last executing test programs: 22.302765715s ago: executing program 2 (id=1167): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9000400000005"], 0x9) 22.107625152s ago: executing program 2 (id=1169): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 17.754959731s ago: executing program 2 (id=1194): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000ec0)={'veth0_to_batadv\x00', &(0x7f0000000480)=@ethtool_gstrings}) 17.586791835s ago: executing program 2 (id=1197): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) 17.520145051s ago: executing program 2 (id=1198): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x0, @generic}], 0x8) 17.426302409s ago: executing program 2 (id=1201): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x40000000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x48090}, 0x24000800) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r4, &(0x7f00000000c0)=""/29, 0x1d) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c531"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) 5.300214889s ago: executing program 1 (id=1286): mlockall(0x3) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzs079KwlEUB/CjQ0EtFj3A3SKQ+vknySkqGhrMwamxwkIQg7RwaelteqQeoOcwMIP4lYMFBfH5TOfe7z2Xs5zVl6eDiCjs3A1648gpRsRkWu0XIwoRUZ8lhfzT4XWvf37R7b91FfMxCyvNuX94nBVLi/+5uRZxmiJiZfS8cfST6fgnlrfOPh4nU5/3+3tODlupfdxKWaNR7VSq6V0t1bKvO7Ism5P8tvVS52qc7ru3w97NIO1u18qpfTlKlb1yqjSb9b8eDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGUHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WSXRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqAAAAP//CaUg2w==") 4.985130726s ago: executing program 0 (id=1291): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000a00ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 4.794252872s ago: executing program 0 (id=1294): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000e40)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x2e, 0x14, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 4.742520017s ago: executing program 0 (id=1295): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20008044) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x11, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.510647326s ago: executing program 0 (id=1296): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x2, 0x10000, 0x5, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x238804}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x10, 0x70bd28, 0x25dfdbfe, {0x43, 0x0, 0x0, r0, 0x6, 0x80000000, 0x9b38, 0x4, 0x0, 0x7, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000c80)=0x9) socket$netlink(0x10, 0x3, 0x4) getpgid(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="85a2fa90e20700000000000086dd6000000000180000fe8000000000000000000000000000bbff020000000000000000000000000001860090"], 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @local}, &(0x7f00000004c0)=0xc) setresgid(0x0, r7, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendmmsg$unix(r5, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r7}}}], 0x20}}], 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) 3.478602124s ago: executing program 0 (id=1297): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f40)='./file0\x00', 0xa00010, &(0x7f0000000f80)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646d6f64653d30303030303030303030303030303030303030323030342c756e64656c6574652c706172746974696f6e3d303030303030303030303030303030312c756e686964652c00a6a23b1c77357df200000000"], 0x2, 0xc43, &(0x7f00000001c0)="$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") unlink(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.159508001s ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 3.061424219s ago: executing program 0 (id=1303): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0xa0, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d5b6c108701801009fe60010030109028e00"], 0x0) 3.011853724s ago: executing program 4 (id=1304): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x20}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_mr_vif\x00') ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000340)=""/4096) unshare(0x28000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x3c, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 2.306546414s ago: executing program 1 (id=1305): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20008044) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x11, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.210552162s ago: executing program 4 (id=1306): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 2.192474863s ago: executing program 3 (id=1307): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 1.891470499s ago: executing program 1 (id=1308): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1.888260899s ago: executing program 3 (id=1309): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 1.777252999s ago: executing program 1 (id=1310): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000400), &(0x7f00000004c0)=""/226}, 0x20) 1.745661291s ago: executing program 1 (id=1311): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)="b1b76318e39a8fa1acac5fa88d7409625ec82be1f7daa88fd056a23589343b70d58f8053b928d2e7b3", 0x29}], 0x1, 0x0, 0x118, 0x44895}}], 0x1, 0x4008014) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}, 0x22}, {@nodioread_nolock}, {@data_writeback}, {@data_err_abort}]}, 0xf6, 0x46e, &(0x7f0000000700)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040), 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @mcast1}, 0x1c, 0x0}, 0x4000000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="e2c3cb017721575b"}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"833f5860b30b15f5706bb793317c6ab9", 0x0, 0x0, {0x8000, 0x2}, {0xb4}, 0x1ff, [0x80000000, 0x3, 0x10001, 0x1, 0x9, 0x6, 0x2, 0x5, 0x6, 0x7fffffffffffffff, 0x3548, 0x9, 0xffffffffdad4bca9, 0x9, 0x722e5a6, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001f80)={{r6}, r7, 0x2, @unused=[0x1, 0x56, 0x5, 0x6], @devid}) 1.63859689s ago: executing program 4 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000600)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d6, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.582515385s ago: executing program 3 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='mm_page_free_batched\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f0000000380)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.478395054s ago: executing program 3 (id=1314): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x8, r2, 0xb}) 184.209304ms ago: executing program 3 (id=1315): syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000000280)="$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") truncate(&(0x7f0000000340)='./file1\x00', 0x22fe) 183.677884ms ago: executing program 1 (id=1316): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="e844d3e675d50f6f92045aabeb877f5a32bb6d98d39c5cfa39838439f7d7117a7d46ad817e7b788717263f00cb769a03a525c1d67a8563250b4215e648d9c165e460a7fd7ae90281b9856fd45f17ddc19d7bff668531870ca8ff0620d06da251038809631d3737d2624b372e802f69231fc628be3c6aab6962fa310122f885ed5d7c356c767a7d893983b64aec2982f31c5659b04be89ed834ebb77df696ed7e603aa9e831a82d3c34ca765e0ff86f0b8292c8d1e7af0169235776e693", @ANYRES64, @ANYRESHEX], 0x0, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file1'}, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 180.877334ms ago: executing program 4 (id=1317): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x20008044) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x11, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 85.307563ms ago: executing program 3 (id=1318): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000c40)={{}, 0x0, 0x0, 0x58, 0x1f, 0x2}) 0s ago: executing program 4 (id=1319): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000180)={{r0}, "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"}) kernel console output (not intermixed with test programs): 5 [ 196.397721][ T3615] usb 1-1: USB disconnect, device number 5 [ 196.898649][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.950520][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.979015][ T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 196.999650][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.040852][ T23] usb 4-1: config 0 descriptor?? [ 197.256627][ T6014] netlink: 64 bytes leftover after parsing attributes in process `syz.1.695'. [ 197.369243][ T6021] "syz.0.698" (6021) uses obsolete ecb(arc4) skcipher [ 197.685604][ T6029] loop2: detected capacity change from 0 to 512 [ 197.858348][ T6029] EXT4-fs error (device loop2): ext4_do_update_inode:5171: inode #3: comm syz.2.701: corrupted inode contents [ 197.946120][ T6029] EXT4-fs error (device loop2): ext4_dirty_inode:6004: inode #3: comm syz.2.701: mark_inode_dirty error [ 198.037351][ T6029] EXT4-fs error (device loop2): ext4_do_update_inode:5171: inode #3: comm syz.2.701: corrupted inode contents [ 198.052421][ T6029] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.701: mark_inode_dirty error [ 198.088628][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 198.094880][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 198.127371][ T6029] Quota error (device loop2): write_blk: dquota write failed [ 198.160577][ T23] usb 4-1: USB disconnect, device number 6 [ 198.218693][ T6029] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 198.266282][ T6029] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.701: Failed to acquire dquot type 0 [ 198.285553][ T6029] EXT4-fs (loop2): 1 orphan inode deleted [ 198.296912][ T6029] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.329762][ T6029] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038 (0x7fffffff) [ 198.414531][ T6038] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 199.150282][ T6041] rtc_cmos 00:00: Alarms can be up to one day in the future [ 199.446991][ T26] audit: type=1326 audit(1724499153.282:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.3.708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x0 [ 199.534032][ T3578] Bluetooth: Wrong link type (-71) [ 199.538606][ T3613] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 199.578533][ T5735] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.777315][ T6067] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 199.838602][ T5735] usb 1-1: Using ep0 maxpacket: 8 [ 199.908821][ T3613] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 199.926488][ T3613] usb 5-1: config 0 has no interface number 0 [ 199.940688][ T3613] usb 5-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=4e.e0 [ 199.958749][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.993612][ T3613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.024751][ T6072] loop3: detected capacity change from 0 to 512 [ 200.034626][ T3613] usb 5-1: config 0 descriptor?? [ 200.069133][ T5735] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 200.083896][ T3613] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 200.110038][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 200.146411][ T6072] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.715: corrupted inode contents [ 200.168233][ T5735] usb 1-1: SerialNumber: syz [ 200.198985][ T6072] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.715: mark_inode_dirty error [ 200.200178][ T5735] usb 1-1: config 0 descriptor?? [ 200.267595][ T5735] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 200.288695][ T3613] gspca_sn9c20x: Write register 1000 failed -71 [ 200.295970][ T3613] gspca_sn9c20x: Device initialization failed [ 200.306185][ T5735] usb 1-1: No valid video chain found. [ 200.315257][ T3613] gspca_sn9c20x: probe of 5-1:0.59 failed with error -71 [ 200.349311][ T6072] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.715: corrupted inode contents [ 200.362858][ T3613] usb 5-1: USB disconnect, device number 4 [ 200.479728][ T6072] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.715: mark_inode_dirty error [ 200.510097][ T6072] Quota error (device loop3): write_blk: dquota write failed [ 200.519596][ T6077] udc-core: couldn't find an available UDC or it's busy [ 200.526535][ T6077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.546380][ T6072] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 200.574758][ T6077] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 200.589155][ T6072] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.715: Failed to acquire dquot type 0 [ 200.603825][ T6072] EXT4-fs (loop3): 1 orphan inode deleted [ 200.611403][ T6072] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.624802][ T6072] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 200.728819][ T5735] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.813466][ T6079] rtc_cmos 00:00: Alarms can be up to one day in the future [ 201.049748][ T3613] usb 1-1: USB disconnect, device number 6 [ 201.198823][ T3677] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 201.268924][ T5735] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 201.294853][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.312763][ T5735] usb 3-1: Product: syz [ 201.328823][ T5735] usb 3-1: Manufacturer: syz [ 201.333443][ T5735] usb 3-1: SerialNumber: syz [ 201.355891][ T5735] usb 3-1: config 0 descriptor?? [ 201.478582][ T3677] usb 5-1: Using ep0 maxpacket: 16 [ 201.609627][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 201.758972][ T3677] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 201.779157][ T3677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.795272][ T3677] usb 5-1: Product: syz [ 201.799956][ T3677] usb 5-1: Manufacturer: syz [ 201.807263][ T3677] usb 5-1: SerialNumber: syz [ 201.846551][ T3677] usb 5-1: config 0 descriptor?? [ 201.882708][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 201.995874][ T3677] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 202.008710][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.020306][ T7] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.107834][ T6081] udc-core: couldn't find an available UDC or it's busy [ 202.138673][ T6081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.158759][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.178559][ T7] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 202.186917][ T7] usb 2-1: Product: syz [ 202.199298][ T7] usb 2-1: Manufacturer: syz [ 202.269774][ T7] hub 2-1:4.0: USB hub found [ 202.298697][ T3703] usb 5-1: Failed to submit usb control message: -71 [ 202.315069][ T3703] usb 5-1: unable to send the bmi data to the device: -71 [ 202.333295][ T3703] usb 5-1: unable to get target info from device [ 202.343476][ T3703] usb 5-1: could not get target info (-71) [ 202.357381][ T3703] usb 5-1: could not probe fw (-71) [ 202.368543][ T3615] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.377331][ T3613] usb 5-1: USB disconnect, device number 5 [ 202.498696][ T5735] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -71 [ 202.506728][ T5735] usb 3-1: Firmware version (0.0) predates our first public release. [ 202.528975][ T5735] usb 3-1: Please update to version 0.2 or newer [ 202.559539][ T5735] usb 3-1: atusb_probe: initialization failed, error = -71 [ 202.571195][ T5735] atusb: probe of 3-1:0.0 failed with error -71 [ 202.588707][ T7] hub 2-1:4.0: 2 ports detected [ 202.592077][ T5735] usb 3-1: USB disconnect, device number 6 [ 202.638544][ T3615] usb 1-1: Using ep0 maxpacket: 8 [ 202.787154][ T3615] usb 1-1: config 0 has no interfaces? [ 202.968755][ T3615] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 203.031206][ T3615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.070300][ T3615] usb 1-1: Product: syz [ 203.091776][ T3615] usb 1-1: Manufacturer: syz [ 203.097667][ T6115] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.114700][ T3615] usb 1-1: SerialNumber: syz [ 203.126273][ T3615] usb 1-1: config 0 descriptor?? [ 203.199189][ T7] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 203.206776][ T7] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 203.269415][ T7] usb 2-1: USB disconnect, device number 3 [ 203.428731][ T5735] usb 1-1: USB disconnect, device number 7 [ 203.618581][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 203.861469][ T6132] loop3: detected capacity change from 0 to 512 [ 203.892297][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 204.034213][ T13] usb 5-1: config 7 has an invalid interface number: 75 but max is 0 [ 204.085795][ T13] usb 5-1: config 7 has no interface number 0 [ 204.324842][ T6132] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.736: corrupted inode contents [ 204.419023][ T6132] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.736: mark_inode_dirty error [ 204.489898][ T6132] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.736: corrupted inode contents [ 204.663093][ T13] usb 5-1: config 7 interface 75 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 204.674259][ T13] usb 5-1: config 7 interface 75 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 204.684466][ T13] usb 5-1: config 7 interface 75 has no altsetting 0 [ 204.704035][ T6132] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.736: mark_inode_dirty error [ 204.716956][ T6132] Quota error (device loop3): write_blk: dquota write failed [ 204.737910][ T6132] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 204.748681][ T6132] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.736: Failed to acquire dquot type 0 [ 205.839605][ T6132] EXT4-fs (loop3): 1 orphan inode deleted [ 205.845394][ T6132] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.932496][ T6132] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038 (0x7fffffff) [ 206.428631][ T13] usb 5-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=17.a0 [ 206.437907][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.453662][ T13] usb 5-1: Product: syz [ 206.458040][ T13] usb 5-1: Manufacturer: syz [ 206.598800][ T13] usb 5-1: can't set config #7, error -71 [ 206.615518][ T13] usb 5-1: USB disconnect, device number 6 [ 209.666803][ T6198] loop2: detected capacity change from 0 to 8 [ 209.731133][ T6194] loop0: detected capacity change from 0 to 512 [ 209.780567][ T6198] SQUASHFS error: lzo decompression failed, data probably corrupt [ 209.798223][ T6198] SQUASHFS error: Failed to read block 0x91: -5 [ 209.825303][ T6198] SQUASHFS error: Unable to read metadata cache entry [8f] [ 209.839541][ T6198] SQUASHFS error: Unable to read inode 0x11f [ 209.847515][ T6194] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 209.906517][ T6206] loop4: detected capacity change from 0 to 1024 [ 209.924855][ T6203] loop3: detected capacity change from 0 to 512 [ 209.925070][ T6194] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038 (0x7fffffff) [ 210.069432][ T6203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.123473][ T6194] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 210.260051][ T6203] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 210.464881][ T6203] EXT4-fs (loop3): 1 truncate cleaned up [ 210.472843][ T6203] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,bsdgroups,nombcache,noload,,errors=continue. Quota mode: none. [ 210.814018][ T6225] loop1: detected capacity change from 0 to 512 [ 210.992741][ T6228] loop2: detected capacity change from 0 to 1024 [ 211.072604][ T6225] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.477010][ T6225] EXT4-fs (loop1): 1 truncate cleaned up [ 211.512845][ T6231] loop4: detected capacity change from 0 to 512 [ 211.514460][ T6225] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,bsdgroups,nombcache,noload,,errors=continue. Quota mode: none. [ 211.764441][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.765: corrupted inode contents [ 211.802400][ T6231] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #3: comm syz.4.765: mark_inode_dirty error [ 211.879671][ T6231] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.765: corrupted inode contents [ 211.945480][ T6231] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.765: mark_inode_dirty error [ 212.267536][ T6231] Quota error (device loop4): write_blk: dquota write failed [ 212.438697][ T6231] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 212.503085][ T6231] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.765: Failed to acquire dquot type 0 [ 212.582194][ T6231] EXT4-fs (loop4): 1 orphan inode deleted [ 212.588056][ T6231] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.609195][ T6231] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038 (0x7fffffff) [ 213.202604][ T6274] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.518802][ T3681] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.724289][ T6289] netlink: 392 bytes leftover after parsing attributes in process `syz.2.787'. [ 213.788591][ T3681] usb 2-1: Using ep0 maxpacket: 8 [ 213.888638][ T6297] syz.2.791 sent an empty control message without MSG_MORE. [ 213.939921][ T3681] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 213.959270][ T3681] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 213.977651][ T6303] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.986797][ T3681] usb 2-1: config 135 has no interface number 0 [ 214.014178][ T3681] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 214.047889][ T3681] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 214.114057][ T3681] usb 2-1: config 135 interface 230 has no altsetting 0 [ 214.129674][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 214.137771][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 214.146763][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 214.154928][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 214.163724][ T3614] rtc rtc0: __rtc_set_alarm: err=-22 [ 214.178604][ T5735] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.298769][ T3681] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 214.308321][ T3681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.325428][ T3681] usb 2-1: Product: syz [ 214.331129][ T3681] usb 2-1: Manufacturer: syz [ 214.336069][ T3681] usb 2-1: SerialNumber: syz [ 214.348581][ T3613] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.418714][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 214.538694][ T5735] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 214.550624][ T5735] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 214.562235][ T5735] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.628939][ T3681] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 214.635464][ T3681] usb 2-1: No valid video chain found. [ 214.738031][ T5735] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 214.747582][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 214.756192][ T5735] usb 5-1: Product: syz [ 214.760788][ T5735] usb 5-1: Manufacturer: syz [ 214.765412][ T5735] usb 5-1: SerialNumber: syz [ 214.788811][ T6301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 214.812285][ T5735] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 214.837864][ T3614] usb 2-1: USB disconnect, device number 4 [ 214.878756][ T3613] usb 4-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 214.898714][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.906746][ T3613] usb 4-1: Product: syz [ 214.927472][ T3613] usb 4-1: Manufacturer: syz [ 214.932202][ T3613] usb 4-1: SerialNumber: syz [ 214.942636][ T3613] usb 4-1: config 0 descriptor?? [ 214.988683][ T3681] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 214.990654][ T3613] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 215.003985][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 215.016413][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 215.025971][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 215.033755][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 215.041563][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 215.053193][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 215.061830][ T3613] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 215.079923][ T3614] usb 5-1: USB disconnect, device number 7 [ 215.082808][ T3613] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 215.148993][ T3614] appletouch 5-1:1.0: input: appletouch disconnected [ 215.204753][ T6310] device bond_slave_0 entered promiscuous mode [ 215.211451][ T6310] device bond_slave_1 entered promiscuous mode [ 215.221025][ T6310] device bond_slave_0 left promiscuous mode [ 215.227013][ T6310] device bond_slave_1 left promiscuous mode [ 215.276108][ T3681] usb 3-1: Using ep0 maxpacket: 16 [ 215.308267][ T6321] loop0: detected capacity change from 0 to 512 [ 215.359421][ T3613] usb 4-1: USB disconnect, device number 7 [ 215.395908][ T6321] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.800: corrupted inode contents [ 215.410014][ T3613] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 215.422123][ T6321] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.800: mark_inode_dirty error [ 215.436375][ T3613] keyspan 4-1:0.0: device disconnected [ 215.448776][ T3681] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 215.472060][ T6321] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.800: corrupted inode contents [ 215.486915][ T6321] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.800: mark_inode_dirty error [ 215.535974][ T6332] loop6: detected capacity change from 0 to 524287999 [ 215.549584][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.560722][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.570805][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.576945][ T6321] Quota error (device loop0): write_blk: dquota write failed [ 215.581778][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.593760][ T6321] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 215.607426][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.618369][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.629626][ T6321] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.800: Failed to acquire dquot type 0 [ 215.638590][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.646747][ T6321] EXT4-fs (loop0): 1 orphan inode deleted [ 215.651906][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.668671][ T3681] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.671245][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.688782][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.692794][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.705467][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.716405][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.717400][ T6321] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.726822][ T3681] usb 3-1: Product: syz [ 215.740455][ T6321] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038 (0x7fffffff) [ 215.750482][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.750523][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.770458][ T3681] usb 3-1: Manufacturer: syz [ 215.775149][ T3681] usb 3-1: SerialNumber: syz [ 215.776716][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.790722][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.798633][ T6332] ldm_validate_partition_table(): Disk read failed. [ 215.806889][ T3681] usb 3-1: config 0 descriptor?? [ 215.833547][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.844546][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.875652][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.886727][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.898957][ T6336] device syzkaller0 entered promiscuous mode [ 215.916237][ T6332] Dev loop6: unable to read RDB block 0 [ 215.946402][ T6332] loop6: unable to read partition table [ 215.958930][ T6332] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 215.988508][ T6338] loop3: detected capacity change from 0 to 256 [ 216.040155][ T6338] FAT-fs (loop3): Unrecognized mount option "nonu" or missing value [ 216.112357][ T6339] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.174865][ T6338] loop3: detected capacity change from 0 to 164 [ 216.222895][ T26] audit: type=1326 audit(1724499170.062:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6343 comm="syz.1.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b8e3ee79 code=0x0 [ 216.325644][ T6338] Unable to read rock-ridge attributes [ 216.354090][ T6338] Unable to read rock-ridge attributes [ 217.103300][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.120066][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.128012][ T6375] netlink: 'syz.3.821': attribute type 1 has an invalid length. [ 217.128364][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.188861][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.214489][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 217.231547][ T3613] usb 3-1: USB disconnect, device number 7 [ 217.281415][ T6379] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.421725][ T6386] device wireguard0 entered promiscuous mode [ 217.592686][ T26] audit: type=1326 audit(1724499171.432:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.4.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9d6015e79 code=0x0 [ 217.695806][ T6407] loop0: detected capacity change from 0 to 256 [ 217.778547][ T6407] FAT-fs (loop0): Directory bread(block 64) failed [ 217.786956][ T6407] FAT-fs (loop0): Directory bread(block 65) failed [ 217.798240][ T6407] FAT-fs (loop0): Directory bread(block 66) failed [ 217.805639][ T6407] FAT-fs (loop0): Directory bread(block 67) failed [ 217.813258][ T6407] FAT-fs (loop0): Directory bread(block 68) failed [ 217.820596][ T6407] FAT-fs (loop0): Directory bread(block 69) failed [ 217.827420][ T6407] FAT-fs (loop0): Directory bread(block 70) failed [ 217.834574][ T6407] FAT-fs (loop0): Directory bread(block 71) failed [ 217.843414][ T6407] FAT-fs (loop0): Directory bread(block 72) failed [ 217.850740][ T6407] FAT-fs (loop0): Directory bread(block 73) failed [ 217.936426][ T6412] loop4: detected capacity change from 0 to 512 [ 218.006319][ T6415] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.077144][ T6412] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.835: corrupted inode contents [ 218.089438][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.089740][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.114090][ T6412] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #3: comm syz.4.835: mark_inode_dirty error [ 218.126960][ T6412] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.835: corrupted inode contents [ 218.142891][ T6412] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.835: mark_inode_dirty error [ 218.155942][ T6412] Quota error (device loop4): write_blk: dquota write failed [ 218.158943][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.164709][ T6412] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 218.182176][ T6412] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.835: Failed to acquire dquot type 0 [ 218.197435][ T6412] EXT4-fs (loop4): 1 orphan inode deleted [ 218.203360][ T6412] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.214789][ T6412] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038 (0x7fffffff) [ 218.237856][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.261387][ T6423] netlink: 92 bytes leftover after parsing attributes in process `syz.0.837'. [ 218.279436][ T3614] rtc rtc0: __rtc_set_alarm: err=-22 [ 218.568105][ T6440] loop3: detected capacity change from 0 to 512 [ 218.648184][ T6441] rtc_cmos 00:00: Alarms can be up to one day in the future [ 218.815847][ T6440] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.841170][ T6440] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 219.042498][ T6466] netlink: 9 bytes leftover after parsing attributes in process `syz.2.859'. [ 219.052911][ T6463] loop0: detected capacity change from 0 to 256 [ 219.096935][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.105335][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.105704][ T6466] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 219.125131][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.165626][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.173356][ T6466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.859'. [ 219.197970][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 219.204444][ T6466] device hsr0 entered promiscuous mode [ 219.242708][ T6466] bridge0: port 2(hsr0) entered blocking state [ 219.282216][ T6466] bridge0: port 2(hsr0) entered disabled state [ 219.657463][ T6478] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.783248][ T6481] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 219.983594][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. [ 220.026394][ T26] audit: type=1326 audit(1724499173.862:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz.1.868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b8e3ee79 code=0x0 [ 220.068598][ T6488] netlink: 'syz.2.867': attribute type 7 has an invalid length. [ 220.089098][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 220.106829][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 220.116372][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 220.138830][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 220.164328][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 220.186506][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 220.188578][ T6488] device gretap0 entered promiscuous mode [ 220.207393][ T6497] raw_sendmsg: syz.3.871 forgot to set AF_INET. Fix it! [ 220.235572][ T6488] device batadv_slave_1 entered promiscuous mode [ 220.268344][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 220.327047][ T6506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.416426][ T6507] rtc_cmos 00:00: Alarms can be up to one day in the future [ 220.528078][ T26] audit: type=1326 audit(1724499174.362:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.2.877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa202ff9e79 code=0x0 [ 220.905083][ T6532] loop1: detected capacity change from 0 to 128 [ 221.090463][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 221.120498][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 221.158240][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 221.178575][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 221.186119][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 221.326957][ T6546] loop4: detected capacity change from 0 to 256 [ 221.367692][ T6542] rtc_cmos 00:00: Alarms can be up to one day in the future [ 221.375798][ T6548] loop3: detected capacity change from 0 to 512 [ 221.415817][ T6548] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 221.533353][ T6548] EXT4-fs error (device loop3): ext4_fill_super:4840: inode #2: comm syz.3.889: casefold flag without casefold feature [ 221.650434][ T6548] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 221.669730][ T6548] System zones: 0-2, 18-18, 34-35 [ 221.680657][ T6548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.704370][ T6555] loop2: detected capacity change from 0 to 1024 [ 221.739246][ T6559] loop0: detected capacity change from 0 to 512 [ 221.771351][ T6555] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 221.781883][ T6555] EXT4-fs (loop2): orphan cleanup on readonly fs [ 221.796212][ T6555] EXT4-fs error (device loop2): ext4_free_blocks:6225: comm syz.2.893: Freeing blocks not in datazone - block = 0, count = 4096 [ 221.839621][ T6555] EXT4-fs (loop2): 1 orphan inode deleted [ 221.854670][ T6555] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.929975][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.895: corrupted inode contents [ 221.953381][ T6559] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.895: mark_inode_dirty error [ 221.987107][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.895: corrupted inode contents [ 222.032962][ T6559] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.895: mark_inode_dirty error [ 222.076294][ T6559] Quota error (device loop0): write_blk: dquota write failed [ 222.084815][ T6559] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 222.095776][ T6559] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.895: Failed to acquire dquot type 0 [ 222.097674][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.109985][ T6559] EXT4-fs (loop0): 1 orphan inode deleted [ 222.128759][ T6559] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.149497][ T6559] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038 (0x7fffffff) [ 222.158138][ T6578] loop3: detected capacity change from 0 to 512 [ 222.178038][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.200071][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.229222][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.230855][ T6578] EXT4-fs (loop3): bad s_min_extra_isize: 65528 [ 222.251415][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 222.310877][ T6581] rtc_cmos 00:00: Alarms can be up to one day in the future [ 222.827881][ T6596] loop2: detected capacity change from 0 to 512 [ 222.953520][ T6596] EXT4-fs (loop2): 1 orphan inode deleted [ 222.988538][ T6596] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback. [ 222.997803][ T6601] loop1: detected capacity change from 0 to 2048 [ 223.045757][ T6597] loop3: detected capacity change from 0 to 2048 [ 223.089470][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 223.097053][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 223.119285][ T6596] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038 (0x7fffffff) [ 223.132486][ T6597] UDF-fs: bad mount option "uid=foQget2gid=00000000000000000000" or missing value [ 223.156314][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 223.195535][ T6601] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 223.221002][ T6601] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 223.236628][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 223.254995][ T6601] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 223.295501][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 223.313780][ T6601] UDF-fs: Scanning with blocksize 512 failed [ 223.355372][ T6601] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.394961][ T6610] loop4: detected capacity change from 0 to 512 [ 224.152569][ T6610] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.173006][ T6610] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff) [ 224.427441][ T6620] rtc_cmos 00:00: Alarms can be up to one day in the future [ 224.593912][ T4111] EXT4-fs error (device loop4): ext4_map_blocks:628: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 224.600259][ T6628] loop2: detected capacity change from 0 to 512 [ 224.678497][ T4111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 224.694184][ T6630] loop3: detected capacity change from 0 to 1024 [ 224.727953][ T6628] EXT4-fs (loop2): quotafile must be on filesystem root [ 224.736770][ T4111] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #2: comm syz-executor: mark_inode_dirty error [ 224.783456][ T6634] loop1: detected capacity change from 0 to 512 [ 224.826817][ T4111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 224.898296][ T6634] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.915246][ T4111] EXT4-fs error (device loop4): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 224.966187][ T4111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 225.070381][ T4111] EXT4-fs error (device loop4): ext4_quota_off:6485: inode #4: comm syz-executor: mark_inode_dirty error [ 225.088891][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.096857][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.132601][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.152915][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.162106][ T3614] rtc rtc0: __rtc_set_alarm: err=-22 [ 225.169547][ T6634] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 225.196048][ T6634] EXT4-fs (loop1): 1 truncate cleaned up [ 225.203332][ T6634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.696599][ T6647] loop3: detected capacity change from 0 to 2048 [ 225.830799][ T6647] EXT4-fs (loop3): Ignoring removed bh option [ 225.837059][ T6647] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 225.910203][ T6647] EXT4-fs (loop3): Ignoring removed nobh option [ 226.003379][ T6647] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,bh,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,minixdf,nobh,,errors=continue. Quota mode: none. [ 226.075302][ T6647] EXT4-fs error (device loop3): ext4_check_all_de:656: inode #12: block 5: comm syz.3.924: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 226.311546][ T6653] rtc_cmos 00:00: Alarms can be up to one day in the future [ 226.576868][ T6667] loop3: detected capacity change from 0 to 2048 [ 226.582763][ T6665] loop2: detected capacity change from 0 to 512 [ 226.668779][ T6667] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 226.676875][ T6665] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 226.721038][ T6667] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 226.755086][ T6665] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.933: casefold flag without casefold feature [ 226.769592][ T6667] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 226.777289][ T6667] UDF-fs: Scanning with blocksize 512 failed [ 226.807055][ T6676] loop1: detected capacity change from 0 to 512 [ 226.841432][ T6665] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 226.850523][ T6667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.878693][ T6665] System zones: 0-2, 18-18, 34-35 [ 226.884956][ T6665] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.974222][ T6676] EXT4-fs (loop1): bad s_min_extra_isize: 65528 [ 227.088344][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.112617][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.120943][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.128839][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.136379][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 227.171997][ T6682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.310178][ T6684] rtc_cmos 00:00: Alarms can be up to one day in the future [ 227.377524][ T6688] loop2: detected capacity change from 0 to 512 [ 227.451437][ T6669] chnl_net:caif_netlink_parms(): no params data found [ 227.481780][ T6688] EXT4-fs error (device loop2): ext4_do_update_inode:5171: inode #3: comm syz.2.938: corrupted inode contents [ 227.522898][ T6688] EXT4-fs error (device loop2): ext4_dirty_inode:6004: inode #3: comm syz.2.938: mark_inode_dirty error [ 227.602624][ T6688] EXT4-fs error (device loop2): ext4_do_update_inode:5171: inode #3: comm syz.2.938: corrupted inode contents [ 227.603370][ T6699] loop3: detected capacity change from 0 to 1024 [ 227.640535][ T6688] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.938: mark_inode_dirty error [ 227.653700][ T6688] Quota error (device loop2): write_blk: dquota write failed [ 227.661643][ T6688] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 227.688211][ T6688] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.938: Failed to acquire dquot type 0 [ 227.692663][ T6699] EXT4-fs (loop3): Ignoring removed bh option [ 227.711515][ T6688] EXT4-fs (loop2): 1 orphan inode deleted [ 227.739994][ T6699] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 227.755400][ T6688] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.767695][ T6688] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038 (0x7fffffff) [ 227.829398][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.836498][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.879984][ T6669] device bridge_slave_0 entered promiscuous mode [ 227.897422][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.948074][ T6699] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 227.969253][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.992786][ T6711] loop1: detected capacity change from 0 to 256 [ 228.006322][ T6669] device bridge_slave_1 entered promiscuous mode [ 228.595592][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.603065][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 228.611573][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.620518][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.630698][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.638006][ T3614] rtc rtc0: __rtc_set_alarm: err=-22 [ 228.683974][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.696237][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.761354][ T5735] Bluetooth: hci5: command 0x0409 tx timeout [ 228.817278][ T6718] loop3: detected capacity change from 0 to 1764 [ 228.819362][ T5230] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.845213][ T6669] team0: Port device team_slave_0 added [ 228.866042][ T6669] team0: Port device team_slave_1 added [ 228.866249][ T6715] rtc_cmos 00:00: Alarms can be up to one day in the future [ 228.872153][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 228.907889][ T5230] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.003162][ T5230] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.028940][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.048665][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.070164][ T6718] loop3: detected capacity change from 0 to 1024 [ 229.079055][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 229.088267][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.128653][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 229.136261][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 229.144567][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.153030][ T7] usb 1-1: config 0 descriptor?? [ 229.161638][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.214619][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 229.222400][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 229.229936][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 229.256292][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.341915][ T5230] team0: Port device netdevsim0 removed [ 229.344830][ T6735] loop1: detected capacity change from 0 to 512 [ 229.379477][ T6734] loop2: detected capacity change from 0 to 512 [ 229.389889][ T5230] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.412822][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.423261][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.452907][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.552063][ T6735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.564130][ T6734] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.598737][ T6734] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038 (0x7fffffff) [ 229.598847][ T6735] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038 (0x7fffffff) [ 229.629824][ T7] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 229.667719][ T7] logitech 0003:046D:C20E.0006: unbalanced collection at end of report description [ 229.708383][ T7] logitech 0003:046D:C20E.0006: parse failed [ 229.720954][ T7] logitech: probe of 0003:046D:C20E.0006 failed with error -22 [ 229.783634][ T6734] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 229.806438][ T6669] device hsr_slave_0 entered promiscuous mode [ 229.828749][ T6742] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:338: inode #15: comm syz.2.956: verity file corrupted; can't find descriptor [ 229.848817][ T7] usb 1-1: USB disconnect, device number 8 [ 229.907384][ T6669] device hsr_slave_1 entered promiscuous mode [ 229.930466][ T6742] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 229.951173][ T6669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.981508][ T6669] Cannot create hsr debugfs directory [ 230.549971][ T6753] loop0: detected capacity change from 0 to 512 [ 230.710685][ T6753] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.959: corrupted inode contents [ 230.742972][ T6753] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.959: mark_inode_dirty error [ 230.769852][ T6753] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.959: corrupted inode contents [ 230.808714][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 230.816144][ T6753] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.959: mark_inode_dirty error [ 230.864961][ T6753] Quota error (device loop0): write_blk: dquota write failed [ 230.916742][ T6753] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 231.005240][ T6753] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.959: Failed to acquire dquot type 0 [ 231.083494][ T6753] EXT4-fs (loop0): 1 orphan inode deleted [ 231.089844][ T6753] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 231.138834][ T6753] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038 (0x7fffffff) [ 231.302332][ T6750] loop2: detected capacity change from 0 to 32768 [ 231.414143][ T6750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.958 (6750) [ 231.683149][ T6744] loop1: detected capacity change from 0 to 32768 [ 231.862506][ T6669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.894971][ T6669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.930906][ T6669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.970524][ T6669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.110291][ T6750] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 232.129412][ T6750] BTRFS info (device loop2): turning on flush-on-commit [ 232.136436][ T6750] BTRFS info (device loop2): turning off barriers [ 232.169865][ T26] audit: type=1800 audit(1724499186.012:46): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.957" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 232.218564][ T6750] BTRFS info (device loop2): doing ref verification [ 232.264773][ T6750] BTRFS info (device loop2): force clearing of disk cache [ 232.318036][ T6750] BTRFS info (device loop2): enabling disk space caching [ 232.372074][ T6750] BTRFS info (device loop2): turning on sync discard [ 232.414051][ T6750] BTRFS info (device loop2): using default commit interval 30s [ 232.468563][ T6750] BTRFS info (device loop2): disk space caching is enabled [ 232.501555][ T6750] BTRFS info (device loop2): has skinny extents [ 232.560920][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.664407][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.698097][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.719559][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.743844][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.827593][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.847223][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.854392][ T5678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.902027][ T3682] Bluetooth: hci5: command 0x040f tx timeout [ 232.945034][ T5230] device hsr_slave_0 left promiscuous mode [ 232.969341][ T5230] device hsr_slave_1 left promiscuous mode [ 232.985544][ T6750] BTRFS info (device loop2): enabling ssd optimizations [ 233.019001][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.026476][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.034711][ T6750] BTRFS info (device loop2): clearing free space tree [ 233.053575][ T6750] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 233.068655][ T6750] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 233.089492][ T5230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.096955][ T5230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.215382][ T5230] device bridge_slave_1 left promiscuous mode [ 233.228664][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.260423][ T5230] device bridge_slave_0 left promiscuous mode [ 233.266662][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.343798][ T26] audit: type=1804 audit(1724499187.172:47): pid=6750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.958" name="/newroot/211/bus/file1" dev="loop2" ino=260 res=1 errno=0 [ 233.366352][ T5230] device veth1_macvtap left promiscuous mode [ 233.378922][ T5230] device veth0_macvtap left promiscuous mode [ 233.389633][ T5230] device veth1_vlan left promiscuous mode [ 233.405691][ T5230] device veth0_vlan left promiscuous mode [ 233.528945][ T6773] loop0: detected capacity change from 0 to 40427 [ 233.628904][ T6773] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 233.644924][ T6773] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 233.737754][ T6773] F2FS-fs (loop0): Found nat_bits in checkpoint [ 233.835787][ T6801] loop3: detected capacity change from 0 to 32768 [ 233.835900][ T5230] bond1 (unregistering): Released all slaves [ 233.870939][ T6773] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 233.880167][ T6773] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.934767][ T6806] rtc_cmos 00:00: Alarms can be up to one day in the future [ 234.075025][ T6801] XFS (loop3): Mounting V5 Filesystem [ 234.117704][ T3682] rtc_cmos 00:00: Alarms can be up to one day in the future [ 234.132744][ T3682] rtc_cmos 00:00: Alarms can be up to one day in the future [ 234.153473][ T3682] rtc_cmos 00:00: Alarms can be up to one day in the future [ 234.162040][ T3682] rtc_cmos 00:00: Alarms can be up to one day in the future [ 234.170426][ T3682] rtc rtc0: __rtc_set_alarm: err=-22 [ 234.189565][ T6801] XFS (loop3): Ending clean mount [ 234.463435][ T5733] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 234.504145][ T5733] XFS (loop3): Unmount and run xfs_repair [ 234.527304][ T5733] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 234.535512][ T5733] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 234.575017][ T5733] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 234.588283][ T5733] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 234.590722][ T5230] team0 (unregistering): Port device team_slave_1 removed [ 234.607592][ T5733] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 234.638320][ T5733] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 234.658449][ T5733] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 234.667454][ T5733] 00000060: 00 40 00 00 00 00 00 00 00 00 00 03 00 00 00 02 .@.............. [ 234.669399][ T5230] team0 (unregistering): Port device team_slave_0 removed [ 234.680874][ T5733] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 234.708814][ T6801] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 234.753026][ T5230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.762467][ T6801] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 234.778958][ T6801] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 234.847796][ T5230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.882317][ T4894] XFS (loop3): Unmounting Filesystem [ 234.962486][ T3682] Bluetooth: hci5: command 0x0419 tx timeout [ 235.081891][ T5230] bond0 (unregistering): Released all slaves [ 235.145037][ T6835] loop2: detected capacity change from 0 to 32768 [ 235.191228][ T6839] ptrace attach of "./syz-executor exec"[3566] was attempted by "./syz-executor exec"[6839] [ 235.204689][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.219153][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.229491][ T6835] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.964 (6835) [ 235.238507][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.279320][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.286633][ T5678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.309041][ T6835] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 235.327988][ T6835] BTRFS info (device loop2): turning on flush-on-commit [ 235.357361][ T6835] BTRFS info (device loop2): turning off barriers [ 235.380642][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.388582][ T6835] BTRFS info (device loop2): doing ref verification [ 235.395583][ T6835] BTRFS info (device loop2): force clearing of disk cache [ 235.462306][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.470432][ T6835] BTRFS info (device loop2): enabling disk space caching [ 235.477484][ T6835] BTRFS info (device loop2): turning on sync discard [ 235.522320][ T6835] BTRFS info (device loop2): using default commit interval 30s [ 235.532647][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.552128][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.577917][ T6835] BTRFS info (device loop2): disk space caching is enabled [ 235.615700][ T6847] delete_channel: no stack [ 235.623365][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.631963][ T6835] BTRFS info (device loop2): has skinny extents [ 235.659637][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.668882][ T6850] loop3: detected capacity change from 0 to 512 [ 235.679111][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.695797][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.724300][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.792324][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.817046][ T6850] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.969: corrupted inode contents [ 235.830261][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.849540][ T6850] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.969: mark_inode_dirty error [ 235.866174][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.954245][ T6850] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.969: corrupted inode contents [ 235.966956][ T6835] BTRFS info (device loop2): enabling ssd optimizations [ 235.980153][ T6835] BTRFS info (device loop2): clearing free space tree [ 235.986994][ T6835] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 236.058567][ T6835] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 236.082561][ T6850] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.969: mark_inode_dirty error [ 236.138128][ T6850] Quota error (device loop3): write_blk: dquota write failed [ 236.178593][ T6850] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 236.210025][ T6887] netlink: 'syz.1.974': attribute type 4 has an invalid length. [ 236.246712][ T6850] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.969: Failed to acquire dquot type 0 [ 236.270795][ T6850] EXT4-fs (loop3): 1 orphan inode deleted [ 236.276809][ T6850] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 236.305910][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.349414][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.357423][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.362444][ T6850] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038 (0x7fffffff) [ 236.405748][ T6891] netlink: 104 bytes leftover after parsing attributes in process `syz.0.975'. [ 236.416008][ T26] audit: type=1804 audit(1724499190.252:48): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.964" name="/newroot/212/bus/file1" dev="loop2" ino=260 res=1 errno=0 [ 237.384115][ T6911] syz.1.984[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.384276][ T6911] syz.1.984[6911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.718612][ T26] audit: type=1326 audit(1724499191.512:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 237.942072][ T26] audit: type=1326 audit(1724499191.512:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 238.249336][ T26] audit: type=1326 audit(1724499191.512:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 238.576301][ T26] audit: type=1326 audit(1724499191.512:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 238.743787][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 238.775608][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.827464][ T26] audit: type=1326 audit(1724499191.512:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 238.927230][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 238.949421][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.965005][ T6940] loop3: detected capacity change from 0 to 1024 [ 238.987004][ T6669] device veth0_vlan entered promiscuous mode [ 238.995967][ T26] audit: type=1326 audit(1724499191.512:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.010291][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.050212][ T6940] EXT4-fs (loop3): Mount option "nojournal_checksum" incompatible with ext2 [ 239.060168][ T6944] loop0: detected capacity change from 0 to 512 [ 239.084705][ T26] audit: type=1326 audit(1724499191.512:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.090718][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.137627][ T26] audit: type=1326 audit(1724499191.522:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.167173][ T6669] device veth1_vlan entered promiscuous mode [ 239.314535][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.332239][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.340534][ T26] audit: type=1326 audit(1724499191.522:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.399782][ T6944] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.992: corrupted inode contents [ 239.419376][ T6944] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.992: mark_inode_dirty error [ 239.440683][ T6950] loop2: detected capacity change from 0 to 512 [ 239.451046][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.464390][ T26] audit: type=1326 audit(1724499191.532:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.474775][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.494843][ T26] audit: type=1326 audit(1724499191.532:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.494890][ T26] audit: type=1326 audit(1724499191.532:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.494944][ T26] audit: type=1326 audit(1724499191.532:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e6b93e79 code=0x7ffc0000 [ 239.572405][ T6944] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.992: corrupted inode contents [ 239.591718][ T6944] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.992: mark_inode_dirty error [ 239.615976][ T6944] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.992: Failed to acquire dquot type 0 [ 239.636243][ T6944] EXT4-fs (loop0): 1 orphan inode deleted [ 239.646385][ T6944] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 239.681101][ T6944] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038 (0x7fffffff) [ 239.711975][ T6950] EXT4-fs (loop2): Ignoring removed bh option [ 239.751661][ T6950] EXT4-fs error (device loop2): __ext4_iget:4872: inode #12: block 2: comm syz.2.994: invalid block [ 239.780740][ T6950] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.994: couldn't read orphan inode 12 (err -117) [ 239.844376][ T6950] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 239.963344][ T6948] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.994: Directory hole found for htree leaf block 0 [ 240.044366][ T6669] device veth0_macvtap entered promiscuous mode [ 240.054450][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.065408][ T6669] device veth1_macvtap entered promiscuous mode [ 240.248814][ T3677] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 240.388773][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.465696][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.516710][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.539458][ T3677] usb 2-1: Using ep0 maxpacket: 32 [ 240.594655][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.618879][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.662592][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.666843][ T6964] loop3: detected capacity change from 0 to 512 [ 240.672542][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.672562][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.672582][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.672597][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.672615][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.672630][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.674333][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.679665][ T3677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.695498][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.780934][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.790843][ T3677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.790894][ T3677] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 240.800859][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.800881][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.800892][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.800906][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.800932][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.800947][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.800966][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.800980][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.800999][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.801013][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.802526][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.891985][ T3677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.966561][ T6964] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.997: corrupted inode contents [ 240.987655][ T6964] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.997: mark_inode_dirty error [ 241.021834][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.040034][ T3677] usb 2-1: config 0 descriptor?? [ 241.064417][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.087403][ T6964] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.997: corrupted inode contents [ 241.127382][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.137098][ T6964] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.997: mark_inode_dirty error [ 241.194653][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.216737][ T6964] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.997: Failed to acquire dquot type 0 [ 241.227427][ T6669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.257511][ T6669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.277781][ T6669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.307180][ T6669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.308814][ T6964] EXT4-fs (loop3): 1 orphan inode deleted [ 241.322640][ T6948] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.994: Directory hole found for htree leaf block 0 [ 241.336684][ T6964] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.358142][ T6964] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038 (0x7fffffff) [ 241.598633][ T3677] greenasia 0003:0E8F:0012.0007: item fetching failed at offset 0/3 [ 241.607234][ T3677] greenasia 0003:0E8F:0012.0007: parse failed [ 241.614881][ T3677] greenasia: probe of 0003:0E8F:0012.0007 failed with error -22 [ 241.754373][ T5386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.783187][ T3682] usb 2-1: USB disconnect, device number 5 [ 241.826965][ T5386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.939454][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.000855][ T5678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.030039][ T5678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.100510][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.133359][ T6981] syz.2.1003[6981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.133524][ T6981] syz.2.1003[6981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.384604][ T6991] loop0: detected capacity change from 0 to 512 [ 242.730857][ T6991] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1007: corrupted inode contents [ 242.781991][ T6991] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.1007: mark_inode_dirty error [ 242.830778][ T6991] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1007: corrupted inode contents [ 242.877205][ T6991] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1007: mark_inode_dirty error [ 242.928227][ T6991] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1007: Failed to acquire dquot type 0 [ 242.970516][ T6991] EXT4-fs (loop0): 1 orphan inode deleted [ 242.986726][ T6991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.028990][ T6991] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038 (0x7fffffff) [ 244.249915][ T7040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1024'. [ 245.025549][ T7042] loop1: detected capacity change from 0 to 2048 [ 245.060320][ T7047] fuse: Bad value for 'fd' [ 245.194861][ T7042] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 245.224275][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.313535][ T7061] loop4: detected capacity change from 0 to 512 [ 245.424663][ T7061] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.1032: corrupted inode contents [ 245.544835][ T7061] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #3: comm syz.4.1032: mark_inode_dirty error [ 245.619984][ T7061] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.1032: corrupted inode contents [ 245.688708][ T7061] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.1032: mark_inode_dirty error [ 245.704863][ T7061] __quota_error: 35 callbacks suppressed [ 245.704883][ T7061] Quota error (device loop4): write_blk: dquota write failed [ 245.719124][ T7061] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 245.753690][ T7061] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1032: Failed to acquire dquot type 0 [ 245.925158][ T7061] EXT4-fs (loop4): 1 orphan inode deleted [ 245.948586][ T7061] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.961979][ T7061] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 248.079004][ T6924] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 248.254939][ T7099] rtc_cmos 00:00: Alarms can be up to one day in the future [ 249.086011][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 249.096644][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 249.128889][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 249.166181][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 249.178881][ T6924] usb 1-1: Using ep0 maxpacket: 8 [ 249.184195][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 249.275539][ T7119] loop2: detected capacity change from 0 to 512 [ 249.318834][ T6924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.359716][ T6924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.380642][ T7119] EXT4-fs error (device loop2): ext4_do_update_inode:5171: inode #3: comm syz.2.1054: corrupted inode contents [ 249.393266][ T6924] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 249.411305][ T7119] EXT4-fs error (device loop2): ext4_dirty_inode:6004: inode #3: comm syz.2.1054: mark_inode_dirty error [ 249.439919][ T7119] EXT4-fs error (device loop2): ext4_do_update_inode:5171: inode #3: comm syz.2.1054: corrupted inode contents [ 249.455554][ T7119] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.1054: mark_inode_dirty error [ 249.471303][ T7119] Quota error (device loop2): write_blk: dquota write failed [ 249.481141][ T7119] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 249.495235][ T7119] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.1054: Failed to acquire dquot type 0 [ 249.507363][ T6924] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 249.519179][ T6924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 249.531321][ T7119] EXT4-fs (loop2): 1 orphan inode deleted [ 249.538867][ T7119] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 249.552329][ T6924] usb 1-1: SerialNumber: syz [ 249.559521][ T7119] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038 (0x7fffffff) [ 249.619482][ T6924] hub 1-1:1.0: bad descriptor, ignoring hub [ 249.628457][ T6924] hub: probe of 1-1:1.0 failed with error -5 [ 249.771830][ T6924] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 250.479764][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1058'. [ 250.680253][ T7135] rtc_cmos 00:00: Alarms can be up to one day in the future [ 250.808826][ T7139] netlink: 'syz.1.1060': attribute type 14 has an invalid length. [ 250.979349][ T6924] usb 1-1: USB disconnect, device number 9 [ 251.085687][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 251.114579][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 251.156500][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 251.191404][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 251.201866][ T7152] loop0: detected capacity change from 0 to 512 [ 251.215099][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 251.342633][ T7152] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1065: corrupted inode contents [ 251.471798][ T7152] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.1065: mark_inode_dirty error [ 251.744310][ T7152] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1065: corrupted inode contents [ 251.945820][ T7152] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1065: mark_inode_dirty error [ 252.149458][ T7152] Quota error (device loop0): write_blk: dquota write failed [ 252.199498][ T7152] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 252.234215][ T7152] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1065: Failed to acquire dquot type 0 [ 252.251423][ T7167] rtc_cmos 00:00: Alarms can be up to one day in the future [ 252.270255][ T7] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 252.297044][ T7152] EXT4-fs (loop0): 1 orphan inode deleted [ 252.316575][ T7] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 252.324869][ T7152] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.382047][ T7] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 252.402320][ T7152] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038 (0x7fffffff) [ 253.245055][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 253.252701][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 253.282336][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 253.324197][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 253.359793][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 253.763262][ T7206] syz.1.1079[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.763810][ T7206] syz.1.1079[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.571030][ T7213] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.573155][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.581791][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.596526][ T7222] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1087'. [ 255.619177][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.638917][ T7226] loop1: detected capacity change from 0 to 512 [ 255.646307][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.668493][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 255.681612][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.688099][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.758679][ T7236] netlink: 'syz.3.1092': attribute type 13 has an invalid length. [ 255.777729][ T7226] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.1088: corrupted inode contents [ 255.798148][ T7236] device veth0_macvtap left promiscuous mode [ 255.808315][ T7226] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #3: comm syz.1.1088: mark_inode_dirty error [ 255.857365][ T7236] macvtap0: refused to change device tx_queue_len [ 255.901517][ T7226] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.1088: corrupted inode contents [ 255.949285][ T7245] qrtr: Invalid version 27 [ 255.956763][ T7246] rtc_cmos 00:00: Alarms can be up to one day in the future [ 255.979166][ T7226] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1088: mark_inode_dirty error [ 256.035427][ T7226] Quota error (device loop1): write_blk: dquota write failed [ 256.068656][ T7226] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 256.085716][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 256.212218][ T7226] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1088: Failed to acquire dquot type 0 [ 256.226987][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 256.227076][ T7226] EXT4-fs (loop1): 1 orphan inode deleted [ 257.029686][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.051251][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.059247][ T7226] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038 (0x7fffffff) [ 257.079344][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.231198][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 258.262132][ T6926] Bluetooth: hci3: command 0x0406 tx timeout [ 258.422758][ T7278] rtc_cmos 00:00: Alarms can be up to one day in the future [ 258.439776][ T7282] input: syz1 as /devices/virtual/input/input6 [ 259.085276][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.112361][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.139396][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 259.263038][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 260.008508][ T3568] rtc rtc0: __rtc_set_alarm: err=-22 [ 260.015882][ T7302] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 260.090091][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1115'. [ 260.343657][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 260.494490][ T7312] loop3: detected capacity change from 0 to 512 [ 260.579006][ T7313] rtc_cmos 00:00: Alarms can be up to one day in the future [ 260.636521][ T7312] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1118: corrupted inode contents [ 260.657528][ T7312] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.1118: mark_inode_dirty error [ 260.687595][ T7312] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1118: corrupted inode contents [ 260.725432][ T7312] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1118: mark_inode_dirty error [ 260.763392][ T7312] Quota error (device loop3): write_blk: dquota write failed [ 260.786555][ T7312] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 260.786607][ T7312] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1118: Failed to acquire dquot type 0 [ 260.795327][ T7312] EXT4-fs (loop3): 1 orphan inode deleted [ 260.795358][ T7312] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 260.795485][ T7312] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038 (0x7fffffff) [ 261.109165][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.109613][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.110012][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.110439][ T3568] rtc_cmos 00:00: Alarms can be up to one day in the future [ 261.110530][ T3568] rtc rtc0: __rtc_set_alarm: err=-22 [ 262.832942][ T7343] netlink: 'syz.0.1129': attribute type 4 has an invalid length. [ 262.997237][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 263.039081][ T7346] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.087018][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.129985][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.170737][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.203225][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 263.223558][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 263.467074][ T7361] loop0: detected capacity change from 0 to 512 [ 263.663813][ T7361] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1137: corrupted inode contents [ 263.681313][ T7361] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.1137: mark_inode_dirty error [ 263.727775][ T7361] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1137: corrupted inode contents [ 263.839089][ T7361] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1137: mark_inode_dirty error [ 263.878234][ T7361] Quota error (device loop0): write_blk: dquota write failed [ 263.899465][ T7361] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 263.947629][ T7361] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1137: Failed to acquire dquot type 0 [ 263.991970][ T7378] rtc_cmos 00:00: Alarms can be up to one day in the future [ 264.019598][ T7361] EXT4-fs (loop0): 1 orphan inode deleted [ 264.044439][ T7361] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 264.087780][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 264.095423][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 264.096432][ T7361] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038 (0x7fffffff) [ 264.103372][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 264.120805][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 264.128129][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 264.848590][ T3681] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 265.208539][ T3681] usb 3-1: Using ep0 maxpacket: 32 [ 265.620371][ T3681] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 265.644824][ T3681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.655783][ T3681] usb 3-1: Product: syz [ 265.660216][ T3681] usb 3-1: Manufacturer: syz [ 265.665241][ T3681] usb 3-1: SerialNumber: syz [ 265.956734][ T3681] usb 3-1: config 0 descriptor?? [ 266.038716][ T3681] usb 3-1: bad CDC descriptors [ 266.045450][ T3681] usb 3-1: bad CDC descriptors [ 266.222159][ T7413] rtc_cmos 00:00: Alarms can be up to one day in the future [ 266.428500][ T3615] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 266.517289][ T7429] loop4: detected capacity change from 0 to 512 [ 266.618101][ T7429] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.1162: corrupted inode contents [ 266.635297][ T7429] EXT4-fs error (device loop4): ext4_dirty_inode:6004: inode #3: comm syz.4.1162: mark_inode_dirty error [ 266.677034][ T7429] EXT4-fs error (device loop4): ext4_do_update_inode:5171: inode #3: comm syz.4.1162: corrupted inode contents [ 266.689168][ T3615] usb 1-1: Using ep0 maxpacket: 16 [ 266.695312][ T7429] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.1162: mark_inode_dirty error [ 266.716998][ T7429] Quota error (device loop4): write_blk: dquota write failed [ 266.726662][ T7429] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 266.761971][ T7429] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.1162: Failed to acquire dquot type 0 [ 266.799419][ T7429] EXT4-fs (loop4): 1 orphan inode deleted [ 266.808691][ T3615] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 266.824782][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.828496][ T7429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 266.843695][ T3615] usb 1-1: config 0 descriptor?? [ 266.855530][ T7429] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 266.890221][ T3615] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 267.083995][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.094837][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.275139][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.363716][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 267.391246][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 267.413053][ T3681] usb 3-1: USB disconnect, device number 8 [ 268.122707][ T7451] rtc_cmos 00:00: Alarms can be up to one day in the future [ 268.163332][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1168'. [ 268.328662][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 268.428527][ T6924] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 268.568631][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 268.688739][ T7] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 268.689863][ T6924] usb 5-1: Using ep0 maxpacket: 16 [ 268.697810][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.705695][ T7] usb 3-1: config 0 descriptor?? [ 268.760366][ T7] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 268.858645][ T6924] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 268.867939][ T6924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.877471][ T6924] usb 5-1: config 0 descriptor?? [ 268.920734][ T6924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 268.922632][ T7470] loop1: detected capacity change from 0 to 512 [ 268.990091][ T7470] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.1177: corrupted inode contents [ 269.002579][ T7470] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #3: comm syz.1.1177: mark_inode_dirty error [ 269.015477][ T7470] EXT4-fs error (device loop1): ext4_do_update_inode:5171: inode #3: comm syz.1.1177: corrupted inode contents [ 269.028005][ T7470] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1177: mark_inode_dirty error [ 269.041664][ T7470] Quota error (device loop1): write_blk: dquota write failed [ 269.052324][ T7470] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 269.062673][ T7470] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.1177: Failed to acquire dquot type 0 [ 269.078006][ T7470] EXT4-fs (loop1): 1 orphan inode deleted [ 269.084565][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.092735][ T7470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.104360][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.112148][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.123599][ T7470] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038 (0x7fffffff) [ 269.134255][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 269.148695][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 269.197946][ T7474] program syz.3.1178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.019153][ T7481] rtc_cmos 00:00: Alarms can be up to one day in the future [ 270.054445][ T7485] ALSA: mixer_oss: invalid OSS volume '—ˆ†' [ 270.083667][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 270.091998][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 270.100136][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 270.107917][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 270.115915][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 270.197214][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.205489][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.213005][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.221193][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.229029][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.236408][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.244320][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.251804][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.261041][ T3615] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 270.269375][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.276781][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.291347][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.298869][ T3681] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 270.306413][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.313964][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.322119][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.329629][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.337019][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.344820][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.352286][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.359711][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.367110][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.374564][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.382048][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.389513][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.396919][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.405056][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.412500][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.420794][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.428193][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.435725][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.443148][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.450687][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.458069][ T5733] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 270.469580][ T5733] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.482498][ T3615] usb 1-1: USB disconnect, device number 10 [ 270.538647][ T3681] usb 2-1: Using ep0 maxpacket: 32 [ 270.658711][ T3681] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 270.666916][ T3681] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 270.683513][ T3681] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 270.694618][ T3681] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 270.709325][ T3681] usb 2-1: config 0 interface 0 has no altsetting 0 [ 270.780609][ T5733] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 270.868699][ T3681] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 270.877761][ T3681] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 270.895614][ T3681] usb 2-1: Product: syz [ 270.900802][ T3681] usb 2-1: Manufacturer: syz [ 270.905393][ T3681] usb 2-1: SerialNumber: syz [ 270.915963][ T3681] usb 2-1: config 0 descriptor?? [ 270.960207][ T3681] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 270.975624][ T3681] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 271.148851][ T5733] usb 4-1: config 0 has no interfaces? [ 271.154378][ T5733] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 271.166345][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.172580][ T3677] usb 2-1: USB disconnect, device number 6 [ 271.176680][ T5733] usb 4-1: config 0 descriptor?? [ 271.191740][ T3677] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 271.364443][ T7502] loop0: detected capacity change from 0 to 512 [ 271.425277][ T6926] usb 4-1: USB disconnect, device number 8 [ 271.437654][ T7502] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1190: corrupted inode contents [ 271.451146][ T7502] EXT4-fs error (device loop0): ext4_dirty_inode:6004: inode #3: comm syz.0.1190: mark_inode_dirty error [ 271.469311][ T7502] EXT4-fs error (device loop0): ext4_do_update_inode:5171: inode #3: comm syz.0.1190: corrupted inode contents [ 271.482094][ T7502] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1190: mark_inode_dirty error [ 271.495398][ T7502] Quota error (device loop0): write_blk: dquota write failed [ 271.503424][ T7502] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 271.516315][ T7502] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1190: Failed to acquire dquot type 0 [ 271.539465][ T7502] EXT4-fs (loop0): 1 orphan inode deleted [ 271.546321][ T7502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.557702][ T7502] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038 (0x7fffffff) [ 272.325026][ T7511] rtc_cmos 00:00: Alarms can be up to one day in the future [ 272.348895][ T6924] gspca_sonixj: reg_w1 err -71 [ 272.354419][ T6924] sonixj: probe of 5-1:0.0 failed with error -71 [ 272.393084][ T6924] usb 5-1: USB disconnect, device number 8 [ 272.446146][ T7] gspca_sonixj: reg_w err -71 [ 272.451060][ T7] sonixj: probe of 3-1:0.0 failed with error -71 [ 272.470054][ T7] usb 3-1: USB disconnect, device number 9 [ 272.588629][ T3677] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 272.852702][ T3677] usb 2-1: Using ep0 maxpacket: 16 [ 272.917209][ T7551] loop3: detected capacity change from 0 to 512 [ 272.926761][ T7549] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.000088][ T7551] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1206: corrupted inode contents [ 273.012573][ T3677] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 273.022356][ T3677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.031713][ T7551] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.1206: mark_inode_dirty error [ 273.047077][ T3677] usb 2-1: config 0 descriptor?? [ 273.054622][ T7551] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1206: corrupted inode contents [ 273.069519][ T7551] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1206: mark_inode_dirty error [ 273.083285][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.091423][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.105206][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.105386][ T3677] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 273.114734][ T7] rtc_cmos 00:00: Alarms can be up to one day in the future [ 273.127437][ T7] rtc rtc0: __rtc_set_alarm: err=-22 [ 273.132928][ T7551] Quota error (device loop3): write_blk: dquota write failed [ 273.140622][ T7551] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 273.154198][ T7551] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1206: Failed to acquire dquot type 0 [ 273.168785][ T7551] EXT4-fs (loop3): 1 orphan inode deleted [ 273.174537][ T7551] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.186615][ T7551] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038 (0x7fffffff) [ 273.996584][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 274.218030][ T7570] vivid-001: disconnect [ 274.234382][ T7569] vivid-001: reconnect [ 274.323761][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 274.448169][ T7576] netlink: 'syz.4.1215': attribute type 4 has an invalid length. [ 274.519536][ T7] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 274.540276][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.565387][ T7] usb 1-1: Product: syz [ 274.583155][ T7] usb 1-1: Manufacturer: syz [ 274.598269][ T7] usb 1-1: SerialNumber: syz [ 274.620586][ T7] usb 1-1: config 0 descriptor?? [ 274.884682][ T7] usb 1-1: USB disconnect, device number 11 [ 274.899995][ T7588] rtc_cmos 00:00: Alarms can be up to one day in the future [ 274.957037][ T7593] loop3: detected capacity change from 0 to 512 [ 275.036121][ T7593] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1223: corrupted inode contents [ 275.057202][ T7593] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.1223: mark_inode_dirty error [ 275.083197][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 275.084615][ T7593] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1223: corrupted inode contents [ 275.109538][ T7593] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1223: mark_inode_dirty error [ 275.118827][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 275.128794][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 275.138528][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 275.153777][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 275.155641][ T7593] Quota error (device loop3): write_blk: dquota write failed [ 275.178657][ T7593] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 275.218845][ T7593] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1223: Failed to acquire dquot type 0 [ 275.270465][ T7593] EXT4-fs (loop3): 1 orphan inode deleted [ 275.278586][ T7593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.300284][ T7593] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038 (0x7fffffff) [ 276.049418][ T7607] loop0: detected capacity change from 0 to 512 [ 276.166177][ T7607] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #16: comm syz.0.1227: iget: bad extended attribute block 128 [ 276.191038][ T7607] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1227: couldn't read orphan inode 16 (err -117) [ 276.215322][ T7607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.282970][ T7607] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038 (0x7fffffff) [ 276.308615][ T3677] gspca_sonixj: reg_w1 err -71 [ 276.313467][ T3677] sonixj: probe of 2-1:0.0 failed with error -71 [ 276.330119][ T3677] usb 2-1: USB disconnect, device number 7 [ 276.353643][ T26] audit: type=1804 audit(1724499230.192:91): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1227" name="/newroot/246/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 277.668521][ T26] audit: type=1800 audit(1724499231.502:92): pid=7607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1227" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 277.744248][ T26] audit: type=1800 audit(1724499231.502:93): pid=7615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1227" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 277.779542][ T7627] rtc_cmos 00:00: Alarms can be up to one day in the future [ 277.936040][ T7633] loop4: detected capacity change from 0 to 512 [ 278.024093][ T7633] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 278.102671][ T7633] EXT4-fs (loop4): 1 orphan inode deleted [ 278.118264][ T7633] EXT4-fs (loop4): 1 truncate cleaned up [ 278.125575][ T7633] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 278.151937][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 278.165072][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 278.173198][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 278.180887][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 278.188192][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 279.546845][ T7646] loop3: detected capacity change from 0 to 512 [ 279.628763][ T7649] loop1: detected capacity change from 0 to 512 [ 279.860140][ T7649] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 280.019273][ T7649] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 280.049614][ T7646] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1237: corrupted inode contents [ 280.099076][ T7646] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #3: comm syz.3.1237: mark_inode_dirty error [ 280.113277][ T7646] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #3: comm syz.3.1237: corrupted inode contents [ 280.134829][ T7646] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1237: mark_inode_dirty error [ 280.293224][ T7646] Quota error (device loop3): write_blk: dquota write failed [ 280.395896][ T7646] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 280.541584][ T7646] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1237: Failed to acquire dquot type 0 [ 280.817840][ T7646] EXT4-fs (loop3): 1 orphan inode deleted [ 280.823780][ T7646] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.860780][ T7646] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038 (0x7fffffff) [ 281.096172][ T7665] loop4: detected capacity change from 0 to 512 [ 281.116713][ T7668] nftables ruleset with unbound chain [ 281.145968][ T7655] loop0: detected capacity change from 0 to 32768 [ 281.370514][ T7665] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.1243: iget: bad extended attribute block 128 [ 281.387674][ T7665] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1243: couldn't read orphan inode 16 (err -117) [ 281.401314][ T7665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 281.413226][ T7665] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 281.464713][ T7655] XFS (loop0): Mounting V5 Filesystem [ 281.530551][ T7674] rtc_cmos 00:00: Alarms can be up to one day in the future [ 281.599827][ T7655] XFS (loop0): Ending clean mount [ 281.728937][ T3566] XFS (loop0): Unmounting Filesystem [ 281.776348][ T7687] loop1: detected capacity change from 0 to 128 [ 281.874647][ T7687] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 281.927113][ T26] audit: type=1800 audit(1724499235.762:94): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1243" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 281.939911][ T7687] ext4 filesystem being mounted at /214/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 282.060242][ T7696] loop3: detected capacity change from 0 to 16 [ 282.172848][ T7696] erofs: (device loop3): mounted with root inode @ nid 36. [ 282.184694][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.192989][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.201164][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.208943][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.216254][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 282.253506][ T3581] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 282.286880][ T7696] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 282.458654][ T26] audit: type=1800 audit(1724499236.272:95): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1253" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 282.793068][ T7706] loop3: detected capacity change from 0 to 4096 [ 282.869387][ T7710] rtc_cmos 00:00: Alarms can be up to one day in the future [ 282.889345][ T7706] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 282.984637][ T7706] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 283.031337][ T7716] device gretap1 entered promiscuous mode [ 283.082423][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.097803][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.163867][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.195908][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.221920][ T3615] rtc rtc0: __rtc_set_alarm: err=-22 [ 283.781660][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 283.841881][ T7738] loop3: detected capacity change from 0 to 256 [ 283.936431][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.953814][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.962229][ T7717] device bridge_slave_0 entered promiscuous mode [ 283.989768][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.996869][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.005907][ T7717] device bridge_slave_1 entered promiscuous mode [ 284.021547][ T7743] rtc_cmos 00:00: Alarms can be up to one day in the future [ 284.082240][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 284.094818][ T7717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.105592][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 284.109855][ T7751] loop3: detected capacity change from 0 to 1024 [ 284.114124][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 284.140940][ T7717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.150561][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 284.157875][ T3615] rtc rtc0: __rtc_set_alarm: err=-22 [ 284.228029][ T7751] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.241083][ C1] eth0: bad gso: type: 1, size: 1408 [ 284.327751][ T7717] team0: Port device team_slave_0 added [ 284.341120][ T7717] team0: Port device team_slave_1 added [ 284.441273][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880623f8800: rx timeout, send abort [ 284.491504][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.504095][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.563246][ T7717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.616728][ T7717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.628118][ T7717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.674526][ T7717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.749761][ T7779] rtc_cmos 00:00: Alarms can be up to one day in the future [ 284.859728][ T7717] device hsr_slave_0 entered promiscuous mode [ 284.891069][ T7717] device hsr_slave_1 entered promiscuous mode [ 284.907213][ T7717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.916550][ T7717] Cannot create hsr debugfs directory [ 284.951834][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880623f8800: abort rx timeout. Force session deactivation [ 285.069727][ T7795] loop3: detected capacity change from 0 to 128 [ 285.082199][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.093238][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.155161][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.168899][ T7795] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 285.188913][ T7795] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038 (0x7fffffff) [ 285.209726][ T3615] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.218948][ T3615] rtc rtc0: __rtc_set_alarm: err=-22 [ 285.226768][ T7717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.246251][ T5733] Bluetooth: hci7: command 0x0409 tx timeout [ 285.259056][ T7795] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.335929][ T7795] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.354876][ T7717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.398821][ T7804] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.414514][ T7804] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.426229][ T7807] loop4: detected capacity change from 0 to 512 [ 285.461425][ T7808] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.503828][ T7717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.517189][ T7795] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.534034][ T7808] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.547002][ T7795] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.574957][ T7809] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.583046][ T7804] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.603202][ T7804] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.645234][ T7808] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.669540][ T7808] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.674180][ T7795] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.699925][ T7795] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.704030][ T7807] EXT4-fs (loop4): Test dummy encryption mode enabled [ 285.716113][ T7795] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.736547][ T7795] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 285.739836][ T7717] team0: Port device netdevsim0 removed [ 285.752833][ T7795] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 285.766344][ T7717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.784180][ T7807] EXT4-fs error (device loop4): ext4_fill_super:4840: inode #2: comm syz.4.1293: casefold flag without casefold feature [ 286.071210][ T7804] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.1289: No space for directory leaf checksum. Please run e2fsck -D. [ 286.094032][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 286.152958][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 286.225475][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 286.293169][ T3681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 286.359444][ T3681] rtc rtc0: __rtc_set_alarm: err=-22 [ 286.576631][ T7804] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 286.616519][ T7807] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 286.626882][ T7795] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.1289: checksumming directory block 0 [ 286.641137][ T7807] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none. [ 286.725819][ T7822] loop0: detected capacity change from 0 to 2048 [ 286.737376][ T7717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 286.749413][ T7717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.760193][ T7717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 286.774104][ T7717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 286.841635][ T7822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 286.967112][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.014090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.036446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.068093][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.106545][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.137498][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.183011][ T5386] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.190153][ T5386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.278949][ T7] Bluetooth: hci7: command 0x041b tx timeout [ 287.290945][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.340065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.410433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.469429][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.476665][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.651247][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.698640][ T3613] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 287.712868][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.768943][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.799111][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.815847][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.858091][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.876894][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.895151][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.904297][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.913226][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.922869][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.937090][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.946826][ T7841] rtc_cmos 00:00: Alarms can be up to one day in the future [ 287.988330][ T7844] loop4: detected capacity change from 0 to 512 [ 288.090549][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.107948][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.118344][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.137498][ T5733] rtc_cmos 00:00: Alarms can be up to one day in the future [ 288.146796][ T5733] rtc rtc0: __rtc_set_alarm: err=-22 [ 288.298781][ T3613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.307966][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.318952][ T3613] usb 1-1: config 0 has no interfaces? [ 288.331269][ T7844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.333507][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.350045][ T7844] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff) [ 288.372319][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.415236][ T7863] loop1: detected capacity change from 0 to 512 [ 288.439543][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.448965][ T3613] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.9f [ 288.455042][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.464326][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=3 [ 288.474590][ T7863] EXT4-fs (loop1): Unrecognized mount option "debug_want_extra_isize=0x0000000000000040"nodioread_nolock" or missing value [ 288.483907][ T3613] usb 1-1: Product: syz [ 288.511121][ T3613] usb 1-1: SerialNumber: syz [ 288.529493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.538219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.540816][ T3613] usb 1-1: config 0 descriptor?? [ 288.590983][ T7717] device veth0_vlan entered promiscuous mode [ 288.822405][ T7873] ODEBUG: Out of memory. ODEBUG disabled [ 289.735677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.753998][ T7] Bluetooth: hci7: command 0x040f tx timeout [ 289.761207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.775709][ T7717] device veth1_vlan entered promiscuous mode [ 289.852192][ T7876] loop3: detected capacity change from 0 to 164 [ 289.868030][ T7878] loop1: detected capacity change from 0 to 64 [ 289.906746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.919475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.940109][ T7717] device veth0_macvtap entered promiscuous mode [ 289.967526][ T7717] device veth1_macvtap entered promiscuous mode [ 290.064070][ T7879] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.082323][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.090739][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.102856][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.124201][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.134989][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.154217][ T3614] rtc_cmos 00:00: Alarms can be up to one day in the future [ 290.165774][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.183329][ T7878] ------------[ cut here ]------------ [ 290.198564][ T7878] WARNING: CPU: 1 PID: 7878 at fs/buffer.c:1084 mark_buffer_dirty+0x325/0x4b0 [ 290.198613][ T3614] rtc rtc0: __rtc_set_alarm: err=-22 [ 290.217814][ T7878] Modules linked in: [ 290.217816][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.217831][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.237273][ T7878] [ 290.255990][ T7878] CPU: 1 PID: 7878 Comm: syz.1.1316 Not tainted 5.15.165-syzkaller #0 [ 290.257067][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.283706][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 290.285850][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.320895][ T7878] RIP: 0010:mark_buffer_dirty+0x325/0x4b0 [ 290.326720][ T7] usb 1-1: USB disconnect, device number 12 [ 290.339125][ T7878] Code: 89 df e8 ce 8e e4 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e7 7f fc ff e8 e2 c5 9a ff eb 80 e8 db c5 9a ff <0f> 0b e9 27 fd ff ff e8 cf c5 9a ff 0f 0b e9 46 fd ff ff e8 c3 c5 [ 290.344512][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.380649][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.402188][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.411000][ T7878] RSP: 0018:ffffc900031e7680 EFLAGS: 00010287 [ 290.422546][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.435176][ T7878] RAX: ffffffff81e59bc5 RBX: ffff888056036200 RCX: 0000000000040000 [ 290.442670][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.458164][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.460207][ T7878] RDX: ffffc9000d6d1000 RSI: 0000000000010d1c RDI: 0000000000010d1d [ 290.478935][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.507691][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.512521][ T7878] RBP: 0000000000000000 R08: ffffffff81e598e4 R09: ffffed100b99a740 [ 290.516614][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 290.533608][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 290.542770][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 290.557439][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 290.568312][ T7878] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880630f6cb0 [ 290.578163][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.600965][ T7878] R13: dffffc0000000000 R14: 1ffff1100c61ed96 R15: dffffc0000000000 [ 290.612318][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.618624][ T7878] FS: 00007f76b72bb6c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 290.640814][ T7878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.643197][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.647662][ T7878] CR2: 00007f71dcd78000 CR3: 000000005722b000 CR4: 00000000003506f0 [ 290.676071][ T7878] Call Trace: [ 290.680904][ T7878] [ 290.683933][ T7878] ? __warn+0x15b/0x300 [ 290.685033][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.688236][ T7878] ? mark_buffer_dirty+0x325/0x4b0 [ 290.726604][ T7878] ? report_bug+0x1b7/0x2e0 [ 290.727275][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.733868][ T7878] ? handle_bug+0x3d/0x70 [ 290.756108][ T7878] ? exc_invalid_op+0x16/0x40 [ 290.763602][ T7878] ? asm_exc_invalid_op+0x16/0x20 [ 290.776337][ T7878] ? mark_buffer_dirty+0x44/0x4b0 [ 290.778424][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.784469][ T7878] ? mark_buffer_dirty+0x325/0x4b0 [ 290.817355][ T7878] ? mark_buffer_dirty+0x325/0x4b0 [ 290.818446][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.831743][ T7878] bfs_get_block+0x852/0xac0 [ 290.844445][ T7878] __block_write_begin_int+0x60b/0x1650 [ 290.850281][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.854099][ T7878] ? bfs_bmap+0x30/0x30 [ 290.875863][ T7878] ? page_zero_new_buffers+0x510/0x510 [ 290.881606][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.881627][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.881648][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.881663][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.881683][ T7717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.881699][ T7717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.889473][ T7717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.916782][ T7878] ? mark_lock+0x98/0x340 [ 290.959921][ T7878] ? fault_in_readable+0x206/0x2e0 [ 290.965259][ T7878] ? wait_for_stable_page+0xe2/0x110 [ 290.971002][ T7878] ? bfs_bmap+0x30/0x30 [ 290.975274][ T7878] block_write_begin+0x4f/0xc0 [ 290.980211][ T7878] bfs_write_begin+0x38/0xd0 [ 290.985168][ T7878] generic_perform_write+0x2bf/0x5b0 [ 290.990965][ T7878] ? grab_cache_page_write_begin+0x90/0x90 [ 290.996952][ T7878] ? file_remove_privs+0x610/0x610 [ 291.005749][ T7882] loop4: detected capacity change from 0 to 32768 [ 291.012629][ T7878] ? rwsem_write_trylock+0x166/0x210 [ 291.022294][ T7885] loop3: detected capacity change from 0 to 32768 [ 291.023012][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 291.047679][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.056335][ T7878] __generic_file_write_iter+0x243/0x4f0 [ 291.064314][ T7878] generic_file_write_iter+0xa7/0x1b0 [ 291.067265][ T7717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.079819][ T7878] do_iter_readv_writev+0x594/0x7a0 [ 291.085070][ T7878] ? generic_file_rw_checks+0x260/0x260 [ 291.088234][ T7885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1318 (7885) [ 291.091192][ T7878] ? common_file_perm+0x17d/0x1d0 [ 291.114626][ T7878] ? fsnotify_perm+0x64/0x590 [ 291.118485][ T7717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.120780][ T7878] ? security_file_permission+0x75/0xa0 [ 291.128965][ T7717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.139671][ T7878] do_iter_write+0x1e6/0x760 [ 291.142992][ T7717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.156798][ T7878] do_pwritev+0x219/0x360 [ 291.164844][ T7878] ? do_preadv+0x350/0x350 [ 291.198712][ T7878] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 291.212021][ T7878] ? vtime_user_exit+0x2d1/0x400 [ 291.212387][ T7882] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.1319 (7882) [ 291.217009][ T7878] ? syscall_enter_from_user_mode+0x2e/0x240 [ 291.217045][ T7878] ? lockdep_hardirqs_on+0x94/0x130 [ 291.217073][ T7878] ? __x64_sys_pwritev2+0xb9/0x100 [ 291.217102][ T7878] do_syscall_64+0x3b/0xb0 [ 291.229390][ T7885] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 291.242863][ T7878] ? clear_bhb_loop+0x15/0x70 [ 291.256417][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.261589][ T7885] BTRFS info (device loop3): using free space tree [ 291.267653][ T7878] RIP: 0033:0x7f76b8e3ee79 [ 291.276356][ T7885] BTRFS info (device loop3): has skinny extents [ 291.291052][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.314013][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.334961][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.338535][ T7878] RSP: 002b:00007f76b72bb038 EFLAGS: 00000246 [ 291.343464][ T5386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.393339][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.398502][ T7878] ORIG_RAX: 0000000000000148 [ 291.400925][ T5386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.405426][ T7878] RAX: ffffffffffffffda RBX: 00007f76b8fdaf80 RCX: 00007f76b8e3ee79 [ 291.424382][ T7878] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000006 [ 291.433034][ T7878] RBP: 00007f76b8eac93e R08: 0000000000000000 R09: 0000000000000000 [ 291.441762][ T7878] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000000 [ 291.449950][ T7878] R13: 0000000000000000 R14: 00007f76b8fdaf80 R15: 00007ffe08ff1ce8 [ 291.458115][ T7878] [ 291.461372][ T7878] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 291.466823][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.468664][ T7878] CPU: 1 PID: 7878 Comm: syz.1.1316 Not tainted 5.15.165-syzkaller #0 [ 291.468691][ T7878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 291.468704][ T7878] Call Trace: [ 291.468712][ T7878] [ 291.468720][ T7878] dump_stack_lvl+0x1e3/0x2d0 [ 291.468753][ T7878] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 291.468777][ T7878] ? panic+0x860/0x860 [ 291.468807][ T7878] ? mark_buffer_dirty+0x260/0x4b0 [ 291.468833][ T7878] ? mark_buffer_dirty+0x260/0x4b0 [ 291.468858][ T7878] panic+0x318/0x860 [ 291.468885][ T7878] ? __warn+0x16a/0x300 [ 291.468909][ T7878] ? fb_is_primary_device+0xd0/0xd0 [ 291.468949][ T7878] ? mark_buffer_dirty+0x325/0x4b0 [ 291.468974][ T7878] __warn+0x2b2/0x300 [ 291.469000][ T7878] ? mark_buffer_dirty+0x325/0x4b0 [ 291.469023][ T7878] report_bug+0x1b7/0x2e0 [ 291.556928][ T7878] handle_bug+0x3d/0x70 [ 291.561111][ T7878] exc_invalid_op+0x16/0x40 [ 291.565638][ T7878] asm_exc_invalid_op+0x16/0x20 [ 291.570514][ T7878] RIP: 0010:mark_buffer_dirty+0x325/0x4b0 [ 291.576262][ T7878] Code: 89 df e8 ce 8e e4 ff 48 8b 3b be 04 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e7 7f fc ff e8 e2 c5 9a ff eb 80 e8 db c5 9a ff <0f> 0b e9 27 fd ff ff e8 cf c5 9a ff 0f 0b e9 46 fd ff ff e8 c3 c5 [ 291.595896][ T7878] RSP: 0018:ffffc900031e7680 EFLAGS: 00010287 [ 291.601993][ T7878] RAX: ffffffff81e59bc5 RBX: ffff888056036200 RCX: 0000000000040000 [ 291.609988][ T7878] RDX: ffffc9000d6d1000 RSI: 0000000000010d1c RDI: 0000000000010d1d [ 291.617982][ T7878] RBP: 0000000000000000 R08: ffffffff81e598e4 R09: ffffed100b99a740 [ 291.625973][ T7878] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880630f6cb0 [ 291.633965][ T7878] R13: dffffc0000000000 R14: 1ffff1100c61ed96 R15: dffffc0000000000 [ 291.641963][ T7878] ? mark_buffer_dirty+0x44/0x4b0 [ 291.647039][ T7878] ? mark_buffer_dirty+0x325/0x4b0 [ 291.652192][ T7878] bfs_get_block+0x852/0xac0 [ 291.656832][ T7878] __block_write_begin_int+0x60b/0x1650 [ 291.662432][ T7878] ? bfs_bmap+0x30/0x30 [ 291.666614][ T7878] ? page_zero_new_buffers+0x510/0x510 [ 291.672102][ T7878] ? mark_lock+0x98/0x340 [ 291.676474][ T7878] ? fault_in_readable+0x206/0x2e0 [ 291.681614][ T7878] ? wait_for_stable_page+0xe2/0x110 [ 291.686925][ T7878] ? bfs_bmap+0x30/0x30 [ 291.691108][ T7878] block_write_begin+0x4f/0xc0 [ 291.695900][ T7878] bfs_write_begin+0x38/0xd0 [ 291.700519][ T7878] generic_perform_write+0x2bf/0x5b0 [ 291.705841][ T7878] ? grab_cache_page_write_begin+0x90/0x90 [ 291.707967][ T7885] BTRFS info (device loop3): enabling ssd optimizations [ 291.711672][ T7878] ? file_remove_privs+0x610/0x610 [ 291.711702][ T7878] ? rwsem_write_trylock+0x166/0x210 [ 291.711737][ T7878] __generic_file_write_iter+0x243/0x4f0 [ 291.711771][ T7878] generic_file_write_iter+0xa7/0x1b0 [ 291.711800][ T7878] do_iter_readv_writev+0x594/0x7a0 [ 291.711833][ T7878] ? generic_file_rw_checks+0x260/0x260 [ 291.751043][ T7878] ? common_file_perm+0x17d/0x1d0 [ 291.756097][ T7878] ? fsnotify_perm+0x64/0x590 [ 291.760795][ T7878] ? security_file_permission+0x75/0xa0 [ 291.766370][ T7878] do_iter_write+0x1e6/0x760 [ 291.770995][ T7878] do_pwritev+0x219/0x360 [ 291.775348][ T7878] ? do_preadv+0x350/0x350 [ 291.779814][ T7878] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 291.785824][ T7878] ? vtime_user_exit+0x2d1/0x400 [ 291.790776][ T7878] ? syscall_enter_from_user_mode+0x2e/0x240 [ 291.796872][ T7878] ? lockdep_hardirqs_on+0x94/0x130 [ 291.802100][ T7878] ? __x64_sys_pwritev2+0xb9/0x100 [ 291.807234][ T7878] do_syscall_64+0x3b/0xb0 [ 291.811651][ T7878] ? clear_bhb_loop+0x15/0x70 [ 291.816357][ T7878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.822441][ T7878] RIP: 0033:0x7f76b8e3ee79 [ 291.826866][ T7878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.839078][ T5733] Bluetooth: hci7: command 0x0419 tx timeout [ 291.846471][ T7878] RSP: 002b:00007f76b72bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 291.846504][ T7878] RAX: ffffffffffffffda RBX: 00007f76b8fdaf80 RCX: 00007f76b8e3ee79 [ 291.846522][ T7878] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000006 [ 291.876919][ T7878] RBP: 00007f76b8eac93e R08: 0000000000000000 R09: 0000000000000000 [ 291.884998][ T7878] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000000 [ 291.892992][ T7878] R13: 0000000000000000 R14: 00007f76b8fdaf80 R15: 00007ffe08ff1ce8 [ 291.901002][ T7878] [ 291.904325][ T7878] Kernel Offset: disabled [ 291.908990][ T7878] Rebooting in 86400 seconds..