last executing test programs: 2m51.750225814s ago: executing program 4 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x3, {0x6, 0xac, 0x26}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf}]}]}, 0x74}}, 0x0) 2m51.511055138s ago: executing program 4 (id=612): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x201cfeac}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000005240)=""/4123, 0x101b}], 0x1}, 0x4ca7}], 0x2, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m51.199572714s ago: executing program 4 (id=614): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008000100000000000800020000000000080003"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 2m50.966099185s ago: executing program 4 (id=617): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x14fc, &(0x7f0000001540)="$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") mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000002480)='./file0\x00', 0x0, 0x104000, 0x0) 2m50.624843483s ago: executing program 4 (id=621): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) write$binfmt_script(r1, 0x0, 0x0) 2m50.136090675s ago: executing program 32 (id=526): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r2 = dup(r1) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) fallocate(r2, 0x10, 0x0, 0x400) 2m50.131136942s ago: executing program 4 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m49.512483065s ago: executing program 33 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m14.626090469s ago: executing program 7 (id=881): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x2}, 0x1c) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) listen(r0, 0x4) 2m14.475637999s ago: executing program 7 (id=882): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000100), 0x3ff, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x42041) syz_usb_disconnect(r0) 2m12.03805921s ago: executing program 7 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0103000000470000000027"], 0x14}}, 0x0) 2m11.770185919s ago: executing program 7 (id=903): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0xfffffffe, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) 2m11.575007268s ago: executing program 7 (id=907): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m11.157572811s ago: executing program 7 (id=911): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m56.086000428s ago: executing program 34 (id=911): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m39.161427562s ago: executing program 5 (id=1098): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x62, @multicast2, 0x4e23, 0x2, 'sed\x00', 0x0, 0x45, 0x6b}, 0x2c) 1m39.113790318s ago: executing program 5 (id=1099): syz_mount_image$hfsplus(&(0x7f00000008c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nls=iso8859-4,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="0000000061746f3631ff00"/25], 0xff, 0x6db, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m38.778280028s ago: executing program 5 (id=1103): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m37.683180487s ago: executing program 5 (id=1112): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000240)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {}, {@barrier_val}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1m37.09943182s ago: executing program 5 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m36.58121297s ago: executing program 5 (id=1126): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast1, 0x40}, 0x1c) 1m36.252541147s ago: executing program 35 (id=1126): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast1, 0x40}, 0x1c) 46.503125458s ago: executing program 3 (id=1595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 46.327507746s ago: executing program 3 (id=1599): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 46.024851096s ago: executing program 3 (id=1604): pipe2$9p(&(0x7f0000000000), 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) 45.83934886s ago: executing program 3 (id=1606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000540)={[{@jqfmt_vfsv0}]}, 0x1, 0x439, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r0 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 45.363759562s ago: executing program 3 (id=1609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000001c0)={r2, r3/1000+60000}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 43.038178484s ago: executing program 3 (id=1636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 42.652868174s ago: executing program 36 (id=1636): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 27.00235902s ago: executing program 2 (id=1768): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000002c0)='./file1\x00', 0x808050, &(0x7f0000000040)={[{@nolargeio}, {@usrquota}, {@noalign}, {@lazytime}, {@ikeep}, {@lazytime}, {@noalign}]}, 0x1, 0x9925, &(0x7f000001ca40)="$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") creat(&(0x7f0000005540)='./bus\x00', 0x8a) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000240), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 26.137954634s ago: executing program 2 (id=1778): r0 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000740), 0x4) 25.882532187s ago: executing program 2 (id=1780): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 24.118770747s ago: executing program 2 (id=1798): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) 23.854259361s ago: executing program 2 (id=1803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f00000002c0)='\\/\xb7\x92P\xdf\x8d>Y\x87`\xb8\xd9\x93\xbf\xa2\x1a\xac\xbb\xc2\xce\xfe\xeb\xa1\x86\xd9\xd5\xa9Q\xc3\xdb\xab\xa44\xb1\xb9\xa5\xc0*\xa3:\x82Y\x9f\xf4\xbb\xf6\x8e\x9b \xbe}\xb4(3\x91\xa0\xf5\xd1\xab\x19Q7h\xbd\x81\x9d\xe8\x1d\xec\xb1Y\x1bO\xf3)J+\xd6\a3\xa5\xb1`\xebd\xd4q\xab0\xd3\r\x148PP\xe7\\\x96\xf0\x1fX\xc0\x0f\xec\x03\xe3<\x96\x83\x8f\xacS\x03\xc7\xd1!\xef\x16_H\xe7\x1e]\x06\xa4\x04-\x8b\xc2e0\x1aE\x1c\xbf\x86K!\xf0\x19\xbb=,\x1c\xebh\x1d\xf2\xd3v\xd3PU\x8f\xdb\xd8\xde\xfc\x9a/\x80f\xda\x7f\xb1\xa5a', 0x0) 23.498689482s ago: executing program 2 (id=1807): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b031407e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 17.878942722s ago: executing program 1 (id=1865): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='a') 14.659487707s ago: executing program 1 (id=1883): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 13.683708709s ago: executing program 1 (id=1891): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 2.575671584s ago: executing program 9 (id=1967): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440), 0xfe, 0x24d, &(0x7f0000000840)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.497900954s ago: executing program 8 (id=1968): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@noenospc_debug}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)={0xe, {0x1, 0xe, 0x3}}, 0xc) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000880)={0x0, 0xfffffffeffc}) 2.108312641s ago: executing program 6 (id=1969): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) truncate(&(0x7f0000000040)='./file1\x00', 0x1bfc) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2.033689233s ago: executing program 9 (id=1970): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="01400000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="24002d80"], 0x40}}, 0x0) 1.643548753s ago: executing program 9 (id=1971): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffefc}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x40420f00}}}, 0x90) 1.525674871s ago: executing program 9 (id=1972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 1.179159115s ago: executing program 8 (id=1973): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.051474932s ago: executing program 6 (id=1974): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f00000034c0)={[{@umask={'umask', 0x3d, 0x8b5}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@uid}, {@part={'part', 0x3d, 0x3}}, {@dir_umask={'dir_umask', 0x3d, 0x800a}}, {@umask={'umask', 0x3d, 0x2}}, {@type={'type', 0x3d, "66dc3f23"}}, {@file_umask={'file_umask', 0x3d, 0x3}}]}, 0x3, 0x322, &(0x7f0000000600)="$eJzs3U1r1E4cB/DvZDfbzb+l/9hWCh6rBU+lrQdFBEWKF9+ABynWNoXSWMFWsIK4ehbxJggevXkWfQt6Ed+AnnoonvRSPBiZmTxuZ9Ld7UNa9vuB7m428/CbJJPM7LINiKhvXZ/7/u7ClvwTLoAagMuAA6AJ1AGcxnjz4drGykYYLJUVVFM55J+Azil2pVlcC0xZZT6VI+bLpTqG8u/R4YiiKPqxZ6pfRxILVUfovr+LAwzEvVOtbx55ZIejpdvVX3J7WOxgB48wXGU4RERUvfj678RXiaF4/O44wGQ8Dj/p1//C+GanujiOhfT67+jlSMjt879alc331BRO7n0nmSWayjIeE1G2uRvQR1ZhB4i9ZpUqFsdbXgmDqZYq4DmuxnLJxtTjEpKGKLZoG/ppwjA3LVHW9nKDqg2ubINriX+06xo/beO1ubr5Lx3EJD6Lr2Je+HiDpXT8V4+E3Dhq+/iAl8+g45+2l6ha6etUhVZm8/dTqpIzyR74+D5rpWfbrk3UZCwmshTRPn73kzhfNey5MILixwq6dTP21qlco8Zcs+nyH2OusfZc3rIbBlOL98PSj1IOjHFGJ16KW2ICP/EBc7nxvyNTT8LeMwu9XKiU8ZFR2p66SmnZjwWqA9/rqmeScsO4o8u9wF1cwvD65uPVhTAMHlT/IukqxyQefSDGh6N8Rz7n0qApX7gADqzSv1EUGVfVcZANtMXsqqZefJs2WZ1mW3pxf5WipbdhbtU1e+LstCnfSc4IvdT+NM0lrxbdZP8d176+aT4gRS7CxuEekElVhVU1DHTUU7weKr35ZHUh7P6UQidPttMxfnv7StXh0NGT4y6h53+5+cq0OuvIB79kNhLtVXiuxBnLDGhEPf7X2QwuLdY6ThxMXoTBbNmc6+x54FxbjQ6SGp+1F+vHceI4fitp/CrDK8sh5vANd/j5PxERERERERERERERERERERERERHRSdPtrxF6+TlBscatPvzHG0RERERERERERERERERERERERERERERE+5O7/y9QU3eMaVR+/99aB/f/Te5LQUQ9+xcAAP//GmNcVw==") syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35a, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b80), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 788.3961ms ago: executing program 9 (id=1975): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 591.62513ms ago: executing program 8 (id=1976): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{&(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) 517.058489ms ago: executing program 9 (id=1977): syz_mount_image$ext4(&(0x7f0000001100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 516.133856ms ago: executing program 6 (id=1978): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 391.996009ms ago: executing program 8 (id=1979): r0 = io_uring_setup(0x19ad, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) 364.373575ms ago: executing program 6 (id=1980): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x800442d2, &(0x7f0000000080)={'macsec0\x00', @dev}) 271.559203ms ago: executing program 6 (id=1981): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000dc0)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b6967335", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a000000001800000000000000170100000400000006020000004000001800000000000000170100000300000001"], 0x60}], 0x1, 0x8001) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000005c0)=""/3, 0x3}], 0x1}, 0x4aa2}], 0x1, 0x21, 0x0) 239.896783ms ago: executing program 6 (id=1982): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000580)="ff", 0x1}], 0x1, 0x870002, 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x3}) 0s ago: executing program 8 (id=1983): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, 0x400003, 0x4, 0x3) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x36b8, 0x100000001}) kernel console output (not intermixed with test programs): T5908] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.332819][ T9838] EXT4-fs (loop2): orphan cleanup on readonly fs [ 254.366377][ T5908] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 254.377072][ T9838] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.1293: Freeing blocks not in datazone - block = 0, count = 4096 [ 254.397589][ T9838] EXT4-fs (loop2): 1 orphan inode deleted [ 254.406738][ T9838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.416102][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.470266][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.648458][ T29] audit: type=1326 audit(1866095006.754:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9861 comm="syz.2.1312" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c1737e719 code=0x0 [ 254.690315][ T5908] usb 7-1: usb_control_msg returned -32 [ 254.720379][ T5908] usbtmc 7-1:16.0: can't read capabilities [ 254.722518][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1300'. [ 254.742335][ T5904] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.899094][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 254.969572][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.982614][ T9864] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.991539][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.001537][ T5904] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 255.017994][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.065432][ T5904] usb 1-1: config 0 descriptor?? [ 255.195967][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.202506][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.550140][ T5904] savu 0003:1E7D:2D5A.001E: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 255.598189][ T9907] loop2: detected capacity change from 0 to 256 [ 255.626092][ T9907] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 255.671975][ T9907] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 255.750127][ T5904] usb 1-1: USB disconnect, device number 14 [ 255.951960][ T9911] loop2: detected capacity change from 0 to 512 [ 256.016365][ T9911] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.034926][ T9899] loop3: detected capacity change from 0 to 32768 [ 256.072679][ T9911] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 256.106164][ T9911] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1313: Corrupt directory, running e2fsck is recommended [ 256.161161][ T9899] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 256.183676][ T9911] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 256.213652][ T9911] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1313: corrupted in-inode xattr: invalid ea_ino [ 256.258979][ T9911] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1313: couldn't read orphan inode 15 (err -117) [ 256.276785][ T9905] loop9: detected capacity change from 0 to 32768 [ 256.305457][ T9911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.341123][ T9911] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.376917][ T9911] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 256.380376][ T9909] loop8: detected capacity change from 0 to 32768 [ 256.394575][ T9911] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1313: Corrupt directory, running e2fsck is recommended [ 256.407971][ T9905] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 256.427801][ T9922] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.434197][ T5841] ocfs2: Unmounting device (7,3) on (node local) [ 256.440204][ T9922] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 256.457907][ T9922] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1313: Corrupt directory, running e2fsck is recommended [ 256.483633][ T9911] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.512442][ T9909] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1311 (9909) [ 256.547312][ T9905] XFS (loop9): Ending clean mount [ 256.574674][ T9905] XFS (loop9): Quotacheck needed: Please wait. [ 256.580992][ T9911] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 256.598557][ T9909] BTRFS info (device loop8): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 256.621878][ T9909] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 256.661767][ T9909] BTRFS info (device loop8): using free-space-tree [ 256.675723][ T9905] XFS (loop9): Quotacheck: Done. [ 256.697521][ T5904] usb 7-1: USB disconnect, device number 6 [ 256.702701][ T9911] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1313: Corrupt directory, running e2fsck is recommended [ 256.778689][ T9922] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 256.859076][ T9905] XFS (loop9): User initiated shutdown received. [ 256.869368][ T9905] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x110/0x160 (fs/xfs/xfs_fsops.c:445). Shutting down filesystem. [ 256.964784][ T9905] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 256.989523][ T9942] loop3: detected capacity change from 0 to 2048 [ 257.003382][ T9942] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.005773][ T9933] loop6: detected capacity change from 0 to 4096 [ 257.069518][ T9330] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 257.071702][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.153252][ T9942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.278490][ T8801] BTRFS info (device loop8): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 257.496143][ T9957] loop2: detected capacity change from 0 to 512 [ 257.538358][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.573360][ T9957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.583325][ T5908] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 257.587688][ T9957] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.773742][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.826306][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.838502][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 257.850145][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 257.861723][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.875042][ T5908] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.911468][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1317'. [ 257.953234][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.964154][ T5908] usb 1-1: config 0 descriptor?? [ 257.970934][ T9951] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 258.049588][ T9969] nbd: socks must be embedded in a SOCK_ITEM attr [ 258.402585][ T5946] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 258.476552][ T5908] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x1 [ 258.490695][ T5908] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 258.500170][ T5908] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 258.511397][ T5908] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 258.527983][ T5908] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 258.572400][ T5946] usb 10-1: Using ep0 maxpacket: 32 [ 258.586223][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.611459][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.626002][ T5946] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 258.626193][ T9991] binder: 9990:9991 ioctl c0306201 20000080 returned -22 [ 258.642481][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.644545][ T5946] usb 10-1: config 0 descriptor?? [ 258.754610][ T5962] usb 1-1: USB disconnect, device number 15 [ 259.116173][ T5946] savu 0003:1E7D:2D5A.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 259.246610][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1338'. [ 259.354517][T10002] loop6: detected capacity change from 0 to 128 [ 259.362701][T10002] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 259.374382][ T5946] usb 10-1: USB disconnect, device number 2 [ 259.411564][T10002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.802509][ T5946] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 259.974904][ T5946] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.001788][ T5946] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.032345][ T5946] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.061641][ T5946] usb 9-1: Product: syz [ 260.073227][T10022] loop9: detected capacity change from 0 to 8 [ 260.079401][ T5946] usb 9-1: Manufacturer: syz [ 260.092332][ T5946] usb 9-1: SerialNumber: syz [ 260.229727][ T9996] loop3: detected capacity change from 0 to 40427 [ 260.260892][ T9996] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 260.288704][ T9996] F2FS-fs (loop3): Image doesn't support compression [ 260.319963][ T9996] F2FS-fs (loop3): heap/no_heap options were deprecated [ 260.349284][ T9996] F2FS-fs (loop3): Image doesn't support compression [ 260.370587][ T9996] F2FS-fs (loop3): invalid crc value [ 260.391366][ T9996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.543307][ T9996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 260.602730][ T5908] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 260.782567][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 260.790031][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.801367][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.811583][ T5908] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 260.820850][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.831848][ T5908] usb 3-1: config 0 descriptor?? [ 260.987418][ T5841] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4f6/0x1ca0 [ 261.021851][ T5841] F2FS-fs (loop3): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 261.131743][ T5946] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 261.142273][ T5946] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 261.146880][T10020] loop6: detected capacity change from 0 to 40427 [ 261.149806][ T5946] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 261.165984][T10020] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 261.181781][T10020] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 261.213258][T10020] F2FS-fs (loop6): invalid crc value [ 261.251694][T10020] F2FS-fs (loop6): Found nat_bits in checkpoint [ 261.308537][ T5908] appleir 0003:05AC:8241.0021: unknown main item tag 0x0 [ 261.322426][ T5908] appleir 0003:05AC:8241.0021: unknown main item tag 0x0 [ 261.329534][ T5908] appleir 0003:05AC:8241.0021: unknown main item tag 0x0 [ 261.338152][ T5946] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 261.376832][ T5908] appleir 0003:05AC:8241.0021: unknown main item tag 0x0 [ 261.392440][ T5946] cdc_ncm 9-1:1.0 eth17: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 261.404843][T10020] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 261.412309][ T5908] appleir 0003:05AC:8241.0021: unknown main item tag 0x0 [ 261.422625][ T5908] appleir 0003:05AC:8241.0021: No inputs registered, leaving [ 261.452675][ T5908] appleir 0003:05AC:8241.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 261.467006][ T5946] usb 9-1: USB disconnect, device number 5 [ 261.478629][T10020] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 261.492349][T10020] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 261.503211][ T5946] cdc_ncm 9-1:1.0 eth17: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 261.594170][ T5908] usb 3-1: USB disconnect, device number 11 [ 262.010088][T10062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 262.052122][ T5904] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 262.204063][ T5904] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.213955][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.229063][ T5904] usb 1-1: config 0 descriptor?? [ 262.236927][ T5904] cp210x 1-1:0.0: cp210x converter detected [ 262.378590][T10057] loop9: detected capacity change from 0 to 32768 [ 262.403707][T10057] XFS: ikeep mount option is deprecated. [ 262.459100][T10057] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.542435][ T5962] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 262.608688][T10057] XFS (loop9): Ending clean mount [ 262.625719][T10057] XFS (loop9): Quotacheck needed: Please wait. [ 262.649910][ T5904] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 262.695621][ T5962] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 262.726443][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 262.735689][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.744545][T10057] XFS (loop9): Quotacheck: Done. [ 262.768659][ T5962] usb 9-1: config 0 descriptor?? [ 262.774339][ T47] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 262.828227][ T5962] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 262.865828][ T5904] usb 1-1: cp210x converter now attached to ttyUSB0 [ 262.890447][ T9330] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.990133][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 262.997711][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.018759][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.061652][ T5962] gp8psk: usb in 128 operation failed. [ 263.070168][ T5904] usb 1-1: USB disconnect, device number 16 [ 263.079400][ T5962] gp8psk: usb in 137 operation failed. [ 263.086538][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.094470][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.112733][ T47] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 263.123658][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.144511][ T5962] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 263.165516][ T47] usb 7-1: config 0 descriptor?? [ 263.170782][ T5904] cp210x 1-1:0.0: device disconnected [ 263.179923][ T5962] usb 9-1: media controller created [ 263.251227][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.301938][T10100] loop3: detected capacity change from 0 to 2048 [ 263.369301][ T5962] gp8psk_fe: Frontend attached [ 263.370149][T10100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.374530][ T5962] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 263.396780][ T5962] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 263.409587][T10107] loop9: detected capacity change from 0 to 1024 [ 263.455786][ T29] audit: type=1800 audit(1866095015.564:86): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1375" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 263.481059][ T29] audit: type=1800 audit(1866095015.584:87): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1375" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 263.501514][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.518322][ T5962] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 263.528179][ T5962] gp8psk: found Genpix USB device pID = 203 (hex) [ 263.539698][T10107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.576110][ T29] audit: type=1800 audit(1866095015.684:88): pid=10107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1372" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 263.576701][T10114] loop2: detected capacity change from 0 to 1024 [ 263.659706][ T47] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 263.691016][ T9330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.703780][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.764499][T10114] hfsplus: request for non-existent node 1280 in B*Tree [ 263.771779][T10114] hfsplus: request for non-existent node 1280 in B*Tree [ 263.841264][ T964] usb 9-1: USB disconnect, device number 6 [ 263.886318][T10120] loop3: detected capacity change from 0 to 1024 [ 263.963977][ T5946] usb 7-1: USB disconnect, device number 7 [ 263.996609][ T964] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 264.570030][T10152] netlink: 'syz.8.1395': attribute type 11 has an invalid length. [ 264.765916][T10154] loop6: detected capacity change from 0 to 4096 [ 264.792927][T10154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.826284][T10154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.988515][T10166] loop8: detected capacity change from 0 to 64 [ 265.037346][ T7803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.284804][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1405'. [ 265.610695][T10175] loop6: detected capacity change from 0 to 32768 [ 265.622704][T10175] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1402 (10175) [ 265.662556][ T964] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 265.789153][T10175] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 265.823181][T10189] netlink: 'syz.3.1411': attribute type 9 has an invalid length. [ 265.851528][ T964] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 265.865741][T10190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.875584][T10175] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 265.890256][ T964] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.910187][T10189] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1411'. [ 265.958176][ T964] usb 10-1: config 0 descriptor?? [ 265.996427][ T964] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 266.203863][T10175] BTRFS info (device loop6): rebuilding free space tree [ 266.213349][ T964] gp8psk: usb in 128 operation failed. [ 266.242522][ T964] gp8psk: usb in 137 operation failed. [ 266.260714][ T964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.288982][ T964] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 266.298188][T10175] BTRFS info (device loop6): disabling free space tree [ 266.308233][T10175] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 266.318129][ T964] usb 10-1: media controller created [ 266.353119][T10175] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 266.367501][ T964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.418288][ T964] gp8psk_fe: Frontend attached [ 266.430732][ T964] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 266.457580][ T964] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 266.554130][ T7803] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 266.596408][ T964] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 266.612467][ T964] gp8psk: found Genpix USB device pID = 203 (hex) [ 266.871166][ T5946] usb 10-1: USB disconnect, device number 3 [ 267.043951][ T5946] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 267.277810][T10237] loop2: detected capacity change from 0 to 1024 [ 267.369800][T10235] loop8: detected capacity change from 0 to 4096 [ 267.406486][T10243] loop3: detected capacity change from 0 to 128 [ 268.354367][T10239] loop6: detected capacity change from 0 to 32768 [ 268.567531][T10239] XFS (loop6): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 268.650945][T10249] loop2: detected capacity change from 0 to 32768 [ 268.664264][T10249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1431 (10249) [ 268.708106][T10249] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.749293][T10249] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 268.774182][T10249] BTRFS info (device loop2): using free-space-tree [ 268.926404][T10265] loop3: detected capacity change from 0 to 32768 [ 268.999431][T10239] XFS (loop6): Ending clean mount [ 269.002369][ T47] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 269.092954][T10265] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,background_compression=zstd,journal_flush_disabled,fsck,norecovery,reconstruct_alloc [ 269.122708][T10265] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 269.143037][T10265] bcachefs (loop3): Version upgrade required: [ 269.143037][T10265] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 269.143037][T10265] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 269.143037][T10265] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 269.214074][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.218187][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.234457][T10265] bcachefs (loop3): dropping and reconstructing all alloc info [ 269.257046][T10265] bcachefs (loop3): check_topology... done [ 269.268588][ T7803] XFS (loop6): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 269.281035][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.294686][T10265] bcachefs (loop3): accounting_read... [ 269.295148][ T47] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 269.317688][T10265] done [ 269.332461][T10265] bcachefs (loop3): alloc_read... done [ 269.338158][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.350411][T10265] bcachefs (loop3): stripes_read... done [ 269.362578][ T47] usb 1-1: config 0 descriptor?? [ 269.372693][T10265] bcachefs (loop3): snapshots_read... done [ 269.378703][T10265] bcachefs (loop3): check_allocations... [ 269.393504][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 269.553825][T10265] done [ 269.574925][T10265] bcachefs (loop3): going read-write [ 269.695298][T10265] bcachefs (loop3): done starting filesystem [ 269.758407][ T29] audit: type=1800 audit(1866095021.864:89): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1438" name="file1" dev="loop3" ino=536870912 res=0 errno=0 [ 269.872322][ T29] audit: type=1800 audit(1866095021.884:90): pid=10265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1438" name="file1" dev="loop3" ino=536870912 res=0 errno=0 [ 270.038075][T10265] syz.3.1438 (10265) used greatest stack depth: 13456 bytes left [ 270.140580][ T5841] bcachefs (loop3): shutting down [ 270.155697][ T5841] bcachefs (loop3): going read-only [ 270.184701][ T5841] bcachefs (loop3): finished waiting for writes to stop [ 270.210224][ T5841] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 270.226229][T10341] loop6: detected capacity change from 0 to 512 [ 270.233089][ T47] hid-led 0003:27B8:01ED.0023: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 270.257314][ T47] hid-led 0003:27B8:01ED.0023: ThingM blink(1) initialized [ 270.295772][T10341] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 270.343094][T10341] UDF-fs: Scanning with blocksize 512 failed [ 270.349999][T10345] loop8: detected capacity change from 0 to 512 [ 270.358012][T10341] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 270.385305][T10345] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 270.426700][T10341] UDF-fs: Scanning with blocksize 1024 failed [ 270.436859][ T5841] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13 [ 270.448236][T10345] EXT4-fs (loop8): 1 truncate cleaned up [ 270.453530][ T5946] usb 1-1: USB disconnect, device number 17 [ 270.472108][T10341] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 270.476762][T10345] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.480916][ T5841] bcachefs (loop3): unshutdown complete, journal seq 14 [ 270.499507][T10341] UDF-fs: Scanning with blocksize 2048 failed [ 270.526994][T10341] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 270.538013][ T5841] bcachefs (loop3): done going read-only, filesystem not clean [ 270.588311][ T8801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.600100][T10341] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.653529][ T5841] bcachefs (loop3): shutdown complete [ 270.677302][ T29] audit: type=1800 audit(1866095022.784:91): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1459" name="file1" dev="loop6" ino=26 res=0 errno=0 [ 270.720106][ T964] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 270.831346][T10356] netlink: 'syz.2.1464': attribute type 29 has an invalid length. [ 270.883711][T10356] netlink: 'syz.2.1464': attribute type 29 has an invalid length. [ 270.908259][ T964] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.924006][T10356] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1464'. [ 270.942558][T10356] unsupported nla_type 40 [ 270.942850][ T964] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.982427][ T964] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 271.002677][ T964] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.017090][ T964] usb 10-1: config 0 descriptor?? [ 271.287295][ T29] audit: type=1326 audit(1866095023.374:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.310186][ T29] audit: type=1326 audit(1866095023.374:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.333062][ T29] audit: type=1326 audit(1866095023.374:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.349985][T10354] loop8: detected capacity change from 0 to 32768 [ 271.355454][ T29] audit: type=1326 audit(1866095023.374:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.355504][ T29] audit: type=1326 audit(1866095023.374:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.407359][ T29] audit: type=1326 audit(1866095023.394:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.430783][ T29] audit: type=1326 audit(1866095023.394:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10364 comm="syz.2.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1737e719 code=0x7ffc0000 [ 271.456295][ T964] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 271.509290][ T964] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 271.532455][ T964] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 271.539455][ T964] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 271.553856][ T964] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 271.568884][ T964] lenovo 0003:17EF:6047.0024: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 271.597824][T10354] JBD2: Ignoring recovery information on journal [ 271.645614][T10367] loop2: detected capacity change from 0 to 4096 [ 271.932958][T10354] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 272.154543][ T8801] ocfs2: Unmounting device (7,8) on (node local) [ 272.328919][ T964] lenovo 0003:17EF:6047.0024: Sensitivity setting failed: -71 [ 272.346875][T10381] loop8: detected capacity change from 0 to 1024 [ 272.357390][ T964] usb 10-1: USB disconnect, device number 4 [ 272.632916][ T3429] hfsplus: b-tree write err: -5, ino 4 [ 272.722902][T10383] loop2: detected capacity change from 0 to 32768 [ 272.752556][T10383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1476 (10383) [ 272.781292][T10383] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.826753][T10383] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 272.843190][T10387] loop8: detected capacity change from 0 to 512 [ 272.850787][T10383] BTRFS info (device loop2): using free-space-tree [ 272.869044][T10387] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 272.921117][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1479'. [ 272.988578][T10387] EXT4-fs (loop8): 1 truncate cleaned up [ 272.995962][T10387] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.035317][T10402] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 273.613709][ T8801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.742900][ T25] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 273.758215][ T5839] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.962929][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.991615][T10421] loop9: detected capacity change from 0 to 32768 [ 273.992590][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.050283][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 274.062570][ T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 274.072089][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.086982][T10417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 274.095905][ T25] hub 7-1:1.0: bad descriptor, ignoring hub [ 274.101913][ T25] hub 7-1:1.0: probe with driver hub failed with error -5 [ 274.118142][T10421] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 274.143465][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 274.148715][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 274.164812][ T25] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 274.171247][ T25] cdc_wdm 7-1:1.0: Unknown control protocol [ 274.234690][T10421] XFS (loop9): Ending clean mount [ 274.432581][ T25] usb 7-1: USB disconnect, device number 8 [ 274.479635][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1493'. [ 274.506320][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.517107][ T9330] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 274.529120][T10448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.641666][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.674578][T10448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.920608][T10456] loop2: detected capacity change from 0 to 32768 [ 274.927971][T10456] XFS: ikeep mount option is deprecated. [ 274.934070][T10456] XFS: noikeep mount option is deprecated. [ 275.015283][T10456] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 275.038232][ T5946] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 275.109785][T10456] XFS (loop2): Ending clean mount [ 275.142384][ T964] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 275.149672][T10456] XFS (loop2): Quotacheck needed: Please wait. [ 275.226173][T10456] XFS (loop2): Quotacheck: Done. [ 275.231900][ T5946] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.254186][ T5946] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 275.293188][ T5946] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 275.296682][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 275.309206][ T5946] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 275.361609][T10473] loop8: detected capacity change from 0 to 256 [ 275.372331][ T964] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.382490][ T964] usb 10-1: config 0 interface 0 has no altsetting 0 [ 275.389769][T10473] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff4c, chksum : 0x5963e3b4, utbl_chksum : 0xe619d30d) [ 275.391120][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.450083][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 275.450104][ T29] audit: type=1800 audit(1866095027.554:110): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1501" name="file1" dev="loop8" ino=1048671 res=0 errno=0 [ 275.462738][T10417] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 275.502598][ T964] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.511835][ T964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.520323][ T964] usb 10-1: Product: syz [ 275.530459][ T964] usb 10-1: Manufacturer: syz [ 275.536574][ T5946] hub 7-1:1.0: bad descriptor, ignoring hub [ 275.542710][ T5946] hub 7-1:1.0: probe with driver hub failed with error -5 [ 275.550415][ T5946] cdc_wdm 7-1:1.0: skipping garbage [ 275.562391][ T964] usb 10-1: SerialNumber: syz [ 275.567207][ T5946] cdc_wdm 7-1:1.0: skipping garbage [ 275.583291][ T964] usb 10-1: config 0 descriptor?? [ 275.592579][ T964] usb 10-1: selecting invalid altsetting 0 [ 275.603471][ T5946] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 275.609426][ T5946] cdc_wdm 7-1:1.0: Unknown control protocol [ 275.803584][ T5946] usb 10-1: USB disconnect, device number 5 [ 276.047754][ T964] usb 7-1: USB disconnect, device number 9 [ 276.179305][T10471] loop3: detected capacity change from 0 to 32768 [ 276.218618][T10471] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 276.299653][T10471] XFS (loop3): Ending clean mount [ 276.323042][T10471] XFS (loop3): Quotacheck needed: Please wait. [ 276.511991][T10471] XFS (loop3): Quotacheck: Done. [ 276.806829][T10478] loop8: detected capacity change from 0 to 131072 [ 276.942152][T10478] F2FS-fs (loop8): Found nat_bits in checkpoint [ 277.024688][T10478] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 277.027294][ T5841] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 277.175420][T10511] loop9: detected capacity change from 0 to 16 [ 277.204830][T10511] erofs: (device loop9): mounted with root inode @ nid 36. [ 277.319578][T10517] syz.9.1515: attempt to access beyond end of device [ 277.319578][T10517] loop9: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 277.462490][T10511] syz.9.1515: attempt to access beyond end of device [ 277.462490][T10511] loop9: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 277.483357][T10521] netlink: 'syz.6.1519': attribute type 9 has an invalid length. [ 277.491513][T10521] netlink: 134660 bytes leftover after parsing attributes in process `syz.6.1519'. [ 277.759011][T10531] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 277.902706][ T5946] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 278.036764][T10541] tipc: Started in network mode [ 278.041845][T10541] tipc: Node identity ac1414aa, cluster identity 4711 [ 278.056095][T10541] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.086910][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 278.098972][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.100169][T10541] tipc: Enabled bearer , priority 10 [ 278.117475][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.143960][ T5946] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.194900][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.224509][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.265341][ T5946] usb 7-1: config 0 descriptor?? [ 278.286341][ T5946] hub 7-1:0.0: USB hub found [ 278.332313][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.472370][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.612386][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.620349][ T5946] hub 7-1:0.0: 1 port detected [ 278.752350][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.892436][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.032360][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.075977][T10568] loop3: detected capacity change from 0 to 128 [ 279.089833][T10568] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 279.108730][T10568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 279.175829][ T47] tipc: Node number set to 2886997162 [ 279.252543][ T5946] hub 7-1:0.0: activate --> -90 [ 279.307064][T10575] loop3: detected capacity change from 0 to 1024 [ 279.313627][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.447849][T10554] loop8: detected capacity change from 0 to 32768 [ 279.487456][ T53] hfsplus: b-tree write err: -5, ino 4 [ 279.582354][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.646400][ T47] usb 7-1: USB disconnect, device number 10 [ 279.663444][T10554] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 279.729236][T10554] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 279.754943][T10554] bcachefs (loop8): Version upgrade required: [ 279.754943][T10554] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 279.754943][T10554] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 279.754943][T10554] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 279.920326][T10554] bcachefs (loop8): dropping and reconstructing all alloc info [ 280.087029][T10592] loop2: detected capacity change from 0 to 32768 [ 280.097692][T10592] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1544 (10592) [ 280.111624][T10554] bcachefs (loop8): check_topology... done [ 280.128144][T10592] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.129154][T10554] bcachefs (loop8): accounting_read... [ 280.139054][T10592] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 280.158214][T10592] BTRFS info (device loop2): using free-space-tree [ 280.165850][T10554] done [ 280.178941][T10554] bcachefs (loop8): alloc_read... done [ 280.198950][T10554] bcachefs (loop8): stripes_read... done [ 280.218412][T10554] bcachefs (loop8): snapshots_read... done [ 280.231154][T10554] bcachefs (loop8): check_allocations... [ 280.501792][T10616] loop9: detected capacity change from 0 to 128 [ 280.648457][T10554] done [ 280.677488][T10554] bcachefs (loop8): going read-write [ 280.696702][T10554] bcachefs (loop8): done starting filesystem [ 280.763257][ T9878] kworker/u8:10: attempt to access beyond end of device [ 280.763257][ T9878] loop9: rw=1, sector=193, nr_sectors = 1 limit=128 [ 280.778341][ T9878] Buffer I/O error on dev loop9, logical block 193, lost async page write [ 280.878502][T10592] BTRFS info (device loop2): balance: start -f [ 280.900911][T10626] loop3: detected capacity change from 0 to 8 [ 280.936960][T10592] BTRFS info (device loop2): balance: ended with status: 0 [ 280.983804][ T8801] bcachefs (loop8): shutting down [ 281.034867][ T8801] bcachefs (loop8): going read-only [ 281.093588][ T8801] bcachefs (loop8): finished waiting for writes to stop [ 281.158932][ T5839] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.213812][ T8801] bcachefs (loop8): flushing journal and stopping allocators, journal seq 11 [ 281.390791][ T8801] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 14 [ 281.434621][ T8801] bcachefs (loop8): unshutdown complete, journal seq 15 [ 281.443906][ T8801] bcachefs (loop8): done going read-only, filesystem not clean [ 281.547422][ T8801] bcachefs (loop8): shutdown complete [ 281.905874][T10645] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 281.946484][T10645] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 281.958335][T10645] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 281.970871][T10645] bond1: (slave ipip0): making interface the new active one [ 281.980236][T10645] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 282.138875][ T5857] Bluetooth: hci6: sending frame failed (-49) [ 282.147616][ T5861] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 283.010118][T10642] loop6: detected capacity change from 0 to 40427 [ 283.036603][T10642] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 283.046265][T10642] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 283.156633][T10642] F2FS-fs (loop6): Found nat_bits in checkpoint [ 283.239952][T10688] loop9: detected capacity change from 0 to 16 [ 283.257192][T10642] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 283.262300][ C1] net_ratelimit: 3 callbacks suppressed [ 283.262317][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.265595][T10642] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 283.271824][T10688] erofs: (device loop9): mounted with root inode @ nid 36. [ 283.302489][ T5946] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 283.302489][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 283.330326][T10642] syz.6.1558: attempt to access beyond end of device [ 283.330326][T10642] loop6: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 283.365350][T10642] syz.6.1558: attempt to access beyond end of device [ 283.365350][T10642] loop6: rw=34817, sector=45096, nr_sectors = 32 limit=40427 [ 283.412786][ T964] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 283.472281][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 283.474719][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.479584][ T25] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 283.497688][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.507917][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.518241][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.524379][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.529638][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.554656][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.558361][ T7803] syz-executor: attempt to access beyond end of device [ 283.558361][ T7803] loop6: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 283.563791][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.589863][ T5946] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.606904][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.620261][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.631441][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.652507][ T7803] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 283.654439][ T964] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 283.668746][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.684289][ T5946] usb 3-1: config 0 descriptor?? [ 283.690568][ T964] usb 4-1: config 0 descriptor?? [ 283.802951][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 283.818783][ T25] usbtmc 1-1:16.0: can't read capabilities [ 283.926751][ T964] usbhid 4-1:0.0: can't add hid device: -71 [ 283.933511][ T964] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 283.947628][ T964] usb 4-1: USB disconnect, device number 12 [ 284.036766][ T47] usb 1-1: USB disconnect, device number 18 [ 284.121143][ T5946] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 284.133907][ T5946] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 284.302316][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 284.325025][T10710] @: renamed from vlan0 (while UP) [ 284.391511][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1586'. [ 284.829899][T10708] loop9: detected capacity change from 0 to 32768 [ 284.859879][T10708] XFS (loop9): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 284.910053][T10737] input: syz0 as /devices/virtual/input/input20 [ 284.928966][T10708] XFS (loop9): Ending clean mount [ 284.966022][T10708] XFS (loop9): Quotacheck needed: Please wait. [ 285.004235][ T47] usb 3-1: USB disconnect, device number 12 [ 285.051688][T10708] XFS (loop9): Quotacheck: Done. [ 285.119067][ T9330] XFS (loop9): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 285.173697][T10747] bridge0: port 3(gretap0) entered blocking state [ 285.216854][T10747] bridge0: port 3(gretap0) entered disabled state [ 285.240065][T10747] gretap0: entered allmulticast mode [ 285.278829][T10747] gretap0: entered promiscuous mode [ 285.291855][T10747] bridge0: port 3(gretap0) entered blocking state [ 285.298901][T10747] bridge0: port 3(gretap0) entered forwarding state [ 285.313042][T10749] gretap0: left allmulticast mode [ 285.318117][T10749] gretap0: left promiscuous mode [ 285.325140][T10749] bridge0: port 3(gretap0) entered disabled state [ 285.342345][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.512478][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 285.727877][T10764] loop3: detected capacity change from 0 to 512 [ 285.766545][ T25] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 285.776380][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.796591][T10764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 285.807890][ T25] usb 9-1: config 0 descriptor?? [ 285.825517][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 285.868501][T10764] EXT4-fs (loop3): 1 truncate cleaned up [ 285.875757][T10764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.923583][ T29] audit: type=1800 audit(1866095038.024:111): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1606" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 286.036735][ T25] gspca_spca508: reg_read err -32 [ 286.052758][ T25] gspca_spca508: reg_read err -32 [ 286.058298][ T25] gspca_spca508: reg_read err -32 [ 286.077043][ T25] gspca_spca508: reg_read err -32 [ 286.139151][ T5841] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /273/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 286.193790][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 286.260093][T10777] loop2: detected capacity change from 0 to 512 [ 286.267515][ T5841] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /273/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 286.289775][ T25] gspca_spca508: reg write: error -71 [ 286.296687][ T25] spca508 9-1:0.0: probe with driver spca508 failed with error -71 [ 286.305228][T10777] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 286.342093][ T25] usb 9-1: USB disconnect, device number 7 [ 286.343161][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 286.369706][T10777] EXT4-fs (loop2): invalid journal inode [ 286.377037][T10777] EXT4-fs (loop2): can't get journal size [ 286.382916][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.418094][T10753] loop6: detected capacity change from 0 to 32768 [ 286.426497][ T5841] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /273/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 286.470252][T10777] EXT4-fs (loop2): 1 truncate cleaned up [ 286.479375][T10777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.497412][T10753] gfs2: fsid=_dev_video#: Trying to join cluster "lock_nolock", "_dev_video#" [ 286.515718][T10753] gfs2: fsid=_dev_video#: Now mounting FS (format 1801)... [ 286.544211][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 286.623505][ T5841] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /273/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 286.655709][T10753] gfs2: fsid=_dev_video#.s: journal 0 mapped with 3 extents in 0ms [ 286.691636][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 286.741163][ T5841] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /273/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 286.843126][ T5841] EXT4-fs error (device loop3): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 286.897312][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.907546][T10753] gfs2: fsid=_dev_video#.s: first mount done, others may mount [ 287.422295][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.511278][T10785] loop9: detected capacity change from 0 to 40427 [ 287.701084][T10785] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 287.709794][T10785] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 287.758397][T10785] F2FS-fs (loop9): Found nat_bits in checkpoint [ 287.965145][T10785] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 287.979153][T10785] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 288.146919][T10825] loop8: detected capacity change from 0 to 1024 [ 288.177561][T10827] loop6: detected capacity change from 0 to 512 [ 288.326052][T10827] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1629: corrupted in-inode xattr: invalid ea_ino [ 288.356047][ T5841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.398170][T10827] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.1629: couldn't read orphan inode 15 (err -117) [ 288.416629][T10825] hfsplus: xattr searching failed [ 288.460631][T10827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.462542][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.616527][ T7803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.649251][ T1323] hfsplus: b-tree write err: -5, ino 3 [ 288.785706][ T3429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.961056][T10846] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 289.025992][ T3429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.229398][ T3429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.299062][T10852] batman_adv: batadv0: Adding interface: ip6gretap1 [ 289.323064][T10852] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.382302][ T5946] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 289.412293][T10852] batman_adv: batadv0: Interface activated: ip6gretap1 [ 289.502372][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.586776][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.599242][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.607854][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.616246][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.627543][ T5861] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 289.631271][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 289.635779][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.663673][ T5946] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 289.671811][ T5946] usb 7-1: config 0 has no interface number 0 [ 289.696100][ T5946] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 289.710110][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.724041][ T3429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.768773][ T5946] usb 7-1: Product: syz [ 289.802487][ T5946] usb 7-1: Manufacturer: syz [ 289.812379][ T5946] usb 7-1: SerialNumber: syz [ 289.833365][ T5946] usb 7-1: config 0 descriptor?? [ 289.873823][ T5946] smsc95xx v2.0.0 [ 290.290945][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 290.302323][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 290.378556][T10861] chnl_net:caif_netlink_parms(): no params data found [ 290.399386][T10888] loop8: detected capacity change from 0 to 256 [ 290.471620][T10888] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 290.492775][ T3429] bridge_slave_1: left allmulticast mode [ 290.510514][ T3429] bridge_slave_1: left promiscuous mode [ 290.522513][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.540313][ T29] audit: type=1800 audit(1866095042.644:112): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1654" name="file1" dev="loop8" ino=1048686 res=0 errno=0 [ 290.543991][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.614305][ T3429] bridge_slave_0: left allmulticast mode [ 290.622728][ T3429] bridge_slave_0: left promiscuous mode [ 290.628549][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.719169][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 290.745849][ T5946] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 290.764553][ T5946] usb 7-1: USB disconnect, device number 11 [ 290.925771][T10871] loop2: detected capacity change from 0 to 40427 [ 290.941899][T10901] overlayfs: failed to resolve './file0/../file0': -2 [ 290.966566][T10871] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 290.974953][T10871] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 291.025920][T10871] F2FS-fs (loop2): Found nat_bits in checkpoint [ 291.141229][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 291.177966][T10871] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 291.192298][T10871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 291.247257][T10871] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 291.312447][T10871] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 291.518878][ T3429] bond1 (unregistering): (slave ipip0): Releasing backup interface [ 291.584386][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 291.682710][T10920] F2FS-fs (loop2): Inconsistent i_blocks, ino:8, iblocks:0, sectors:8 [ 291.742549][ T5861] Bluetooth: hci5: command tx timeout [ 292.622285][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.794067][T10932] loop9: detected capacity change from 0 to 32768 [ 292.858714][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.888311][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.918433][ T3429] bond0 (unregistering): Released all slaves [ 292.940523][ T3429] bond1 (unregistering): Released all slaves [ 293.063636][T10942] tipc: Started in network mode [ 293.068821][T10942] tipc: Node identity 4, cluster identity 4711 [ 293.086985][T10942] tipc: Node number set to 4 [ 293.569770][T10861] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.578987][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.632858][T10861] bridge_slave_0: entered allmulticast mode [ 293.662301][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 293.663546][T10861] bridge_slave_0: entered promiscuous mode [ 293.727207][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.767648][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.787595][T10861] bridge_slave_1: entered allmulticast mode [ 293.807879][T10861] bridge_slave_1: entered promiscuous mode [ 293.822512][ T5857] Bluetooth: hci5: command tx timeout [ 294.128441][ T3429] hsr_slave_0: left promiscuous mode [ 294.160494][ T3429] hsr_slave_1: left promiscuous mode [ 294.171067][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.179888][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.194934][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.202651][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.289222][ T3429] veth1_macvtap: left promiscuous mode [ 294.294967][ T3429] veth0_macvtap: left promiscuous mode [ 294.300578][ T3429] veth1_vlan: left promiscuous mode [ 294.306133][ T3429] veth0_vlan: left promiscuous mode [ 294.314668][T10970] loop8: detected capacity change from 0 to 32768 [ 294.338662][T10970] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1685 (10970) [ 294.423902][T10970] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.442504][T10970] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 294.464649][T10970] BTRFS info (device loop8): using free-space-tree [ 294.521407][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 294.702287][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.005927][ T8801] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.040012][ T3429] team0 (unregistering): Port device vlan0 removed [ 295.442719][ T5857] Bluetooth: hci6: command 0x1003 tx timeout [ 295.449566][ T5861] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 295.566551][T11022] loop2: detected capacity change from 0 to 4096 [ 295.579370][T11020] loop9: detected capacity change from 0 to 16 [ 295.639520][T11020] erofs: (device loop9): mounted with root inode @ nid 36. [ 295.742304][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.760766][ T5861] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 295.782706][T11020] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 295.862329][T11020] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 295.908850][ T5861] Bluetooth: hci5: command tx timeout [ 296.015225][T11022] ntfs3(loop2): failed to convert "0000" to iso8859-4 [ 296.549103][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 296.578015][T11018] loop8: detected capacity change from 0 to 32768 [ 296.782349][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.914452][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 297.350056][T11037] loop6: detected capacity change from 0 to 40427 [ 297.369313][T11037] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1fffff [ 297.378928][T11037] F2FS-fs (loop6): Image doesn't support compression [ 297.398318][T11037] F2FS-fs (loop6): Image doesn't support compression [ 297.412686][T11037] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 297.430802][T11037] F2FS-fs (loop6): invalid crc value [ 297.442644][T11037] F2FS-fs (loop6): Found nat_bits in checkpoint [ 297.513979][T11037] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 297.590541][ T29] audit: type=1804 audit(1866095049.694:113): pid=11037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1707" name="/newroot/133/bus/file1" dev="loop6" ino=10 res=1 errno=0 [ 297.652582][ T7803] syz-executor: attempt to access beyond end of device [ 297.652582][ T7803] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.688742][ T7803] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 297.823883][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.832511][T11039] loop9: detected capacity change from 0 to 65536 [ 297.915141][T11039] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 297.982504][ T5861] Bluetooth: hci5: command tx timeout [ 298.016520][T11039] XFS (loop9): Ending clean mount [ 298.051636][T11039] XFS (loop9): Quotacheck needed: Please wait. [ 298.196260][T11039] XFS (loop9): Quotacheck: Done. [ 298.292061][T11064] loop6: detected capacity change from 0 to 1024 [ 298.397064][ T9330] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 298.419316][ T35] hfsplus: b-tree write err: -5, ino 4 [ 298.684179][T10861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.725200][T10861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.862294][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 298.931873][T11079] loop8: detected capacity change from 0 to 256 [ 299.054850][T10861] team0: Port device team_slave_0 added [ 299.078729][T11078] loop2: detected capacity change from 0 to 512 [ 299.093386][T10861] team0: Port device team_slave_1 added [ 299.134764][T11078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.213990][T10861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.220989][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.332874][T11078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.352173][T10861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.402567][T11078] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.426158][T10861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.457050][T10861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.556236][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.566410][T10861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.792680][T10861] hsr_slave_0: entered promiscuous mode [ 299.809924][T10861] hsr_slave_1: entered promiscuous mode [ 299.826276][T10861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.854680][T10861] Cannot create hsr debugfs directory [ 299.902288][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.936934][T11090] loop6: detected capacity change from 0 to 32768 [ 299.952348][T11090] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1725 (11090) [ 300.012580][T11090] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 300.026194][T11090] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 300.035929][T11090] BTRFS info (device loop6): disk space caching is enabled [ 300.043611][T11090] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 300.148380][ T3429] IPVS: stop unused estimator thread 0... [ 300.158828][T11090] BTRFS info (device loop6): rebuilding free space tree [ 300.189029][T11129] loop2: detected capacity change from 0 to 128 [ 300.196655][T11090] BTRFS info (device loop6): disabling free space tree [ 300.208736][T11090] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 300.225637][T11129] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.253819][T11090] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 300.371881][ T9878] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 300.596074][T11140] tls_set_device_offload: netdev not found [ 300.691177][T11135] loop9: detected capacity change from 0 to 32768 [ 300.699485][T11135] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1736 (11135) [ 300.719671][T11135] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 300.730001][T11135] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 300.739633][T11135] BTRFS info (device loop9): using free-space-tree [ 300.765746][ T7803] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 300.942297][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.954658][T11135] BTRFS info (device loop9): scrub: started on devid 1 [ 300.966082][T11135] BTRFS info (device loop9): left=0, need=98304, flags=2 [ 300.973677][T11135] BTRFS info (device loop9): space_info SYSTEM has 0 free, is not full [ 300.983931][T11135] BTRFS info (device loop9): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 300.998285][T11135] BTRFS info (device loop9): global_block_rsv: size 1441792 reserved 1441792 [ 301.008020][T11135] BTRFS info (device loop9): trans_block_rsv: size 0 reserved 0 [ 301.015761][T11135] BTRFS info (device loop9): chunk_block_rsv: size 0 reserved 0 [ 301.023666][T11135] BTRFS info (device loop9): delayed_block_rsv: size 0 reserved 0 [ 301.031540][T11135] BTRFS info (device loop9): delayed_refs_rsv: size 0 reserved 0 [ 301.068825][T11135] BTRFS info (device loop9): scrub: finished on devid 1 with status: 0 [ 301.364178][T11139] loop2: detected capacity change from 0 to 32768 [ 301.397434][ T9330] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 301.445440][T11174] loop6: detected capacity change from 0 to 256 [ 301.452779][T11174] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 301.479829][T11139] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 301.600750][T10861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 301.636722][T11139] XFS (loop2): Ending clean mount [ 301.670281][T10861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 301.714243][T10861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 301.751081][T10861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 301.765772][ T29] audit: type=1800 audit(1866095053.864:114): pid=11139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1737" name="bus" dev="loop2" ino=6154 res=0 errno=0 [ 301.878601][ T964] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 [ 301.893152][T10861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.911296][T10861] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.934248][ T964] XFS (loop2): Unmount and run xfs_repair [ 301.940035][ T964] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 301.956932][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.964113][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.982309][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.037898][ T964] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 302.062741][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.069900][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.102488][ T964] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 302.106552][T10861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.111377][ T964] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 302.206268][ T964] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 302.232596][ T5962] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 302.242352][ T964] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 302.272443][ T964] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.295274][ T964] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.317054][ T964] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 302.328555][T11139] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74 [ 302.349733][T11139] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 302.392148][ T29] audit: type=1326 audit(1866095054.494:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.9.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491657e719 code=0x7fc00000 [ 302.395344][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 302.442378][T11139] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 302.466568][T11203] serio: Serial port ptm0 [ 302.469101][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 302.505715][ T5962] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 302.529471][ T5839] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 302.541022][ T5962] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 302.560881][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.590355][ T5962] usb 1-1: config 0 descriptor?? [ 302.595195][T10861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.609997][T11189] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 302.633607][T11206] evm: overlay not supported [ 302.799699][T10861] veth0_vlan: entered promiscuous mode [ 302.849971][T10861] veth1_vlan: entered promiscuous mode [ 302.908863][T10861] veth0_macvtap: entered promiscuous mode [ 302.928082][T10861] veth1_macvtap: entered promiscuous mode [ 302.955249][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.966846][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.977804][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.988851][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.999381][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.014341][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.022387][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 303.025547][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.043184][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.059770][T10861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.064630][ T5962] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 303.071910][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.085802][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.101041][ T5962] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 303.106729][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.118786][ T5962] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 303.123974][ T29] audit: type=1326 audit(1866095055.224:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11196 comm="syz.9.1749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f491657e719 code=0x7fc00000 [ 303.155196][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.165779][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.177095][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.199148][T10861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.210350][T10861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.223769][T10861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.244344][T10861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.293565][T10861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.312750][T10861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.334176][T10861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.395715][ T964] usb 1-1: USB disconnect, device number 19 [ 303.504910][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.519824][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.577537][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.616704][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.828121][T11233] loop1: detected capacity change from 0 to 512 [ 303.949166][T11246] netlink: 'syz.8.1760': attribute type 10 has an invalid length. [ 303.956744][T11232] ALSA: mixer_oss: invalid OSS volume '0' [ 303.967990][T11233] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.000269][T11232] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 304.020582][T11232] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 304.024680][T11246] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.029436][T11232] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 304.038998][T11246] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.041843][T11232] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 304.056090][T11232] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 304.062349][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.063046][T11232] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 304.090944][T11246] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.098170][T11246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.107419][T11246] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.114605][T11246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.125749][T11246] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 304.248324][T11233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.261167][T11233] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.551974][T10861] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.652465][ T5908] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 304.822615][ T5908] usb 10-1: Using ep0 maxpacket: 16 [ 304.847325][ T5908] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 304.898497][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.910481][T11267] loop2: detected capacity change from 0 to 32768 [ 304.917905][T11267] XFS: ikeep mount option is deprecated. [ 304.951936][ T5908] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 304.961818][ T5908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.972324][ T5908] usb 10-1: Product: syz [ 304.976608][ T5908] usb 10-1: Manufacturer: syz [ 304.981698][ T5908] usb 10-1: SerialNumber: syz [ 305.001465][ T5908] usb 10-1: config 0 descriptor?? [ 305.013925][T11281] loop8: detected capacity change from 0 to 8 [ 305.021438][T11267] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 305.037415][T11247] loop6: detected capacity change from 0 to 32768 [ 305.054658][ T5908] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.074526][ T5908] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 305.097870][T11267] XFS (loop2): Ending clean mount [ 305.103229][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.115882][T11267] XFS (loop2): Quotacheck needed: Please wait. [ 305.178809][T11247] XFS (loop6): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 305.213677][T11267] XFS (loop2): Quotacheck: Done. [ 305.335894][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 305.374024][T11303] batadv_slave_1: entered promiscuous mode [ 305.383428][T11302] batadv_slave_1: left promiscuous mode [ 305.558618][T11247] XFS (loop6): Ending clean mount [ 305.650804][T11306] batman_adv: batadv0: Adding interface: macvtap1 [ 305.660376][T11306] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.686928][T11306] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 305.700653][ T7803] XFS (loop6): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 305.853963][ T5908] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 305.870885][ T5908] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 305.902522][ T964] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 306.085308][ T964] usb 3-1: Using ep0 maxpacket: 16 [ 306.088391][T11318] netlink: 'syz.6.1784': attribute type 63 has an invalid length. [ 306.105693][ T5908] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 306.121868][ T5908] em28xx 10-1:0.0: No AC97 audio processor [ 306.129477][ T964] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 306.142375][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 306.147664][ T964] usb 3-1: config 0 has no interface number 0 [ 306.166371][ T5908] usb 10-1: USB disconnect, device number 6 [ 306.182356][ T964] usb 3-1: config 0 interface 180 has no altsetting 0 [ 306.190164][ T5908] em28xx 10-1:0.0: Disconnecting em28xx [ 306.209928][ T964] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 306.229986][ T964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.251661][ T5908] em28xx 10-1:0.0: Freeing device [ 306.256974][ T964] usb 3-1: Product: syz [ 306.271409][ T964] usb 3-1: Manufacturer: syz [ 306.277868][ T964] usb 3-1: SerialNumber: syz [ 306.286116][ T964] usb 3-1: config 0 descriptor?? [ 306.649811][T11330] loop6: detected capacity change from 0 to 2048 [ 306.665375][T11330] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 306.713336][T11332] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.724035][ T964] viperboard 3-1:0.180: version 0.00 found at bus 003 address 013 [ 306.735201][T11312] loop1: detected capacity change from 0 to 40427 [ 306.746065][ T964] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 306.749561][T11330] NILFS (loop6): failed to count free inodes: err=-34 [ 306.760859][T11312] F2FS-fs (loop1): invalid crc value [ 306.767596][ T5908] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 306.772330][T11330] NILFS (loop6): failed to count free inodes: err=-34 [ 306.777236][ T964] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 306.797927][ T964] usb 3-1: USB disconnect, device number 13 [ 306.814448][T11312] F2FS-fs (loop1): Found nat_bits in checkpoint [ 306.901873][T11312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 306.917381][T11332] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 306.954120][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.970759][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 306.973936][T11332] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 306.999296][ T5908] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 307.020912][T10861] syz-executor: attempt to access beyond end of device [ 307.020912][T10861] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 307.028747][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.049384][T11332] Remounting filesystem read-only [ 307.056787][ T5908] usb 1-1: config 0 descriptor?? [ 307.065335][ T5908] gspca_main: spca561-2.14.0 probing abcd:cdee [ 307.077914][ T7803] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 307.084421][T10861] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 307.182281][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 307.578567][T11356] bridge0: entered allmulticast mode [ 307.610366][T11359] loop6: detected capacity change from 0 to 128 [ 307.645515][T11356] pim6reg: entered allmulticast mode [ 307.778776][ T5908] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 307.792771][ T5908] usb 1-1: USB disconnect, device number 20 [ 307.892418][ T9048] bond0: (slave syz_tun): Releasing backup interface [ 308.062829][ T5962] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 308.222290][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 308.234563][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.266479][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.286835][ T5962] usb 10-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 308.309159][ T5962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.330040][ T5962] usb 10-1: config 0 descriptor?? [ 308.442365][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.454849][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.470370][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.479553][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.489557][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.497729][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.655759][T11387] macvlan0: entered promiscuous mode [ 308.685070][T11387] ipvlan0: entered promiscuous mode [ 308.691246][T11387] ipvlan0: left promiscuous mode [ 308.747488][T11387] macvlan0: left promiscuous mode [ 308.788416][ T5962] wacom 0003:056A:0084.0027: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.9-1/input0 [ 308.901486][ T3429] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.001836][ T5962] usb 10-1: USB disconnect, device number 7 [ 309.043473][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 309.080919][ T29] audit: type=1326 audit(1866095061.184:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.120239][ T3429] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.139210][ T29] audit: type=1326 audit(1866095061.224:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.168953][ T29] audit: type=1326 audit(1866095061.224:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.212495][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 309.223047][ T29] audit: type=1326 audit(1866095061.224:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.230194][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 309.262134][ T29] audit: type=1326 audit(1866095061.224:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.262338][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 309.285001][ T29] audit: type=1326 audit(1866095061.224:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.340014][ T29] audit: type=1326 audit(1866095061.284:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.363890][ T29] audit: type=1326 audit(1866095061.284:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.6.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37c77e719 code=0x7ffc0000 [ 309.403121][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 309.427317][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.433693][ T3429] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.451439][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.476211][ T25] usb 1-1: config 0 descriptor?? [ 309.502617][T11392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 309.544276][ T25] hub 1-1:0.0: USB hub found [ 309.664961][ T3429] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.712255][ C1] hrtimer: interrupt took 75291 ns [ 309.724834][ T25] hub 1-1:0.0: 1 port detected [ 309.928316][T11383] chnl_net:caif_netlink_parms(): no params data found [ 309.937880][ T25] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 309.955019][ T25] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 309.988991][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 310.002469][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 310.035418][ T3429] bridge_slave_1: left allmulticast mode [ 310.041371][ T3429] bridge_slave_1: left promiscuous mode [ 310.049829][ T25] usb 1-1: USB disconnect, device number 21 [ 310.060297][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.091116][ T3429] bridge_slave_0: left allmulticast mode [ 310.108516][ T3429] bridge_slave_0: left promiscuous mode [ 310.117086][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.302318][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.560964][ T5861] Bluetooth: hci2: command tx timeout [ 310.761145][T11437] loop8: detected capacity change from 0 to 32768 [ 310.769264][T11437] XFS: ikeep mount option is deprecated. [ 310.781799][T11437] XFS: noikeep mount option is deprecated. [ 310.828430][T11437] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 310.965531][T11437] XFS (loop8): Ending clean mount [ 311.013752][T11437] XFS (loop8): Quotacheck needed: Please wait. [ 311.163418][T11465] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 311.198856][T11437] XFS (loop8): Quotacheck: Done. [ 311.258163][T11470] syz.9.1844: attempt to access beyond end of device [ 311.258163][T11470] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 311.287908][T11470] exFAT-fs (nbd9): unable to read boot sector [ 311.301379][T11470] exFAT-fs (nbd9): failed to read boot sector [ 311.313421][T11470] exFAT-fs (nbd9): failed to recognize exfat type [ 311.339347][ T8801] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 311.348038][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 311.551143][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.559580][T11475] loop6: detected capacity change from 0 to 1024 [ 311.649977][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.719616][ T3429] bond0 (unregistering): Released all slaves [ 311.995118][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.003717][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.010984][T11383] bridge_slave_0: entered allmulticast mode [ 312.019284][T11383] bridge_slave_0: entered promiscuous mode [ 312.030722][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.040002][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.048844][T11383] bridge_slave_1: entered allmulticast mode [ 312.057787][T11383] bridge_slave_1: entered promiscuous mode [ 312.332600][T11383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.382535][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 312.395925][T11383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.563879][ T3429] hsr_slave_0: left promiscuous mode [ 312.617999][ T3429] hsr_slave_1: left promiscuous mode [ 312.624084][ T5861] Bluetooth: hci2: command tx timeout [ 312.624836][T11481] loop8: detected capacity change from 0 to 32768 [ 312.638647][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.670500][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.702092][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.710044][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.776840][ T3429] veth1_macvtap: left promiscuous mode [ 312.782738][ T3429] veth0_macvtap: left promiscuous mode [ 312.788348][ T3429] veth1_vlan: left promiscuous mode [ 312.794060][ T3429] veth0_vlan: left promiscuous mode [ 313.357947][T11510] vivid-002: disconnect [ 313.396441][T11510] vivid-002: reconnect [ 313.422817][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 313.554616][T11504] loop6: detected capacity change from 0 to 32768 [ 313.658586][T11504] XFS (loop6): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 313.754153][ T3429] team0 (unregistering): Port device vlan0 removed [ 313.822167][T11504] XFS (loop6): Ending clean mount [ 313.972376][ T964] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 314.108252][ T7803] XFS (loop6): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 314.152863][ T964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.164382][ T964] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.173794][ T964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.194164][ T964] usb 2-1: config 0 descriptor?? [ 314.390806][T11522] loop9: detected capacity change from 0 to 32768 [ 314.432818][ T964] usbhid 2-1:0.0: can't add hid device: -71 [ 314.438992][ T964] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.457936][ T964] usb 2-1: USB disconnect, device number 4 [ 314.462292][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 314.572161][T11522] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.702885][ T5861] Bluetooth: hci2: command tx timeout [ 314.990259][T11522] XFS (loop9): Ending clean mount [ 315.002717][ T964] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 315.044606][T11522] XFS (loop9): User initiated shutdown received. [ 315.051173][T11522] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:455). Shutting down filesystem. [ 315.102408][T11522] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 315.162555][ T964] usb 2-1: Using ep0 maxpacket: 16 [ 315.169823][ T964] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.192263][ T964] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.204313][ T964] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 315.214595][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 315.229659][ T9330] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 315.255878][ T964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.304310][ T964] usb 2-1: config 0 descriptor?? [ 315.502281][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 315.603935][T11567] loop9: detected capacity change from 0 to 1024 [ 315.611273][T11567] EXT4-fs: Ignoring removed orlov option [ 315.613586][T11565] loop8: detected capacity change from 0 to 1024 [ 315.627156][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 315.630710][T11567] EXT4-fs (loop9): Test dummy encryption mode enabled [ 315.696523][T11565] EXT4-fs: Ignoring removed bh option [ 315.697508][T11567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.730168][ T964] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 315.803825][T11565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 315.843263][T11565] System zones: 0-1, 3-12 [ 315.853687][T11565] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.074958][ T9330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.129635][ T964] usb 2-1: USB disconnect, device number 5 [ 316.244915][T11577] loop9: detected capacity change from 0 to 64 [ 316.291554][ T29] audit: type=1800 audit(1866095068.394:125): pid=11574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1876" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 316.420511][T11577] minix: Unknown parameter '0xffffffffffffffff Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 316.452478][T11562] loop6: detected capacity change from 0 to 32768 [ 316.470194][ T8801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.503377][T11562] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1874 (11562) [ 316.542292][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.579688][T11562] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 316.616544][T11562] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 316.629402][T11562] BTRFS info (device loop6): using free-space-tree [ 316.646717][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.653314][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.735881][T11584] loop8: detected capacity change from 0 to 2048 [ 316.782731][ T5861] Bluetooth: hci2: command tx timeout [ 317.132814][T11584] hpfs: filesystem error: improperly stopped; already mounted read-only [ 317.163894][ T7803] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 317.168134][T11584] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 317.206633][T11584] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 317.327609][T11584] TCP: tcp_parse_options: Illegal window scaling value 31 > 14 received [ 317.382404][ T5962] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 317.520059][T11614] syz.8.1889 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 317.546979][ T29] audit: type=1326 audit(1866095069.624:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a457e719 code=0x7ffc0000 [ 317.582274][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.608603][ T29] audit: type=1326 audit(1866095069.624:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a457e719 code=0x7ffc0000 [ 317.661701][ T29] audit: type=1326 audit(1866095069.624:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fd0a457e719 code=0x7ffc0000 [ 317.705197][ T29] audit: type=1326 audit(1866095069.634:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11613 comm="syz.8.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0a457e719 code=0x7ffc0000 [ 318.032420][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.043929][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.054177][ T5962] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.063540][ T5962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.113500][T11617] loop6: detected capacity change from 0 to 40427 [ 318.132421][ T5962] usb 10-1: config 0 descriptor?? [ 318.140852][T11617] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1fffff [ 318.150097][T11617] F2FS-fs (loop6): Image doesn't support compression [ 318.157603][T11617] F2FS-fs (loop6): Image doesn't support compression [ 318.211628][T11617] F2FS-fs (loop6): invalid crc value [ 318.301827][T11617] F2FS-fs (loop6): Found nat_bits in checkpoint [ 318.358257][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 318.365178][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 318.376262][T11621] ceph: No mds server is up or the cluster is laggy [ 318.511483][T11617] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 318.622331][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 318.633563][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1894'. [ 318.688585][ T5962] hid (null): bogus close delimiter [ 318.717899][T11617] F2FS-fs (loop6): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x14d/0x1220 [ 318.748260][T11635] loop1: detected capacity change from 0 to 512 [ 318.807672][T11635] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 318.846422][ T7803] syz-executor: attempt to access beyond end of device [ 318.846422][ T7803] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.850945][T11635] EXT4-fs (loop1): 1 truncate cleaned up [ 318.877742][ T7803] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 318.891418][T11635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.893123][ T5962] usb 10-1: language id specifier not provided by device, defaulting to English [ 319.097713][T11383] team0: Port device team_slave_0 added [ 319.131297][T11383] team0: Port device team_slave_1 added [ 319.296863][ T5962] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0029/input/input25 [ 319.346133][T11383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.364126][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.421119][ T5962] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0029/input/input26 [ 319.477535][T11383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.494028][ T5962] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0029/input/input27 [ 319.523503][T11383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.524718][ T5962] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0029/input/input28 [ 319.551202][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.609607][ T5962] uclogic 0003:256C:006D.0029: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 319.638940][T11383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.664464][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 319.682700][ T5962] usb 10-1: USB disconnect, device number 8 [ 319.847668][T10861] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.035947][T11383] hsr_slave_0: entered promiscuous mode [ 320.093049][T11383] hsr_slave_1: entered promiscuous mode [ 320.520167][T11642] loop6: detected capacity change from 0 to 40427 [ 320.557638][T11642] F2FS-fs (loop6): invalid crc value [ 320.565336][T11642] F2FS-fs (loop6): Found nat_bits in checkpoint [ 320.702296][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 320.720090][T11642] F2FS-fs (loop6): Start checkpoint disabled! [ 320.736050][T11642] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 320.745828][ T3429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.801632][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.815570][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.825713][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.835707][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.843530][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 320.876867][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.059127][ T3429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.360746][ T3429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.564533][ T3429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.662932][ T62] kworker/u8:4: attempt to access beyond end of device [ 321.662932][ T62] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 321.721631][ T62] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 321.743996][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 321.905880][T11383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.921458][T11383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.981168][T11383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.997856][T11669] loop8: detected capacity change from 0 to 40427 [ 322.020420][ T3429] bridge_slave_1: left allmulticast mode [ 322.032701][ T3429] bridge_slave_1: left promiscuous mode [ 322.037716][T11669] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 322.048269][T11669] F2FS-fs (loop8): Image doesn't support compression [ 322.048693][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.066216][T11669] F2FS-fs (loop8): Image doesn't support compression [ 322.085334][T11669] F2FS-fs (loop8): invalid crc value [ 322.092033][ T3429] bridge_slave_0: left allmulticast mode [ 322.102252][ T3429] bridge_slave_0: left promiscuous mode [ 322.109989][T11669] F2FS-fs (loop8): Found nat_bits in checkpoint [ 322.112533][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.206958][T11675] loop9: detected capacity change from 0 to 32768 [ 322.250223][T11669] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 322.303248][T11675] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.461703][T11675] XFS (loop9): Ending clean mount [ 322.533367][T11675] XFS (loop9): Quotacheck needed: Please wait. [ 322.570395][ T8801] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4f6/0x1ca0 [ 322.622779][ T8801] F2FS-fs (loop8): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 322.646543][T11675] XFS (loop9): Quotacheck: Done. [ 322.727102][ T9330] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 322.782387][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.007828][ T5861] Bluetooth: hci5: command tx timeout [ 323.264916][T11699] loop9: detected capacity change from 0 to 4096 [ 323.498894][T11711] binder: 11710:11711 ioctl 40046205 0 returned -22 [ 323.755342][T11719] loop8: detected capacity change from 0 to 512 [ 323.775435][T11719] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.790181][T11719] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 323.802093][T11719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c119, mo2=0002] [ 323.816212][T11719] System zones: 1-12 [ 323.832674][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 323.849472][T11719] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1926: corrupted in-inode xattr: e_value size too large [ 323.879888][T11719] EXT4-fs error (device loop8): ext4_orphan_get:1393: comm syz.8.1926: couldn't read orphan inode 15 (err -117) [ 323.904092][T11725] loop9: detected capacity change from 0 to 1024 [ 323.913143][T11725] EXT4-fs (loop9): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 323.922914][T11719] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.945105][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.958799][T11725] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.994983][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.010087][T11719] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.1926: Unrecognised inode hash code 4 [ 324.062107][ T3429] bond0 (unregistering): Released all slaves [ 324.065836][T11719] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1926: Corrupt directory, running e2fsck is recommended [ 324.095440][T11383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.157181][T11729] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.1926: Unrecognised inode hash code 4 [ 324.194096][ T9330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.208559][T11729] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1926: Corrupt directory, running e2fsck is recommended [ 324.289132][T11729] EXT4-fs warning (device loop8): dx_probe:833: inode #2: comm syz.8.1926: Unrecognised inode hash code 4 [ 324.364225][T11729] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1926: Corrupt directory, running e2fsck is recommended [ 324.561703][ T8801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.661625][T11747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 324.673796][T11747] overlayfs: failed to set xattr on upper [ 324.702040][T11747] overlayfs: ...falling back to redirect_dir=nofollow. [ 324.734667][T11747] overlayfs: ...falling back to index=off. [ 324.740527][T11747] overlayfs: ...falling back to uuid=null. [ 324.822774][T11747] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 324.872587][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 324.909414][T11754] loop9: detected capacity change from 0 to 2048 [ 324.956882][T11665] chnl_net:caif_netlink_parms(): no params data found [ 324.984135][T11754] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 325.008283][T11383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.022918][ T5861] Bluetooth: hci5: command tx timeout [ 325.055920][T11754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.129167][ T3429] hsr_slave_0: left promiscuous mode [ 325.165170][ T3429] hsr_slave_1: left promiscuous mode [ 325.183208][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.191580][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.221781][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.241163][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.255684][ T3429] batman_adv: batadv0: Removing interface: macvtap1 [ 325.305834][ T3429] veth1_macvtap: left promiscuous mode [ 325.311964][ T3429] veth0_macvtap: left promiscuous mode [ 325.318846][ T3429] veth1_vlan: left promiscuous mode [ 325.324444][ T3429] veth0_vlan: left promiscuous mode [ 325.902726][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.231080][T11783] loop8: detected capacity change from 0 to 64 [ 326.335247][ T5908] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 326.397323][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 326.459412][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 326.505062][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.522367][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.538552][ T5908] usb 10-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 326.552264][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.569134][ T5908] usb 10-1: config 0 descriptor?? [ 326.942294][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 326.986224][ T5908] hid-thrustmaster 0003:044F:B65D.002A: unknown main item tag 0x0 [ 327.022472][ T5908] hid-thrustmaster 0003:044F:B65D.002A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.9-1/input0 [ 327.036803][ T5908] hid-thrustmaster 0003:044F:B65D.002A: Wrong number of endpoints? [ 327.102419][ T5861] Bluetooth: hci5: command tx timeout [ 327.293207][ C0] hid-thrustmaster 0003:044F:B65D.002A: URB to get model id failed with error -71 [ 327.293638][ T47] usb 10-1: USB disconnect, device number 9 [ 327.459529][T11797] loop8: detected capacity change from 0 to 4096 [ 327.765955][T11800] loop8: detected capacity change from 0 to 16 [ 327.775831][T11800] erofs: (device loop8): mounted with root inode @ nid 36. [ 327.820998][T10963] bond0: (slave syz_tun): Releasing backup interface [ 327.938616][T11383] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.982386][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 328.078444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.085607][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.123596][T11665] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.131344][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.161091][T11665] bridge_slave_0: entered allmulticast mode [ 328.190844][T11665] bridge_slave_0: entered promiscuous mode [ 328.306169][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.313317][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.351752][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.369045][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.399646][T11665] bridge_slave_1: entered allmulticast mode [ 328.418586][T11665] bridge_slave_1: entered promiscuous mode [ 328.551581][T11665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.561777][T11822] loop9: detected capacity change from 0 to 1024 [ 328.581326][T11665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.604874][T11822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.660589][T11822] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.716307][T11665] team0: Port device team_slave_0 added [ 328.726350][T11665] team0: Port device team_slave_1 added [ 328.838784][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.851817][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.861781][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.873224][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.883116][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 328.888731][ T9330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.890427][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.927421][T11665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.956781][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.007285][T11665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.022332][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 329.029373][T11665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.036546][T11665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.063600][T11665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.144223][ T3429] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.170208][T11838] loop9: detected capacity change from 0 to 128 [ 329.185006][ T5857] Bluetooth: hci5: command tx timeout [ 329.193845][T11838] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 329.239401][T11838] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 329.384824][ T3429] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.441713][T11665] hsr_slave_0: entered promiscuous mode [ 329.460841][ T9330] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.476179][T11665] hsr_slave_1: entered promiscuous mode [ 329.503735][T11665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.511733][T11665] Cannot create hsr debugfs directory [ 329.645257][ T3429] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.718931][T11848] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1970'. [ 329.802050][T11837] loop8: detected capacity change from 0 to 32768 [ 329.818692][T11837] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1968 (11837) [ 329.843093][T11837] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 329.867552][T11837] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 329.882042][T11383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.890454][T11837] BTRFS info (device loop8): using free-space-tree [ 329.958933][ T3429] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.050788][T11837] BTRFS info (device loop8): rebuilding free space tree [ 330.062485][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 330.120228][T11844] loop6: detected capacity change from 0 to 32768 [ 330.133539][T11844] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1969 (11844) [ 330.155154][T11844] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.173060][T11844] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 330.185244][ T29] audit: type=1800 audit(1866095082.284:130): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1968" name="bus" dev="loop8" ino=263 res=0 errno=0 [ 330.208791][T11844] BTRFS info (device loop6): using free-space-tree [ 330.316049][ T8801] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 330.398745][T11383] veth0_vlan: entered promiscuous mode [ 330.411829][T11383] veth1_vlan: entered promiscuous mode [ 330.450852][T11383] veth0_macvtap: entered promiscuous mode [ 330.537364][ T7803] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.592832][T11863] binder: 11858:11863 ioctl c0306201 20001a80 returned -14 [ 330.630638][ T3429] bridge_slave_1: left allmulticast mode [ 330.636631][ T3429] bridge_slave_1: left promiscuous mode [ 330.665749][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.700664][ T3429] bridge_slave_0: left allmulticast mode [ 330.736144][ T3429] bridge_slave_0: left promiscuous mode [ 330.741926][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.796681][T11890] block nbd8: shutting down sockets [ 330.837412][T11894] loop6: detected capacity change from 0 to 64 [ 330.847165][ T3429] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 331.032461][ T5857] Bluetooth: hci1: command tx timeout [ 331.063118][T11899] loop9: detected capacity change from 0 to 2048 [ 331.102388][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 331.244123][T11899] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.258941][ T3429] batman_adv: batadv0: Removing interface: ip6gretap1 [ 331.281613][T11911] loop6: detected capacity change from 0 to 512 [ 331.412166][T11911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.451057][T11911] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.575177][T11917] loop8: detected capacity change from 0 to 512 [ 331.577000][ T29] audit: type=1800 audit(1866095083.684:131): pid=11911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1982" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 331.610832][ T29] audit: type=1800 audit(1866095083.684:132): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1982" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 331.661334][T11911] ------------[ cut here ]------------ [ 331.666841][T11911] Looking for class "&ei->i_data_sem" with key init_once.__key.799, but found a different class "&ei->i_data_sem" with the same key [ 331.680777][T11911] WARNING: CPU: 0 PID: 11911 at kernel/locking/lockdep.c:939 look_up_lock_class+0xdc/0x170 [ 331.690872][T11911] Modules linked in: [ 331.694771][T11911] CPU: 0 UID: 0 PID: 11911 Comm: syz.6.1982 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 331.705530][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 331.715624][T11911] RIP: 0010:look_up_lock_class+0xdc/0x170 [ 331.721449][T11911] Code: 01 0f 85 8a 00 00 00 c6 05 57 ec 3e 04 01 90 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 48 c7 c7 c0 eb 0a 8c e8 15 03 8e f5 90 <0f> 0b 90 90 eb 61 90 e8 18 53 f2 f8 e8 93 41 ad f5 48 c7 c7 00 eb [ 331.741067][T11911] RSP: 0018:ffffc900043e7390 EFLAGS: 00010046 [ 331.747141][T11911] RAX: 268416c54abb9300 RBX: ffffffff93d03948 RCX: 0000000000040000 [ 331.755142][T11911] RDX: ffffc9001a800000 RSI: 0000000000008a4e RDI: 0000000000008a4f [ 331.763113][T11911] RBP: ffffc900043e74a0 R08: ffffffff8155e312 R09: 1ffff110170c519a [ 331.771110][T11911] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888057306598 [ 331.779085][T11911] R13: ffff888057306598 R14: ffff888057306598 R15: ffffffff9a50b3e1 [ 331.787072][T11911] FS: 00007fd37d5d66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 331.796043][T11911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.802656][T11911] CR2: 0000001b32f0fff8 CR3: 0000000059a1e000 CR4: 0000000000350ef0 [ 331.810631][T11911] Call Trace: [ 331.813906][T11911] [ 331.816837][T11911] ? __warn+0x168/0x4e0 [ 331.821004][T11911] ? look_up_lock_class+0xdc/0x170 [ 331.826130][T11911] ? report_bug+0x2b3/0x500 [ 331.830642][T11911] ? look_up_lock_class+0xdc/0x170 [ 331.835767][T11911] ? handle_bug+0x60/0x90 [ 331.840108][T11911] ? exc_invalid_op+0x1a/0x50 [ 331.844799][T11911] ? asm_exc_invalid_op+0x1a/0x20 [ 331.849837][T11911] ? __warn_printk+0x292/0x360 [ 331.854607][T11911] ? look_up_lock_class+0xdc/0x170 [ 331.859730][T11911] register_lock_class+0x102/0x980 [ 331.865039][T11911] ? __pfx_register_lock_class+0x10/0x10 [ 331.870690][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.876346][T11911] __lock_acquire+0xf0/0x2050 [ 331.881056][T11911] lock_acquire+0x1ed/0x550 [ 331.885577][T11911] ? ext4_move_extents+0x34a/0xcb0 [ 331.890707][T11911] ? __pfx_lock_acquire+0x10/0x10 [ 331.895753][T11911] ? __pfx___might_resched+0x10/0x10 [ 331.901049][T11911] ? __pfx___might_resched+0x10/0x10 [ 331.906346][T11911] ? __lock_acquire+0x1384/0x2050 [ 331.911388][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.917033][T11911] ? inode_dio_wait+0x19f/0x240 [ 331.921903][T11911] down_write_nested+0xa2/0x220 [ 331.926854][T11911] ? ext4_move_extents+0x34a/0xcb0 [ 331.931987][T11911] ? __pfx_down_write_nested+0x10/0x10 [ 331.937570][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.943224][T11911] ext4_move_extents+0x34a/0xcb0 [ 331.948181][T11911] ? rcu_read_lock_any_held+0xb7/0x160 [ 331.953646][T11911] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 331.959547][T11911] ? __pfx_ext4_move_extents+0x10/0x10 [ 331.965017][T11911] ? __fget_files+0x3f3/0x470 [ 331.969703][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.975353][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 331.981003][T11911] ext4_ioctl+0x34b5/0x5590 [ 331.985528][T11911] ? __kasan_slab_free+0x59/0x70 [ 331.990475][T11911] ? __se_sys_ioctl+0x47/0x170 [ 331.995240][T11911] ? do_syscall_64+0xf3/0x230 [ 331.999929][T11911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.006008][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.011654][T11911] ? do_vfs_ioctl+0x1e68/0x2e40 [ 332.016512][T11911] ? __pfx_ext4_ioctl+0x10/0x10 [ 332.021476][T11911] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 332.026521][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.032168][T11911] ? mark_lock+0x9a/0x360 [ 332.036515][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.042166][T11911] ? tomoyo_path_number_perm+0x208/0x880 [ 332.047815][T11911] ? __pfx_lock_release+0x10/0x10 [ 332.052858][T11911] ? lockdep_hardirqs_on+0x99/0x150 [ 332.058066][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.063718][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.069379][T11911] ? kfree+0x1a0/0x440 [ 332.073464][T11911] ? tomoyo_path_number_perm+0x68d/0x880 [ 332.079108][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.084759][T11911] ? tomoyo_path_number_perm+0x71a/0x880 [ 332.090406][T11911] ? tomoyo_path_number_perm+0x208/0x880 [ 332.096229][T11911] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.102258][T11911] ? __fget_files+0x29/0x470 [ 332.106870][T11911] ? __fget_files+0x3f3/0x470 [ 332.111567][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.117216][T11911] ? __pfx_ext4_ioctl+0x10/0x10 [ 332.122090][T11911] __se_sys_ioctl+0xfb/0x170 [ 332.126694][T11911] do_syscall_64+0xf3/0x230 [ 332.131229][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.137141][T11911] RIP: 0033:0x7fd37c77e719 [ 332.141562][T11911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.142393][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 332.161250][T11911] RSP: 002b:00007fd37d5d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.161286][T11911] RAX: ffffffffffffffda RBX: 00007fd37c935f80 RCX: 00007fd37c77e719 [ 332.161305][T11911] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000005 [ 332.161323][T11911] RBP: 00007fd37c7f175e R08: 0000000000000000 R09: 0000000000000000 [ 332.200571][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.208555][T11911] R13: 0000000000000000 R14: 00007fd37c935f80 R15: 00007ffdc2add068 [ 332.216546][T11911] [ 332.219569][T11911] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.226852][T11911] CPU: 0 UID: 0 PID: 11911 Comm: syz.6.1982 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 332.237620][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 332.247690][T11911] Call Trace: [ 332.250971][T11911] [ 332.253904][T11911] dump_stack_lvl+0x241/0x360 [ 332.258767][T11911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.263981][T11911] ? __pfx__printk+0x10/0x10 [ 332.268579][T11911] ? _printk+0xd5/0x120 [ 332.272752][T11911] ? __init_begin+0x41000/0x41000 [ 332.277784][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.283452][T11911] ? vscnprintf+0x5d/0x90 [ 332.287802][T11911] panic+0x349/0x880 [ 332.291709][T11911] ? __warn+0x177/0x4e0 [ 332.295875][T11911] ? __pfx_panic+0x10/0x10 [ 332.300300][T11911] ? show_trace_log_lvl+0x3b2/0x410 [ 332.305518][T11911] __warn+0x34b/0x4e0 [ 332.309511][T11911] ? look_up_lock_class+0xdc/0x170 [ 332.314637][T11911] report_bug+0x2b3/0x500 [ 332.318973][T11911] ? look_up_lock_class+0xdc/0x170 [ 332.324097][T11911] handle_bug+0x60/0x90 [ 332.328265][T11911] exc_invalid_op+0x1a/0x50 [ 332.332785][T11911] asm_exc_invalid_op+0x1a/0x20 [ 332.337647][T11911] RIP: 0010:look_up_lock_class+0xdc/0x170 [ 332.343419][T11911] Code: 01 0f 85 8a 00 00 00 c6 05 57 ec 3e 04 01 90 49 8b 16 49 8b 76 18 48 8b 8b b8 00 00 00 48 c7 c7 c0 eb 0a 8c e8 15 03 8e f5 90 <0f> 0b 90 90 eb 61 90 e8 18 53 f2 f8 e8 93 41 ad f5 48 c7 c7 00 eb [ 332.363037][T11911] RSP: 0018:ffffc900043e7390 EFLAGS: 00010046 [ 332.369117][T11911] RAX: 268416c54abb9300 RBX: ffffffff93d03948 RCX: 0000000000040000 [ 332.377183][T11911] RDX: ffffc9001a800000 RSI: 0000000000008a4e RDI: 0000000000008a4f [ 332.385245][T11911] RBP: ffffc900043e74a0 R08: ffffffff8155e312 R09: 1ffff110170c519a [ 332.393224][T11911] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff888057306598 [ 332.401196][T11911] R13: ffff888057306598 R14: ffff888057306598 R15: ffffffff9a50b3e1 [ 332.409205][T11911] ? __warn_printk+0x292/0x360 [ 332.413993][T11911] register_lock_class+0x102/0x980 [ 332.419124][T11911] ? __pfx_register_lock_class+0x10/0x10 [ 332.425038][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.430690][T11911] __lock_acquire+0xf0/0x2050 [ 332.435399][T11911] lock_acquire+0x1ed/0x550 [ 332.439920][T11911] ? ext4_move_extents+0x34a/0xcb0 [ 332.445050][T11911] ? __pfx_lock_acquire+0x10/0x10 [ 332.450109][T11911] ? __pfx___might_resched+0x10/0x10 [ 332.455413][T11911] ? __pfx___might_resched+0x10/0x10 [ 332.460709][T11911] ? __lock_acquire+0x1384/0x2050 [ 332.465766][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.471409][T11911] ? inode_dio_wait+0x19f/0x240 [ 332.476278][T11911] down_write_nested+0xa2/0x220 [ 332.481141][T11911] ? ext4_move_extents+0x34a/0xcb0 [ 332.486267][T11911] ? __pfx_down_write_nested+0x10/0x10 [ 332.491740][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.497392][T11911] ext4_move_extents+0x34a/0xcb0 [ 332.502350][T11911] ? rcu_read_lock_any_held+0xb7/0x160 [ 332.507851][T11911] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 332.513776][T11911] ? __pfx_ext4_move_extents+0x10/0x10 [ 332.519258][T11911] ? __fget_files+0x3f3/0x470 [ 332.523960][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.529617][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.535277][T11911] ext4_ioctl+0x34b5/0x5590 [ 332.539803][T11911] ? __kasan_slab_free+0x59/0x70 [ 332.544757][T11911] ? __se_sys_ioctl+0x47/0x170 [ 332.549524][T11911] ? do_syscall_64+0xf3/0x230 [ 332.554214][T11911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.560294][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.565945][T11911] ? do_vfs_ioctl+0x1e68/0x2e40 [ 332.570805][T11911] ? __pfx_ext4_ioctl+0x10/0x10 [ 332.575681][T11911] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 332.580712][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.586364][T11911] ? mark_lock+0x9a/0x360 [ 332.590703][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.596359][T11911] ? tomoyo_path_number_perm+0x208/0x880 [ 332.602118][T11911] ? __pfx_lock_release+0x10/0x10 [ 332.607156][T11911] ? lockdep_hardirqs_on+0x99/0x150 [ 332.612393][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.618041][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.623688][T11911] ? kfree+0x1a0/0x440 [ 332.627880][T11911] ? tomoyo_path_number_perm+0x68d/0x880 [ 332.633525][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.639291][T11911] ? tomoyo_path_number_perm+0x71a/0x880 [ 332.645138][T11911] ? tomoyo_path_number_perm+0x208/0x880 [ 332.650780][T11911] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 332.656792][T11911] ? __fget_files+0x29/0x470 [ 332.661394][T11911] ? __fget_files+0x3f3/0x470 [ 332.666084][T11911] ? srso_alias_return_thunk+0x5/0xfbef5 [ 332.671727][T11911] ? __pfx_ext4_ioctl+0x10/0x10 [ 332.676598][T11911] __se_sys_ioctl+0xfb/0x170 [ 332.681196][T11911] do_syscall_64+0xf3/0x230 [ 332.685807][T11911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.691712][T11911] RIP: 0033:0x7fd37c77e719 [ 332.696136][T11911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.715754][T11911] RSP: 002b:00007fd37d5d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.724180][T11911] RAX: ffffffffffffffda RBX: 00007fd37c935f80 RCX: 00007fd37c77e719 [ 332.732154][T11911] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000005 [ 332.740133][T11911] RBP: 00007fd37c7f175e R08: 0000000000000000 R09: 0000000000000000 [ 332.748122][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.756096][T11911] R13: 0000000000000000 R14: 00007fd37c935f80 R15: 00007ffdc2add068 [ 332.764083][T11911] [ 332.767360][T11911] Kernel Offset: disabled [ 332.771680][T11911] Rebooting in 86400 seconds..