 [ 142.949451][ T4348] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 142.963148][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.971356][ T4348] usb 1-1: Product: syz [ 142.975587][ T4348] usb 1-1: Manufacturer: syz [ 142.980772][ T4348] usb 1-1: SerialNumber: syz [ 142.996431][ T4348] usb 1-1: config 0 descriptor?? [ 143.026669][ T5474] loop2: detected capacity change from 0 to 1024 [ 143.124291][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.140105][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.166230][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.181776][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.201915][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.215823][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.234493][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.241990][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.261090][ T4348] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 143.281659][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.297643][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.314487][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.329937][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.349140][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.357537][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.369948][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.377734][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.389943][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.467774][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.552931][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.574332][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.598199][ T5478] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.622616][ T5478] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.816795][ T4181] Bluetooth: hci4: link tx timeout [ 143.822025][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.920779][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.966749][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 143.992116][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 144.001768][ T5475] hfsplus: request for non-existent node 33423360 in B*Tree [ 144.648356][ T4181] Bluetooth: hci4: link tx timeout [ 144.653502][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.672217][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 144.688237][ T5474] hfsplus: request for non-existent node 33423360 in B*Tree [ 144.689279][ T4348] gspca_sunplus: reg_w_riv err -71 [ 144.701531][ T4348] sunplus: probe of 1-1:0.0 failed with error -71 [ 144.710518][ T4348] usb 1-1: USB disconnect, device number 6 [ 145.225216][ T5491] loop2: detected capacity change from 0 to 32768 [ 145.265632][ T5491] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.290 (5491) [ 145.311644][ T5491] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 145.320369][ T5491] BTRFS info (device loop2): disabling free space tree [ 145.327258][ T5491] BTRFS info (device loop2): turning on async discard [ 145.334168][ T5491] BTRFS info (device loop2): force clearing of disk cache [ 145.341339][ T5491] BTRFS info (device loop2): doing ref verification [ 145.347930][ T5491] BTRFS info (device loop2): enabling ssd optimizations [ 145.354866][ T5491] BTRFS info (device loop2): using spread ssd allocation scheme [ 145.362602][ T5491] BTRFS info (device loop2): setting nodatacow, compression disabled [ 145.370706][ T5491] BTRFS info (device loop2): has skinny extents [ 145.376992][ T5491] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 145.412819][ T5491] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 145.433226][ T5491] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 145.497007][ T5491] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 145.508810][ T5491] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 145.718123][ T5502] loop0: detected capacity change from 0 to 32768 [ 145.753344][ T5491] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 145.799530][ T5502] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.291 (5502) [ 145.839497][ T5491] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 145.856725][ T5491] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 145.876397][ T5491] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 145.890737][ T5502] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 145.899428][ T5502] BTRFS info (device loop0): using free space tree [ 145.905911][ T5502] BTRFS info (device loop0): has skinny extents [ 145.988512][ T5491] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 146.110869][ T5491] BTRFS info (device loop2): clearing free space tree [ 146.117703][ T5491] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.128234][ T5491] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.225811][ T5502] BTRFS info (device loop0): enabling ssd optimizations [ 146.476642][ T5491] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 146.487888][ T5491] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 146.499346][ T5491] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 146.511162][ T5491] BTRFS info (device loop2): scrub: started on devid 1 [ 146.691499][ T5491] BTRFS info (device loop2): left=0, need=98304, flags=2 [ 146.698675][ T5491] BTRFS info (device loop2): space_info 2 has 0 free, is not full [ 146.706607][ T5491] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 146.720241][ T5491] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 146.728877][ T5491] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 146.736589][ T5491] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 146.744776][ T5491] BTRFS info (device loop2): delayed_block_rsv: size 32768 reserved 32768 [ 146.753314][ T5491] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 146.935031][ T5491] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 147.494749][ T5565] loop1: detected capacity change from 0 to 64 [ 148.281596][ T4181] Bluetooth: hci4: link tx timeout [ 148.287132][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.343825][ T5590] loop0: detected capacity change from 0 to 32768 [ 149.361579][ T5592] netlink: 'syz.1.302': attribute type 12 has an invalid length. [ 149.960978][ T4181] Bluetooth: hci4: link tx timeout [ 149.966683][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 149.997023][ T4181] Bluetooth: hci4: link tx timeout [ 150.003537][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.032714][ T5590] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.298 (5590) [ 150.078841][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 150.089248][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 150.096955][ T5590] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.105680][ T5590] BTRFS info (device loop0): disabling free space tree [ 150.112604][ T5590] BTRFS info (device loop0): turning on async discard [ 150.119825][ T5590] BTRFS info (device loop0): force clearing of disk cache [ 150.126956][ T5590] BTRFS info (device loop0): doing ref verification [ 150.133574][ T5590] BTRFS info (device loop0): enabling ssd optimizations [ 150.140617][ T5590] BTRFS info (device loop0): using spread ssd allocation scheme [ 150.148267][ T5590] BTRFS info (device loop0): setting nodatacow, compression disabled [ 150.156514][ T5590] BTRFS info (device loop0): has skinny extents [ 150.162851][ T5590] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 150.180987][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.188812][ T5590] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 150.201791][ T4181] Bluetooth: hci4: link tx timeout [ 150.207009][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.207300][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.229212][ T5590] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 150.244870][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.253084][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.266311][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.274304][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.282680][ T5590] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 150.294200][ T5590] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 150.309290][ T5590] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 150.321536][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.329773][ T5590] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 150.341781][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.349525][ T5590] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 150.360572][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.368208][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.375978][ T5590] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 150.387790][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.395776][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.403715][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.411516][ T5590] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 150.423060][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.431408][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.439055][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.447689][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.455653][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.463653][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.471589][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.479546][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.487514][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.496272][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.505289][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.513053][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.521365][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.529985][ T4698] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 150.537712][ T5590] BTRFS info (device loop0): clearing free space tree [ 150.544554][ T5590] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.554248][ T5590] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.572181][ T4698] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 150.593908][ T5588] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 150.607942][ T5588] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 150.619870][ T5588] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 150.632485][ T5588] BTRFS info (device loop0): scrub: started on devid 1 [ 150.698438][ T5588] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 150.731174][ T5588] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 150.739673][ T5588] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 150.753401][ T5588] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 150.762025][ T5588] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 150.769684][ T5588] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 150.777316][ T5588] BTRFS info (device loop0): delayed_block_rsv: size 32768 reserved 32768 [ 150.785850][ T5588] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 150.807090][ T5588] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 151.756342][ T5641] "syz.4.309" (5641) uses obsolete ecb(arc4) skcipher [ 151.952315][ T5643] loop2: detected capacity change from 0 to 32768 [ 152.081640][ T5643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.311 (5643) [ 152.256506][ T5643] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 152.265238][ T5643] BTRFS info (device loop2): disabling free space tree [ 152.272707][ T5643] BTRFS info (device loop2): turning on async discard [ 152.279525][ T5643] BTRFS info (device loop2): force clearing of disk cache [ 152.286644][ T5643] BTRFS info (device loop2): doing ref verification [ 152.293297][ T5643] BTRFS info (device loop2): enabling ssd optimizations [ 152.300400][ T5643] BTRFS info (device loop2): using spread ssd allocation scheme [ 152.308132][ T5643] BTRFS info (device loop2): setting nodatacow, compression disabled [ 152.316332][ T5643] BTRFS info (device loop2): has skinny extents [ 152.322886][ T5643] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 152.563886][ T5643] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 152.641059][ T5643] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 152.840603][ T5643] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 152.893478][ T5643] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 152.952767][ T5643] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 153.019333][ T5643] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 153.039432][ T5643] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 153.236741][ T5643] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 153.616616][ T5673] loop0: detected capacity change from 0 to 64 [ 153.653849][ T5643] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 153.705096][ T5643] BTRFS info (device loop2): clearing free space tree [ 153.712087][ T5643] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.721837][ T5643] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.752133][ T5643] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 153.763525][ T5643] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 153.774977][ T5643] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 153.786661][ T5643] BTRFS info (device loop2): scrub: started on devid 1 [ 153.819259][ T5643] BTRFS info (device loop2): left=0, need=98304, flags=2 [ 153.826352][ T5643] BTRFS info (device loop2): space_info 2 has 0 free, is not full [ 153.834240][ T5643] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 153.847866][ T5643] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 153.856538][ T5643] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 153.864199][ T5643] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 153.871868][ T5643] BTRFS info (device loop2): delayed_block_rsv: size 32768 reserved 32768 [ 153.880579][ T5643] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 154.073314][ T5686] loop1: detected capacity change from 0 to 512 [ 154.102574][ T5643] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 154.711614][ T5686] EXT4-fs (loop1): Ignoring removed nobh option [ 154.717950][ T5686] EXT4-fs (loop1): Unrecognized mount option "rootcontext=root" or missing value [ 155.002415][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.028884][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.074946][ T5690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 155.555557][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.737135][ T5707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.325'. [ 157.186296][ T4184] Bluetooth: hci2: unknown advertising packet type: 0x72 [ 157.186371][ T4184] Bluetooth: hci2: unknown advertising packet type: 0x30 [ 157.193871][ T4184] Bluetooth: hci2: unknown advertising packet type: 0x6b [ 157.296208][ T5721] loop3: detected capacity change from 0 to 64 [ 158.126850][ T5722] loop2: detected capacity change from 0 to 32768 [ 158.172053][ T5722] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.321 (5722) [ 158.236875][ T5722] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 158.245652][ T5722] BTRFS info (device loop2): disabling free space tree [ 158.252629][ T5722] BTRFS info (device loop2): turning on async discard [ 158.259443][ T5722] BTRFS info (device loop2): force clearing of disk cache [ 158.266585][ T5722] BTRFS info (device loop2): doing ref verification [ 158.273304][ T5722] BTRFS info (device loop2): enabling ssd optimizations [ 158.280333][ T5722] BTRFS info (device loop2): using spread ssd allocation scheme [ 158.287991][ T5722] BTRFS info (device loop2): setting nodatacow, compression disabled [ 158.296116][ T5722] BTRFS info (device loop2): has skinny extents [ 158.302627][ T5722] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 158.359629][ T5722] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 158.389538][ T5722] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 158.511524][ T5722] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 158.653691][ T5722] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 158.670121][ T5722] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 158.751425][ T5741] loop3: detected capacity change from 0 to 64 [ 159.423785][ T5722] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 159.439373][ T5722] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 159.459241][ T5722] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 159.527660][ T5722] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 160.207185][ T5722] BTRFS info (device loop2): clearing free space tree [ 160.214148][ T5722] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.223838][ T5722] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 161.010371][ T5763] netlink: 'syz.3.335': attribute type 12 has an invalid length. [ 163.074688][ T5787] loop0: detected capacity change from 0 to 64 [ 164.417015][ T5796] loop1: detected capacity change from 0 to 32768 [ 164.646007][ T5800] loop0: detected capacity change from 0 to 64 [ 164.673824][ T5796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.348 (5796) [ 165.069723][ T4184] Bluetooth: hci4: link tx timeout [ 165.074868][ T4184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.227400][ T5804] ptrace attach of "./syz-executor exec"[4169] was attempted by "./syz-executor exec"[5804] [ 165.242213][ T5796] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.250952][ T5796] BTRFS info (device loop1): disabling free space tree [ 165.257875][ T5796] BTRFS info (device loop1): turning on async discard [ 165.264744][ T5796] BTRFS info (device loop1): force clearing of disk cache [ 165.271894][ T5796] BTRFS info (device loop1): doing ref verification [ 165.279050][ T5796] BTRFS info (device loop1): enabling ssd optimizations [ 165.286045][ T5796] BTRFS info (device loop1): using spread ssd allocation scheme [ 165.293751][ T5796] BTRFS info (device loop1): setting nodatacow, compression disabled [ 165.301867][ T5796] BTRFS info (device loop1): has skinny extents [ 165.308142][ T5796] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 166.130744][ T5796] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 166.165615][ T5796] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 166.446354][ T5824] netlink: 9 bytes leftover after parsing attributes in process `syz.3.352'. [ 167.096297][ T5796] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 167.125820][ T5796] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 167.237194][ T5796] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 167.249585][ T5796] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 167.261517][ T5796] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 167.272640][ T5796] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 167.284944][ T5796] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 168.235197][ T5796] BTRFS error (device loop1): open_ctree failed: -12 [ 172.015710][ T5862] loop1: detected capacity change from 0 to 32768 [ 172.154509][ T5862] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.360 (5862) [ 172.293217][ T5864] loop2: detected capacity change from 0 to 64 [ 172.340402][ T5867] overlayfs: failed to clone upperpath [ 172.680296][ T5862] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 172.689335][ T5862] BTRFS info (device loop1): disabling free space tree [ 172.696236][ T5862] BTRFS info (device loop1): turning on async discard [ 172.703080][ T5862] BTRFS info (device loop1): force clearing of disk cache [ 172.710217][ T5862] BTRFS info (device loop1): doing ref verification [ 172.716792][ T5862] BTRFS info (device loop1): enabling ssd optimizations [ 172.723775][ T5862] BTRFS info (device loop1): using spread ssd allocation scheme [ 172.731437][ T5862] BTRFS info (device loop1): setting nodatacow, compression disabled [ 172.739545][ T5862] BTRFS info (device loop1): has skinny extents [ 172.745804][ T5862] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 172.761752][ T5862] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 172.958685][ T5862] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 173.327206][ T5862] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 173.464565][ T5862] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 173.484957][ T5862] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 174.372545][ T5862] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 174.537416][ T5896] loop2: detected capacity change from 0 to 32768 [ 174.545114][ T5862] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 174.606367][ T5862] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 174.723668][ T5896] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.369 (5896) [ 174.810049][ T5862] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 175.525521][ T5905] loop3: detected capacity change from 0 to 64 [ 175.674227][ T5862] BTRFS error (device loop1): open_ctree failed: -12 [ 175.674341][ T4452] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4452) [ 176.091634][ T5917] loop3: detected capacity change from 0 to 64 [ 176.459271][ T4337] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.889271][ T4337] usb 1-1: Using ep0 maxpacket: 16 [ 177.040130][ T4337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 177.163315][ T5939] loop2: detected capacity change from 0 to 164 [ 177.249312][ T4337] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.283084][ T4337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.294147][ T4337] usb 1-1: Product: syz [ 177.298395][ T4337] usb 1-1: Manufacturer: syz [ 177.303513][ T4337] usb 1-1: SerialNumber: syz [ 177.322618][ T4337] usb 1-1: config 0 descriptor?? [ 177.383171][ T4337] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.417706][ T4337] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 177.477316][ T5941] loop3: detected capacity change from 0 to 32768 [ 177.601835][ T5941] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 177.610674][ T5941] BTRFS info (device loop3): disabling free space tree [ 177.617573][ T5941] BTRFS info (device loop3): turning on async discard [ 177.624387][ T5941] BTRFS info (device loop3): force clearing of disk cache [ 177.631568][ T5941] BTRFS info (device loop3): doing ref verification [ 177.638166][ T5941] BTRFS info (device loop3): enabling ssd optimizations [ 177.645161][ T5941] BTRFS info (device loop3): using spread ssd allocation scheme [ 177.652877][ T5941] BTRFS info (device loop3): setting nodatacow, compression disabled [ 177.660986][ T5941] BTRFS info (device loop3): has skinny extents [ 177.667726][ T5941] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 177.798851][ T5941] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 177.820683][ T5941] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 177.840040][ T5944] loop2: detected capacity change from 0 to 32768 [ 177.877191][ T5951] batman_adv: batadv0: Adding interface: ip6gretap1 [ 177.884511][ T5951] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.910451][ T5941] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 177.924680][ T5944] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.383 (5944) [ 177.953604][ T5941] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 177.970029][ T4378] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4378) [ 177.991937][ T5941] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 178.007393][ T5941] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 178.029203][ T5941] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 178.056166][ T5941] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 178.097045][ T5951] batman_adv: batadv0: Interface activated: ip6gretap1 [ 178.104404][ T4337] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 178.126409][ T5941] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 178.208090][ T5965] loop2: detected capacity change from 0 to 8 [ 179.648595][ T5941] BTRFS info (device loop3): clearing free space tree [ 179.650048][ T5965] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 179.655509][ T5941] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.671802][ T5941] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.701604][ T5961] cramfs: Error -5 while decompressing! [ 179.707611][ T5961] cramfs: ffffffff96bbb268(26)->ffff8880538a6000(4096) [ 179.714975][ T5961] cramfs: Error -3 while decompressing! [ 179.720635][ T5961] cramfs: ffffffff96bbb282(26)->ffff8880538a7000(4096) [ 179.727494][ T5961] cramfs: Error -3 while decompressing! [ 179.733062][ T5961] cramfs: ffffffff96bbb29c(16)->ffff8880538a8000(4096) [ 179.740328][ T5961] cramfs: Error -5 while decompressing! [ 179.746314][ T5961] cramfs: ffffffff96bbb268(26)->ffff8880538a6000(4096) [ 179.768679][ T4337] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 179.779499][ T5941] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 179.790738][ T5941] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 179.802188][ T5941] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 179.813864][ T5941] BTRFS info (device loop3): scrub: started on devid 1 [ 179.826826][ T5941] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 179.833983][ T5941] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 179.841861][ T5941] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 179.855476][ T5941] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 179.864114][ T5941] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 179.871781][ T5941] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 179.879452][ T5941] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 179.887958][ T5941] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 179.968164][ T5971] loop0: detected capacity change from 0 to 512 [ 179.974903][ T4337] em28xx 1-1:0.0: board has no eeprom [ 179.999934][ T5941] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 180.385077][ T5971] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.449147][ T4337] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 180.536872][ T4337] em28xx 1-1:0.0: dvb set to bulk mode. [ 180.786919][ T4337] usb 1-1: USB disconnect, device number 7 [ 180.794243][ T4337] em28xx 1-1:0.0: Disconnecting em28xx [ 180.823353][ T1325] em28xx 1-1:0.0: Binding DVB extension [ 180.831605][ T5971] EXT4-fs (loop0): 1 truncate cleaned up [ 180.837256][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 181.054048][ T5971] syz.0.386 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 181.105040][ T5994] syz.0.386 (pid 5994) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 181.241139][ T1325] em28xx 1-1:0.0: Registering input extension [ 181.248316][ T4337] em28xx 1-1:0.0: Closing input extension [ 181.265796][ T5971] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 181.430474][ T4337] em28xx 1-1:0.0: Freeing device [ 181.713509][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 181.736683][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 181.973562][ T1325] Bluetooth: hci2: command 0x0406 tx timeout [ 182.522354][ T6010] loop0: detected capacity change from 0 to 32768 [ 182.545320][ T6003] netlink: 'syz.1.396': attribute type 16 has an invalid length. [ 182.564434][ T6003] netlink: 'syz.1.396': attribute type 17 has an invalid length. [ 182.587827][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.595308][ T6003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.608066][ T6003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.599129][ T6010] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.397 (6010) [ 184.214052][ T6010] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 184.223286][ T6010] BTRFS info (device loop0): disabling free space tree [ 184.230293][ T6010] BTRFS info (device loop0): turning on async discard [ 184.237062][ T6010] BTRFS info (device loop0): force clearing of disk cache [ 184.244243][ T6010] BTRFS info (device loop0): doing ref verification [ 184.250855][ T6010] BTRFS info (device loop0): enabling ssd optimizations [ 184.257798][ T6010] BTRFS info (device loop0): using spread ssd allocation scheme [ 184.265526][ T6010] BTRFS info (device loop0): setting nodatacow, compression disabled [ 184.273629][ T6010] BTRFS info (device loop0): has skinny extents [ 184.279935][ T6010] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 184.300167][ T6010] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 184.319232][ T6010] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 184.420444][ T6018] loop1: detected capacity change from 0 to 32768 [ 184.447700][ T6010] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 184.459462][ T6010] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 184.474154][ T6010] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 184.489045][ T6018] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.400 (6018) [ 184.489291][ T6010] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 184.521083][ T6010] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 184.533616][ T6023] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.546114][ T6010] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 184.561421][ T6010] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 184.718672][ T6010] BTRFS info (device loop0): clearing free space tree [ 184.725798][ T6010] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.736109][ T6010] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 185.007338][ T6010] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 185.018582][ T6010] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 185.029966][ T6010] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 185.041868][ T6010] BTRFS info (device loop0): scrub: started on devid 1 [ 185.566710][ T6010] BTRFS info (device loop0): left=0, need=98304, flags=2 [ 185.573873][ T6010] BTRFS info (device loop0): space_info 2 has 0 free, is not full [ 185.581825][ T6010] BTRFS info (device loop0): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 185.595455][ T6010] BTRFS info (device loop0): global_block_rsv: size 851968 reserved 851968 [ 185.604100][ T6010] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 185.611760][ T6010] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 185.619396][ T6010] BTRFS info (device loop0): delayed_block_rsv: size 32768 reserved 32768 [ 185.627881][ T6010] BTRFS info (device loop0): delayed_refs_rsv: size 0 reserved 0 [ 185.650712][ T6010] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 185.899802][ T6051] loop1: detected capacity change from 0 to 64 [ 186.310540][ T6056] loop3: detected capacity change from 0 to 512 [ 186.461854][ T6056] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.574376][ T6057] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 186.645352][ T6056] EXT4-fs (loop3): 1 truncate cleaned up [ 186.651571][ T6056] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 186.811988][ T26] audit: type=1800 audit(1745319177.754:7): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.404" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 187.190313][ T6079] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 188.020517][ T6082] loop1: detected capacity change from 0 to 1024 [ 188.198106][ T6085] loop3: detected capacity change from 0 to 32768 [ 188.272626][ T6085] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.412 (6085) [ 188.410639][ T6085] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 188.420304][ T6085] BTRFS info (device loop3): disabling free space tree [ 188.427254][ T6085] BTRFS info (device loop3): turning on async discard [ 188.434167][ T6085] BTRFS info (device loop3): force clearing of disk cache [ 188.441380][ T6085] BTRFS info (device loop3): doing ref verification [ 188.448006][ T6085] BTRFS info (device loop3): enabling ssd optimizations [ 188.455064][ T6085] BTRFS info (device loop3): using spread ssd allocation scheme [ 188.462801][ T6085] BTRFS info (device loop3): setting nodatacow, compression disabled [ 188.470929][ T6085] BTRFS info (device loop3): has skinny extents [ 188.477246][ T6085] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 188.495259][ T6093] loop0: detected capacity change from 0 to 64 [ 188.512616][ T6085] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 188.534482][ T6085] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 188.777495][ T6097] loop1: detected capacity change from 0 to 32768 [ 188.973952][ T6085] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 189.143906][ T6097] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.415 (6097) [ 189.279332][ T6085] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 189.301748][ T4452] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (4452) [ 189.309249][ T6085] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 189.840207][ T6085] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 189.989101][ T6085] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 190.019273][ T6085] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 190.068068][ T6085] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 190.719181][ T6124] netlink: 'syz.1.417': attribute type 12 has an invalid length. [ 191.599520][ T6085] BTRFS error (device loop3): open_ctree failed: -12 [ 192.268019][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.424'. [ 192.749022][ T6144] loop3: detected capacity change from 0 to 32768 [ 192.878392][ T6144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.428 (6144) [ 192.942201][ T6144] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 192.950873][ T6144] BTRFS info (device loop3): disabling free space tree [ 192.957734][ T6144] BTRFS info (device loop3): turning on async discard [ 192.964608][ T6144] BTRFS info (device loop3): force clearing of disk cache [ 192.971783][ T6144] BTRFS info (device loop3): doing ref verification [ 192.978355][ T6144] BTRFS info (device loop3): enabling ssd optimizations [ 192.985306][ T6144] BTRFS info (device loop3): using spread ssd allocation scheme [ 192.993082][ T6144] BTRFS info (device loop3): setting nodatacow, compression disabled [ 193.001165][ T6144] BTRFS info (device loop3): has skinny extents [ 193.007437][ T6144] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 193.332990][ T6144] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 193.355364][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 193.360238][ T6144] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 193.769568][ T6144] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 193.784975][ T6144] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 193.810742][ T6144] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 193.929476][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.938087][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.968412][ T6144] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 193.990549][ T6171] loop2: detected capacity change from 0 to 64 [ 194.002685][ T6144] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 194.043324][ T6144] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 194.059411][ T6144] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 194.241135][ T6144] BTRFS info (device loop3): clearing free space tree [ 194.248013][ T6144] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 194.258372][ T6144] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 195.659573][ T6144] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 195.670845][ T6144] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 195.682322][ T6144] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 195.694544][ T6144] BTRFS info (device loop3): scrub: started on devid 1 [ 195.717744][ T6144] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 195.724888][ T6144] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 195.732736][ T6144] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 195.746527][ T6144] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 195.755444][ T6144] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 195.763157][ T6144] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 195.770843][ T6144] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 195.779387][ T6144] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 195.853226][ T6197] loop2: detected capacity change from 0 to 64 [ 195.909351][ T6144] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 196.267895][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 196.822165][ T6209] loop2: detected capacity change from 0 to 64 [ 196.880988][ T4184] Bluetooth: hci4: link tx timeout [ 196.886180][ T4184] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 196.909761][ T4184] Bluetooth: hci4: link tx timeout [ 196.914969][ T4184] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.115927][ T4161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4161) [ 197.189701][ T6217] netlink: 'syz.4.443': attribute type 12 has an invalid length. [ 198.723589][ T6227] loop2: detected capacity change from 0 to 32768 [ 198.773124][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'. [ 198.939485][ T4348] Bluetooth: hci4: command 0x0406 tx timeout [ 199.038952][ T6238] tmpfs: Unknown parameter 'usrquota' [ 199.058663][ T6238] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.067934][ T6238] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 199.732042][ T6237] loop1: detected capacity change from 0 to 8 [ 200.330967][ T6248] loop0: detected capacity change from 0 to 64 [ 201.020954][ T6251] futex_wake_op: syz.3.453 tries to shift op by -33; fix this program [ 201.513744][ T6252] loop2: detected capacity change from 0 to 32768 [ 201.636958][ T6261] loop1: detected capacity change from 0 to 64 [ 202.035429][ T6270] loop2: detected capacity change from 0 to 8 [ 202.739848][ T6270] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 202.758820][ T6267] cramfs: Error -5 while decompressing! [ 202.764428][ T6267] cramfs: ffffffff96bbf268(26)->ffff8880722a9000(4096) [ 202.778592][ T6267] cramfs: Error -3 while decompressing! [ 202.784244][ T6267] cramfs: ffffffff96bbf282(26)->ffff888072360000(4096) [ 202.791174][ T6267] cramfs: Error -3 while decompressing! [ 202.796749][ T6267] cramfs: ffffffff96bbf29c(16)->ffff888072361000(4096) [ 202.803753][ T6267] cramfs: Error -5 while decompressing! [ 202.809356][ T6267] cramfs: ffffffff96bbf268(26)->ffff8880722a9000(4096) [ 203.196588][ T6280] loop1: detected capacity change from 0 to 32768 [ 203.263420][ T6282] netlink: 'syz.0.465': attribute type 12 has an invalid length. [ 204.244689][ T6286] loop2: detected capacity change from 0 to 64 [ 205.128561][ T6300] loop1: detected capacity change from 0 to 64 [ 206.412005][ T6318] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 206.511024][ T6313] loop3: detected capacity change from 0 to 32768 [ 206.712600][ T6313] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 206.721427][ T6313] BTRFS info (device loop3): disabling free space tree [ 206.728469][ T6313] BTRFS info (device loop3): turning on async discard [ 206.735325][ T6313] BTRFS info (device loop3): force clearing of disk cache [ 206.742496][ T6313] BTRFS info (device loop3): doing ref verification [ 206.749596][ T6313] BTRFS info (device loop3): enabling ssd optimizations [ 206.756533][ T6313] BTRFS info (device loop3): using spread ssd allocation scheme [ 206.764253][ T6313] BTRFS info (device loop3): setting nodatacow, compression disabled [ 206.772332][ T6313] BTRFS info (device loop3): has skinny extents [ 206.778586][ T6313] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 206.832566][ T6313] workqueue: max_active 16777219 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 206.879303][ T6313] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 207.123078][ T6313] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 207.144641][ T6313] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 207.173385][ T6335] loop1: detected capacity change from 0 to 32768 [ 207.185984][ T6313] workqueue: max_active 16777219 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512 [ 207.204529][ T6313] workqueue: max_active 16777219 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 207.219651][ T6313] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 207.236441][ T6313] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 207.291394][ T6335] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.482 (6335) [ 207.360971][ T6313] workqueue: max_active 16777219 requested for btrfs-readahead is out of range, clamping between 1 and 512 [ 207.849848][ T6313] BTRFS info (device loop3): clearing free space tree [ 207.856675][ T6313] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 207.866450][ T6313] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 207.915112][ T6313] workqueue: max_active 16777219 requested for btrfs-scrub is out of range, clamping between 1 and 512 [ 207.926973][ T6313] workqueue: max_active 16777219 requested for btrfs-scrubwrc is out of range, clamping between 1 and 512 [ 207.938642][ T6313] workqueue: max_active 16777219 requested for btrfs-scrubparity is out of range, clamping between 1 and 512 [ 207.950581][ T6313] BTRFS info (device loop3): scrub: started on devid 1 [ 207.962046][ T6313] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 207.969165][ T6313] BTRFS info (device loop3): space_info 2 has 0 free, is not full [ 207.977539][ T6313] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 207.991181][ T6313] BTRFS info (device loop3): global_block_rsv: size 851968 reserved 851968 [ 207.999799][ T6313] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 208.007457][ T6313] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 208.015177][ T6313] BTRFS info (device loop3): delayed_block_rsv: size 32768 reserved 32768 [ 208.023725][ T6313] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 208.258348][ T6313] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0 [ 208.383649][ T6367] loop1: detected capacity change from 0 to 64 [ 209.814489][ T6387] ================================================================== [ 209.822913][ T6387] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 209.832124][ T6387] Read of size 1 at addr ffff888060d22600 by task syz.1.493/6387 [ 209.839885][ T6387] [ 209.842209][ T6387] CPU: 0 PID: 6387 Comm: syz.1.493 Not tainted 5.15.180-syzkaller #0 [ 209.850273][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.860326][ T6387] Call Trace: [ 209.863623][ T6387] [ 209.866549][ T6387] dump_stack_lvl+0x1e3/0x2d0 [ 209.871252][ T6387] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 209.876891][ T6387] ? _printk+0xd1/0x120 [ 209.881051][ T6387] ? __wake_up_klogd+0xcc/0x100 [ 209.885908][ T6387] ? panic+0x860/0x860 [ 209.889982][ T6387] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 209.895474][ T6387] print_address_description+0x63/0x3b0 [ 209.901070][ T6387] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 209.907574][ T6387] kasan_report+0x16b/0x1c0 [ 209.912087][ T6387] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 209.918604][ T6387] xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 209.924935][ T6387] ? __lock_acquire+0x1ff0/0x1ff0 [ 209.930028][ T6387] xfrm_policy_inexact_insert_node+0x8e7/0xb00 [ 209.936214][ T6387] xfrm_policy_inexact_alloc_chain+0x604/0xe20 [ 209.942392][ T6387] ? xfrm_policy_inexact_insert+0xea/0x13c0 [ 209.948304][ T6387] xfrm_policy_inexact_insert+0xea/0x13c0 [ 209.954024][ T6387] ? do_raw_spin_lock+0x14a/0x370 [ 209.959082][ T6387] ? __bpf_trace_softirq+0x10/0x10 [ 209.964210][ T6387] ? __rwlock_init+0x140/0x140 [ 209.968973][ T6387] ? init_timer_key+0x17c/0x2d0 [ 209.973831][ T6387] ? policy_hash_bysel+0x12c/0x7c0 [ 209.978948][ T6387] xfrm_policy_insert+0xe6/0x930 [ 209.983895][ T6387] xfrm_add_policy+0x4f7/0x9b0 [ 209.988675][ T6387] ? xfrm_dump_sa_done+0xd0/0xd0 [ 209.993650][ T6387] ? apparmor_capable+0x12e/0x190 [ 209.998688][ T6387] ? __nla_parse+0x3c/0x50 [ 210.003116][ T6387] xfrm_user_rcv_msg+0x632/0x960 [ 210.008062][ T6387] ? xfrm_netlink_rcv+0x90/0x90 [ 210.012943][ T6387] ? __mutex_lock_common+0x444/0x25a0 [ 210.018324][ T6387] ? __copy_skb_header+0x47b/0x600 [ 210.023449][ T6387] netlink_rcv_skb+0x1cf/0x410 [ 210.028220][ T6387] ? xfrm_netlink_rcv+0x90/0x90 [ 210.033090][ T6387] ? netlink_ack+0xb10/0xb10 [ 210.037704][ T6387] xfrm_netlink_rcv+0x75/0x90 [ 210.042511][ T6387] netlink_unicast+0x7c0/0x990 [ 210.047292][ T6387] ? netlink_detachskb+0x90/0x90 [ 210.052232][ T6387] ? __virt_addr_valid+0x3bb/0x460 [ 210.057360][ T6387] ? 0xffffffff81000000 [ 210.061519][ T6387] ? __check_object_size+0x300/0x410 [ 210.066805][ T6387] ? bpf_lsm_netlink_send+0x5/0x10 [ 210.071922][ T6387] netlink_sendmsg+0xa30/0xd60 [ 210.076745][ T6387] ? netlink_getsockopt+0x5b0/0x5b0 [ 210.081946][ T6387] ? futex_wait+0x634/0x740 [ 210.086456][ T6387] ? aa_sock_msg_perm+0x91/0x150 [ 210.091399][ T6387] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 210.096697][ T6387] ? security_socket_sendmsg+0x7d/0xa0 [ 210.102171][ T6387] ? netlink_getsockopt+0x5b0/0x5b0 [ 210.107383][ T6387] ____sys_sendmsg+0x59e/0x8f0 [ 210.112160][ T6387] ? __sys_sendmsg_sock+0x30/0x30 [ 210.117200][ T6387] ? import_iovec+0x77/0xa0 [ 210.121720][ T6387] ___sys_sendmsg+0x252/0x2e0 [ 210.126408][ T6387] ? __sys_sendmsg+0x260/0x260 [ 210.131249][ T6387] ? __fdget+0x191/0x220 [ 210.135504][ T6387] __se_sys_sendmsg+0x19a/0x260 [ 210.140369][ T6387] ? __x64_sys_sendmsg+0x80/0x80 [ 210.145322][ T6387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.151317][ T6387] ? lockdep_hardirqs_on+0x94/0x130 [ 210.156551][ T6387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.162535][ T6387] do_syscall_64+0x3b/0x80 [ 210.167008][ T6387] ? clear_bhb_loop+0x15/0x70 [ 210.171701][ T6387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.177604][ T6387] RIP: 0033:0x7f58ac1e8169 [ 210.182037][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.201647][ T6387] RSP: 002b:00007f58aa050038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.210076][ T6387] RAX: ffffffffffffffda RBX: 00007f58ac40ffa0 RCX: 00007f58ac1e8169 [ 210.218054][ T6387] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 210.226034][ T6387] RBP: 00007f58ac26aa68 R08: 0000000000000000 R09: 0000000000000000 [ 210.234049][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.242027][ T6387] R13: 0000000000000000 R14: 00007f58ac40ffa0 R15: 00007ffdd6b58488 [ 210.250018][ T6387] [ 210.253036][ T6387] [ 210.255359][ T6387] Allocated by task 6387: [ 210.259737][ T6387] ____kasan_kmalloc+0xba/0xf0 [ 210.264530][ T6387] __kmalloc+0x168/0x300 [ 210.268780][ T6387] sk_prot_alloc+0xe0/0x200 [ 210.273285][ T6387] sk_alloc+0x35/0x310 [ 210.277338][ T6387] pfkey_create+0xda/0x580 [ 210.281738][ T6387] __sock_create+0x460/0x8f0 [ 210.286308][ T6387] __sys_socket+0x132/0x370 [ 210.290793][ T6387] __x64_sys_socket+0x76/0x80 [ 210.295455][ T6387] do_syscall_64+0x3b/0x80 [ 210.299875][ T6387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.305754][ T6387] [ 210.308060][ T6387] Last potentially related work creation: [ 210.313747][ T6387] kasan_save_stack+0x36/0x60 [ 210.318403][ T6387] kasan_record_aux_stack+0xba/0x100 [ 210.323667][ T6387] call_rcu+0x1c4/0xa70 [ 210.327823][ T6387] netlink_release+0x14e4/0x1980 [ 210.332741][ T6387] sock_close+0xcd/0x230 [ 210.336971][ T6387] __fput+0x3fe/0x8e0 [ 210.340933][ T6387] task_work_run+0x129/0x1a0 [ 210.345520][ T6387] exit_to_user_mode_loop+0x106/0x130 [ 210.350878][ T6387] exit_to_user_mode_prepare+0xb1/0x140 [ 210.356400][ T6387] syscall_exit_to_user_mode+0x5d/0x240 [ 210.361924][ T6387] do_syscall_64+0x47/0x80 [ 210.366327][ T6387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.372203][ T6387] [ 210.374507][ T6387] The buggy address belongs to the object at ffff888060d22000 [ 210.374507][ T6387] which belongs to the cache kmalloc-2k of size 2048 [ 210.388563][ T6387] The buggy address is located 1536 bytes inside of [ 210.388563][ T6387] 2048-byte region [ffff888060d22000, ffff888060d22800) [ 210.402001][ T6387] The buggy address belongs to the page: [ 210.407612][ T6387] page:ffffea0001834800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60d20 [ 210.417749][ T6387] head:ffffea0001834800 order:3 compound_mapcount:0 compound_pincount:0 [ 210.426058][ T6387] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 210.434061][ T6387] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888017442000 [ 210.442626][ T6387] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 210.451194][ T6387] page dumped because: kasan: bad access detected [ 210.457624][ T6387] page_owner tracks the page as allocated [ 210.463487][ T6387] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4176, ts 56021331162, free_ts 13594531237 [ 210.482561][ T6387] get_page_from_freelist+0x3b78/0x3d40 [ 210.488092][ T6387] __alloc_pages+0x272/0x700 [ 210.492671][ T6387] new_slab+0xbb/0x4b0 [ 210.496719][ T6387] ___slab_alloc+0x6f6/0xe10 [ 210.501287][ T6387] __kmalloc_track_caller+0x1c7/0x300 [ 210.506647][ T6387] kmemdup+0x21/0x50 [ 210.510521][ T6387] neigh_sysctl_register+0xb0/0x530 [ 210.515703][ T6387] addrconf_sysctl_register+0xac/0x190 [ 210.521155][ T6387] ipv6_add_dev+0xc9b/0x1180 [ 210.525746][ T6387] addrconf_notify+0x697/0xf40 [ 210.530498][ T6387] raw_notifier_call_chain+0xd0/0x170 [ 210.535855][ T6387] register_netdevice+0x128e/0x16a0 [ 210.541044][ T6387] nsim_create+0x329/0x3e0 [ 210.545453][ T6387] __nsim_dev_port_add+0x6de/0xb90 [ 210.550559][ T6387] nsim_dev_port_add_all+0x35/0x110 [ 210.555744][ T6387] nsim_dev_probe+0x752/0x9f0 [ 210.560405][ T6387] page last free stack trace: [ 210.565077][ T6387] free_unref_page_prepare+0xc34/0xcf0 [ 210.570532][ T6387] free_unref_page+0x95/0x2d0 [ 210.575206][ T6387] free_contig_range+0x95/0xf0 [ 210.579959][ T6387] destroy_args+0xfe/0x980 [ 210.584356][ T6387] debug_vm_pgtable+0x40d/0x470 [ 210.589188][ T6387] do_one_initcall+0x22b/0x7a0 [ 210.593956][ T6387] do_initcall_level+0x157/0x210 [ 210.598877][ T6387] do_initcalls+0x49/0x90 [ 210.603210][ T6387] kernel_init_freeable+0x425/0x5c0 [ 210.608388][ T6387] kernel_init+0x19/0x290 [ 210.612699][ T6387] ret_from_fork+0x1f/0x30 [ 210.617096][ T6387] [ 210.619402][ T6387] Memory state around the buggy address: [ 210.625049][ T6387] ffff888060d22500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 210.633108][ T6387] ffff888060d22580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 210.641147][ T6387] >ffff888060d22600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.649183][ T6387] ^ [ 210.653228][ T6387] ffff888060d22680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.661298][ T6387] ffff888060d22700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 210.669336][ T6387] ================================================================== [ 210.677388][ T6387] Disabling lock debugging due to kernel taint [ 210.683643][ T6387] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 210.690830][ T6387] CPU: 0 PID: 6387 Comm: syz.1.493 Tainted: G B 5.15.180-syzkaller #0 [ 210.700303][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.710338][ T6387] Call Trace: [ 210.713599][ T6387] [ 210.716513][ T6387] dump_stack_lvl+0x1e3/0x2d0 [ 210.721187][ T6387] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.726807][ T6387] ? panic+0x860/0x860 [ 210.730866][ T6387] panic+0x318/0x860 [ 210.734743][ T6387] ? check_panic_on_warn+0x1d/0xa0 [ 210.739845][ T6387] ? fb_is_primary_device+0xd0/0xd0 [ 210.745098][ T6387] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 210.751009][ T6387] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 210.756885][ T6387] ? _raw_spin_unlock+0x40/0x40 [ 210.761724][ T6387] check_panic_on_warn+0x7e/0xa0 [ 210.766642][ T6387] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 210.773133][ T6387] end_report+0x6d/0xf0 [ 210.777276][ T6387] kasan_report+0x18e/0x1c0 [ 210.781778][ T6387] ? xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 210.788264][ T6387] xfrm_policy_inexact_list_reinsert+0x5b5/0x660 [ 210.794609][ T6387] ? __lock_acquire+0x1ff0/0x1ff0 [ 210.799627][ T6387] xfrm_policy_inexact_insert_node+0x8e7/0xb00 [ 210.805802][ T6387] xfrm_policy_inexact_alloc_chain+0x604/0xe20 [ 210.811947][ T6387] ? xfrm_policy_inexact_insert+0xea/0x13c0 [ 210.817850][ T6387] xfrm_policy_inexact_insert+0xea/0x13c0 [ 210.823582][ T6387] ? do_raw_spin_lock+0x14a/0x370 [ 210.828587][ T6387] ? __bpf_trace_softirq+0x10/0x10 [ 210.833704][ T6387] ? __rwlock_init+0x140/0x140 [ 210.838461][ T6387] ? init_timer_key+0x17c/0x2d0 [ 210.843319][ T6387] ? policy_hash_bysel+0x12c/0x7c0 [ 210.848427][ T6387] xfrm_policy_insert+0xe6/0x930 [ 210.853447][ T6387] xfrm_add_policy+0x4f7/0x9b0 [ 210.858194][ T6387] ? xfrm_dump_sa_done+0xd0/0xd0 [ 210.863133][ T6387] ? apparmor_capable+0x12e/0x190 [ 210.868173][ T6387] ? __nla_parse+0x3c/0x50 [ 210.872588][ T6387] xfrm_user_rcv_msg+0x632/0x960 [ 210.877528][ T6387] ? xfrm_netlink_rcv+0x90/0x90 [ 210.882457][ T6387] ? __mutex_lock_common+0x444/0x25a0 [ 210.887812][ T6387] ? __copy_skb_header+0x47b/0x600 [ 210.892932][ T6387] netlink_rcv_skb+0x1cf/0x410 [ 210.897680][ T6387] ? xfrm_netlink_rcv+0x90/0x90 [ 210.902510][ T6387] ? netlink_ack+0xb10/0xb10 [ 210.907102][ T6387] xfrm_netlink_rcv+0x75/0x90 [ 210.911759][ T6387] netlink_unicast+0x7c0/0x990 [ 210.916517][ T6387] ? netlink_detachskb+0x90/0x90 [ 210.921436][ T6387] ? __virt_addr_valid+0x3bb/0x460 [ 210.926554][ T6387] ? 0xffffffff81000000 [ 210.930693][ T6387] ? __check_object_size+0x300/0x410 [ 210.935961][ T6387] ? bpf_lsm_netlink_send+0x5/0x10 [ 210.941064][ T6387] netlink_sendmsg+0xa30/0xd60 [ 210.945847][ T6387] ? netlink_getsockopt+0x5b0/0x5b0 [ 210.951148][ T6387] ? futex_wait+0x634/0x740 [ 210.955637][ T6387] ? aa_sock_msg_perm+0x91/0x150 [ 210.960588][ T6387] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 210.965860][ T6387] ? security_socket_sendmsg+0x7d/0xa0 [ 210.971305][ T6387] ? netlink_getsockopt+0x5b0/0x5b0 [ 210.976483][ T6387] ____sys_sendmsg+0x59e/0x8f0 [ 210.981230][ T6387] ? __sys_sendmsg_sock+0x30/0x30 [ 210.986274][ T6387] ? import_iovec+0x77/0xa0 [ 210.990788][ T6387] ___sys_sendmsg+0x252/0x2e0 [ 210.995465][ T6387] ? __sys_sendmsg+0x260/0x260 [ 211.000224][ T6387] ? __fdget+0x191/0x220 [ 211.004447][ T6387] __se_sys_sendmsg+0x19a/0x260 [ 211.009310][ T6387] ? __x64_sys_sendmsg+0x80/0x80 [ 211.014240][ T6387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 211.020202][ T6387] ? lockdep_hardirqs_on+0x94/0x130 [ 211.025384][ T6387] ? syscall_enter_from_user_mode+0x2e/0x240 [ 211.031352][ T6387] do_syscall_64+0x3b/0x80 [ 211.035754][ T6387] ? clear_bhb_loop+0x15/0x70 [ 211.040422][ T6387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.046303][ T6387] RIP: 0033:0x7f58ac1e8169 [ 211.050735][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.070421][ T6387] RSP: 002b:00007f58aa050038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.078826][ T6387] RAX: ffffffffffffffda RBX: 00007f58ac40ffa0 RCX: 00007f58ac1e8169 [ 211.086812][ T6387] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 211.094809][ T6387] RBP: 00007f58ac26aa68 R08: 0000000000000000 R09: 0000000000000000 [ 211.102782][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.110736][ T6387] R13: 0000000000000000 R14: 00007f58ac40ffa0 R15: 00007ffdd6b58488 [ 211.118694][ T6387] [ 211.122042][ T6387] Kernel Offset: disabled [ 211.126361][ T6387] Rebooting in 86400 seconds..