last executing test programs: 9.465883497s ago: executing program 2 (id=801): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 8.871673495s ago: executing program 1 (id=802): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0) 8.870568765s ago: executing program 4 (id=803): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00'}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x2004080, &(0x7f00000001c0)={[{}, {@gid}, {@part={'part', 0x3d, 0x1}}, {@nodecompose}, {@part={'part', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'macroman'}}]}, 0x1, 0x71b, &(0x7f00000004c0)="$eJzs3U9sW3cdAPDvc2wnzqTM29qtIKRGq6hgZW0SM1okBAEhlMOEKnHZNbTJGtXJqiRDaYVoBgyOcECohx2GUDjshHZAGnBAwBmExBWVcyXuFRIYvednx3bsxEnzZymfj/T8fu+935/v77vnX/xnlQP4vzX3RpQ2I4m5S69vpMcPt2r1h1u15VZ5tFmtEBFJvluJSP4UMRvNLT7RvJZJBo3z2qOP3rv44INa86iYb1n9Qm+7ct8eGruMsJlvMbnf+W8rDurvRp9+7++r66Qdd5qwC63EwUlr7LC5n+YDn+/A6XE/YqTU53w1YjwixiIieymQrw6FYw7v0O1rlQMAAICPp5G9Kjz7OB7HRkwcTzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdEiavxmY5FuhVZ6MpPX7/+X8XKpcPuF4d/e5Pa6/u3j5y8cUCgAAAAAAAAAcgQ/zL+7PP47HsRETrfONJPvO/+Xs4Ez2+Ey8HWuxEKtxOTZiPtZjPVZjOqI00dFheWN+fX11emfLn0fastFo3M9bzkREdUfLmWOYNAAAAAAAAAA8vb4fczFx0kEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECnJKLU3GXbmVa5GoViRIxFRDmttxnx+1b5VBntPvzDScUBAAAAx6eS7yeS/zYLjSR7z/9i9r5/LN6OlViPpViPeizEzeyzgOa7/sLfNmv1h1u15XTb2fFX/7WvOLIeI2Ik3hkw8lRW42y7xVx8I74Vl2IyrsdqLMV3Yj7WYyEmo5JOIuYjiWql+elFtRVn/3hnu46u98Z2vuf4XBZJJRZjKYvtctwoZ6Hnc0jHPNcx2m/KET0jvpNmJ/lKbsgc3ez47/XT/HOZXOPZIfs4GtVs5qV2RqbS3OfZeG733A99n8z2HWk6Cu3PoM5sj5Ie9o7Uyvm395Pz8Xyf5vpH3Tk/bH0/Svvn+KDqvZmYiUJ+90W82J3zO59+8Hx348/+/Y/XbxVWbt9aXLt0hFM6UqVWoTcTtY5MvLT73Zdnop5mYnP4TJR6T4w9wTwOUXoLpWtethQNuVp+PSvNx8sdt+BbcTMW4mpMxXRci6n4YsxEresOO9uV12JtuTsn2XOtsHN9y5evnxX6BH/hMx2Vftyx1nX73cHTc2BpXp6L7bx2rnTV7Fp+ZvYnMdWRpee7777e+2vffwXS8T+Zl9MxftD+i/Nx0JWJfG1uRffC7s/DXzTSx7X6yu3VW/N3hhzvYr5P0/pu99r8y8OYz8Gl90u64hazoywnldb9kl57oR1td77K+TcuzXaFHdfOtq9VYyKW4psDn6nl/DXczp6a117qvPaP7ZWznL++aV2rxGISrVc58VbUs1chPSaPJ6sADG38lfFy5VHlL5X3Kz+s3Kq8Pva10WujnypH6c/F3478uvCrwpeSV+L9+F5MnHSkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNFi7e+/2fL2+sNouxFjvmSctlAeOtXshCnvW2XpmuA6jGrH7WEleKB/u3E9joRKtM/85d6g9fxgRu9QpP/EQSX6PvZr//tQR5Cft9lA6bP1wWnamMdJ5qdF0f0DzYqtV/56LsTYWAwYdbT8LZv9avT1f/3ejq06lI2OD14zT+suBQLcr68t3rqzdvffq0vL8mwtvLqzMXLt67WrtC9Ofv7K4VF+Yaj6edJTAUVi7e29kqIrPHHkoAAAAAAAAAAAAwJDy//t//cD/mKG4R53y6lr/kc8f91QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAU2rujShtRhLTU5en0uOHW7V6urXK2zWLEVGIiOS7zX1qNn2odnSXDBrntUcfvXfxwQe17b6KrfqFznZjB5rFZr7FZESM5Pu9jfbpZmd/Nzr62zxQeEl7hmnCLpQO1Akcvv8FAAD//5BR+7o=") getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x200, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) 8.602888196s ago: executing program 1 (id=806): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300)={[{@space_cache_v1}, {@nossd_spread}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@clear_cache}, {@noacl}, {@nodatacow}, {@barrier}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1fe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='btrfs_set_extent_bit\x00', r2}, 0x18) read(r1, &(0x7f0000000000), 0x2000) 8.55214566s ago: executing program 2 (id=808): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000f80)={0xffffffff, {{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x1, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @private=0xa010102}}]}, 0x410) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000180)={0x0, 0x0, 0x3, '\x00', &(0x7f0000000100)=0xaf}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7}) 7.736427791s ago: executing program 4 (id=810): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x301f}, 0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b8000000", 0xf, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) 7.539421983s ago: executing program 2 (id=812): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d0", 0x20}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a", 0x2d}], 0x3}}], 0x1, 0x20008000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7.409665569s ago: executing program 2 (id=813): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x0, 0x0, 0x0, 0x9, 0x40, {0x200000000003, 0xfffffffffffffff8, 0x4, 0x100000001, 0x0, 0x10000000, 0x2, 0x0, 0xffffffff, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x410180) r4 = dup3(r2, r3, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) syz_open_pts(r5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f0000000000)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x1c67c}) 5.522127971s ago: executing program 4 (id=815): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x0, 0x57, 0xe1, 0x74, 0x20, 0x2c42, 0x16f8, 0xe390, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc9, 0x1, 0x0, 0x4a, 0x3e, 0xe7, 0x1}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.519789014s ago: executing program 0 (id=816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0) 5.409720608s ago: executing program 1 (id=818): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) r2 = timerfd_create(0x8, 0x80000) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.363675497s ago: executing program 3 (id=819): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x25dfdbfd, {}, [{0x4}]}, 0x18}}, 0x0) 5.357390841s ago: executing program 0 (id=820): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00'}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0x2004080, &(0x7f00000001c0)={[{}, {@gid}, {@part={'part', 0x3d, 0x1}}, {@nodecompose}, {@part={'part', 0x3d, 0x3}}, {@nls={'nls', 0x3d, 'macroman'}}]}, 0x1, 0x71b, &(0x7f00000004c0)="$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") getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x200, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) 5.101994705s ago: executing program 3 (id=821): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 4.792456951s ago: executing program 3 (id=822): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000f80)={0xffffffff, {{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x1, 0x7, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @private=0xa010102}}]}, 0x410) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000180)={0x0, 0x0, 0x3, '\x00', &(0x7f0000000100)=0xaf}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7}) 3.877694305s ago: executing program 0 (id=823): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) 3.838900801s ago: executing program 3 (id=824): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.643819092s ago: executing program 3 (id=825): sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 2.790730881s ago: executing program 1 (id=826): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xffff}, {0xc, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4040890) unshare(0x40020000) mkdir(&(0x7f0000000080)='./control\x00', 0x109) inotify_init1(0x800) 2.71781396s ago: executing program 3 (id=827): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000040)={[{@errors_continue}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@noinline_data}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noextent_cache}, {@compress_cache}, {@age_extent_cache}, {@noheap}, {@compress_cache}, {@extent_cache}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x41649fcff006385b, 0x18) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x32d800, 0x182) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 2.331820229s ago: executing program 4 (id=828): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ppoll(&(0x7f00000004c0)=[{r1, 0x10}], 0x1, 0x0, 0x0, 0x0) 2.240119994s ago: executing program 0 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000100)=0x87a) 2.176617538s ago: executing program 2 (id=830): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x40000102, 0x0, 0x0) 2.108955731s ago: executing program 4 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f000001f8c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="d53657c70b66be680c51cc6a1c41f1e5d2d0fd88baeae949fc916493a9334f0931ec2870511b185e1a1f242fda66003d3a9b3e600bff5093999346071206c669da66a589bfb4cf4d1d50db2e90c2990f5bcfe55c20465d39c73eb491895eebc74af5cdac8862001797846e1e669146a4e17434cd2f37641eddd4fb1a87f974ec98671103e1146044baf1ac99fffe50c1462fda9d5d7e70cf1dd716746d25f07481f08f6f0245ca560e77b6e1318a409f1686447eacee7f3707ec2508ef0ce06c0989ade191a80cc93eecbb268df4710590f8b0bbde18c73121a03dfbe55f8b448c8f1a2a85d81a", @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYBLOB="a6af891d142abbe86c2b6c42ac9eefc3f3124a519189b10501010000000000000995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYRES8, @ANYRESOCT, @ANYRES64], 0x0, 0x1df, &(0x7f0000000380)="$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") acct(&(0x7f0000000040)='./bus\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x20024000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a32"], 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={&(0x7f00000001c0), 0x0, 0x0, r6, 0x3, 0x7, 0x489d0821, 0xf, {0x4, 0x4, 0x8, 0xffff, 0xe100, 0x2, 0x8, 0x9, 0x79f, 0x10, 0x4, 0x0, 0x5, 0xec9, "3d717d1f1de4c4ee8dd3dcaf6f53f33489674c2572f54c71fb9d3cbb9b4fdf89"}}) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000700)={[{@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file0/../file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.078830313s ago: executing program 0 (id=832): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) 1.929180038s ago: executing program 0 (id=833): socket$nl_route(0x10, 0x3, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 997.725141ms ago: executing program 1 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r7, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) 996.778983ms ago: executing program 2 (id=835): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 854.785426ms ago: executing program 4 (id=836): vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) unshare(0x22020600) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4adf7005c2c00fe8000f33a08cf000000000000000000ff0200000000000000000000000000013c00000000000000050200c9008b0090780000009857f581ed07af018f0315b572d434a7024c71f6b6607116d99657fc7567967b439266f0dea9a96d55788547614e0b3cda3100a6ab1d8ec8990c1aa0fad2bd9805541a9bd468"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, 0x0, 0x3c}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 0s ago: executing program 1 (id=837): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) unshare(0x69a04c8e98d914be) kernel console output (not intermixed with test programs): t(1751477337.847:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc77db8d290 code=0x7ffc0000 [ 274.852714][ T7994] XFS (loop2): Ending clean mount [ 274.881909][ T7994] XFS (loop2): Quotacheck needed: Please wait. [ 274.889170][ T8009] loop0: detected capacity change from 0 to 512 [ 274.893856][ T30] audit: type=1326 audit(1751477337.857:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc77db90157 code=0x7ffc0000 [ 274.961120][ T30] audit: type=1326 audit(1751477337.857:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 274.990885][ T7994] XFS (loop2): Quotacheck: Done. [ 275.084065][ T5828] bcachefs (loop4): shutdown complete [ 275.610281][ T30] audit: type=1326 audit(1751477337.857:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc77db90157 code=0x7ffc0000 [ 275.616163][ T8009] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 275.632604][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.635372][ T30] audit: type=1326 audit(1751477337.857:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc77db8d58a code=0x7ffc0000 [ 275.669379][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.686271][ T30] audit: type=1326 audit(1751477337.857:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 275.718236][ T8009] EXT4-fs (loop0): orphan cleanup on readonly fs [ 275.740117][ T30] audit: type=1326 audit(1751477337.857:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 275.763151][ T30] audit: type=1326 audit(1751477337.867:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7991 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 275.787317][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.961493][ T8009] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 275.979463][ T8009] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 276.544475][ T8021] loop3: detected capacity change from 0 to 2048 [ 276.973626][ T8009] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.430: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 277.003131][ T8021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.087247][ T8009] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.430: couldn't read orphan inode 13 (err -117) [ 277.160708][ T8009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 277.410122][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.528966][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.216796][ T8030] loop2: detected capacity change from 0 to 128 [ 278.238813][ T8030] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.294184][ T8030] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.312036][ T8036] loop0: detected capacity change from 0 to 1024 [ 278.684024][ T8041] loop3: detected capacity change from 0 to 32768 [ 278.693429][ T8041] XFS: ikeep mount option is deprecated. [ 278.719755][ T8041] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.884650][ T8041] XFS (loop3): Ending clean mount [ 278.893979][ T8041] XFS (loop3): Quotacheck needed: Please wait. [ 279.329854][ T8041] XFS (loop3): Quotacheck: Done. [ 279.769202][ T5829] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 280.007299][ T8056] loop2: detected capacity change from 0 to 32768 [ 280.231461][ T8056] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 280.231488][ T8056] allowing incompatible features above 0.0: (unknown version) [ 280.231499][ T8056] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 280.276341][ T8056] bcachefs (loop2): initializing new filesystem [ 280.291352][ T8056] bcachefs (loop2): going read-write [ 280.349360][ T8056] bcachefs (loop2): marking superblocks [ 280.361856][ T8056] bcachefs (loop2): initializing freespace [ 280.371435][ T8056] bcachefs (loop2): done initializing freespace [ 280.380148][ T8056] bcachefs (loop2): reading snapshots table [ 280.386132][ T8056] bcachefs (loop2): reading snapshots done [ 280.463674][ T8056] bcachefs (loop2): done starting filesystem [ 280.735571][ T8071] loop1: detected capacity change from 0 to 8 [ 281.173331][ T8071] SQUASHFS error: xz decompression failed, data probably corrupt [ 281.207540][ T8071] SQUASHFS error: Failed to read block 0x108: -5 [ 281.312646][ T8071] SQUASHFS error: Unable to read metadata cache entry [106] [ 281.353356][ T8071] SQUASHFS error: Unable to read inode 0x11f [ 281.545142][ T8075] loop3: detected capacity change from 0 to 32768 [ 281.625839][ T5845] bcachefs (loop2): shutting down [ 281.630889][ T5845] bcachefs (loop2): going read-only [ 281.643964][ T5845] bcachefs (loop2): finished waiting for writes to stop [ 281.751259][ T5845] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 281.846751][ T5845] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 282.219763][ T8075] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 282.220004][ T8075] allowing incompatible features above 0.0: (unknown version) [ 282.220239][ T8075] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 282.270119][ T8075] bcachefs (loop3): initializing new filesystem [ 282.291632][ T8075] bcachefs (loop3): going read-write [ 282.323131][ T8087] loop4: detected capacity change from 0 to 2048 [ 282.481987][ T5845] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 282.579848][ T5845] bcachefs (loop2): marking filesystem clean [ 282.606994][ T8087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.636159][ T8075] bcachefs (loop3): marking superblocks [ 282.650393][ T8075] bcachefs (loop3): initializing freespace [ 282.659604][ T8075] bcachefs (loop3): done initializing freespace [ 282.668280][ T8075] bcachefs (loop3): reading snapshots table [ 282.674246][ T8075] bcachefs (loop3): reading snapshots done [ 282.751050][ T8075] bcachefs (loop3): done starting filesystem [ 282.896398][ T5845] bcachefs (loop2): shutdown complete [ 283.433093][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.732564][ T8096] loop0: detected capacity change from 0 to 32768 [ 283.782412][ T8098] loop4: detected capacity change from 0 to 512 [ 283.793466][ T8098] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 283.849847][ T8096] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 283.849869][ T8096] allowing incompatible features above 0.0: (unknown version) [ 283.849875][ T8096] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 283.894592][ T8096] bcachefs (loop0): initializing new filesystem [ 283.907115][ T8096] bcachefs (loop0): going read-write [ 283.942554][ T8098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 283.950627][ T8096] bcachefs (loop0): marking superblocks [ 283.960262][ T8096] bcachefs (loop0): initializing freespace [ 283.967694][ T8096] bcachefs (loop0): done initializing freespace [ 283.975287][ T8096] bcachefs (loop0): reading snapshots table [ 283.981191][ T8096] bcachefs (loop0): reading snapshots done [ 283.998432][ T8098] EXT4-fs error (device loop4): ext4_iget_extra_inode:5034: inode #15: comm syz.4.443: corrupted in-inode xattr: e_value size too large [ 284.019316][ T8098] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.443: couldn't read orphan inode 15 (err -117) [ 284.033195][ T8096] bcachefs (loop0): done starting filesystem [ 284.081118][ T8098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.095489][ T5829] bcachefs (loop3): shutting down [ 284.100530][ T5829] bcachefs (loop3): going read-only [ 284.123006][ T5829] bcachefs (loop3): finished waiting for writes to stop [ 284.158745][ T5829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 284.572623][ T5893] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 284.761676][ T5829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 284.789080][ T5829] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 284.823261][ T5829] bcachefs (loop3): marking filesystem clean [ 284.843344][ T5893] usb 5-1: too many configurations: 241, using maximum allowed: 8 [ 284.932934][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.004581][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.015337][ T5833] bcachefs (loop0): shutting down [ 285.020370][ T5833] bcachefs (loop0): going read-only [ 285.027247][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 285.035388][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.418448][ T8115] loop1: detected capacity change from 0 to 2048 [ 285.427014][ T5829] bcachefs (loop3): shutdown complete [ 285.512990][ T8115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.783270][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 285.863398][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 285.909443][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 285.933808][ T5833] bcachefs (loop0): marking filesystem clean [ 285.981711][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.001635][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.021775][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.053521][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.075275][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.092718][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.141098][ T5833] bcachefs (loop0): shutdown complete [ 286.147005][ T5893] usb 5-1: New USB device found, idVendor=0458, idProduct=0083, bcdDevice=83.9c [ 286.192698][ T5893] usb 5-1: New USB device strings: Mfr=43, Product=78, SerialNumber=21 [ 286.200973][ T5893] usb 5-1: Product: syz [ 286.226444][ T5893] usb 5-1: Manufacturer: syz [ 286.231058][ T5893] usb 5-1: SerialNumber: syz [ 286.257096][ T5893] usb 5-1: config 0 descriptor?? [ 286.521713][ T5893] usb 5-1: USB disconnect, device number 8 [ 286.711637][ T8131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.445'. [ 286.797642][ T8132] loop3: detected capacity change from 0 to 512 [ 286.810239][ T8132] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.820945][ T8132] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 286.856487][ T8132] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 286.910015][ T8132] EXT4-fs (loop3): orphan cleanup on readonly fs [ 286.928145][ T8132] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.445: Invalid block bitmap block 0 in block_group 0 [ 286.947479][ T8132] EXT4-fs (loop3): Remounting filesystem read-only [ 286.957311][ T8132] __quota_error: 20 callbacks suppressed [ 286.957326][ T8132] Quota error (device loop3): write_blk: dquota write failed [ 286.975308][ T8132] Quota error (device loop3): write_blk: dquota write failed [ 287.020169][ T8132] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 287.382950][ T8132] EXT4-fs (loop3): 1 orphan inode deleted [ 287.425204][ T8132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.449234][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.649226][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.734336][ T8137] loop2: detected capacity change from 0 to 32768 [ 287.741372][ T8137] XFS: ikeep mount option is deprecated. [ 287.837327][ T8137] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 287.880192][ T8150] loop3: detected capacity change from 0 to 256 [ 287.898810][ T8150] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.305733][ T8137] XFS (loop2): Ending clean mount [ 288.319929][ T8137] XFS (loop2): Quotacheck needed: Please wait. [ 288.423446][ T8137] XFS (loop2): Quotacheck: Done. [ 288.443074][ T1215] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 288.775234][ T1215] usb 4-1: config index 0 descriptor too short (expected 32820, got 52) [ 288.890171][ T1215] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 288.971501][ T8153] loop1: detected capacity change from 0 to 1024 [ 288.993364][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.021653][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 289.041447][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 289.057930][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 289.070104][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.097060][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.142157][ T1215] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 289.164780][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.187550][ T1215] usb 4-1: Product: syz [ 289.191729][ T1215] usb 4-1: Manufacturer: syz [ 289.212607][ T1215] usb 4-1: SerialNumber: syz [ 289.230035][ T1215] usb 4-1: config 0 descriptor?? [ 289.255613][ T1215] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 289.280703][ T8156] loop4: detected capacity change from 0 to 32768 [ 289.288128][ T8156] XFS: ikeep mount option is deprecated. [ 289.368443][ T8156] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.052483][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 290.301813][ T30] audit: type=1326 audit(1751477353.907:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 290.420431][ T8156] XFS (loop4): Ending clean mount [ 290.433361][ T8156] XFS (loop4): Quotacheck needed: Please wait. [ 290.492619][ T30] audit: type=1326 audit(1751477353.907:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 290.547065][ T8156] XFS (loop4): Quotacheck: Done. [ 290.559056][ T8176] loop2: detected capacity change from 0 to 1024 [ 290.707894][ T8176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.831868][ T5828] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 291.873210][ T5886] usb 4-1: USB disconnect, device number 10 [ 292.688929][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.014895][ T8186] loop3: detected capacity change from 0 to 32768 [ 293.321813][ T8194] loop4: detected capacity change from 0 to 32768 [ 293.910330][ T8208] loop2: detected capacity change from 0 to 512 [ 293.916619][ T8186] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 293.916643][ T8186] allowing incompatible features above 0.0: (unknown version) [ 293.916652][ T8186] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 293.916696][ T8186] bcachefs (loop3): initializing new filesystem [ 293.925335][ T8186] bcachefs (loop3): going read-write [ 293.987716][ T8214] loop0: detected capacity change from 0 to 1024 [ 294.034116][ T8208] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 294.040823][ T8194] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 294.065960][ T8194] allowing incompatible features above 0.0: (unknown version) [ 294.074275][ T8194] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 294.088686][ T8194] bcachefs (loop4): initializing new filesystem [ 294.104599][ T8194] bcachefs (loop4): going read-write [ 294.279418][ T8208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 294.287571][ T8186] bcachefs (loop3): marking superblocks [ 294.297235][ T8186] bcachefs (loop3): initializing freespace [ 294.304711][ T8186] bcachefs (loop3): done initializing freespace [ 294.312293][ T8186] bcachefs (loop3): reading snapshots table [ 294.318258][ T8186] bcachefs (loop3): reading snapshots done [ 294.335655][ T8194] bcachefs (loop4): marking superblocks [ 294.349208][ T8186] bcachefs (loop3): done starting filesystem [ 294.351393][ T8194] bcachefs (loop4): initializing freespace [ 294.364694][ T8194] bcachefs (loop4): done initializing freespace [ 294.372253][ T8194] bcachefs (loop4): reading snapshots table [ 294.378249][ T8194] bcachefs (loop4): reading snapshots done [ 294.495634][ T8214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.552847][ T8194] bcachefs (loop4): done starting filesystem [ 294.597070][ T8208] EXT4-fs error (device loop2): ext4_iget_extra_inode:5034: inode #15: comm syz.2.463: corrupted in-inode xattr: e_value size too large [ 294.709332][ T8208] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.463: couldn't read orphan inode 15 (err -117) [ 294.789578][ T8208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.803490][ T8214] EXT4-fs (loop0): shut down requested (2) [ 295.518197][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 295.782748][ T5918] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 296.082779][ T8233] loop1: detected capacity change from 0 to 32768 [ 296.089870][ T8233] XFS: ikeep mount option is deprecated. [ 296.212565][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.394757][ T8233] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 296.429775][ T8194] syz.4.458 (8194) used greatest stack depth: 16936 bytes left [ 296.453618][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.479375][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.501381][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.558567][ T8233] XFS (loop1): Ending clean mount [ 296.565847][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.577567][ T8233] XFS (loop1): Quotacheck needed: Please wait. [ 296.622329][ T5828] bcachefs (loop4): shutting down [ 296.638633][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.656665][ T5828] bcachefs (loop4): going read-only [ 296.661535][ T8233] XFS (loop1): Quotacheck: Done. [ 296.661887][ T5828] bcachefs (loop4): finished waiting for writes to stop [ 296.683786][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.716148][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.738589][ T5918] usb 3-1: New USB device found, idVendor=0458, idProduct=0083, bcdDevice=83.9c [ 296.753373][ T5918] usb 3-1: New USB device strings: Mfr=43, Product=78, SerialNumber=21 [ 296.772960][ T5828] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5 [ 296.789993][ T5829] bcachefs (loop3): shutting down [ 296.822975][ T5829] bcachefs (loop3): going read-only [ 296.855741][ T5829] bcachefs (loop3): finished waiting for writes to stop [ 296.867913][ T5828] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5 [ 297.012400][ T5828] bcachefs (loop4): clean shutdown complete, journal seq 6 [ 297.064888][ T5828] bcachefs (loop4): marking filesystem clean [ 297.099524][ T5829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5 [ 297.438286][ T5918] usb 3-1: Product: syz [ 297.442466][ T5918] usb 3-1: Manufacturer: syz [ 297.452629][ T5918] usb 3-1: SerialNumber: syz [ 297.470462][ T5829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 297.472064][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.491917][ T5918] usb 3-1: config 0 descriptor?? [ 297.498445][ T5918] usb 3-1: can't set config #0, error -71 [ 297.508438][ T5918] usb 3-1: USB disconnect, device number 17 [ 297.530832][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.546871][ T5829] bcachefs (loop3): clean shutdown complete, journal seq 6 [ 297.570605][ T5828] bcachefs (loop4): shutdown complete [ 297.584176][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.623442][ T5829] bcachefs (loop3): marking filesystem clean [ 297.777038][ T8249] loop2: detected capacity change from 0 to 256 [ 297.895119][ T5829] bcachefs (loop3): shutdown complete [ 297.946661][ T8249] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.124433][ T8251] loop1: detected capacity change from 0 to 32768 [ 298.131795][ T8251] XFS: ikeep mount option is deprecated. [ 298.164771][ T8254] loop0: detected capacity change from 0 to 1024 [ 298.206230][ T8251] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.230868][ T8254] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.243648][ T5839] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 298.294978][ T8254] EXT4-fs (loop0): shut down requested (2) [ 298.483201][ T5839] usb 3-1: config index 0 descriptor too short (expected 32820, got 52) [ 298.525386][ T5839] usb 3-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 298.586165][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.589936][ T8251] XFS (loop1): Ending clean mount [ 298.616904][ T8251] XFS (loop1): Quotacheck needed: Please wait. [ 298.708870][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 298.748446][ T8251] XFS (loop1): Quotacheck: Done. [ 298.815701][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 298.912198][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 298.972858][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.056337][ T5839] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 299.150870][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.248095][ T5839] usb 3-1: Product: syz [ 299.278856][ T5839] usb 3-1: Manufacturer: syz [ 299.318629][ T5839] usb 3-1: SerialNumber: syz [ 299.423970][ T5839] usb 3-1: config 0 descriptor?? [ 299.690982][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 299.708165][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.019594][ T8269] loop4: detected capacity change from 0 to 32768 [ 300.030821][ T5839] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 300.095702][ T8271] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.473'. [ 300.502844][ T30] audit: type=1326 audit(1751477364.077:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923078e929 code=0x7ffc0000 [ 301.130969][ T30] audit: type=1326 audit(1751477364.077:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923078e929 code=0x7ffc0000 [ 301.250426][ T30] audit: type=1326 audit(1751477364.077:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f923078d290 code=0x7ffc0000 [ 301.292388][ T30] audit: type=1326 audit(1751477364.077:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9230790157 code=0x7ffc0000 [ 301.323617][ T30] audit: type=1326 audit(1751477364.077:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f923078e929 code=0x7ffc0000 [ 301.363397][ T8269] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 301.363411][ T30] audit: type=1326 audit(1751477364.077:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9230790157 code=0x7ffc0000 [ 301.363423][ T8269] allowing incompatible features above 0.0: (unknown version) [ 301.363435][ T8269] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 301.363454][ T30] audit: type=1326 audit(1751477364.077:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f923078d58a code=0x7ffc0000 [ 301.386230][ T8269] bcachefs (loop4): initializing new filesystem [ 301.395068][ T8269] bcachefs (loop4): going read-write [ 301.529858][ T8269] bcachefs (loop4): marking superblocks [ 301.543496][ T8269] bcachefs (loop4): initializing freespace [ 301.552094][ T8269] bcachefs (loop4): done initializing freespace [ 301.561940][ T8269] bcachefs (loop4): reading snapshots table [ 301.565753][ T30] audit: type=1326 audit(1751477364.077:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923078e929 code=0x7ffc0000 [ 301.567985][ T8269] bcachefs (loop4): reading snapshots done [ 301.649980][ T8269] bcachefs (loop4): done starting filesystem [ 301.700485][ T30] audit: type=1326 audit(1751477364.077:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923078e929 code=0x7ffc0000 [ 301.766710][ T30] audit: type=1326 audit(1751477364.077:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.2.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f923078e929 code=0x7ffc0000 [ 302.599015][ T5828] bcachefs (loop4): shutting down [ 302.625530][ T5828] bcachefs (loop4): going read-only [ 302.643879][ T5828] bcachefs (loop4): finished waiting for writes to stop [ 302.686894][ T5828] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 302.727662][ T8301] loop1: detected capacity change from 0 to 128 [ 302.731032][ T5839] usb 3-1: USB disconnect, device number 18 [ 302.764111][ T8301] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.803862][ T5828] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 302.808294][ T8301] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.851776][ T5828] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 302.883309][ T5828] bcachefs (loop4): marking filesystem clean [ 302.904761][ T8271] loop0: detected capacity change from 0 to 32768 [ 302.942430][ T8271] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 302.942430][ T8271] clean (size 2912): [ 302.942430][ T8271] flags: 0 [ 302.942430][ T8271] journal_seq: 8 [ 302.942430][ T8271] usage: type=inodes v=8 [ 302.942430][ T8271] usage: type=key_version v=0 [ 302.942430][ T8271] usage: type=reserved v=0 [ 302.942430][ T8271] usage: type=reserved v=0 [ 302.942430][ T8271] usage: type=reserved v=0 [ 302.942430][ T8271] usage: type=reserved v=0 [ 302.942430][ T8271] data_usage: btree: 1/1 [0]=2816 [ 302.942430][ T8271] data_usage: journal: 1/1 [0]=0 [ 302.942430][ T8271] btree_keys: btree=extents level=0 u64s 8 type deleted 0:2048:0 len 8 ver 1065151889408: [ 302.942430][ T8271] btree_keys: btree=extents level=0 u64s 1 type deleted POS_MIN len 224 ver 137438953472: [ 302.942430][ T8271] btree_keys: btree=extents level=0 u64s 32 type deleted POS_MIN len 0 ver 962072674304: [ 302.942430][ T8271] clock: read=0 [ 302.942430][ T8271] clock: write=1288 [ 302.942430][ T8271] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN ptr: 0:6912 gen 0 [ 302.942430][ T8271] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN ptr: 0:9728 gen 0 [ 302.942430][ T8271] btree_root: btree=dirents l [ 302.942696][ T8271] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 303.073446][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.083363][ T8303] loop3: detected capacity change from 0 to 32768 [ 303.219539][ T5828] bcachefs (loop4): shutdown complete [ 303.323765][ T8303] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 303.323791][ T8303] allowing incompatible features above 0.0: (unknown version) [ 303.323801][ T8303] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 303.369303][ T8303] bcachefs (loop3): initializing new filesystem [ 303.384817][ T8303] bcachefs (loop3): going read-write [ 303.643651][ T8303] bcachefs (loop3): marking superblocks [ 303.656302][ T8303] bcachefs (loop3): initializing freespace [ 303.665037][ T8303] bcachefs (loop3): done initializing freespace [ 303.673816][ T8303] bcachefs (loop3): reading snapshots table [ 303.681710][ T8303] bcachefs (loop3): reading snapshots done [ 303.725146][ T8303] bcachefs (loop3): done starting filesystem [ 304.468957][ T5829] bcachefs (loop3): shutting down [ 304.480854][ T5829] bcachefs (loop3): going read-only [ 304.508548][ T8324] loop0: detected capacity change from 0 to 512 [ 304.523162][ T5829] bcachefs (loop3): finished waiting for writes to stop [ 304.817631][ T8325] loop2: detected capacity change from 0 to 32768 [ 304.825097][ T8325] XFS: ikeep mount option is deprecated. [ 304.868288][ T8324] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 305.038776][ T8325] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.419677][ T8325] XFS (loop2): Ending clean mount [ 305.445370][ T8324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 305.454830][ T5829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 305.465154][ T8325] XFS (loop2): Quotacheck needed: Please wait. [ 305.503957][ T8325] XFS (loop2): Quotacheck: Done. [ 305.582760][ T8324] EXT4-fs error (device loop0): ext4_iget_extra_inode:5034: inode #15: comm syz.0.481: corrupted in-inode xattr: e_value size too large [ 305.631622][ T8324] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.481: couldn't read orphan inode 15 (err -117) [ 305.643882][ T5829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 305.741778][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.483'. [ 305.779610][ T5829] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 305.816524][ T8324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.887747][ T5829] bcachefs (loop3): marking filesystem clean [ 306.381894][ T8339] loop1: detected capacity change from 0 to 512 [ 306.396078][ T8339] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.472721][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 306.498277][ T8339] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 306.573010][ T8339] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 306.591827][ T8339] EXT4-fs (loop1): orphan cleanup on readonly fs [ 306.604355][ T8339] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.483: Invalid block bitmap block 0 in block_group 0 [ 306.619316][ T8339] EXT4-fs (loop1): Remounting filesystem read-only [ 306.626268][ T8339] __quota_error: 17 callbacks suppressed [ 306.626280][ T8339] Quota error (device loop1): write_blk: dquota write failed [ 306.639929][ T8339] Quota error (device loop1): write_blk: dquota write failed [ 306.699273][ T5829] bcachefs (loop3): shutdown complete [ 306.733568][ T8339] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 306.801586][ T8347] loop4: detected capacity change from 0 to 8 [ 306.866954][ T8347] SQUASHFS error: xz decompression failed, data probably corrupt [ 306.874897][ T8347] SQUASHFS error: Failed to read block 0x108: -5 [ 306.881263][ T8347] SQUASHFS error: Unable to read metadata cache entry [106] [ 306.888734][ T8347] SQUASHFS error: Unable to read inode 0x11f [ 306.963358][ T5893] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 307.032825][ T8339] EXT4-fs (loop1): 1 orphan inode deleted [ 307.187134][ T5893] usb 1-1: too many configurations: 241, using maximum allowed: 8 [ 307.233544][ T8339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.268017][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.402939][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.418324][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.435655][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.955851][ T5893] usb 1-1: unable to read config index 4 descriptor/start: -71 [ 308.087503][ T5893] usb 1-1: can't read configurations, error -71 [ 308.113732][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.901692][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.154981][ T8360] loop1: detected capacity change from 0 to 32768 [ 309.317055][ T8364] loop4: detected capacity change from 0 to 256 [ 309.327383][ T8364] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 309.411859][ T8360] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 309.411885][ T8360] allowing incompatible features above 0.0: (unknown version) [ 309.411906][ T8360] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 309.456627][ T8360] bcachefs (loop1): initializing new filesystem [ 309.472283][ T8360] bcachefs (loop1): going read-write [ 309.590342][ T8360] bcachefs (loop1): marking superblocks [ 309.604933][ T8360] bcachefs (loop1): initializing freespace [ 309.613748][ T8360] bcachefs (loop1): done initializing freespace [ 309.623452][ T8360] bcachefs (loop1): reading snapshots table [ 309.629417][ T8360] bcachefs (loop1): reading snapshots done [ 309.858492][ T30] audit: type=1326 audit(1751477373.397:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 309.880684][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.320072][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 310.336070][ T30] audit: type=1326 audit(1751477373.397:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 310.374587][ T30] audit: type=1326 audit(1751477373.397:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f197db8d290 code=0x7ffc0000 [ 310.396743][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.471446][ T8360] bcachefs (loop1): done starting filesystem [ 310.512762][ T30] audit: type=1326 audit(1751477373.397:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f197db90157 code=0x7ffc0000 [ 310.582836][ T30] audit: type=1326 audit(1751477373.397:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 310.605141][ T30] audit: type=1326 audit(1751477373.397:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f197db90157 code=0x7ffc0000 [ 310.627292][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.635750][ T30] audit: type=1326 audit(1751477373.397:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8363 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f197db8d58a code=0x7ffc0000 [ 311.292009][ T8387] loop0: detected capacity change from 0 to 1024 [ 311.390488][ T8387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.395952][ T8393] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.494'. [ 311.476506][ T5832] bcachefs (loop1): shutting down [ 311.482009][ T5832] bcachefs (loop1): going read-only [ 311.508338][ T8387] EXT4-fs (loop0): shut down requested (2) [ 311.535303][ T5832] bcachefs (loop1): finished waiting for writes to stop [ 311.722298][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 312.007380][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 312.036565][ T5832] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 312.063553][ T5832] bcachefs (loop1): marking filesystem clean [ 312.198874][ T5832] bcachefs (loop1): shutdown complete [ 312.765962][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.809366][ T8393] loop2: detected capacity change from 0 to 32768 [ 312.841594][ T8393] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 312.841594][ T8393] clean (size 2912): [ 312.841594][ T8393] flags: 0 [ 312.841594][ T8393] journal_seq: 8 [ 312.841594][ T8393] usage: type=inodes v=8 [ 312.841594][ T8393] usage: type=key_version v=0 [ 312.841594][ T8393] usage: type=reserved v=0 [ 312.841594][ T8393] usage: type=reserved v=0 [ 312.841594][ T8393] usage: type=reserved v=0 [ 312.841594][ T8393] usage: type=reserved v=0 [ 312.841594][ T8393] data_usage: btree: 1/1 [0]=2816 [ 312.841594][ T8393] data_usage: journal: 1/1 [0]=0 [ 312.841594][ T8393] btree_keys: btree=extents level=0 u64s 8 type deleted 0:2048:0 len 8 ver 1065151889408: [ 312.841594][ T8393] btree_keys: btree=extents level=0 u64s 1 type deleted POS_MIN len 224 ver 137438953472: [ 312.841594][ T8393] btree_keys: btree=extents level=0 u64s 32 type deleted POS_MIN len 0 ver 962072674304: [ 312.841594][ T8393] clock: read=0 [ 312.841594][ T8393] clock: write=1288 [ 312.841594][ T8393] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN ptr: 0:6912 gen 0 [ 312.841594][ T8393] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN ptr: 0:9728 gen 0 [ 312.841594][ T8393] btree_root: btree=dirents l [ 312.841814][ T8393] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 312.972456][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.030778][ T8393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 313.214421][ T8393] sctp: failed to load transform for md5: -2 [ 317.065372][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.071825][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.505481][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.511789][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.814546][ T8415] loop1: detected capacity change from 0 to 32768 [ 407.316107][ T8415] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 407.316125][ T8415] allowing incompatible features above 0.0: (unknown version) [ 407.316131][ T8415] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 407.360749][ T8415] bcachefs (loop1): initializing new filesystem [ 407.375233][ T8415] bcachefs (loop1): going read-write [ 407.439402][ T8415] bcachefs (loop1): marking superblocks [ 407.451793][ T8415] bcachefs (loop1): initializing freespace [ 407.459315][ T8415] bcachefs (loop1): done initializing freespace [ 407.468776][ T8415] bcachefs (loop1): reading snapshots table [ 407.474768][ T8415] bcachefs (loop1): reading snapshots done [ 407.514750][ T8415] bcachefs (loop1): done starting filesystem [ 408.419063][ T8441] loop3: detected capacity change from 0 to 32768 [ 408.892544][ T8441] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 408.892570][ T8441] allowing incompatible features above 0.0: (unknown version) [ 408.892603][ T8441] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 408.937773][ T8441] bcachefs (loop3): initializing new filesystem [ 408.993928][ T8441] bcachefs (loop3): going read-write [ 409.381826][ T8441] bcachefs (loop3): marking superblocks [ 409.393679][ T8441] bcachefs (loop3): initializing freespace [ 409.401066][ T8441] bcachefs (loop3): done initializing freespace [ 409.408679][ T8441] bcachefs (loop3): reading snapshots table [ 409.414604][ T8441] bcachefs (loop3): reading snapshots done [ 409.460334][ T8441] bcachefs (loop3): done starting filesystem [ 409.568773][ T5832] bcachefs (loop1): shutting down [ 409.575458][ T5832] bcachefs (loop1): going read-only [ 409.608468][ T5832] bcachefs (loop1): finished waiting for writes to stop [ 409.633352][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 409.645238][ T8463] loop4: detected capacity change from 0 to 256 [ 409.680632][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4 [ 409.782789][ T8463] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 409.837567][ T5832] bcachefs (loop1): clean shutdown complete, journal seq 5 [ 409.847850][ T5832] bcachefs (loop1): marking filesystem clean [ 410.278347][ T5832] bcachefs (loop1): shutdown complete [ 410.472744][ T5886] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 410.583806][ T5829] bcachefs (loop3): shutting down [ 410.588858][ T5829] bcachefs (loop3): going read-only [ 410.606948][ T5829] bcachefs (loop3): finished waiting for writes to stop [ 410.623483][ T5829] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 410.675538][ T5886] usb 5-1: config index 0 descriptor too short (expected 32820, got 52) [ 410.699932][ T5829] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 410.722702][ T5886] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 410.735434][ T5829] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 410.751936][ T5829] bcachefs (loop3): marking filesystem clean [ 410.760959][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 410.816255][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 410.892853][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 410.919219][ T5829] bcachefs (loop3): shutdown complete [ 410.934175][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 410.981136][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.045450][ T5886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 411.060798][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.069367][ T5886] usb 5-1: Product: syz [ 411.077797][ T5886] usb 5-1: Manufacturer: syz [ 411.156286][ T5886] usb 5-1: SerialNumber: syz [ 411.185793][ T5886] usb 5-1: config 0 descriptor?? [ 411.221324][ T5886] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.285562][ T8476] loop2: detected capacity change from 0 to 128 [ 411.327571][ T8476] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 411.422850][ T8476] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 412.316080][ T8492] loop0: detected capacity change from 0 to 8 [ 412.619818][ T8492] SQUASHFS error: xz decompression failed, data probably corrupt [ 412.627621][ T8492] SQUASHFS error: Failed to read block 0x108: -5 [ 412.636049][ T8492] SQUASHFS error: Unable to read metadata cache entry [106] [ 412.643367][ T8492] SQUASHFS error: Unable to read inode 0x11f [ 413.301792][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 413.301809][ T30] audit: type=1326 audit(1751477476.907:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 413.366773][ T30] audit: type=1326 audit(1751477476.907:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 413.389675][ T30] audit: type=1326 audit(1751477476.907:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f197db8d290 code=0x7ffc0000 [ 413.401157][ T8501] loop0: detected capacity change from 0 to 256 [ 413.412226][ T30] audit: type=1326 audit(1751477476.907:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f197db90157 code=0x7ffc0000 [ 413.477686][ T8501] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 413.625847][ T30] audit: type=1326 audit(1751477476.907:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 413.958866][ T30] audit: type=1326 audit(1751477476.907:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f197db90157 code=0x7ffc0000 [ 414.112894][ T30] audit: type=1326 audit(1751477476.907:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f197db8d58a code=0x7ffc0000 [ 414.136151][ T30] audit: type=1326 audit(1751477476.907:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 414.798800][ T30] audit: type=1326 audit(1751477476.957:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 415.060095][ T30] audit: type=1326 audit(1751477476.957:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8462 comm="syz.4.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 415.166429][ T8512] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 415.667880][ T8514] loop0: detected capacity change from 0 to 1024 [ 416.282242][ T8522] loop2: detected capacity change from 0 to 1024 [ 416.461409][ T5918] usb 5-1: USB disconnect, device number 9 [ 418.660565][ T8544] loop1: detected capacity change from 0 to 256 [ 418.722370][ T8544] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.048275][ T8551] loop3: detected capacity change from 0 to 8 [ 419.144238][ T8551] SQUASHFS error: xz decompression failed, data probably corrupt [ 419.152148][ T8551] SQUASHFS error: Failed to read block 0x108: -5 [ 419.158660][ T8551] SQUASHFS error: Unable to read metadata cache entry [106] [ 419.166033][ T8551] SQUASHFS error: Unable to read inode 0x11f [ 419.972618][ T8553] loop4: detected capacity change from 0 to 32768 [ 419.980007][ T8553] XFS: ikeep mount option is deprecated. [ 420.250774][ T8561] loop0: detected capacity change from 0 to 32768 [ 420.327833][ T8553] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.443008][ T8561] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 420.443036][ T8561] allowing incompatible features above 0.0: (unknown version) [ 420.443047][ T8561] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 420.488070][ T8561] bcachefs (loop0): initializing new filesystem [ 420.503965][ T8561] bcachefs (loop0): going read-write [ 420.522222][ T8553] XFS (loop4): Ending clean mount [ 420.531804][ T8553] XFS (loop4): Quotacheck needed: Please wait. [ 420.563418][ T8553] XFS (loop4): Quotacheck: Done. [ 420.578319][ T8561] bcachefs (loop0): marking superblocks [ 420.591736][ T8561] bcachefs (loop0): initializing freespace [ 420.600468][ T8561] bcachefs (loop0): done initializing freespace [ 420.609151][ T8561] bcachefs (loop0): reading snapshots table [ 420.615164][ T8561] bcachefs (loop0): reading snapshots done [ 420.812630][ T8561] bcachefs (loop0): done starting filesystem [ 421.275287][ T5828] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 422.009939][ T5833] bcachefs (loop0): shutting down [ 422.029044][ T5833] bcachefs (loop0): going read-only [ 422.054177][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 422.071410][ T8590] loop4: detected capacity change from 0 to 256 [ 422.084943][ T8590] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.112986][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 422.290812][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 422.888825][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 422.918644][ T1215] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 422.933378][ T5833] bcachefs (loop0): marking filesystem clean [ 423.091856][ T5833] bcachefs (loop0): shutdown complete [ 423.166759][ T1215] usb 5-1: config index 0 descriptor too short (expected 32820, got 52) [ 423.179731][ T1215] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 423.193542][ T1215] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 423.205570][ T1215] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 423.218334][ T1215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 423.229794][ T1215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 423.241241][ T1215] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.265230][ T1215] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 423.275693][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.292670][ T1215] usb 5-1: Product: syz [ 423.297264][ T1215] usb 5-1: Manufacturer: syz [ 423.302126][ T1215] usb 5-1: SerialNumber: syz [ 423.313869][ T1215] usb 5-1: config 0 descriptor?? [ 423.325913][ T1215] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.094403][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 424.094419][ T30] audit: type=1326 audit(1751477487.497:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 424.170014][ T30] audit: type=1326 audit(1751477487.497:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 424.256866][ T30] audit: type=1326 audit(1751477487.507:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f197db8d290 code=0x7ffc0000 [ 424.320418][ T30] audit: type=1326 audit(1751477487.607:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f197db90157 code=0x7ffc0000 [ 424.392283][ T30] audit: type=1326 audit(1751477487.607:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 424.451158][ T30] audit: type=1326 audit(1751477487.707:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f197db90157 code=0x7ffc0000 [ 424.478427][ T30] audit: type=1326 audit(1751477487.707:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f197db8d58a code=0x7ffc0000 [ 424.560300][ T30] audit: type=1326 audit(1751477487.707:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 424.596879][ T30] audit: type=1326 audit(1751477487.707:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8589 comm="syz.4.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197db8e929 code=0x7ffc0000 [ 424.601826][ T8610] loop2: detected capacity change from 0 to 32768 [ 424.627388][ T8610] XFS: ikeep mount option is deprecated. [ 424.678528][ T8610] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.772870][ T8610] XFS (loop2): Ending clean mount [ 424.781791][ T8610] XFS (loop2): Quotacheck needed: Please wait. [ 424.841832][ T8610] XFS (loop2): Quotacheck: Done. [ 425.087852][ T8626] loop3: detected capacity change from 0 to 256 [ 425.176694][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.271367][ T5989] usb 5-1: USB disconnect, device number 10 [ 425.294114][ T8626] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 425.642702][ T5893] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 425.743303][ T8632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.876253][ T5893] usb 4-1: config index 0 descriptor too short (expected 32820, got 52) [ 425.899189][ T5893] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 425.968503][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 425.987154][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 426.002398][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 426.021473][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 426.036752][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.061993][ T5893] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 426.074724][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.106801][ T5893] usb 4-1: Product: syz [ 426.126567][ T5893] usb 4-1: Manufacturer: syz [ 426.131345][ T5893] usb 4-1: SerialNumber: syz [ 426.140347][ T8634] loop2: detected capacity change from 0 to 256 [ 426.156114][ T5893] usb 4-1: config 0 descriptor?? [ 426.165436][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.218798][ T8634] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.009562][ T5989] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 427.059131][ T30] audit: type=1326 audit(1751477490.637:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.3.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 427.279667][ T5989] usb 3-1: config index 0 descriptor too short (expected 32820, got 52) [ 427.292160][ T5989] usb 3-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 427.306385][ T5989] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 427.318311][ T5989] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 427.333777][ T5989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 427.347068][ T5989] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 427.359880][ T5989] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.388520][ T5989] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 427.402222][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.410484][ T5989] usb 3-1: Product: syz [ 427.418654][ T5989] usb 3-1: Manufacturer: syz [ 427.424988][ T5989] usb 3-1: SerialNumber: syz [ 427.444574][ T5989] usb 3-1: config 0 descriptor?? [ 427.455671][ T5989] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.512204][ T8645] loop0: detected capacity change from 0 to 256 [ 427.533433][ T8645] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.833799][ T1215] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 427.984391][ T1215] usb 1-1: config index 0 descriptor too short (expected 32820, got 52) [ 427.993616][ T1215] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 428.004351][ T1215] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.015178][ T1215] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 428.026725][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 428.037798][ T1215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 428.049114][ T1215] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.141164][ T5989] usb 4-1: USB disconnect, device number 11 [ 428.159460][ T1215] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 428.171319][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.181733][ T1215] usb 1-1: Product: syz [ 428.194937][ T1215] usb 1-1: Manufacturer: syz [ 428.199755][ T1215] usb 1-1: SerialNumber: syz [ 428.281253][ T1215] usb 1-1: config 0 descriptor?? [ 428.410963][ T1215] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 429.202423][ T5989] usb 3-1: USB disconnect, device number 19 [ 429.853216][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 429.853233][ T30] audit: type=1326 audit(1751477492.887:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 430.035405][ T30] audit: type=1326 audit(1751477492.887:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 430.060135][ T8658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.105644][ T8662] loop3: detected capacity change from 0 to 1024 [ 430.554293][ T30] audit: type=1326 audit(1751477492.887:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef2ef8d290 code=0x7ffc0000 [ 430.696737][ T30] audit: type=1326 audit(1751477492.897:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fef2ef90157 code=0x7ffc0000 [ 430.721601][ T30] audit: type=1326 audit(1751477492.897:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 430.744443][ T30] audit: type=1326 audit(1751477492.897:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fef2ef90157 code=0x7ffc0000 [ 430.773102][ T30] audit: type=1326 audit(1751477492.897:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef2ef8d58a code=0x7ffc0000 [ 430.801229][ T30] audit: type=1326 audit(1751477492.897:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 430.812083][ T8662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.842019][ T30] audit: type=1326 audit(1751477492.897:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 430.929900][ T30] audit: type=1326 audit(1751477492.907:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 431.035712][ T1215] usb 1-1: USB disconnect, device number 13 [ 431.182450][ T8662] EXT4-fs (loop3): shut down requested (2) [ 431.578163][ T8678] loop0: detected capacity change from 0 to 32768 [ 432.016154][ T8683] loop2: detected capacity change from 0 to 32768 [ 432.023293][ T8683] XFS: ikeep mount option is deprecated. [ 432.252279][ T8684] loop1: detected capacity change from 0 to 32768 [ 432.259428][ T8684] XFS: ikeep mount option is deprecated. [ 432.482257][ T8684] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 432.482257][ T8683] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 432.539157][ T8678] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 432.539184][ T8678] allowing incompatible features above 0.0: (unknown version) [ 432.539194][ T8678] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 432.585138][ T8678] bcachefs (loop0): initializing new filesystem [ 432.602045][ T8678] bcachefs (loop0): going read-write [ 432.611020][ T8678] bcachefs (loop0): marking superblocks [ 432.622260][ T8678] bcachefs (loop0): initializing freespace [ 432.629796][ T8678] bcachefs (loop0): done initializing freespace [ 432.637432][ T8678] bcachefs (loop0): reading snapshots table [ 432.643392][ T8678] bcachefs (loop0): reading snapshots done [ 432.671103][ T8678] bcachefs (loop0): done starting filesystem [ 432.796665][ T8684] XFS (loop1): Ending clean mount [ 432.796731][ T8683] XFS (loop2): Ending clean mount [ 432.823424][ T8684] XFS (loop1): Quotacheck needed: Please wait. [ 432.830502][ T8683] XFS (loop2): Quotacheck needed: Please wait. [ 432.834010][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.882718][ T8684] XFS (loop1): Quotacheck: Done. [ 433.448793][ T8683] XFS (loop2): Quotacheck: Done. [ 434.160983][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 434.188102][ T5833] bcachefs (loop0): shutting down [ 434.282917][ T5833] bcachefs (loop0): going read-only [ 434.308478][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 434.336977][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 434.375426][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 434.403789][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 434.421636][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 434.465247][ T5833] bcachefs (loop0): marking filesystem clean [ 434.597577][ T5833] bcachefs (loop0): shutdown complete [ 435.660167][ T8731] loop2: detected capacity change from 0 to 512 [ 435.809020][ T8731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 435.866376][ T8731] EXT4-fs (loop2): orphan cleanup on readonly fs [ 435.917919][ T8731] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 436.213667][ T8738] loop1: detected capacity change from 0 to 32768 [ 436.220997][ T8738] XFS: ikeep mount option is deprecated. [ 436.430760][ T8731] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 436.465295][ T8738] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 436.800274][ T8731] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #13: comm syz.2.560: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 436.855722][ T8731] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.560: couldn't read orphan inode 13 (err -117) [ 436.891778][ T8731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 436.966282][ T8738] XFS (loop1): Ending clean mount [ 436.975865][ T8738] XFS (loop1): Quotacheck needed: Please wait. [ 437.039481][ T8738] XFS (loop1): Quotacheck: Done. [ 437.119039][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.092808][ T8756] loop2: detected capacity change from 0 to 32768 [ 438.138693][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 438.452046][ T8759] loop4: detected capacity change from 0 to 32768 [ 438.499908][ T8756] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 438.499935][ T8756] allowing incompatible features above 0.0: (unknown version) [ 438.499946][ T8756] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 438.546597][ T8756] bcachefs (loop2): initializing new filesystem [ 438.562212][ T8756] bcachefs (loop2): going read-write [ 438.610235][ T8756] bcachefs (loop2): marking superblocks [ 438.623154][ T8756] bcachefs (loop2): initializing freespace [ 438.631849][ T8756] bcachefs (loop2): done initializing freespace [ 438.643162][ T8756] bcachefs (loop2): reading snapshots table [ 438.649191][ T8756] bcachefs (loop2): reading snapshots done [ 438.679736][ T8756] bcachefs (loop2): done starting filesystem [ 438.722588][ T5913] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 438.825042][ T8759] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 438.825069][ T8759] allowing incompatible features above 0.0: (unknown version) [ 438.825081][ T8759] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 438.871569][ T8759] bcachefs (loop4): initializing new filesystem [ 438.887249][ T8759] bcachefs (loop4): going read-write [ 439.265582][ T5913] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 439.268590][ T8759] bcachefs (loop4): marking superblocks [ 439.275112][ T5913] usb 4-1: config 0 has no interface number 0 [ 439.285923][ T8759] bcachefs (loop4): initializing freespace [ 439.297291][ T8759] bcachefs (loop4): done initializing freespace [ 439.305936][ T8759] bcachefs (loop4): reading snapshots table [ 439.306876][ T5913] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 439.311869][ T8759] bcachefs (loop4): reading snapshots done [ 439.349221][ T8759] bcachefs (loop4): done starting filesystem [ 439.372668][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.380828][ T5913] usb 4-1: Product: syz [ 439.393394][ T5913] usb 4-1: Manufacturer: syz [ 439.398408][ T5913] usb 4-1: SerialNumber: syz [ 439.418429][ T5913] usb 4-1: config 0 descriptor?? [ 439.429834][ T5913] ums-usbat 4-1:0.23: USB Mass Storage device detected [ 439.940407][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.950053][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.398432][ T10] usb 4-1: USB disconnect, device number 12 [ 441.128018][ T5845] bcachefs (loop2): shutting down [ 441.152890][ T5845] bcachefs (loop2): going read-only [ 441.175285][ T5845] bcachefs (loop2): finished waiting for writes to stop [ 441.212456][ T5845] bcachefs (loop2): flushing journal and stopping allocators, journal seq 5 [ 441.227381][ T5828] bcachefs (loop4): shutting down [ 441.233647][ T5828] bcachefs (loop4): going read-only [ 441.239285][ T5828] bcachefs (loop4): finished waiting for writes to stop [ 441.253284][ T5828] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 441.267438][ T5845] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5 [ 441.279980][ T5828] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 441.384799][ T5828] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 441.392165][ T5845] bcachefs (loop2): clean shutdown complete, journal seq 6 [ 441.514857][ T5845] bcachefs (loop2): marking filesystem clean [ 441.523134][ T5828] bcachefs (loop4): marking filesystem clean [ 442.040478][ T8805] loop1: detected capacity change from 0 to 2048 [ 442.127995][ T5845] bcachefs (loop2): shutdown complete [ 442.139287][ T8805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.188573][ T5828] bcachefs (loop4): shutdown complete [ 442.604984][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.808579][ T8813] loop3: detected capacity change from 0 to 1024 [ 442.963633][ T1341] hfsplus: b-tree write err: -5, ino 4 [ 443.499649][ T8818] loop3: detected capacity change from 0 to 256 [ 443.560563][ T8818] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.373573][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 444.373589][ T30] audit: type=1326 audit(1751477507.597:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 444.548614][ T30] audit: type=1326 audit(1751477507.597:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 444.548662][ T30] audit: type=1326 audit(1751477507.597:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4da718d290 code=0x7ffc0000 [ 444.548700][ T30] audit: type=1326 audit(1751477507.607:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4da7190157 code=0x7ffc0000 [ 444.548738][ T30] audit: type=1326 audit(1751477507.607:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 444.548774][ T30] audit: type=1326 audit(1751477507.607:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4da7190157 code=0x7ffc0000 [ 444.548812][ T30] audit: type=1326 audit(1751477507.607:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4da718d58a code=0x7ffc0000 [ 444.548849][ T30] audit: type=1326 audit(1751477507.607:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 444.548887][ T30] audit: type=1326 audit(1751477507.607:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 444.548924][ T30] audit: type=1326 audit(1751477507.617:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.3.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f4da718e929 code=0x7ffc0000 [ 444.852614][ T5989] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 445.054491][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 445.071221][ T8830] loop4: detected capacity change from 0 to 32768 [ 445.079329][ T8830] XFS: ikeep mount option is deprecated. [ 445.092207][ T5989] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 445.110848][ T5989] usb 1-1: config 0 has no interface number 0 [ 445.165530][ T5989] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 445.174750][ T8830] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.190722][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.407620][ T5989] usb 1-1: Product: syz [ 445.411893][ T5989] usb 1-1: Manufacturer: syz [ 445.417067][ T5989] usb 1-1: SerialNumber: syz [ 445.425421][ T5989] usb 1-1: config 0 descriptor?? [ 445.444292][ T8830] XFS (loop4): Ending clean mount [ 445.451623][ T8830] XFS (loop4): Quotacheck needed: Please wait. [ 445.452803][ T5989] ums-usbat 1-1:0.23: USB Mass Storage device detected [ 445.541487][ T8830] XFS (loop4): Quotacheck: Done. [ 446.326510][ T5828] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 446.366481][ T5989] usb 1-1: USB disconnect, device number 14 [ 446.923489][ T5913] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 447.540481][ T8861] loop0: detected capacity change from 0 to 256 [ 447.588628][ T8861] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.608886][ T5913] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 447.631168][ T5913] usb 5-1: config 0 has no interface number 0 [ 447.666296][ T5913] usb 5-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 447.680503][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.688935][ T5913] usb 5-1: Product: syz [ 447.696347][ T5913] usb 5-1: Manufacturer: syz [ 447.701070][ T5913] usb 5-1: SerialNumber: syz [ 447.722905][ T5913] usb 5-1: config 0 descriptor?? [ 447.773903][ T5913] ums-usbat 5-1:0.23: USB Mass Storage device detected [ 447.882635][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 448.007207][ T5989] usb 5-1: USB disconnect, device number 11 [ 448.086910][ T10] usb 1-1: config index 0 descriptor too short (expected 32820, got 52) [ 448.102237][ T10] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 448.117898][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 448.129144][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 448.166338][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 61, changing to 9 [ 448.193473][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25458, setting to 1024 [ 448.208651][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.224891][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 448.234299][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.242393][ T10] usb 1-1: Product: syz [ 448.247288][ T10] usb 1-1: Manufacturer: syz [ 448.251984][ T10] usb 1-1: SerialNumber: syz [ 448.271078][ T10] usb 1-1: config 0 descriptor?? [ 448.286805][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 448.432446][ T8869] loop2: detected capacity change from 0 to 32768 [ 448.439726][ T8869] XFS: ikeep mount option is deprecated. [ 448.475867][ T8869] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 448.570654][ T8869] XFS (loop2): Ending clean mount [ 448.603876][ T8869] XFS (loop2): Quotacheck needed: Please wait. [ 448.685385][ T8869] XFS (loop2): Quotacheck: Done. [ 449.367393][ T8882] loop4: detected capacity change from 0 to 512 [ 449.758282][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 449.855177][ T8882] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.587: casefold flag without casefold feature [ 449.874481][ T8882] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.587: couldn't read orphan inode 15 (err -117) [ 449.964751][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.050126][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 450.096961][ T8882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'. [ 450.144802][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.587'. [ 450.164185][ T8882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'. [ 450.196353][ T8893] loop3: detected capacity change from 0 to 256 [ 450.289344][ T8893] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 450.442797][ T8893] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 450.451361][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 450.451374][ T30] audit: type=1326 audit(1751477513.967:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 450.548381][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.608222][ T30] audit: type=1326 audit(1751477513.967:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 450.639121][ T8893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 450.785114][ T30] audit: type=1326 audit(1751477513.967:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef2ef8d290 code=0x7ffc0000 [ 450.809452][ T8898] loop2: detected capacity change from 0 to 64 [ 450.882603][ T30] audit: type=1326 audit(1751477513.967:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fef2ef90157 code=0x7ffc0000 [ 450.917326][ T8896] syz.2.588: attempt to access beyond end of device [ 450.917326][ T8896] loop2: rw=0, sector=128, nr_sectors = 2 limit=64 [ 450.931739][ T8896] Trying to free block not in datazone [ 450.937235][ T8896] Trying to free block not in datazone [ 450.942715][ T8896] Trying to free block not in datazone [ 450.948266][ T8896] Trying to free block not in datazone [ 450.953736][ T8896] Trying to free block not in datazone [ 450.959165][ T8896] Trying to free block not in datazone [ 450.964626][ T8896] minix_free_block (loop2:6): bit already cleared [ 451.012621][ T30] audit: type=1326 audit(1751477513.967:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 451.041042][ T5989] kernel write not supported for file /input/mouse0 (pid: 5989 comm: kworker/1:8) [ 451.164315][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 451.217677][ T8907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.257212][ T8907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.270748][ T30] audit: type=1326 audit(1751477513.967:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fef2ef90157 code=0x7ffc0000 [ 451.293161][ T30] audit: type=1326 audit(1751477513.967:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fef2ef8d58a code=0x7ffc0000 [ 451.315413][ T30] audit: type=1326 audit(1751477513.967:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 451.338494][ T30] audit: type=1326 audit(1751477513.967:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 451.362390][ T30] audit: type=1326 audit(1751477513.967:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8860 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fef2ef8e929 code=0x7ffc0000 [ 451.381348][ T8909] process 'syz.1.595' launched '/dev/fd/7' with NULL argv: empty string added [ 451.409129][ T8907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.449078][ T8907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.554019][ T8909] netlink: 3 bytes leftover after parsing attributes in process `syz.1.595'. [ 451.649958][ T5989] usb 1-1: USB disconnect, device number 15 [ 451.837613][ T8915] loop3: detected capacity change from 0 to 4096 [ 451.955393][ T8919] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.665355][ T8943] loop3: detected capacity change from 0 to 2048 [ 454.672740][ T8943] EXT4-fs: Ignoring removed bh option [ 455.867340][ T8943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.922611][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 455.922628][ T30] audit: type=1800 audit(1751477519.497:623): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.603" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 455.928313][ T8943] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 455.967274][ T8943] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 455.979830][ T8943] EXT4-fs (loop3): This should not happen!! Data will be lost [ 455.979830][ T8943] [ 455.989552][ T8943] EXT4-fs (loop3): Total free blocks count 0 [ 455.995610][ T8943] EXT4-fs (loop3): Free/Dirty block details [ 456.001538][ T8943] EXT4-fs (loop3): free_blocks=2415919104 [ 456.007342][ T8943] EXT4-fs (loop3): dirty_blocks=656 [ 456.012613][ T8943] EXT4-fs (loop3): Block reservation details [ 456.018630][ T8943] EXT4-fs (loop3): i_reserved_data_blocks=41 [ 456.835235][ T30] audit: type=1326 audit(1751477520.417:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 456.899062][ T30] audit: type=1326 audit(1751477520.427:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 457.057321][ T30] audit: type=1326 audit(1751477520.427:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 457.129325][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 457.195208][ T30] audit: type=1326 audit(1751477520.427:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 457.815680][ T30] audit: type=1326 audit(1751477520.427:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 457.916563][ T30] audit: type=1326 audit(1751477520.437:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 459.407068][ T30] audit: type=1326 audit(1751477520.437:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 459.407121][ T8962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 459.436000][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.491203][ T8962] vhci_hcd vhci_hcd.0: Device attached [ 459.500446][ T30] audit: type=1326 audit(1751477520.437:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 459.507874][ T8971] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 459.529175][ T8971] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 459.538672][ T30] audit: type=1326 audit(1751477520.437:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 459.574837][ T8971] vhci_hcd vhci_hcd.0: Device attached [ 459.744300][ T10] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 459.878449][ T8976] loop2: detected capacity change from 0 to 2048 [ 459.960431][ T8962] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(14) [ 459.967061][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 460.128085][ T8971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.138071][ T8962] vhci_hcd vhci_hcd.0: Device attached [ 460.140711][ T8976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.175310][ T8962] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 460.181920][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.205639][ T8962] vhci_hcd vhci_hcd.0: Device attached [ 460.250803][ T8971] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(23) [ 460.257426][ T8971] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.265976][ T8971] vhci_hcd vhci_hcd.0: Device attached [ 460.282255][ T8962] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(22) [ 460.288866][ T8962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 460.313064][ T8962] vhci_hcd vhci_hcd.0: Device attached [ 460.353582][ T8976] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 460.385249][ T8971] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 460.459835][ T8976] overlayfs: failed to verify upper root origin [ 460.480484][ T8962] vhci_hcd vhci_hcd.0: port 0 already used [ 460.510003][ T8987] vhci_hcd: connection closed [ 460.510932][ T8973] vhci_hcd: connection closed [ 460.510983][ T8966] vhci_hcd: connection reset by peer [ 460.515735][ T8980] vhci_hcd: connection closed [ 460.524140][ T8985] vhci_hcd: connection closed [ 460.554011][ T3474] vhci_hcd: stop threads [ 460.580477][ T8989] vhci_hcd: connection closed [ 460.581621][ T3474] vhci_hcd: release socket [ 460.601933][ T3474] vhci_hcd: disconnect device [ 460.603934][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.622674][ T3474] vhci_hcd: stop threads [ 460.626947][ T3474] vhci_hcd: release socket [ 460.649653][ T3474] vhci_hcd: disconnect device [ 460.672898][ T3474] vhci_hcd: stop threads [ 460.677164][ T3474] vhci_hcd: release socket [ 460.703712][ T3474] vhci_hcd: disconnect device [ 460.712132][ T3474] vhci_hcd: stop threads [ 460.719486][ T3474] vhci_hcd: release socket [ 460.733588][ T3474] vhci_hcd: disconnect device [ 460.741551][ T3474] vhci_hcd: stop threads [ 460.746351][ T3474] vhci_hcd: release socket [ 460.751041][ T3474] vhci_hcd: disconnect device [ 460.761088][ T3474] vhci_hcd: stop threads [ 460.771204][ T3474] vhci_hcd: release socket [ 460.789995][ T3474] vhci_hcd: disconnect device [ 461.163706][ T9010] capability: warning: `syz.2.617' uses deprecated v2 capabilities in a way that may be insecure [ 461.192960][ T9010] loop2: detected capacity change from 0 to 8 [ 461.255363][ T9010] Filesystem uses "unknown" compression. This is not supported [ 461.666266][ T9013] loop1: detected capacity change from 0 to 512 [ 461.765810][ T9013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.924563][ T9013] EXT4-fs (loop1): orphan cleanup on readonly fs [ 462.298800][ T9013] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.620: bg 0: block 248: padding at end of block bitmap is not set [ 462.313822][ T9013] __quota_error: 4 callbacks suppressed [ 462.313838][ T9013] Quota error (device loop1): write_blk: dquota write failed [ 462.336454][ T9017] loop3: detected capacity change from 0 to 2048 [ 462.369041][ T9013] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 462.403649][ T9013] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.620: Failed to acquire dquot type 1 [ 462.455132][ T9013] EXT4-fs (loop1): 1 truncate cleaned up [ 462.487315][ T9013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.650521][ T9013] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.620: deleted inode referenced: 12 [ 463.244560][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.485856][ T9037] loop2: detected capacity change from 0 to 1024 [ 463.584907][ T9037] hfsplus: unable to find HFS+ superblock [ 463.869689][ T30] audit: type=1326 audit(1751477527.477:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 464.007182][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 465.112688][ T30] audit: type=1326 audit(1751477527.477:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 465.136597][ T30] audit: type=1326 audit(1751477527.477:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 465.159083][ T30] audit: type=1326 audit(1751477527.477:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 465.183336][ T10] vhci_hcd: vhci_device speed not set [ 465.189431][ T30] audit: type=1326 audit(1751477527.477:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 465.212224][ T30] audit: type=1326 audit(1751477527.777:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77db8e929 code=0x7ffc0000 [ 465.234699][ T30] audit: type=1326 audit(1751477527.777:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc77db858e7 code=0x7ffc0000 [ 465.335287][ T30] audit: type=1326 audit(1751477527.777:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.1.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc77db2ab19 code=0x7ffc0000 [ 465.500805][ T9054] loop2: detected capacity change from 0 to 512 [ 465.693619][ T9054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.706765][ T9054] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.846282][ T9054] virtiofs: Unknown parameter 'always 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 18 nlmon0 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 20 batadv0 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 21 vxcan0 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 22 vxcan1 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 23 veth0 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 24 veth1 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 25 wg0 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 26 wg1 : 1 V3 [ 465.846282][ T9054] 010000E0 1 0:00000000 0 [ 465.846282][ T9054] 27 wg2 : 1 ' [ 465.971717][ T9054] netlink: 'syz.2.630': attribute type 13 has an invalid length. [ 467.732935][ T9054] gretap0: refused to change device tx_queue_len [ 467.740086][ T9054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 467.821333][ T1215] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 468.004597][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.194133][ T1215] usb 5-1: config 0 has no interfaces? [ 468.221705][ T1215] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 468.231672][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.242660][ T1215] usb 5-1: Product: syz [ 468.246831][ T1215] usb 5-1: Manufacturer: syz [ 468.251397][ T1215] usb 5-1: SerialNumber: syz [ 468.284865][ T1215] usb 5-1: config 0 descriptor?? [ 468.680972][ T10] usb 5-1: USB disconnect, device number 12 [ 468.727829][ T9074] loop2: detected capacity change from 0 to 256 [ 469.767431][ T9085] loop3: detected capacity change from 0 to 512 [ 469.812556][ T9085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 469.899774][ T9085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 469.912924][ T9085] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.002844][ T9066] loop1: detected capacity change from 0 to 65536 [ 470.194308][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 470.194710][ T9066] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 470.276588][ T9066] XFS (loop1): Ending clean mount [ 470.297702][ T9066] XFS (loop1): Quotacheck needed: Please wait. [ 470.349017][ T9066] XFS (loop1): Quotacheck: Done. [ 470.634488][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 470.634500][ T30] audit: type=1800 audit(1751477534.227:676): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.633" name="file1" dev="loop1" ino=38 res=0 errno=0 [ 470.669784][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 470.862769][ T5918] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 471.110329][ T5918] usb 5-1: config 0 has no interfaces? [ 471.131288][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.147491][ T5832] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 471.156178][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.164951][ T5918] usb 5-1: Product: syz [ 471.169131][ T5918] usb 5-1: Manufacturer: syz [ 471.174149][ T5918] usb 5-1: SerialNumber: syz [ 471.184042][ T5918] usb 5-1: config 0 descriptor?? [ 471.430113][ T9116] misc userio: No port type given on /dev/userio [ 471.437518][ T9116] misc userio: The device must be registered before sending interrupts [ 471.538410][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 471.553892][ T9128] loop0: detected capacity change from 0 to 512 [ 471.564943][ T9128] EXT4-fs (loop0): Test dummy encryption mode enabled [ 471.571827][ T9128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 471.609120][ T9128] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.650: bad orphan inode 131083 [ 471.640733][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.697023][ T9130] ip6tnl1: entered promiscuous mode [ 471.702425][ T9130] ip6tnl1: entered allmulticast mode [ 471.781979][ T9134] fuse: Bad value for 'fd' [ 471.855282][ T9045] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 472.697875][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.743005][ T9045] usb 3-1: Using ep0 maxpacket: 16 [ 472.766304][ T9045] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.828496][ T9142] loop0: detected capacity change from 0 to 128 [ 472.841756][ T9045] usb 3-1: config 0 has no interfaces? [ 472.849732][ T9142] EXT4-fs (loop0): Test dummy encryption mode enabled [ 472.864303][ T9142] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.879152][ T9045] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 472.880653][ T9142] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.960117][ T9147] loop3: detected capacity change from 0 to 256 [ 472.975201][ T9147] loop3: detected capacity change from 0 to 256 [ 472.991011][ T9147] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 473.001720][ T9147] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 473.035657][ T9147] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 473.853206][ T9045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.861231][ T9045] usb 3-1: Product: syz [ 473.872227][ T9045] usb 3-1: Manufacturer: syz [ 473.892681][ T9045] usb 3-1: SerialNumber: syz [ 474.804223][ T9045] usb 3-1: config 0 descriptor?? [ 474.822656][ T9045] usb 3-1: can't set config #0, error -71 [ 474.844263][ T9045] usb 3-1: USB disconnect, device number 20 [ 475.838499][ T9149] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 475.892932][ T9152] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 476.288025][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.340776][ T9162] loop0: detected capacity change from 0 to 1024 [ 476.410235][ T5886] usb 5-1: USB disconnect, device number 13 [ 476.594374][ T9162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.293234][ T9162] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.572725][ T9162] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 477.589501][ T9162] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 477.609276][ T9162] EXT4-fs (loop0): This should not happen!! Data will be lost [ 477.609276][ T9162] [ 477.633238][ T9162] EXT4-fs (loop0): Total free blocks count 0 [ 477.640083][ T9162] EXT4-fs (loop0): Free/Dirty block details [ 477.663132][ T9162] EXT4-fs (loop0): free_blocks=4293918720 [ 477.669047][ T9162] EXT4-fs (loop0): dirty_blocks=80 [ 477.678059][ T9162] EXT4-fs (loop0): Block reservation details [ 477.693253][ T5886] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 477.709826][ T9162] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 477.789779][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 477.880861][ T5886] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.890204][ T5886] usb 5-1: config 0 has no interface number 0 [ 477.922929][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 477.954792][ T5886] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 477.972627][ T5886] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.983320][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.004256][ T5886] usb 5-1: config 0 descriptor?? [ 478.015819][ T9172] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 478.037652][ T5886] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 479.070497][ T9189] loop3: detected capacity change from 0 to 32768 [ 479.077823][ T9189] XFS: ikeep mount option is deprecated. [ 479.099781][ T9189] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 479.312771][ T9189] XFS (loop3): Ending clean mount [ 479.332410][ T9189] XFS (loop3): Quotacheck needed: Please wait. [ 479.345276][ T9201] x_tables: duplicate underflow at hook 4 [ 479.417290][ T9045] usb 5-1: USB disconnect, device number 14 [ 479.425330][ T9201] bridge0: port 3(syz_tun) entered blocking state [ 479.432757][ T9189] XFS (loop3): Quotacheck: Done. [ 479.444148][ T9201] bridge0: port 3(syz_tun) entered disabled state [ 479.450859][ T9201] syz_tun: entered allmulticast mode [ 479.519288][ T9201] syz_tun: entered promiscuous mode [ 479.545752][ T9201] bridge0: port 3(syz_tun) entered blocking state [ 479.552440][ T9201] bridge0: port 3(syz_tun) entered forwarding state [ 479.772915][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 480.031835][ T9181] loop2: detected capacity change from 0 to 32768 [ 480.460751][ T5829] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 480.934394][ T9219] loop1: detected capacity change from 0 to 1024 [ 481.375901][ T9219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.695846][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.832615][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 481.990526][ T9234] loop3: detected capacity change from 0 to 256 [ 482.091721][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.223389][ T5913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.943522][ T5913] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 482.972568][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.482613][ T5886] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 483.503408][ T5913] usb 5-1: config 0 descriptor?? [ 483.656788][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 483.787087][ T5886] usb 3-1: config 0 has an invalid interface number: 201 but max is 0 [ 483.815522][ T5886] usb 3-1: config 0 has no interface number 0 [ 484.395990][ T5886] usb 3-1: config 0 interface 201 has no altsetting 0 [ 484.407554][ T5886] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=e3.90 [ 484.421388][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.432695][ T5886] usb 3-1: Product: syz [ 484.436967][ T5886] usb 3-1: Manufacturer: syz [ 484.550979][ T5886] usb 3-1: SerialNumber: syz [ 484.560001][ T9245] netlink: 'syz.1.677': attribute type 2 has an invalid length. [ 484.567835][ T9245] netlink: 'syz.1.677': attribute type 8 has an invalid length. [ 484.575566][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.677'. [ 484.647969][ T5886] usb 3-1: config 0 descriptor?? [ 485.069519][ T5886] f81534a_ctrl 3-1:0.201: failed to set register 0x116: -5 [ 485.076881][ T5886] f81534a_ctrl 3-1:0.201: failed to enable ports: -5 [ 485.085010][ T5886] f81534a_ctrl 3-1:0.201: probe with driver f81534a_ctrl failed with error -5 [ 485.202203][ T5886] usb 3-1: USB disconnect, device number 21 [ 486.347564][ T5913] usb 5-1: USB disconnect, device number 15 [ 486.545138][ T9271] loop4: detected capacity change from 0 to 1024 [ 486.553103][ T9271] EXT4-fs: Ignoring removed orlov option [ 486.750949][ T9271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.597157][ T9288] loop3: detected capacity change from 0 to 512 [ 487.686554][ T9288] EXT4-fs (loop3): orphan cleanup on readonly fs [ 487.945961][ T9288] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.687: bg 0: block 248: padding at end of block bitmap is not set [ 487.977633][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.014702][ T9288] Quota error (device loop3): write_blk: dquota write failed [ 488.038471][ T9288] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 488.110983][ T9288] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.687: Failed to acquire dquot type 1 [ 488.222715][ T9296] loop2: detected capacity change from 0 to 256 [ 488.264484][ T9296] loop2: detected capacity change from 0 to 256 [ 488.291478][ T9296] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 488.302218][ T9296] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 488.355944][ T9296] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 488.414453][ T9288] EXT4-fs (loop3): 1 truncate cleaned up [ 489.160702][ T9288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.504906][ T9303] loop4: detected capacity change from 0 to 40427 [ 491.522789][ T9303] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 491.530743][ T9303] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 491.552465][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.575251][ T9303] F2FS-fs (loop4): invalid crc value [ 491.662097][ T9303] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 491.669456][ T9303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 491.752182][ T30] audit: type=1800 audit(1751477555.357:677): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.692" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 491.819311][ T9312] x_tables: duplicate underflow at hook 4 [ 493.882228][ T5844] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 493.889921][ T5844] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 493.954815][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.992111][ T9337] bond0: (slave rose0): Enslaving as an active interface with an up link [ 495.549219][ T9359] loop1: detected capacity change from 0 to 512 [ 495.593546][ T9359] EXT4-fs (loop1): orphan cleanup on readonly fs [ 495.609593][ T9359] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.704: bg 0: block 248: padding at end of block bitmap is not set [ 495.629103][ T9359] Quota error (device loop1): write_blk: dquota write failed [ 495.639710][ T9359] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 495.652467][ T9359] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.704: Failed to acquire dquot type 1 [ 495.670951][ T9359] EXT4-fs (loop1): 1 truncate cleaned up [ 495.681237][ T9359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 495.852694][ T9045] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 495.989997][ T9376] netlink: 165 bytes leftover after parsing attributes in process `syz.1.704'. [ 496.516749][ T9377] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 496.523286][ T9377] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 496.531115][ T9377] vhci_hcd vhci_hcd.0: Device attached [ 496.560582][ T9378] usbip_core: unknown command [ 496.594799][ T9378] vhci_hcd: unknown pdu 952769162 [ 496.608787][ T9377] sp0: Synchronizing with TNC [ 496.622196][ T9378] usbip_core: unknown command [ 496.629868][ T6398] vhci_hcd: stop threads [ 496.634490][ T6398] vhci_hcd: release socket [ 496.639364][ T6398] vhci_hcd: disconnect device [ 496.646236][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.817697][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 497.304604][ T9045] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.459840][ T9367] [U] è [ 497.679659][ T9045] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 498.075858][ T9045] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 498.084988][ T9045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.097273][ T9045] usb 5-1: config 0 descriptor?? [ 498.900213][ T9395] syz.3.712 (9395) used greatest stack depth: 15224 bytes left [ 499.302658][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 499.595008][ T9045] usb 5-1: USB disconnect, device number 16 [ 499.818335][ T9418] netlink: 165 bytes leftover after parsing attributes in process `syz.3.721'. [ 500.060300][ T9425] macsec0: entered promiscuous mode [ 500.065995][ T9425] macsec0: entered allmulticast mode [ 500.072769][ T9425] veth1_macvtap: entered allmulticast mode [ 500.515571][ T9434] loop1: detected capacity change from 0 to 256 [ 500.529716][ T9434] loop1: detected capacity change from 0 to 256 [ 501.522998][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.529278][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.578039][ T9434] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 501.588850][ T9434] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 502.565551][ T9434] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 503.914317][ T9446] sctp: failed to load transform for md5: -2 [ 506.747681][ T5989] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 506.778181][ T9496] loop0: detected capacity change from 0 to 1024 [ 506.804450][ T5989] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.823825][ T9496] EXT4-fs: Ignoring removed nomblk_io_submit option [ 506.844630][ T9496] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 506.895871][ T9496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.984302][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.136131][ T9489] loop3: detected capacity change from 0 to 32768 [ 507.213504][ T30] audit: type=1800 audit(1751477570.797:678): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.736" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 509.684507][ T9545] lo speed is unknown, defaulting to 1000 [ 509.691013][ T9545] lo speed is unknown, defaulting to 1000 [ 509.705238][ T9545] lo speed is unknown, defaulting to 1000 [ 509.750859][ T9545] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 509.873757][ T9545] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 510.139092][ T9545] lo speed is unknown, defaulting to 1000 [ 510.147863][ T9545] lo speed is unknown, defaulting to 1000 [ 510.155429][ T9545] lo speed is unknown, defaulting to 1000 [ 510.163814][ T9545] lo speed is unknown, defaulting to 1000 [ 510.171293][ T9545] lo speed is unknown, defaulting to 1000 [ 510.178965][ T9545] lo speed is unknown, defaulting to 1000 [ 510.484563][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 512.834613][ T9572] loop4: detected capacity change from 0 to 1024 [ 512.860343][ T9550] loop3: detected capacity change from 0 to 32768 [ 512.869280][ T9572] hfsplus: unable to find HFS+ superblock [ 513.434418][ T9550] read_mapping_page failed! [ 513.662813][ T9550] diRead: diIAGRead returned -5 [ 516.696172][ T9595] loop0: detected capacity change from 0 to 512 [ 519.463790][ T9604] loop0: detected capacity change from 0 to 32768 [ 519.576871][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xcd9c [ 519.587111][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xcd9c [ 519.626497][ T9604] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 519.665003][ T9622] kvm_intel: kvm [9620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf423 [ 519.730393][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf423 [ 519.741393][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xf423 [ 519.755526][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd20e [ 519.764310][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xd20e [ 519.823436][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa58c [ 519.832100][ T9622] kvm: kvm [9620]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0xa58c [ 519.881674][ T9622] kvm_intel: kvm [9620]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xf423 [ 519.887770][ T9604] XFS (loop0): Ending clean mount [ 519.986832][ T9653] loop3: detected capacity change from 0 to 128 [ 520.015510][ T9653] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 520.033655][ T9653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 520.104586][ T9653] overlayfs: upper fs needs to support d_type. [ 520.133630][ T9653] overlayfs: upper fs does not support tmpfile. [ 520.145208][ T5833] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 520.365517][ T9660] netlink: 'syz.1.780': attribute type 62 has an invalid length. [ 520.407783][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 520.557322][ T9658] bridge_slave_1: left allmulticast mode [ 520.650733][ T9658] bridge_slave_1: left promiscuous mode [ 520.729693][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.025680][ T9658] bridge_slave_0: left allmulticast mode [ 521.086762][ T9658] bridge_slave_0: left promiscuous mode [ 521.092686][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.482670][ T5956] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 522.216734][ T9675] blktrace: Concurrent blktraces are not allowed on nbd2 [ 522.613147][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 522.649939][ T5956] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 522.668837][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.702572][ T5956] usb 4-1: Product: syz [ 522.719659][ T5956] usb 4-1: Manufacturer: syz [ 522.731397][ T5956] usb 4-1: SerialNumber: syz [ 522.749649][ T5956] usb 4-1: config 0 descriptor?? [ 522.764656][ T5956] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 522.791993][ T5956] usb 4-1: setting power ON [ 522.812294][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 522.835879][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.837192][ T9683] loop1: detected capacity change from 0 to 1024 [ 522.879480][ T9683] hfsplus: unable to find HFS+ superblock [ 522.880800][ T5956] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 522.909562][ T5956] usb 4-1: media controller created [ 522.950457][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.983355][ T9663] dvb-usb: bulk message failed: -22 (3/0) [ 523.021595][ T9663] cxusb: i2c wr: len=79 is too big! [ 523.021595][ T9663] [ 524.164988][ T5956] usb 4-1: selecting invalid altsetting 6 [ 524.171122][ T5956] usb 4-1: digital interface selection failed (-22) [ 524.200361][ T5956] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 524.213217][ T5956] usb 4-1: setting power OFF [ 524.218198][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 524.225521][ T5956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 524.236093][ T5956] (NULL device *): no alternate interface [ 525.605436][ T5956] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 525.645533][ T9699] loop0: detected capacity change from 0 to 4096 [ 525.833885][ T5956] usb 4-1: USB disconnect, device number 13 [ 525.866823][ T9699] ntfs3(loop0): ino=1a, mi_enum_attr [ 525.873381][ T9699] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 526.750000][ T9728] loop4: detected capacity change from 0 to 1024 [ 526.832135][ T9728] hfsplus: unable to find HFS+ superblock [ 527.936081][ T9748] loop0: detected capacity change from 0 to 1024 [ 528.334165][ T9748] hfsplus: unable to find HFS+ superblock [ 529.851906][ T9732] loop1: detected capacity change from 0 to 32768 [ 530.269630][ T9777] loop0: detected capacity change from 0 to 1024 [ 530.357121][ T5918] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 530.439283][ T9777] hfsplus: unable to find HFS+ superblock [ 530.823084][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 530.836450][ T5918] usb 5-1: config 0 has an invalid interface number: 201 but max is 0 [ 531.288940][ T5918] usb 5-1: config 0 has no interface number 0 [ 531.386664][ T5918] usb 5-1: config 0 interface 201 has no altsetting 0 [ 531.585050][ T5918] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=e3.90 [ 531.665824][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.705701][ T9793] netlink: 'syz.0.823': attribute type 10 has an invalid length. [ 531.731029][ T5918] usb 5-1: Product: syz [ 531.742041][ T5918] usb 5-1: Manufacturer: syz [ 531.761385][ T5918] usb 5-1: SerialNumber: syz [ 531.875668][ T5918] usb 5-1: config 0 descriptor?? [ 532.444137][ T9793] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.454054][ T5918] f81534a_ctrl 5-1:0.201: failed to set register 0x116: -5 [ 532.461326][ T5918] f81534a_ctrl 5-1:0.201: failed to enable ports: -5 [ 532.482897][ T5918] f81534a_ctrl 5-1:0.201: probe with driver f81534a_ctrl failed with error -5 [ 532.493086][ T9793] bond0: (slave team0): Enslaving as an active interface with an up link [ 532.524165][ T5918] usb 5-1: USB disconnect, device number 17 [ 533.078344][ T9806] lo speed is unknown, defaulting to 1000 [ 533.333878][ T9818] loop4: detected capacity change from 0 to 8 [ 533.468772][ T9805] loop3: detected capacity change from 0 to 40427 [ 533.488756][ T9805] F2FS-fs (loop3): build fault injection rate: 690 [ 533.500708][ T9805] F2FS-fs (loop3): Image doesn't support compression [ 533.515064][ T9805] F2FS-fs (loop3): heap/no_heap options were deprecated [ 533.539421][ T9805] F2FS-fs (loop3): Image doesn't support compression [ 533.590159][ T9805] F2FS-fs (loop3): invalid crc value [ 535.284025][ T9805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 535.409802][ T9805] syz.3.827: attempt to access beyond end of device [ 535.409802][ T9805] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 535.423863][ C0] ================================================================== [ 535.423879][ C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 535.423904][ C0] Write of size 8 at addr ffff88805f08aa40 by task syz.3.827/9805 [ 535.423920][ C0] [ 535.423935][ C0] CPU: 0 UID: 0 PID: 9805 Comm: syz.3.827 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 535.423956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.423970][ C0] Call Trace: [ 535.423977][ C0] [ 535.423991][ C0] dump_stack_lvl+0x189/0x250 [ 535.424016][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 535.424031][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.424053][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.424076][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.424096][ C0] ? lock_release+0x4b/0x3e0 [ 535.424117][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 535.424131][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 535.424148][ C0] print_report+0xd2/0x2b0 [ 535.424169][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 535.424183][ C0] kasan_report+0x118/0x150 [ 535.424200][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 535.424219][ C0] kasan_check_range+0x2b0/0x2c0 [ 535.424236][ C0] flush_tlb_func+0x23d/0x6c0 [ 535.424255][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 535.424270][ C0] ? sched_clock_cpu+0x74/0x430 [ 535.424292][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.424312][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 535.424328][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 535.424358][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 535.424376][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 535.424394][ C0] sysvec_call_function_single+0x9e/0xc0 [ 535.424416][ C0] [ 535.424422][ C0] [ 535.424428][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 535.424449][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 535.424464][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 535.424479][ C0] RSP: 0018:ffffc900049f65a0 EFLAGS: 00000287 [ 535.424496][ C0] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000080000 [ 535.424510][ C0] RDX: ffffc9000cfbc000 RSI: 0000000000006b16 RDI: 0000000000006b17 [ 535.424522][ C0] RBP: ffffc900049f66f0 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 535.424536][ C0] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 535.424548][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 535.424569][ C0] ? console_flush_all+0x13a/0xc40 [ 535.424588][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 535.424602][ C0] ? __kasan_check_byte+0x12/0x40 [ 535.424629][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 535.424647][ C0] console_unlock+0xc4/0x270 [ 535.424667][ C0] ? __pfx_console_unlock+0x10/0x10 [ 535.424691][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 535.424711][ C0] vprintk_emit+0x5b7/0x7a0 [ 535.424735][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 535.424758][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.424782][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.424812][ C0] _printk+0xcf/0x120 [ 535.424832][ C0] ? __pfx__printk+0x10/0x10 [ 535.424855][ C0] submit_bio_noacct+0x108b/0x1a70 [ 535.424876][ C0] __submit_merged_bio+0x27a/0x6a0 [ 535.424895][ C0] __submit_merged_write_cond+0x255/0x530 [ 535.424916][ C0] f2fs_write_data_pages+0x261d/0x3000 [ 535.424951][ C0] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.424999][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.425020][ C0] ? do_raw_spin_lock+0x121/0x290 [ 535.425039][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 535.425056][ C0] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.425078][ C0] do_writepages+0x32e/0x550 [ 535.425103][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 535.425120][ C0] filemap_fdatawrite+0x199/0x240 [ 535.425142][ C0] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 535.425188][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 535.425204][ C0] f2fs_sync_dirty_inodes+0x31f/0x830 [ 535.425234][ C0] f2fs_write_checkpoint+0x95a/0x1df0 [ 535.425265][ C0] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 535.425303][ C0] ? down_write+0x162/0x1f0 [ 535.425320][ C0] ? __pfx_down_write+0x10/0x10 [ 535.425350][ C0] f2fs_issue_checkpoint+0x3ac/0x570 [ 535.425376][ C0] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 535.425400][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.425436][ C0] ? f2fs_sync_fs+0x200/0x3d0 [ 535.425456][ C0] f2fs_do_shutdown+0x111/0x5c0 [ 535.425479][ C0] __f2fs_ioctl+0x41a8/0xb610 [ 535.425500][ C0] ? file_ioctl+0x22d/0x780 [ 535.425521][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 535.425546][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 535.425569][ C0] ? __pfx___f2fs_ioctl+0x10/0x10 [ 535.425585][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 535.425605][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 535.425625][ C0] ? do_vfs_ioctl+0xb33/0x1430 [ 535.425647][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 535.425674][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.425703][ C0] ? __fget_files+0x2a/0x420 [ 535.425720][ C0] ? __fget_files+0x2a/0x420 [ 535.425734][ C0] ? __fget_files+0x3a0/0x420 [ 535.425750][ C0] ? __fget_files+0x2a/0x420 [ 535.425767][ C0] ? f2fs_ioctl+0x135/0x250 [ 535.425781][ C0] ? __pfx_f2fs_ioctl+0x10/0x10 [ 535.425795][ C0] __se_sys_ioctl+0xf9/0x170 [ 535.425817][ C0] do_syscall_64+0xfa/0x3b0 [ 535.425833][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.425858][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.425874][ C0] ? clear_bhb_loop+0x60/0xb0 [ 535.425892][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.425909][ C0] RIP: 0033:0x7f4da718e929 [ 535.425924][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.425939][ C0] RSP: 002b:00007f4da8001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.425959][ C0] RAX: ffffffffffffffda RBX: 00007f4da73b5fa0 RCX: 00007f4da718e929 [ 535.425973][ C0] RDX: 0000200000000080 RSI: 000000008004587d RDI: 0000000000000005 [ 535.425985][ C0] RBP: 00007f4da7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 535.425996][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.426007][ C0] R13: 0000000000000000 R14: 00007f4da73b5fa0 R15: 00007fffe3861138 [ 535.426026][ C0] [ 535.426033][ C0] [ 535.426039][ C0] Allocated by task 5845: [ 535.426054][ C0] kasan_save_track+0x3e/0x80 [ 535.426077][ C0] __kasan_slab_alloc+0x6c/0x80 [ 535.426099][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 535.426123][ C0] copy_mm+0xdb/0x4b0 [ 535.426144][ C0] copy_process+0x1706/0x3c00 [ 535.426165][ C0] kernel_clone+0x21e/0x870 [ 535.426187][ C0] __x64_sys_clone+0x18b/0x1e0 [ 535.426201][ C0] do_syscall_64+0xfa/0x3b0 [ 535.426216][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.426232][ C0] [ 535.426237][ C0] Freed by task 9835: [ 535.426245][ C0] kasan_save_track+0x3e/0x80 [ 535.426265][ C0] kasan_save_free_info+0x46/0x50 [ 535.426282][ C0] __kasan_slab_free+0x62/0x70 [ 535.426303][ C0] kmem_cache_free+0x18f/0x400 [ 535.426325][ C0] exit_mm+0x1da/0x2c0 [ 535.426340][ C0] do_exit+0x648/0x2300 [ 535.426360][ C0] do_group_exit+0x21c/0x2d0 [ 535.426376][ C0] __x64_sys_exit_group+0x3f/0x40 [ 535.426392][ C0] x64_sys_call+0x21f7/0x2200 [ 535.426408][ C0] do_syscall_64+0xfa/0x3b0 [ 535.426422][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.426438][ C0] [ 535.426443][ C0] The buggy address belongs to the object at ffff88805f08a040 [ 535.426443][ C0] which belongs to the cache mm_struct of size 2584 [ 535.426459][ C0] The buggy address is located 2560 bytes inside of [ 535.426459][ C0] freed 2584-byte region [ffff88805f08a040, ffff88805f08aa58) [ 535.426478][ C0] [ 535.426483][ C0] The buggy address belongs to the physical page: [ 535.426496][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f08ab00 pfn:0x5f088 [ 535.426514][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 535.426529][ C0] memcg:ffff888026c34801 [ 535.426538][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 535.426560][ C0] page_type: f5(slab) [ 535.426576][ C0] raw: 00fff00000000040 ffff88801a44bb40 0000000000000000 dead000000000001 [ 535.426592][ C0] raw: ffff88805f08ab00 00000000800b0009 00000000f5000000 ffff888026c34801 [ 535.426609][ C0] head: 00fff00000000040 ffff88801a44bb40 0000000000000000 dead000000000001 [ 535.426625][ C0] head: ffff88805f08ab00 00000000800b0009 00000000f5000000 ffff888026c34801 [ 535.426641][ C0] head: 00fff00000000003 ffffea00017c2201 00000000ffffffff 00000000ffffffff [ 535.426657][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 535.426667][ C0] page dumped because: kasan: bad access detected [ 535.426680][ C0] page_owner tracks the page as allocated [ 535.426691][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5202, tgid 5202 (udevd), ts 45847159633, free_ts 45778839416 [ 535.426723][ C0] post_alloc_hook+0x240/0x2a0 [ 535.426748][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 535.426766][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 535.426784][ C0] alloc_pages_mpol+0x232/0x4a0 [ 535.426806][ C0] allocate_slab+0x8a/0x370 [ 535.426876][ C0] ___slab_alloc+0xbeb/0x1410 [ 535.426893][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 535.426914][ C0] copy_mm+0xdb/0x4b0 [ 535.426934][ C0] copy_process+0x1706/0x3c00 [ 535.426954][ C0] kernel_clone+0x21e/0x870 [ 535.426975][ C0] __x64_sys_clone+0x18b/0x1e0 [ 535.426988][ C0] do_syscall_64+0xfa/0x3b0 [ 535.427002][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.427036][ C0] page last free pid 5563 tgid 5563 stack trace: [ 535.427046][ C0] __free_frozen_pages+0xb80/0xd80 [ 535.427061][ C0] __put_partials+0x156/0x1a0 [ 535.427076][ C0] put_cpu_partial+0x17c/0x250 [ 535.427091][ C0] __slab_free+0x2d5/0x3c0 [ 535.427106][ C0] qlist_free_all+0x97/0x140 [ 535.427126][ C0] kasan_quarantine_reduce+0x148/0x160 [ 535.427146][ C0] __kasan_slab_alloc+0x22/0x80 [ 535.427168][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 535.427190][ C0] dup_task_struct+0x52/0x860 [ 535.427211][ C0] copy_process+0x54b/0x3c00 [ 535.427231][ C0] kernel_clone+0x21e/0x870 [ 535.427252][ C0] __x64_sys_clone+0x18b/0x1e0 [ 535.427265][ C0] do_syscall_64+0xfa/0x3b0 [ 535.427279][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.427302][ C0] [ 535.427307][ C0] Memory state around the buggy address: [ 535.427317][ C0] ffff88805f08a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.427329][ C0] ffff88805f08a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.427341][ C0] >ffff88805f08aa00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 535.427357][ C0] ^ [ 535.427366][ C0] ffff88805f08aa80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.427378][ C0] ffff88805f08ab00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.427386][ C0] ================================================================== [ 535.427403][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 535.427416][ C0] CPU: 0 UID: 0 PID: 9805 Comm: syz.3.827 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 535.427437][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.427448][ C0] Call Trace: [ 535.427455][ C0] [ 535.427462][ C0] dump_stack_lvl+0x99/0x250 [ 535.427493][ C0] ? __asan_memcpy+0x40/0x70 [ 535.427514][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.427538][ C0] ? __pfx__printk+0x10/0x10 [ 535.427560][ C0] panic+0x2db/0x790 [ 535.427586][ C0] ? __pfx_panic+0x10/0x10 [ 535.427610][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.427631][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.427651][ C0] ? print_memory_metadata+0x314/0x400 [ 535.427680][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 535.427696][ C0] check_panic_on_warn+0x89/0xb0 [ 535.427714][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 535.427728][ C0] end_report+0x78/0x160 [ 535.427742][ C0] kasan_report+0x129/0x150 [ 535.427757][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 535.427776][ C0] kasan_check_range+0x2b0/0x2c0 [ 535.427794][ C0] flush_tlb_func+0x23d/0x6c0 [ 535.427814][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 535.427827][ C0] ? sched_clock_cpu+0x74/0x430 [ 535.427856][ C0] ? rcu_is_watching+0x15/0xb0 [ 535.427912][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 535.427929][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 535.427951][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 535.427982][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 535.428002][ C0] sysvec_call_function_single+0x9e/0xc0 [ 535.428025][ C0] [ 535.428032][ C0] [ 535.428038][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 535.428069][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 535.428085][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 535.428098][ C0] RSP: 0018:ffffc900049f65a0 EFLAGS: 00000287 [ 535.428114][ C0] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000080000 [ 535.428126][ C0] RDX: ffffc9000cfbc000 RSI: 0000000000006b16 RDI: 0000000000006b17 [ 535.428138][ C0] RBP: ffffc900049f66f0 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 535.428150][ C0] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 535.428162][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 535.428183][ C0] ? console_flush_all+0x13a/0xc40 [ 535.428213][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 535.428227][ C0] ? __kasan_check_byte+0x12/0x40 [ 535.428254][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 535.428273][ C0] console_unlock+0xc4/0x270 [ 535.428296][ C0] ? __pfx_console_unlock+0x10/0x10 [ 535.428320][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 535.428382][ C0] vprintk_emit+0x5b7/0x7a0 [ 535.428407][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 535.428429][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 535.428452][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 535.428480][ C0] _printk+0xcf/0x120 [ 535.428499][ C0] ? __pfx__printk+0x10/0x10 [ 535.428535][ C0] submit_bio_noacct+0x108b/0x1a70 [ 535.428558][ C0] __submit_merged_bio+0x27a/0x6a0 [ 535.428581][ C0] __submit_merged_write_cond+0x255/0x530 [ 535.428604][ C0] f2fs_write_data_pages+0x261d/0x3000 [ 535.428640][ C0] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.428704][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.428728][ C0] ? do_raw_spin_lock+0x121/0x290 [ 535.428749][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 535.428765][ C0] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 535.428787][ C0] do_writepages+0x32e/0x550 [ 535.428815][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 535.428832][ C0] filemap_fdatawrite+0x199/0x240 [ 535.428857][ C0] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 535.428900][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 535.428918][ C0] f2fs_sync_dirty_inodes+0x31f/0x830 [ 535.428965][ C0] f2fs_write_checkpoint+0x95a/0x1df0 [ 535.429000][ C0] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 535.429039][ C0] ? down_write+0x162/0x1f0 [ 535.429056][ C0] ? __pfx_down_write+0x10/0x10 [ 535.429078][ C0] f2fs_issue_checkpoint+0x3ac/0x570 [ 535.429111][ C0] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 535.429136][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.429166][ C0] ? f2fs_sync_fs+0x200/0x3d0 [ 535.429186][ C0] f2fs_do_shutdown+0x111/0x5c0 [ 535.429213][ C0] __f2fs_ioctl+0x41a8/0xb610 [ 535.429236][ C0] ? file_ioctl+0x22d/0x780 [ 535.429263][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 535.429293][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 535.429317][ C0] ? __pfx___f2fs_ioctl+0x10/0x10 [ 535.429334][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 535.429359][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 535.429380][ C0] ? do_vfs_ioctl+0xb33/0x1430 [ 535.429403][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 535.429431][ C0] ? __lock_acquire+0xab9/0xd20 [ 535.429459][ C0] ? __fget_files+0x2a/0x420 [ 535.429477][ C0] ? __fget_files+0x2a/0x420 [ 535.429493][ C0] ? __fget_files+0x3a0/0x420 [ 535.429508][ C0] ? __fget_files+0x2a/0x420 [ 535.429526][ C0] ? f2fs_ioctl+0x135/0x250 [ 535.429541][ C0] ? __pfx_f2fs_ioctl+0x10/0x10 [ 535.429563][ C0] __se_sys_ioctl+0xf9/0x170 [ 535.429586][ C0] do_syscall_64+0xfa/0x3b0 [ 535.429602][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.429627][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.429644][ C0] ? clear_bhb_loop+0x60/0xb0 [ 535.429663][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.429680][ C0] RIP: 0033:0x7f4da718e929 [ 535.429695][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.429711][ C0] RSP: 002b:00007f4da8001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.429731][ C0] RAX: ffffffffffffffda RBX: 00007f4da73b5fa0 RCX: 00007f4da718e929 [ 535.429744][ C0] RDX: 0000200000000080 RSI: 000000008004587d RDI: 0000000000000005 [ 535.429757][ C0] RBP: 00007f4da7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 535.429769][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.429779][ C0] R13: 0000000000000000 R14: 00007f4da73b5fa0 R15: 00007fffe3861138 [ 535.429802][ C0] [ 535.430040][ C0] Kernel Offset: disabled