last executing test programs: 4m55.527165382s ago: executing program 32 (id=40): r0 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) 4m42.052806748s ago: executing program 33 (id=71): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3450, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{0x0, 0x80}], 0x1, 0x401, 0x0, 0x0, 0x6, 0x59}) 4m5.156922281s ago: executing program 1 (id=160): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m4.521022326s ago: executing program 1 (id=165): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x3}}]}}]}, 0x48}}, 0x8011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m3.848068647s ago: executing program 1 (id=168): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) umount2(&(0x7f0000000300)='./file0/../file0\x00', 0xa) 4m2.776946539s ago: executing program 1 (id=173): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000280)={0x3, 0xffffffff, 0xb2, 0x5, 0xffffffff, 0x8}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x64) 4m1.64415616s ago: executing program 1 (id=178): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 4m1.179988492s ago: executing program 34 (id=178): syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m55.134260659s ago: executing program 7 (id=387): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x14d27e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x2007ff3) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000240)={0x400, 0xffffffff001, 0x5, 0x100000}) 2m53.712384325s ago: executing program 7 (id=395): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x7, 0xffffffff, 0x10001, 0xfffffffffffffffe, 0xfffffffffffff748, 0x0, 0x9, 0x7fffffff, 0x2c, 0x1, 0x1}) 2m51.98373597s ago: executing program 7 (id=401): syz_mount_image$udf(&(0x7f00000019c0), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x7}}, {@nostrict}, {@uid}, {@gid_forget}, {@longad}, {}, {@undelete}, {@mode={'mode', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x7}}]}, 0x1, 0xc56, &(0x7f0000002680)="$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") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16=r4, @ANYRES64=r3, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16=r9, @ANYRES64=r8, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r8, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) 2m49.8181231s ago: executing program 7 (id=405): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m48.082015198s ago: executing program 7 (id=410): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc5594286d776c8c5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbd}]}}}]}, 0x44}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x5e13, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20, 0x74}}], 0x1, 0x0) 2m45.988343044s ago: executing program 7 (id=418): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r2 = syz_io_uring_setup(0x2de1, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) 2m45.240356828s ago: executing program 35 (id=418): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r2 = syz_io_uring_setup(0x2de1, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200), &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) 2m27.567740241s ago: executing program 4 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) r1 = open(&(0x7f0000000080)='./file1\x00', 0x141142, 0x0) ftruncate(r1, 0x2007ffc) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r0, r1, 0x0, 0x2) 2m26.639628438s ago: executing program 4 (id=462): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x60, r4, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0x1, 0x7}}, @void, @val, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x7, 0x0, {0x200000002, 0x0, 0x0, 0x189, 0x0, 0x1, 0x0, 0x2}, 0x6, 0xf79, 0x2}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x1]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20008004) 2m25.900292896s ago: executing program 4 (id=465): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) 2m25.284753658s ago: executing program 4 (id=468): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="06a705eee2c5189d"], 0x6, 0x635, &(0x7f0000000c80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 2m24.658429227s ago: executing program 4 (id=470): chdir(&(0x7f0000000000)='./bus\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x3, 0x20000000, 0x4) 2m23.952807597s ago: executing program 4 (id=473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) close(0x4) 2m22.064208382s ago: executing program 36 (id=473): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) close(0x4) 2m18.668331998s ago: executing program 6 (id=485): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "306720a65ecadd8f8d4096edd3a616a0c3491e3bea200200", "8e6dbc6bc4b02931a149e80581e14a2c", {"a65651e8000000000000007f96141e51", "dac60bebefc50000000000000200"}}}}}}}, 0x0) 2m18.132757399s ago: executing program 6 (id=487): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3}) unshare(0x28040600) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x5, 0xa, 0x8, 0x4}) 2m15.880385289s ago: executing program 6 (id=495): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@test_dummy_encryption}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000000600)=ANY=[@ANYBLOB="ba618c14e6c7e698de3fb8b765b993fa49575985fb77bf8cbe11f3e10fe145c3161212e5b9a65501d007df1337c25665e8404c1dc11c53041207bea7fd891761869c2d7d6a7a06c71bfcfe33d41cab42b82ecd0a1fd7f713b1fc70fee63b712bbefbb0a96138503f0163651b0512fa7aa1c1df2df969aa400e0f1901ad03d5cb2eaa2e2fd9500641a214a4ff49e005d1eeb61c2893e933bb23f2568bb02382c787f0c6642de45d21683e0bcf71115878d6e9a489bf815b4133e3d156bdd935a75e", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64], 0xfe, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001000)='./file0\x00', r1, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 2m15.144016535s ago: executing program 6 (id=499): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) socket$netlink(0x10, 0x3, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 2m13.634931794s ago: executing program 6 (id=505): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m10.805678262s ago: executing program 6 (id=514): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m9.095468117s ago: executing program 37 (id=514): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1m3.56300413s ago: executing program 2 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646174615f636865636b73756d3d63726336342c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6e6f7265636f766572792c73686172645f696e6f05655f6e756d626572732c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6effff655f70726566657463682c6261636b67726f756e645f636f7072655434696f6e3d6e6f6e652c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d6e6f6e652c726174656c696d69745f658e080000732c00"], 0x1, 0x593a, &(0x7f0000005b40)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtnnuuvAqRiYSlhozCQCUaTkEqCQEAJLrhQgIWWlqL+gRZSi0aLKlglUiI/NmEVpVhdaguplV30D7eQJSWQpSzXeTXT9/T03Ok7t6enJyTw+VQyt8/p29/zvfeevn3P6Z7pAAAAwJvCvhu3HzjvmPf94vMjr173wZ9svj70lsfrq3GF/nR51euVIQdTd2Xp+DLbL/7hmu/9YfDS9/z83p7vvrZ3/fEbfvveIy598FNn77njm4+80nf/354vihv708kT5eTFJITqT/d/9Qt7nzh6rC4JIZST/l0hLE6WPLI4yYQY+ksIYX1aWJq5875XT9swtrz+lu5J9Ysy6+nvb27VtJ/tPHDlKeF3/7r2hl8t++EPuna/sGtilaTa0J9CWHhx4+O7Qgjz0/9jYm+L/TF22jUhhJ6Gx51VkNcJLea/Mqd8bLqcly57C+LE+5dnyqXMetly1JVZ9hS0N1t5ebS7XpEFmXL2ZDRbeXnG+sXp8sfp8uQZxi/H/0koJaFST39TMtFHQsNxS0Iyfiyr9XKpfmxDuv2ZcpIplzLlcldmu8bbTTtaOUkm18f1MvXxdFxJ649vPFc3cX5O/VvSZTV9or4WyyF7o6Z3yo36do2Lee2fJpeDodRwDmpWXz/w6cHoTet6kyVTHjPaRLxv79pbV5TXPbqvPyeP5N4kjZ+0FX/nLxcv+MT3b74i+7pej39xKY1fysRPWor/3DlPvnThzd/5Rm7822P8clv5n/pQz4vnPHbj8tz9sz/un0pb8Yeff/y2ZUdesjs3/ztj/Gpb8VfvebK778BDD+fmPxT3z/y24j/7rvf//p6nH3ghN36I8Xvair9uz9Yvdg8cOCk3/sNx//S2Ff+5l3ef+czAwB8HGx9wUt9E/Kdi/L624t+964533rXolrNzj++auH/624p/7okP3rDgwAPH5Z07kzs79coJ8OZ0RHqNdVNabnecOVsN44WvD1ZqV0kL0v99nWwoc/E51s7CTsYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBDCUaf81w/874/2v1hJy93pjWdLtWWsnxdCMj+EsH3H8LYdG7dcNvipy6/YtmV40+DwjsGRLTu2XT14+j8NbhvZumn46rF7h952Wu1xS0JSWybHTWm7e3R0tNQ/uS629+9O3P27FWf9nz+FMHTUbwYqufmvvGPzXUc2+ZmRrB599+YrzvvNGd9Ot6s/zau/SV6jo6OjISev/3vBX+/68v4/nBTC0N9Nl9fjz/7LzyYlNF4xESdV6g61hLqTnqZ51LNO84n7q7Jh46aRoen379jjyznb8e+veeEvG6760l9r+7eaux0t7t/5q0c3lb629tz//7VraxVFeb1ex71of8etiPnF/VdN9/fCdLsW5mxXJWe7bvzVw0//9JibX9kVhiovL5vadtF2daUdoCt5S0vtxhZ6ksWT6qvp+vGIx8et3LF568rtV+9828bNw5eNXDay5R2rTl915tAZZ56xcnzLV3Z4+2P7f9/i9h+c/rToM7t+HH+21p+K8iraH2N5Fe+Pxozynn8953/hK++447HzahVF/TyuXT+fpMueseO8KjT0t6n7qtl2Fe2HEMJgs/3w0itnh6P/x8Ybis5DjUem8WdGsnr0ieV//vZZ31r6z7WKg3Keb0yozfN8PeuJfMb3VzU9HqOH6P7tDuV0u3qb5rXqice6bt33p8/W85s3L1w1vGPHtlW1nwvSTBckxzbNK1sbt2vZ+M9ySHdLqHfTJv11TFeo5Zc9f8bVs3u1N72vN1nSdLuy4n171966orzu0X15ezq5t9bi/NBXWyZvzVlzU+aB5XrCzdo/VJ9/Rf1j4APfuv+j9//o9Cn949Taz6LtSnK264dP3/2V737pP/6oc9v1gX95sv/P//OTK2oVh8t5pZ51mk/SeF45NYSi59+y0Hw7cp9/pebbU/T8y7YzsX7zeIOZcm8ot/V8PfWhnhfPeezG5bnP1/2tPl+vnVQqFzxfD5X+k31+JZXJeczd82tSR0lWj/78piN2PXLdmmNqFUX9ur52s359Wgvjj5zt+tmFzwxcPvgf/nvnzhvf+6f7Lvrt8OrP1SraP+4xl84c92q6f6s5+7eedRx3Nu7ft196+ab1tfpD9/o3XRaMf+KpZPvVOz89vGnTyLbtrW1Xq6+nsZ3sXm739TSe3ZYUbFdpynbN3Y1W9lerz7eY//q299fk51tvSNp6Xdj5y8ULPvH9m6/on/KotKGLS2n8UlvxnzvnyZcuvPk738iNf3uMX2kr/vDzj9+27MhLdufGvzNJ41fbir96z5PdfQceejg3/lDMf35b8Z991/t/f8/TD7yQGz/E+L3t7f+Xd5/5zMDAH3PjP5Wk7YxdI4Vw36unbaiVk9CVPt9iHl2T8grZcpIplzLlcmO5VJtrrTdQTpLJ9XG9tP74hlya+VhOfbwKqy6tLV+L5ZC9MX39oabUcO5vVl90nQoA8EYX3/+P16Dx/f+R9EIpf6YBJsx2HLY0J24ch03M58ybdP/SNH58fJwHHHh7GBpbXj9Yu9Cf6fsI8fmQneeM7Zx0wuQY7c5zFs2/L8+UY161+fJKwzg0NXVcUwktzL9PbWf6+ffM5hfPjw/eNCWtwYZ5q+zx60pnzJp93iGTb2UsQl7/yM6Lxc9zDCwMa8bba7F/ZD9HE49D9nM0sZ1jMifOdj9HM9v+EdOepn+Mp1z8/sbU4xem2b8Tx695tOzxm8Hxro6tP9fvz3Zg3rDpKe3gzRvO7fth5iVz4qdPsDmeNxy7Oat5w1gft6PS4nziR3Pqa8/aXfVyW/OJ5YmbMa/90+RyMJhPBN6o4vg/vkaMjf/HLsD/X2a9ouvQ7FVjjJf7OaFy83yKxh1TP6fX09br+Lo9W7/YPXDgpNzrnIdb/dzP1kmlnoLP/RTtxxWZcuF+zJmgKRrvZdsp2u/Zz2X0hr629vvdu+54512Lbjk7d7+vqb2QFu/3r0wq9RXs98NgvNA8vvHCm2K8MNfzZ6/b5xjSDz7N1XjkIzn1M/18Q8+UG/XtGnfYjUe6Dm5eAMDhI47/6++fpeP//xVXSK8jisatJ2fKMV7uuDXn+iRv3PqhdHlVZv3e9DcqZnrdfO6JD96w4MADx+WOW+5sdRz6nyaV+gvHobMbN+eOI9Z05vPiueOI+jhrduPE3Pzr48TZjdNz49fH6bMbR+fun/o4enbzALnx6/MAh/s4t2C+LtNYLLY6X/eGHUenvz47V+Po83PqZzqO7p1yo75d44yjAQBeX3H8Hy/j4vj/scx6s32fPXdc0KHr9uzfA6nHf+pgjSvnetw31+PWuR7Xz/W8xOE+Lp7reaG5nSd704+L00aNiwEAOJTF8f/8tJw//p/d+KTZ+K1r0vjE+LxpfOPzQ2R8frjPfxn/e1+8mPE/AMAbWxz/x197jH//77+k5ezfrTdOz4lvnG6cPl3/aXmc3vl5tuBzAK/vPMD8ifXNAwAA8HroGh8pTf09+4+ny+zv2ef9Xv6FOeu3qpJeHl+yY9vIyEVXbF0/vGPkoi2Xrx/ZftGV2zbu2DGypbbebMeNueOWdNzYFSrp/mi+Xnbctij9ewiLcv4eQnb9GPbY8RtT/x5Cttn5BX9HYOL4tZZv3vErTbN+s/6Rd7zz4n8sZ/2ofvwv/eSpF23YftHGLRt3bBzetHHnyOT1xkatPTP43sy4W2b0famZH1OUZv79nZ3JozQlj650f+R9P3uSyWNxmsnivO8/yMn7F//ty585cfSv94QwdFT5rbPaf8nq0f98wciHduz7zdax/EvT5l9fM82r6PtKs+vH7alsunz7jlM2XH7Fluw3SrYnzmeU6uU5ms9In/7lFucn1uXUz/RzCuUpNw5NLc9PAAAwSXz/P17PxvcPv5ReQMX61sfps3v/OHecPtTaOD37vWRF4/Ts+nF7Wx2nV2c5Ts+2XzROb7Z+s3F63rg7L/5Hctafqdb7yew+55HbTy5urZ9kv8+gqJ9k12/eT0q5/SSZZT/Jtl/UT5qt36yf5B33vPgfzlk/T+v9YXafy8ntD7e31h/+MVMu6g/Z9Wd63ijNsj9k2y/qD83Wb9Yf8o5vXvzzctZv1eT+MdYxxvvFyEVXXr7t0w3rzfX3X8w+v7n9/o92tZ7/3H7ua+7zn9vPlc19/rP7XFlu/k/Nbias9fzn9vtd2nXQ5mvTD5sVff6saB53bU79TOdx5025cWgyjwuvnzj+j2/3xPH/Lemy028DHf7fk+Z7zJrG79D3mBVdx3g9T5fNXjQPAV7PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrTXVk6vtx34/YD5x3zvl98fuTV6z74k83X/8M13/vD4KXv+fm9Pd99be/64zf89r1HXPrgp87ec8c3H3ml7/6/PV8YuH/8Z+XktFgNIXkxCaH60/1f/cLeJ44eq0tCCOWkf1cIi5MljyxOMhGG/hJCWF/Pc/Kd97162oax5fW3dE+qX5QJkt2u0FuO+TTmGcJVhVvEYaia9rOdB648JfzuX9fe8KtlP/xB1+4Xdk2sklQb+lMICy9ufHxXCGF++n9M7G1L44PT5ZoQQk/D484qyOuEFvNfmVM+Nl3OS5e9BXHi/csz5VJmvWw56sosewram628PNpdr8iCTDl7MqqptB0/L89Yvzhd/jhdnjzD+OX4PwmlJFTq6W9KJvpIaDhuSUjGj2W1Xi7Vj21Itz9TTjLlUqZc7sps13i7aUcrJ8nk+rhepj6ejitp/fHjOZZzt/v8nPq3pMtq+kR9LZZD9kZN75Qb9e0aF/Pan5vJwVFqOAc1q68f+PRg9KZ1vcmSKY8ZbSLet3ftrSvK6x7d15+TR3JvksZP2oq/85eLF3zi+zdfsTQv/sWlNH6prfjPnfPkSxfe/J1v5Ma/PcYvtxX/1Id6XjznsRuX5+6f/XH/VNqKP/z847ctO/KS3bn531mL/3SothV/9Z4nu/sOPPRwbv5Dcf/Mbyv+s+96/+/vefqBF3Ljhxi/p6346/Zs/WL3wIGTcuM/HPd/b3v95+XdZz4zMPDHwbz4T8X4fW3Fv3vXHe+8a9EtZ+ce3zVx//S3Ff/cEx+8YcGBB46r5sW/s1OvnABvTkek11g3peV2x5mz1TBe+PpgpXbNtyD939fJhjLG2lk4h/EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhj+vW1p3/8gnd/eG0lCSHJWWe0iXhfed7q1YNttDv8/OO3LTvykt2NdUvbiAMAAAAUi+PwUr2mGpaGK5P54dim68c5gmNjKZlcn51DiHGycwTtxil1KE65Q3EqHYrT1aE48zoUp7tDcaoFcaqhtTjzp4lTGesVLebTM20+rcfp7VCcBR2K09d+nCfWNsRZWBAnzv8V5bOoQ9vVP22c1vvh4g7FWdKhOEd0KM6RHYpzVIfi/F0bceY1iXN0h/LJzinPtB/2pWsekxdn/Ea5ME4lKdfvaDaffnTaznGzbKe3oJ2+otfjFtuZ32I7J2QeV5phO9UW2/n7WbaTtNjOP86ynVJBO7HfXpXNL7YTS9O3U4lxrp5dnPrzaGeH4lzToTjXdijOZzsU53MdinPdLOMAtCqO/yfGe/2hu/LPoSc942RnAeJ4d9n4z6mvd3knpBjvrZn6eUXxsgP1TLxlM80vO4GQibc8U981KV6lPh6ZJl61Md6KzJ2F25udUMjkd3KmvrsoXnZiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADm0K+vPf3jF7z7w2tDEsb+NTXaRLyvPG/16sE22t279tYV5XWP7mus6660EQgAAAAoFMfhXfWaauiurArdybxJ61XTeYBqWi7315YDC8OasWUyWBov9ySLp31cJX3cyh2bt67cfvXOt23cPHzZyGUjW96x6vRVZw6dceYZKzds3DQyVPsZQndBvBDC+PTD9qt3fnp406aRbdtrldn8l6aPW5qWk/RxA28PQ2PL69P8lxS0V5rS3tzdKD56AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwbu3YXIudVxgH8vDOzM9NtY1b6NQ3NZshHiVo0iVtJtXRfECy0SchSkNnqWoJNsLhpQptIrGMbsK0JitASCJFcGInF1uJNP2wR+0EgUqMBNwZpi/ZCL5RWK2nJhaSMZHfO7MzsTGYdS9PG3+9i3plznnOe98zFwv/dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD9NVUdmaiMjo0PJiEkXWpqHcS5bD5Ny330/fJz239QGD69snmskOtjIwAAAKCnmMMHGiPFUMhlQzZcNf1paWiaCLO5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P8zVR2ZqIyOjV+chJB0qal1EOey+TQt99H39bef+Mwrw8N/ax4r9bEPAAAA0FvM4ZnGSDGUwrIwkFzVUhefDSxqW99eF/dZPM+69mcH3eqWzbPumnnWfaxH3Yb6dVcAAACAD7+Y/3ONkaFQyC3omv975fpYt6StLlu/9vNbAQAAAOB/E/N/oTFSCoVcqZHX55v3l7bVxfW9/m8f16/osr7X//PX16/+Tw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx5T1ZGJyujYeDYJIelSU+sgzmXzaVruo++a5wf/ccuRB5c2jxVyfWwEAAAA9BRz+Gz0LoZCbjAMhIunc//wTQef+uJTz4yEEGZifj4fdm3asePuNTOvsW71sSMD3z/65rfn1K2eeT1vBwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN4zU9WRicro2PhFSQhJl5paB3Eum0/Tch99X/vcF/7y2Mln32geK/WxDwAAANBbzOGz2b8YSiEf8uGK6U/NWf+sTNv6bs8MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvHPd+89+ubJic33+2NN95403hzvv8yAQAA77UlIQm1/9KVG8/3XQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8EU9WRicro2HgxCSHpUlPrIM5l82la7qNv+tzxwoLTz7/YPFbqYx8AAACgt5jDZ7N/MZTCQBgIl09/6vRMYDr/D72PNwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8oExVRyYqo2PjC5IQki41tQ7iXDafpuU++j66+8BnDy/83s3NY4VcHxsBAAAAPcUcnm+MFEMh9/FQCFfXP0+2Lkiy9Wvn5wKz67a3LBuc97pqy7rsvNftaTtZrn6amXXFuN/QzLWxrjx3XblpXSk02pdb1oV9LasW9LjPAAAAAOdRzP+FxshQKOQKTTn3py31Q3IuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDFVHVkojI6Np4kISRdamodxLlsPk3LffS997cfveQrP9u7s3ms1Mc+AAAAQG8xh89m/2IohcXhI2HxdO4PQ631se6flTOHH/nXX1eGsOqKE8O59m1/FN/8+rUbX2h/CSHTWp0JYWG9X9Kl329+/0h2ee3MYyGsujx79Zx+4dz9WrdMa09XNq/fcfTE9h5fDgAAAFwgYv4faIwMhULurq75PybvHvm/YTqAL/zG7l9cVn+tJ/K2FZmher9Ml36fX/7En1es/fubZ/P/ufp96sDWw5e1NJwZaZOktdGtOzecuO5QJp56pn+2rX/8Xr70rTf+vWXXw2dm+hdDsT6+KJfr0H/ua5uL0tpkZv/4unf3V1v757qc/8HfvXjyV4v2vnO2/9tLBhv9rznH+c/df/DWh/Zdf+DIhtb+IYRyp/5vvXNzuPKPdz7Qfv7Bto2bv/nm1zZJWju29NShtQdLN7T2T9r6x+//5ycf3feTh7/7TOwffyuyctl8+2fa+r+859LdL92/cVFr/0yX879w2yvD28rf+UP7+e9o2TXX9S7mnv/xa5+8/dVN6X3tUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeWqerIRGV0bDyThJB0qal1EOey+TQt99H39VuOv3Xb3h//sHms1Mc+AAAAQG8xh89m/2IohXzIh8Hp3P90ZfP6HUdPbA9DM7NJ/Zqb3HbPjk9s2bbzrjvO050DAAAA8xXzf64xMhQKueVhoJ7/R7fu3HDiukOZmP8zMf9vuXNy86rQqHt5z6W7X7p/46LGc4IQpn8WUDxb9+nZuptuPD506k9fW9Gxbs1s3bGlpw6tPVi6IdaF5rrVofF84vFrn7z91U3pfY37a6775Fe3TdYfT8R9B299aN/1B45saJyjfh2s7xvrJjP7x9e9u78a67L1a7F+bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrqnqyERldGw8ZENIutTUOohz2Xyalvvou275Lx+45PSzi5vHCrk+NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWG/fkLjqOI4gL+3uzHbbNImrWBUTNOqKPVgURDRi4qKtCIFT5Ui1dYeREEQUerBVFqxVMWLYPVSRAU1SkHBxmJplVT8V7x4UEGhehBKMaANxYORbN5sN5OMaydV0H4+MLy8NzPf+c28t7NZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/lO7aYLM9vOPhyTsuuOWzJ+878cRtHzy47bLH3/xpeNNNn+7tee3k+OYVW769edmm/fevGdv98qHf+t7742jH4MdmmlWpWw8hHo8h1D+ceOGp8c/Pmx6LIYRq7B8JYSAuPTQQcwmrfw8hbG7VOXvnuyeu3jLdbtvVPWt8SS4kf1+hUc3qmdE/u17+X+ppnW2dfPSK8P2N67d/ufydt7tGj42cOiTW29ZTCIs3tp/fFUJYlLZp2WobzE5O7boQQk/bedd2qOviv1n/lQX9C1N7TmobHXKy/Stz/UruuHw/05Vrezpcb6GK6ih7XCe9uX7+ZbRQRXVm4wOpfT+1q04zv5ptMVRiqLXKfyCeWiOhbd5iiM25rLf6ldbchnT/uX7M9Su5frUrd1/N66aFVo1x9nh2XG48ex3X0viK9nf1PO4sGD8/tfX0QT2Z9UP+jxmNOX+07qspq2viL2r5N1Ta3kHzjbcmPk1GI4014tI550zNUZvK9o2vf+bS6oaPDvcX1BH3xpQfTyN/qpW/9YuB3rvf2vnIYFH+xkrKr5TK/2HtkV/u2vnKS4X5z2f51VL5Vx3oOb724x0rC5/PRPZ8aqXy7zn6ybPLz713dL65bubvyfLrpfJvGDvS3Td54GBh/auz57OoVP5319/64xtf7ztWmB+y/J5S+RvGHnque2jy8sL8gzMfhUZzhZZYP7+OXvPN0NDPw0X5X2XPv2+e/Ngx//WR3de9umTXmsL1uS57Pv2l6r/9kv3beyf3XVT07ox7ztQ3J8DZaVn6H+vp1C/7O3Oh2n4vvDhcm/kG6k1b35m8UM70dRb/g/kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8yQ4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FQAA//+hKjF2") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/41, 0x29) getdents(r0, &(0x7f00000003c0)=""/198, 0xc6) 1m1.069262646s ago: executing program 2 (id=780): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) 57.373784714s ago: executing program 2 (id=797): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000001140)=0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) 56.418279248s ago: executing program 2 (id=802): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x808800, &(0x7f0000000500)=ANY=[], 0x1, 0x2c4, &(0x7f0000000380)="$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") mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 55.736349098s ago: executing program 2 (id=806): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x6, 0xfff2}, {0x0, 0x8}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 54.516102276s ago: executing program 2 (id=813): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./bus/file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 52.81391676s ago: executing program 38 (id=813): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x471, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./bus/file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 36.27230807s ago: executing program 9 (id=871): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="c0"}) 34.426917359s ago: executing program 9 (id=875): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000050000000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 33.628210666s ago: executing program 9 (id=878): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x600010c) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r2, 0xffffffffffffffff, 0x0) 31.593962608s ago: executing program 9 (id=885): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x180000, 0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 30.330035638s ago: executing program 9 (id=892): unshare(0x2c020400) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001043, r0, 0x0) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) write$FUSE_INIT(r4, &(0x7f0000003100)={0x50}, 0x50) tee(r3, r1, 0x8, 0x4) 29.480240166s ago: executing program 9 (id=897): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') 28.48327747s ago: executing program 39 (id=897): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/time\x00') 14.539771884s ago: executing program 3 (id=955): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1c9) getdents(r0, &(0x7f0000000440)=""/70, 0x21) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 13.692209036s ago: executing program 3 (id=958): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/198, 0xc6}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12.904402127s ago: executing program 3 (id=962): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a, 0x0, 0x8}}, 0x50) lstat(&(0x7f0000000a80)='./file0/../file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000009800)="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", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x81, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3}}}, 0x0, 0x0, 0x0, 0x0}) 12.049092352s ago: executing program 3 (id=965): syz_mount_image$erofs(&(0x7f0000000f40), &(0x7f0000000380)='./file1\x00', 0x810801, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0xc5, 0x20c, &(0x7f00000003c0)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 11.584029741s ago: executing program 8 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 11.564160472s ago: executing program 3 (id=968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x204}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1}}], 0x2, 0x0, 0x0) 10.536955328s ago: executing program 8 (id=970): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000280), &(0x7f0000000280)=[r3, r3], &(0x7f0000000340)}) 10.144424142s ago: executing program 3 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.028421575s ago: executing program 8 (id=974): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f00000001c0)=""/225, 0xe1}], 0x2, 0x3, 0x9) 9.370923654s ago: executing program 40 (id=973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.244465042s ago: executing program 8 (id=977): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x642, 0xb, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x8, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1fd, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x54c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x9, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) pselect6(0x40, &(0x7f0000000380)={0x3a, 0x20000, 0x3, 0x20000000, 0x3, 0xfffffffffffffffe, 0x0, 0x2b980000}, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 8.351538609s ago: executing program 8 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@data_checksum={'data_checksum', 0x3d, 'crc64'}}, {@journal_transaction_names}, {@norecovery}, {@inline_data}, {@journal_transaction_names}, {@btree_node_prefetch}, {@background_compression={'background_compression', 0x3d, 'none'}}, {@reconstruct_alloc}, {@compression={'compression', 0x3d, 'none'}}, {@ratelimit_errors}]}, 0x1, 0x593a, &(0x7f0000005b40)="$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") syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001940)='net/psched\x00') read$FUSE(r0, &(0x7f0000003ec0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000001980)='./file1\x00', 0x0, r1) 8.289259622s ago: executing program 5 (id=980): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14907e, 0x3) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000000), 0x6) 7.553003506s ago: executing program 5 (id=981): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00001b"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.485725227s ago: executing program 8 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646174615f636865636b73756d3d63726336342c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6e6f7265636f766572792c73686172645f696e6f05655f6e756d626572732c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c62747265655f6effff655f70726566657463682c6261636b67726f756e645f636f7072655434696f6e3d6e6f6e652c7265636f6e7374727563745f616c6c6f632c636f6d7072657373696f6e3d6e6f6e652c726174656c696d69745f658e080000732c00"], 0x1, 0x593a, &(0x7f0000005b40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$eJzs3U9sHNd9B/DfG5Hi0m4rxnYUJ42LTVuksmK5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLupYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUMZvatuKRJmzb/iLI+H5v67s68N/PezHJGIvjmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ8QcvXTl7Lt3vVgAAh+na6NfOnnf/B4CHynX//gcAAAAAAAAAAAAAgKMuRRGPR4q5a2tpvHrfVrva6r1zd2xoePtq/amqeawqX37Vzp2/cPHLzw1e6uTV1swH1N9vn4tXRq9fqb84e3tufmphYWqyPjbTmpidnNr1FvZaf6vT1QGo3371zuTNmwv1889e2LT67sB7fY+eHLg8+PSZpzplx4aGh0c3itS6y/d87Ia07TTC43gUcSZSPPO9n6ZmRBSx92NRO9xzv1V/1YnTVSfGhoarjky3mjOL5cqRzoEoIupdlRqdY7T9uYie3kPtw84aEUtl88sGny67NzrXnG/emJ6qjzTnF1uLrdmZkdRubdmfehRxKUUsR8Rq3/s31xtF9ESK75xYSzci4ljnOHypGhi8czuKA+zjLpTtrPdGLBcPwDk7wvqiiJcjxc/ePhUT+TpTXWu+GPFymT+IeLPMFyJS+cG4GPHuNp8jHkw9UcRfluf/8lqarK4HnevK1a/Xvzpzc7arbOe68hHvD++7Utyn+0P/ljwcR/zaVIsimtUVfy19/L/sAAAAAAAAAAAAAAAAALDf+qOIz0aKl/7jT6pxxVGNSz9xefAPB361e8z4kx+ynbLssxGxVOxuTO7xPDBwJI2kdJ/HEj/MalHEn+bxf2/c78YAAAAAAAAAAAAAAAAAAAA81Ir4SaR4/p1TaTm65xRvzdyqX2/emG7PCtuZ+7czZ/r6+vp6PbWzkXM851LO5ZwrOVdzRpHr52zkHM+5lHM550rO1ZxxLNfP2cg5nnMp53LOlZyrOaMn18/ZyDmecynncs6VnKs544jM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBG/iBTf/uZaihQRjYjxaOdK3/1uHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6ktFfD9S1P+ocW9ZT0Sk6v+2U+UfF6NxvMzHojFY5gvRuJKzWWVP44370H72pjcV8eNI0Vd7K1JPe1k+/73td/c+BvHmtzbefS6XPdZZOfBe36MnT1weHP6NJ3d6nbZrwOmrrZk7d+tjQ8PDo12Le/LeH+taNpD3W+xT34lYeO31V5vT01PzH/9F+RHYQ/UH6EX5DXIEmuHFYb2IniPRjPvTdx4C5f3/3Ujxu+/8Z+eG377/1+JX2u/u3eHj53+2cf9/fuuGdnn/79laL9//y3v6dvf/x7uWPZ//NtLbE1FbvD3XezKitvDa62dat5u3pm5NzVw8e/Yrg4NfuXC293hE7WZreqrr1b4cLgAAAAAAAAAAAAAAAIDDk4r4/UjR/PFaqkfE3Wq81sDlwafPPHUsjlXjrTaN235l9PqV+ouzt+fmpxYWpibrYzOtidnJqd3urlYN9xobGj6Qznyo/gNuf3/txdm51+Zbt/54cdv1j9Su3FhYnG9ObL86+qOIaHQvOV01eGxouGr0dKs5U1Ud2XYw/UfXm4r4r0gxcbGevpCX5fH/W0f4bxr/v7R1Qwc0/v9TXcvKfaZUxM8jxe/81ZPxhaqdj8T7jlku93eR4vSlz+dycbws12nDY9VDBNojA8uy/xcp/ukXm8t2xkO2xyBWZc/t/sg+GMrzfyJSfP8vvhu/mZdtfv7D9uf/ka0bOqDz/0TXskc2Pa9gz10nn/8zkeKFx9+K38rLPuj5H51nb5zKhe89n+OAzv+nu5YN5P3+9v50HQAAAAAAAAAA4IHWm4r4+0jxw+Ge9Fxetpvf/5vcuqED+v2vz3Qtm9yf+Yo+9MWeDyoAAAAAHBG9qYifRIpbi2/dG0O9efx31/jP39sY/zmUtqytfs73a9VzA/bz53/dBvJ+x/febQAAAAAAAAAAAAAAAAAAADhSUiriuTyf+ng1nn9yx/nUVyLFS//zTC6XTpblOvPAD1R/1q7Nzpy5Mj09O9FcbN6YnqqPzjUnpsq6T0SKtb/9fK5bVPOrd+abb8/xvjEX+3ykGP6HTtn2XOyducmf2Ch7riz7qUjx3/+Yy66vV2U781h/eqPs+bLs30SKb/zL5u12yp7cKHuhLPvdSPGjb9Q7ZR8py3aej/qZjbLPTswWB3BWAAAAAAAAAAAAAAAAAAAAeNj0piL+PFL87+3le2P58/z/vV1vK29+q2u+/y3uVvP8D1Tz/+/0+uPM/189V2Bpp70CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnU4oiXo8Uc9fW0kpf+b6tdrU1c+fu2NDw9tX6U1XzWFW+/KqdO3/h4pefG7zUyQ+uv98+G6+MXr9Sf3H29tz81MLC1GR9bKY1MTs5test7LX+VqerA1C//eqdyZs3F+rnn72wafXdgff6Hj05cHnw6TNPdcqODQ0Pj3aV6en9qDt9Y8c1aYflx6OIv44Uz3zvp+mHfRFF7P1YbPvZ6dt9L/aov+rE6aoTY0PDVUemW82ZxXLlSOdAFBH1rkqNzjHat3NxQBoRS2XzywafLrs3Otecb96YnqqPNOcXW4ut2ZmR1G5t2Z96FHEpRSxHxOo256A3ing1UnznxFr6176IY53j8KVro187e37ndhQH2MddKNtZ741YLh6Ac3aE9UUR/xwpfvb2qfi3voieaH/FFyNeLvMHEW9G+3yn8oNxMeLdw/te5oD1RBH/X57/y2vp7b7yetC5rlz9ev2rMzdnu8p2risHcn84PP2Hurcjfm2qRRE/qq74a+nffV8DAAAAAAAAAAAAAAAAHCFF/HqkeP6dU6kaH3xvTHFr5lb9evPGdHtYX2fsX2fM9Pr6+no9tbORczznUs7lnCs5V3NGkevnbJRZW18fz++Xci7nXMm5mjOO5fo5GznHcy7lXM65knM1Z/Tk+jkbOcdzLuVczrmSczVnHJGxewAAAAAAAAAAAAAAAAAAwCdLUf2X4tvfXEvrfe35pcejnSvmA/3E+2UAAAD//xtt+zc=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 4.72442043s ago: executing program 0 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)={0x40, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x40}}, 0x0) futex(&(0x7f0000000040)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x24000003) 3.785149599s ago: executing program 0 (id=986): syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000000240), 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3.572648686s ago: executing program 5 (id=987): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.227800899s ago: executing program 0 (id=988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000000c0)='|', 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 2.488257907s ago: executing program 5 (id=989): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.783932019s ago: executing program 0 (id=990): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 1.315876175s ago: executing program 5 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x208002, 0x114) 765.852622ms ago: executing program 0 (id=992): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, [@NDA_CACHEINFO={0x14, 0x3, {0x0, 0xe48, 0x4, 0x4}}]}, 0x30}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba07faffffffffffffffc696ff7fff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 656.517618ms ago: executing program 1 (id=898): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xd, 0x4, 0x4, 0xbd, 0x1, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000580), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) 614.462531ms ago: executing program 5 (id=993): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) syz_io_uring_setup(0x24fa, 0x0, &(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) 0s ago: executing program 0 (id=994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xe, 0x8}, {0x9, 0xfff1}}}, 0x24}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x12d3e, 0x0, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): ause=open_writers comm="syz.4.398" name="/newroot/86/file1/bus" dev="loop4" ino=17058 res=1 errno=0 [ 386.435746][ T5787] ocfs2: Unmounting device (7,4) on (node local) [ 386.463269][ T7665] loop7: detected capacity change from 0 to 2048 [ 386.848732][ T7665] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.312277][ T7662] loop5: detected capacity change from 0 to 65536 [ 387.759442][ T7679] loop4: detected capacity change from 0 to 1024 [ 387.768884][ T7679] EXT4-fs: Ignoring removed orlov option [ 387.774917][ T7679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.943138][ T7681] loop8: detected capacity change from 0 to 7 [ 387.989400][ T7681] Dev loop8: unable to read RDB block 7 [ 387.999078][ T7681] loop8: unable to read partition table [ 388.006106][ T7681] loop8: partition table beyond EOD, truncated [ 388.012681][ T7681] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 388.012681][ T7681] ) failed (rc=-5) [ 388.155860][ T7662] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 388.304502][ T7693] loop7: detected capacity change from 0 to 128 [ 388.313972][ T7679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.469063][ T7693] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 388.584802][ T7698] bridge0: entered promiscuous mode [ 388.590578][ T7698] vlan2: entered promiscuous mode [ 388.596852][ T7698] vlan2: entered allmulticast mode [ 388.602216][ T7698] bridge0: entered allmulticast mode [ 388.678286][ T7662] XFS (loop5): Ending clean mount [ 388.734658][ T7698] bridge0: left allmulticast mode [ 388.744618][ T7698] bridge0: left promiscuous mode [ 388.967946][ T7693] overlayfs: upper fs needs to support d_type. [ 388.986205][ T7693] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 388.993638][ T7693] overlayfs: failed to set xattr on upper [ 388.999901][ T7693] overlayfs: ...falling back to redirect_dir=nofollow. [ 389.007641][ T7693] overlayfs: ...falling back to index=off. [ 389.013781][ T7693] overlayfs: ...falling back to uuid=null. [ 389.077138][ T6176] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 389.578010][ T6808] UDF-fs: error (device loop7): udf_read_inode: (ino 114) failed !bh [ 389.618216][ T6808] UDF-fs: error (device loop7): udf_read_inode: (ino 114) failed !bh [ 389.784775][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.638239][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 391.245849][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 391.419922][ T3976] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.439130][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 391.475338][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 391.487203][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 391.500561][ T25] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 391.512026][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.745987][ T25] usb 6-1: config 0 descriptor?? [ 392.261015][ T25] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 392.268915][ T25] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 392.447981][ T25] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 392.479941][ T3976] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.628831][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.641825][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.694627][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.726087][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.767720][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 392.777995][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.791138][ T3976] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.916687][ T3976] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.476262][ T25] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 393.484786][ T25] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 393.508988][ T25] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 393.597174][ T25] usb 6-1: USB disconnect, device number 5 [ 393.957201][ T3976] bridge_slave_1: left allmulticast mode [ 393.967435][ T3976] bridge_slave_1: left promiscuous mode [ 393.974453][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.105830][ T3976] bridge_slave_0: left allmulticast mode [ 394.111772][ T3976] bridge_slave_0: left promiscuous mode [ 394.118563][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.710207][ T3976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.876349][ T5784] Bluetooth: hci0: command tx timeout [ 394.915054][ T3976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.968603][ T7778] loop5: detected capacity change from 0 to 256 [ 394.991736][ T7778] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 395.015031][ T3976] bond0 (unregistering): Released all slaves [ 395.182120][ T7744] chnl_net:caif_netlink_parms(): no params data found [ 395.699701][ T7789] tipc: Failed to remove unknown binding: 66,1,1/0:2868982160/2868982162 [ 395.713015][ T7789] tipc: Failed to remove unknown binding: 66,1,1/0:2868982160/2868982162 [ 396.442782][ T7777] loop2: detected capacity change from 0 to 40427 [ 396.474677][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'. [ 396.507714][ T7777] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 396.517260][ T7777] F2FS-fs (loop2): heap/no_heap options were deprecated [ 396.583791][ T7777] F2FS-fs (loop2): invalid crc value [ 396.659922][ T7777] F2FS-fs (loop2): Found nat_bits in checkpoint [ 396.962255][ T5784] Bluetooth: hci0: command tx timeout [ 397.042452][ T7777] F2FS-fs (loop2): Start checkpoint disabled! [ 397.300174][ T7777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 397.634584][ T3976] hsr_slave_0: left promiscuous mode [ 397.660209][ T3976] hsr_slave_1: left promiscuous mode [ 397.669515][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.678606][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.684534][ T7775] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_create+0x889/0x9d0 [ 397.697622][ T7775] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 397.762142][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.770945][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.793414][ T3976] veth1_macvtap: left promiscuous mode [ 397.799469][ T3976] veth0_macvtap: left promiscuous mode [ 397.805659][ T3976] veth1_vlan: left promiscuous mode [ 397.811223][ T3976] veth0_vlan: left promiscuous mode [ 397.983290][ T5835] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 398.308824][ T5835] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 398.319304][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.328310][ T5835] usb 6-1: Product: syz [ 398.332717][ T5835] usb 6-1: Manufacturer: syz [ 398.337716][ T5835] usb 6-1: SerialNumber: syz [ 398.385602][ T5835] usb 6-1: config 0 descriptor?? [ 398.440112][ T5835] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 398.888882][ T44] usb 6-1: USB disconnect, device number 6 [ 398.963459][ T3976] team0 (unregistering): Port device team_slave_1 removed [ 399.045250][ T5793] Bluetooth: hci0: command tx timeout [ 399.099092][ T3976] team0 (unregistering): Port device team_slave_0 removed [ 399.770779][ T7817] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.020075][ T7817] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.296179][ T7817] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.689702][ T7817] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.034731][ C0] ------------[ cut here ]------------ [ 401.040589][ C0] WARNING: CPU: 0 PID: 3826 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x1a6e/0x3bf0 [ 401.051290][ C0] Modules linked in: [ 401.055510][ C0] CPU: 0 UID: 0 PID: 3826 Comm: kworker/u8:13 Not tainted 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 401.067051][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 401.077506][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 401.084618][ C0] RIP: 0010:__ieee80211_beacon_get+0x1a6e/0x3bf0 [ 401.091433][ C0] Code: 89 d5 44 89 e7 e8 12 a2 23 f3 41 89 45 00 e9 89 ef ff ff 44 89 e7 e8 41 a6 23 f3 45 84 ff 0f 85 b2 ef ff ff e8 f3 7a 88 f2 90 <0f> 0b 90 e9 a9 ef ff ff 8b 7d c4 e8 22 a6 23 f3 e9 29 f0 ff ff 8b [ 401.111514][ C0] RSP: 0018:ffff88813fc05968 EFLAGS: 00010246 [ 401.118037][ C0] RAX: ffffffff8f30aded RBX: 0000000000000000 RCX: ffff888118fc0000 [ 401.126403][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.134668][ C0] RBP: ffff88813fc05ae0 R08: ffffffff8f309d82 R09: ffffffff8f30958b [ 401.143102][ C0] R10: 0000000000000003 R11: ffff888118fc0000 R12: 0000000000000000 [ 401.151503][ C0] R13: ffff88813fca1c80 R14: ffff8880492f2624 R15: 0000000000000000 [ 401.159866][ C0] FS: 0000000000000000(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 401.169201][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.176124][ C0] CR2: 00007fd0f92a56c0 CR3: 000000004db0e000 CR4: 00000000003526f0 [ 401.184368][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 401.192713][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 401.201060][ C0] Call Trace: [ 401.204529][ C0] [ 401.207652][ C0] ? show_trace_log_lvl+0x268/0x3d0 [ 401.213190][ C0] ? ieee80211_beacon_get_tim+0x84/0x350 [ 401.219343][ C0] ? show_regs+0xb4/0xe0 [ 401.223923][ C0] ? __warn+0x2c7/0x780 [ 401.228496][ C0] ? __ieee80211_beacon_get+0x1a6e/0x3bf0 [ 401.234584][ C0] ? report_bug+0x929/0xbd0 [ 401.239486][ C0] ? __ieee80211_beacon_get+0x1a6e/0x3bf0 [ 401.245639][ C0] ? handle_bug+0x6d/0x90 [ 401.250266][ C0] ? exc_invalid_op+0x1f/0x50 [ 401.255232][ C0] ? asm_exc_invalid_op+0x1f/0x30 [ 401.260682][ C0] ? __ieee80211_beacon_get+0x20b/0x3bf0 [ 401.266780][ C0] ? __ieee80211_beacon_get+0xa02/0x3bf0 [ 401.272772][ C0] ? __ieee80211_beacon_get+0x1a6d/0x3bf0 [ 401.278958][ C0] ? __ieee80211_beacon_get+0x1a6e/0x3bf0 [ 401.285042][ C0] ? __ieee80211_beacon_get+0x1a6d/0x3bf0 [ 401.291223][ C0] ? filter_irq_stacks+0x164/0x1a0 [ 401.296738][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 401.302231][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 401.309023][ C0] ieee80211_beacon_get_tim+0x84/0x350 [ 401.314870][ C0] mac80211_hwsim_beacon_tx+0x694/0xc40 [ 401.320889][ C0] __iterate_interfaces+0x4d6/0x730 [ 401.326492][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 401.332912][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 401.339427][ C0] ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 401.346824][ C0] mac80211_hwsim_beacon+0x11c/0x300 [ 401.352420][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 401.358636][ C0] __hrtimer_run_queues+0x564/0xe40 [ 401.364165][ C0] hrtimer_run_softirq+0x18f/0x750 [ 401.369673][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 401.375881][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 401.381999][ C0] ? __pfx_hrtimer_run_softirq+0x10/0x10 [ 401.388048][ C0] handle_softirqs+0x1a0/0x7c0 [ 401.393162][ C0] ? irqtime_account_irq+0x19d/0x280 [ 401.398917][ C0] __irq_exit_rcu+0x68/0x180 [ 401.403798][ C0] irq_exit_rcu+0x12/0x20 [ 401.408504][ C0] sysvec_apic_timer_interrupt+0x83/0x90 [ 401.414488][ C0] [ 401.417690][ C0] [ 401.420811][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 401.427249][ C0] RIP: 0010:virt_to_page_or_null+0x8d/0x150 [ 401.433470][ C0] Code: 48 8b 0d 0e 88 0d 12 48 85 c9 74 23 48 89 d6 48 c1 ee 23 48 8b 34 f1 48 85 f6 74 13 48 89 d1 48 c1 e9 1b 0f b6 c9 48 c1 e1 04 <48> 01 ce eb 02 31 f6 65 ff 05 2d ed b5 7d 48 85 f6 74 09 4c 8b 06 [ 401.453530][ C0] RSP: 0018:ffff88811981f4e0 EFLAGS: 00000206 [ 401.460028][ C0] RAX: ffff88819981f678 RBX: ffff88811981f678 RCX: 0000000000000230 [ 401.468382][ C0] RDX: 000000011981f678 RSI: ffff88813fffaac0 RDI: ffff88811981f678 [ 401.476710][ C0] RBP: ffff88811981f4e0 R08: ffffea000000000f R09: ffff88811981ff40 [ 401.484964][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 401.493303][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88811981f678 [ 401.501648][ C0] kmsan_get_metadata+0x13e/0x1c0 [ 401.507030][ C0] kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 401.513002][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 401.519360][ C0] on_stack+0x62/0x190 [ 401.523752][ C0] update_stack_state+0xa9/0x1e0 [ 401.529121][ C0] unwind_next_frame+0x11d/0x360 [ 401.530727][ T7825] loop5: detected capacity change from 0 to 65536 [ 401.534284][ C0] arch_stack_walk+0x1ab/0x260 [ 401.545978][ C0] ? kmsan_slab_alloc+0xdf/0x160 [ 401.551254][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 401.557843][ C0] stack_trace_save+0xaa/0xe0 [ 401.562829][ C0] kmsan_internal_poison_memory+0x49/0x90 [ 401.568995][ C0] ? kmsan_internal_poison_memory+0x49/0x90 [ 401.575235][ C0] ? kmsan_slab_alloc+0xdf/0x160 [ 401.580585][ C0] ? kmsan_internal_poison_memory+0x49/0x90 [ 401.586938][ C0] ? kmsan_slab_free+0xd0/0x140 [ 401.592149][ C0] ? kmem_cache_free+0x290/0xdf0 [ 401.597640][ C0] ? __kfree_skb+0x1f6/0x250 [ 401.602529][ C0] ? consume_skb+0x81/0x250 [ 401.604803][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.607327][ C0] ? nsim_dev_trap_report_work+0xc7d/0x13b0 [ 401.607482][ C0] ? process_scheduled_works+0xae0/0x1c40 [ 401.607677][ C0] ? worker_thread+0xea7/0x14f0 [ 401.615253][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.620788][ C0] ? kthread+0x3e2/0x540 [ 401.627198][ T7744] bridge_slave_0: entered allmulticast mode [ 401.631483][ C0] ? ret_from_fork+0x6d/0x90 [ 401.641744][ T7744] bridge_slave_0: entered promiscuous mode [ 401.649044][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 401.649251][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 401.649393][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 401.677229][ C0] ? kmem_cache_alloc_node_noprof+0x79/0xe00 [ 401.683586][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 401.689204][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 401.695336][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 401.696693][ T7825] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 401.700803][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 401.715765][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 401.721283][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 401.727532][ C0] kmsan_slab_alloc+0xdf/0x160 [ 401.732664][ C0] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 401.739032][ C0] ? __alloc_skb+0x1e9/0x7b0 [ 401.743946][ C0] __alloc_skb+0x1e9/0x7b0 [ 401.748778][ C0] nsim_dev_trap_report_work+0x3fa/0x13b0 [ 401.754841][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 401.761421][ C0] process_scheduled_works+0xae0/0x1c40 [ 401.767439][ C0] worker_thread+0xea7/0x14f0 [ 401.772498][ C0] kthread+0x3e2/0x540 [ 401.776971][ C0] ? __pfx_worker_thread+0x10/0x10 [ 401.782437][ C0] ? __pfx_kthread+0x10/0x10 [ 401.787437][ C0] ret_from_fork+0x6d/0x90 [ 401.792166][ C0] ? __pfx_kthread+0x10/0x10 [ 401.797155][ C0] ret_from_fork_asm+0x1a/0x30 [ 401.802275][ C0] [ 401.805581][ C0] ---[ end trace 0000000000000000 ]--- [ 401.822156][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 401.828684][ T5793] Bluetooth: hci0: command tx timeout [ 401.955042][ T7817] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.966760][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.974623][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.982708][ T7744] bridge_slave_1: entered allmulticast mode [ 401.991909][ T7744] bridge_slave_1: entered promiscuous mode [ 402.206685][ T7817] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.232458][ T7817] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.261167][ T7817] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.272529][ T7825] XFS (loop5): Ending clean mount [ 402.338943][ T7825] XFS (loop5): Quotacheck needed: Please wait. [ 402.458739][ T7825] XFS (loop5): Quotacheck: Done. [ 402.487152][ T5884] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 402.599866][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.627615][ T6176] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 402.669996][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 402.696555][ T5884] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 402.703431][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.706239][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.775273][ T5884] usb 3-1: config 0 descriptor?? [ 402.935198][ T5884] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 402.989802][ T7744] team0: Port device team_slave_0 added [ 403.015961][ T7744] team0: Port device team_slave_1 added [ 403.344103][ T7853] loop6: detected capacity change from 0 to 512 [ 403.423130][ T7853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 403.514350][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.521996][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.548590][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.580392][ T7853] EXT4-fs (loop6): 1 truncate cleaned up [ 403.581761][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.588607][ T7853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.595058][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.595218][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.822601][ T7853] syz.6.442 (pid 7853) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 404.010084][ T7744] hsr_slave_0: entered promiscuous mode [ 404.088092][ T7744] hsr_slave_1: entered promiscuous mode [ 404.126682][ T7744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.134540][ T7744] Cannot create hsr debugfs directory [ 404.397301][ T5884] gspca_vc032x: reg_w err -71 [ 404.402256][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.414070][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.415116][ T6307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.421691][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.435130][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.440951][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.446743][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.452237][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.457874][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.463358][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.468996][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.474486][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.480257][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.486031][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.491566][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.497185][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.502691][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.508681][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.520289][ T5884] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.529664][ T5884] gspca_vc032x: Unknown sensor... [ 404.541068][ T5884] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 404.557295][ T5884] usb 3-1: USB disconnect, device number 6 [ 405.145717][ T7865] loop6: detected capacity change from 0 to 512 [ 405.469126][ T7744] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 405.470471][ T7865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000300 r/w without journal. Quota mode: writeback. [ 405.489606][ T7865] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.515010][ T7744] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 405.603413][ T7744] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 405.642069][ T7744] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 405.742989][ T7865] EXT4-fs error (device loop6): __ext4_new_inode:1277: comm syz.6.444: failed to insert inode 16: doubly allocated? [ 405.880838][ T7883] loop2: detected capacity change from 0 to 512 [ 406.073261][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.074299][ T7883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 406.104053][ T7885] loop4: detected capacity change from 0 to 128 [ 406.119049][ T7744] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.176706][ T3905] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.184387][ T3905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.199892][ T3905] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.207714][ T3905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.349812][ T7885] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.442910][ T7744] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 406.453862][ T7744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.507026][ T7885] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.669277][ T7883] EXT4-fs (loop2): 1 truncate cleaned up [ 406.677142][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.753355][ T6307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000300. [ 407.222730][ T5787] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.356130][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.552923][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.707839][ T7910] loop4: detected capacity change from 0 to 512 [ 407.723396][ T7910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 407.810264][ T7910] EXT4-fs (loop4): 1 truncate cleaned up [ 407.818223][ T7910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.396604][ T7924] loop6: detected capacity change from 0 to 8 [ 409.004438][ T7910] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-generic)" [ 409.043284][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 409.050261][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.128720][ T7920] loop5: detected capacity change from 0 to 32768 [ 409.150928][ T7920] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.455 (7920) [ 409.177493][ T7920] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 409.188342][ T7920] BTRFS info (device loop5): using sha256 (sha256-generic) checksum algorithm [ 409.200278][ T7920] BTRFS info (device loop5): using free-space-tree [ 409.207253][ T7920] workqueue: max_active 3940 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 409.226025][ T7920] workqueue: max_active 3940 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 409.276963][ T7920] workqueue: max_active 3940 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 409.303910][ T7920] workqueue: max_active 3940 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 409.372773][ T7920] workqueue: max_active 3940 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 409.446900][ T7744] veth0_vlan: entered promiscuous mode [ 409.512216][ T7744] veth1_vlan: entered promiscuous mode [ 409.605081][ T7744] veth0_macvtap: entered promiscuous mode [ 409.626179][ T7744] veth1_macvtap: entered promiscuous mode [ 409.692231][ T7920] workqueue: max_active 3940 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 409.706781][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.717635][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.728811][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.739996][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.752365][ T7920] workqueue: max_active 3940 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 409.788167][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.799290][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.814023][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.833230][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.849509][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.861171][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.870195][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.872015][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.891294][ T7744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.902170][ T7744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.916790][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.966897][ T7744] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.976805][ T7744] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.986005][ T7744] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.993740][ T7942] loop2: detected capacity change from 0 to 512 [ 409.994950][ T7744] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.187491][ T7920] BTRFS info (device loop5): checking UUID tree [ 410.203039][ T7942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.216424][ T7942] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.458051][ T7942] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.458: corrupted inode contents [ 410.535846][ T7942] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.458: mark_inode_dirty error [ 410.560064][ T6176] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 410.582014][ T7942] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.458: corrupted inode contents [ 410.627687][ T7942] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.458: mark_inode_dirty error [ 411.150845][ C0] Unknown status report in ack skb [ 411.275176][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.336790][ T7967] nbd6: detected capacity change from 0 to 12 [ 411.928157][ T7965] block nbd6: shutting down sockets [ 412.330746][ T7983] loop4: detected capacity change from 0 to 1024 [ 412.340016][ T7982] loop6: detected capacity change from 0 to 1024 [ 412.355220][ T7983] hfsplus: Bad value for 'gid' [ 412.447053][ T7982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.485812][ T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 412.755984][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 412.822864][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 412.835096][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 412.866365][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 412.876190][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.884479][ T44] usb 3-1: Product: syz [ 412.889114][ T44] usb 3-1: Manufacturer: syz [ 412.893965][ T44] usb 3-1: SerialNumber: syz [ 412.936793][ T44] usb 3-1: config 0 descriptor?? [ 412.960872][ T44] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 412.970708][ T44] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 413.075383][ T6307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.358035][ T3905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.524739][ T7997] Cannot find set identified by id 632 to match [ 413.578331][ T3905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.633479][ T44] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 413.644666][ T44] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 413.860095][ T3905] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.981660][ T3905] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.290735][ T44] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 414.298264][ T44] em28xx 3-1:0.0: No AC97 audio processor [ 414.364779][ T44] usb 3-1: USB disconnect, device number 7 [ 414.373388][ T44] em28xx 3-1:0.0: Disconnecting em28xx [ 414.435016][ T44] em28xx 3-1:0.0: Freeing device [ 414.486638][ T3905] bridge_slave_1: left allmulticast mode [ 414.492574][ T3905] bridge_slave_1: left promiscuous mode [ 414.502306][ T3905] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.565215][ T3905] bridge_slave_0: left allmulticast mode [ 414.572779][ T3905] bridge_slave_0: left promiscuous mode [ 414.579584][ T3905] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.047293][ T3905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.093933][ T3905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.113794][ T3905] bond0 (unregistering): Released all slaves [ 415.337040][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.345035][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.805152][ T5046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.813671][ T5046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.007563][ T3905] hsr_slave_0: left promiscuous mode [ 416.079663][ T3905] hsr_slave_1: left promiscuous mode [ 416.157703][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.165843][ T3905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.246601][ T3905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.254463][ T3905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.302630][ T8011] loop5: detected capacity change from 0 to 32768 [ 416.323436][ T8011] (syz.5.475,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb2b5df34. Applying ECC. [ 416.340258][ T8011] (syz.5.475,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 416.356107][ T8011] (syz.5.475,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 416.374503][ T3905] veth1_macvtap: left promiscuous mode [ 416.380531][ T3905] veth0_macvtap: left promiscuous mode [ 416.386561][ T3905] veth1_vlan: left promiscuous mode [ 416.395059][ T3905] veth0_vlan: left promiscuous mode [ 416.574509][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.585272][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.607394][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.644038][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.657600][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 416.678290][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.684791][ T8011] JBD2: Ignoring recovery information on journal [ 416.919155][ T8011] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 417.027747][ T8011] (syz.5.475,8011,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x36fa8088. Applying ECC. [ 417.044303][ T8011] (syz.5.475,8011,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x26885ba0 [ 417.061800][ T8011] (syz.5.475,8011,0):ocfs2_search_chain:1814 ERROR: status = -5 [ 417.070709][ T8011] (syz.5.475,8011,0):ocfs2_search_chain:1926 ERROR: status = -5 [ 417.078793][ T8011] (syz.5.475,8011,0):ocfs2_claim_suballoc_bits:1995 ERROR: status = -5 [ 417.087530][ T8011] (syz.5.475,8011,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -5 [ 417.096194][ T8011] (syz.5.475,8011,0):__ocfs2_claim_clusters:2412 ERROR: status = -5 [ 417.107972][ T8011] (syz.5.475,8011,0):__ocfs2_claim_clusters:2420 ERROR: status = -5 [ 417.119074][ T8011] (syz.5.475,8011,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -5 [ 417.128113][ T8011] (syz.5.475,8011,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -5 [ 417.137065][ T8011] (syz.5.475,8011,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -5 [ 417.146447][ T8011] (syz.5.475,8011,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -5 [ 417.155571][ T8011] (syz.5.475,8011,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -5 [ 417.164483][ T8011] (syz.5.475,8011,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -5 [ 417.173602][ T8011] (syz.5.475,8011,0):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -5 [ 417.183156][ T8011] (syz.5.475,8011,0):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -5 [ 417.192539][ T8011] (syz.5.475,8011,0):ocfs2_lock_allocators:2749 ERROR: status = -5 [ 417.201031][ T8011] (syz.5.475,8011,0):ocfs2_extend_allocation:592 ERROR: status = -5 [ 417.212006][ T8011] (syz.5.475,8011,0):ocfs2_extend_no_holes:1030 ERROR: status = -5 [ 417.221211][ T8011] (syz.5.475,8011,0):ocfs2_acquire_dquot:885 ERROR: status = -5 [ 417.226494][ T8023] mmap: syz.6.480 (8023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 417.401944][ T3905] team0 (unregistering): Port device team_slave_1 removed [ 417.407710][ T8025] loop2: detected capacity change from 0 to 8 [ 417.497813][ T3905] team0 (unregistering): Port device team_slave_0 removed [ 417.610383][ T8025] cramfs: Error -3 while decompressing! [ 417.620093][ T8025] cramfs: ffffffff94688138(42)->ffff88801e7ee000(4096) [ 417.646777][ T8025] cramfs: Error -3 while decompressing! [ 417.652658][ T8025] cramfs: ffffffff94688138(42)->ffff88801e7ee000(4096) [ 417.804544][ T6176] ocfs2: Unmounting device (7,5) on (node local) [ 418.798735][ T5782] Bluetooth: hci3: command tx timeout [ 418.912887][ T8015] chnl_net:caif_netlink_parms(): no params data found [ 419.465754][ T7847] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 419.645758][ T5884] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 419.668517][ T7847] usb 3-1: Using ep0 maxpacket: 16 [ 419.690669][ T7847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.702301][ T7847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.704778][ T8050] loop5: detected capacity change from 0 to 1024 [ 419.715624][ T7847] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 419.715787][ T7847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.754490][ T7847] usb 3-1: config 0 descriptor?? [ 419.837200][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.849135][ T5884] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.859459][ T5884] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.875202][ T5884] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.885923][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.975733][ T5884] usb 7-1: config 0 descriptor?? [ 420.168910][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.181178][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.189326][ T8015] bridge_slave_0: entered allmulticast mode [ 420.198615][ T8015] bridge_slave_0: entered promiscuous mode [ 420.227176][ T7847] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0005/input/input13 [ 420.312956][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.321126][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.329180][ T8015] bridge_slave_1: entered allmulticast mode [ 420.333822][ T7847] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 420.338339][ T8015] bridge_slave_1: entered promiscuous mode [ 420.454271][ T5884] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 420.472265][ T5884] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 420.526342][ T5884] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 420.569305][ T8015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.594314][ T8015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.744151][ T8015] team0: Port device team_slave_0 added [ 420.772514][ T8015] team0: Port device team_slave_1 added [ 420.870269][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.877682][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.904018][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.915969][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.936532][ T5782] Bluetooth: hci3: command tx timeout [ 420.939596][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.950477][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.976585][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.984075][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.048720][ T5884] usb 3-1: USB disconnect, device number 8 [ 421.308917][ T8015] hsr_slave_0: entered promiscuous mode [ 421.338887][ T8015] hsr_slave_1: entered promiscuous mode [ 421.352846][ T8015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.360939][ T8015] Cannot create hsr debugfs directory [ 421.379063][ T7847] usb 7-1: USB disconnect, device number 4 [ 421.476033][ T8066] netlink: 'syz.5.493': attribute type 29 has an invalid length. [ 421.541886][ T8066] netlink: 'syz.5.493': attribute type 29 has an invalid length. [ 421.564819][ T8069] loop6: detected capacity change from 0 to 512 [ 421.580040][ T8070] loop8: detected capacity change from 0 to 256 [ 421.606443][ T8066] netlink: 500 bytes leftover after parsing attributes in process `syz.5.493'. [ 421.620059][ T8066] unsupported nla_type 40 [ 421.630432][ T8069] EXT4-fs: Ignoring removed i_version option [ 421.636937][ T8069] EXT4-fs: Ignoring removed nobh option [ 421.655355][ T8069] EXT4-fs (loop6): Test dummy encryption mode enabled [ 421.662627][ T8069] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 421.682428][ T8066] netlink: 500 bytes leftover after parsing attributes in process `syz.5.493'. [ 421.732477][ T8069] EXT4-fs (loop6): 1 truncate cleaned up [ 421.740586][ T8069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.310915][ T8015] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 422.311638][ T6307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.348120][ T8015] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 422.443906][ T8015] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 422.484384][ T8015] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 422.597806][ T8085] loop6: detected capacity change from 0 to 1024 [ 422.904087][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.935372][ T8091] loop8: detected capacity change from 0 to 1024 [ 422.953155][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.971964][ T5782] Bluetooth: hci3: command tx timeout [ 423.096997][ T8015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.107761][ T8015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.156492][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.164022][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.179662][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.187414][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.189304][ T8085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.278566][ T8085] loop6: detected capacity change from 1024 to 64 [ 423.397981][ T8091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.690340][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.777749][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.824531][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.943648][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 423.959826][ T8107] Trying to write to read-only block-device nullb0 [ 424.022251][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 424.064329][ T7744] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.106724][ T8110] loop2: detected capacity change from 0 to 128 [ 424.227137][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 424.282861][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 424.317293][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 424.374090][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 424.430882][ T6307] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 424.432207][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.524384][ T8113] loop8: detected capacity change from 0 to 128 [ 425.085165][ T5782] Bluetooth: hci3: command tx timeout [ 425.514081][ T3905] kworker/u8:15: attempt to access beyond end of device [ 425.514081][ T3905] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 425.614930][ T7310] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.762756][ T8015] veth0_vlan: entered promiscuous mode [ 425.861616][ T8088] kmmpd-loop6: attempt to access beyond end of device [ 425.861616][ T8088] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 425.863726][ T8015] veth1_vlan: entered promiscuous mode [ 425.875651][ T8088] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 426.098333][ T8015] veth0_macvtap: entered promiscuous mode [ 426.132064][ T8015] veth1_macvtap: entered promiscuous mode [ 426.147715][ T1587] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 426.183381][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.194234][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.204521][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.215583][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.228802][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.240480][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.255374][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.275690][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.288054][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.298849][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.309745][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.319975][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.327267][ T1587] usb 3-1: Using ep0 maxpacket: 16 [ 426.333463][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.350890][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.564313][ T8015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.573888][ T8015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.583067][ T8015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.592344][ T8015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.650123][ T1587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 426.661933][ T1587] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 426.675550][ T1587] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 426.684916][ T1587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.839202][ T1587] usb 3-1: config 0 descriptor?? [ 426.910933][ T4086] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.011232][ T4086] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.136894][ T4086] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.230547][ T4086] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.364827][ T1587] logitech 0003:046D:C298.0007: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.2-1/input0 [ 427.376913][ T1587] logitech 0003:046D:C298.0007: no inputs found [ 427.500436][ T4086] bridge_slave_1: left allmulticast mode [ 427.506668][ T4086] bridge_slave_1: left promiscuous mode [ 427.513414][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.553667][ T5835] usb 3-1: USB disconnect, device number 9 [ 427.578784][ T4086] bridge_slave_0: left allmulticast mode [ 427.584726][ T4086] bridge_slave_0: left promiscuous mode [ 427.591705][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.992253][ T4086] bond1 (unregistering): (slave gretap1): Releasing active interface [ 428.219658][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.284609][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.386900][ T4086] bond0 (unregistering): Released all slaves [ 428.407151][ T4086] bond1 (unregistering): Released all slaves [ 428.642191][ T8141] loop5: detected capacity change from 0 to 2048 [ 429.064624][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 429.083720][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 429.101769][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 429.132854][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 429.144382][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 429.154947][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.333447][ T4086] hsr_slave_0: left promiscuous mode [ 429.372105][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.380673][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.401608][ T8154] Bluetooth: MGMT ver 1.23 [ 429.448449][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.456437][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.546512][ T4086] veth1_macvtap: left promiscuous mode [ 429.552567][ T4086] veth0_macvtap: left promiscuous mode [ 429.558779][ T4086] veth1_vlan: left promiscuous mode [ 429.564359][ T4086] veth0_vlan: left promiscuous mode [ 430.337454][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 430.383142][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 431.196237][ T5782] Bluetooth: hci2: command tx timeout [ 431.572632][ T8168] loop8: detected capacity change from 0 to 4096 [ 431.626684][ T8168] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 431.726579][ T8150] chnl_net:caif_netlink_parms(): no params data found [ 431.975741][ T8168] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 432.398038][ T7744] ntfs3(loop8): ino=1a, ntfs_sync_fs failed, -22. [ 432.897899][ T8188] loop8: detected capacity change from 0 to 512 [ 433.194289][ T8188] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.525: corrupted in-inode xattr: invalid ea_ino [ 433.225010][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.233060][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.241140][ T8150] bridge_slave_0: entered allmulticast mode [ 433.250337][ T8150] bridge_slave_0: entered promiscuous mode [ 433.301627][ T5782] Bluetooth: hci2: command tx timeout [ 433.329587][ T8198] loop2: detected capacity change from 0 to 128 [ 433.346448][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.354163][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.360929][ T8188] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.525: couldn't read orphan inode 15 (err -117) [ 433.362407][ T8150] bridge_slave_1: entered allmulticast mode [ 433.382388][ T8150] bridge_slave_1: entered promiscuous mode [ 433.460092][ T8188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.495044][ T8150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.616898][ T8150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.919327][ T8150] team0: Port device team_slave_0 added [ 434.005267][ T8150] team0: Port device team_slave_1 added [ 434.113287][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.121597][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.142854][ T3633] kworker/u8:12: attempt to access beyond end of device [ 434.142854][ T3633] loop2: rw=1, sector=145, nr_sectors = 33 limit=128 [ 434.147952][ T7744] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.249902][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.257887][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.284650][ T8150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.303323][ T8150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.313342][ T8150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.341712][ T8150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.421948][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.430517][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.593487][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 434.593572][ T29] audit: type=1326 audit(1735919996.574:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8585d29 code=0x7fc00000 [ 434.625259][ T29] audit: type=1326 audit(1735919996.574:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0f8585d29 code=0x7fc00000 [ 434.648958][ T29] audit: type=1326 audit(1735919996.574:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8585d29 code=0x7fc00000 [ 434.671725][ T29] audit: type=1326 audit(1735919996.574:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8585d29 code=0x7fc00000 [ 434.694663][ T29] audit: type=1326 audit(1735919996.574:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8206 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f8585d29 code=0x7fc00000 [ 434.779958][ T8150] hsr_slave_0: entered promiscuous mode [ 434.847884][ T8150] hsr_slave_1: entered promiscuous mode [ 434.866321][ T8150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.874157][ T8150] Cannot create hsr debugfs directory [ 435.356151][ T5782] Bluetooth: hci2: command tx timeout [ 437.476085][ T5782] Bluetooth: hci2: command tx timeout [ 438.427564][ T8250] loop2: detected capacity change from 0 to 65536 [ 438.597932][ T8250] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 438.653967][ T8150] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.682720][ T8150] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.750899][ T8150] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.809246][ T8150] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.936406][ T8250] XFS (loop2): Ending clean mount [ 438.952351][ T8250] XFS (loop2): Quotacheck needed: Please wait. [ 439.028218][ T8279] loop5: detected capacity change from 0 to 2048 [ 439.157574][ T8250] XFS (loop2): Quotacheck: Done. [ 439.239403][ T8279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.321590][ T8283] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 439.461710][ T5789] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 439.862180][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.013396][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.208777][ T8150] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.330490][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.338341][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.515913][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.523618][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.238667][ T8309] loop8: detected capacity change from 0 to 8 [ 442.452624][ T8150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.001197][ T8150] veth0_vlan: entered promiscuous mode [ 443.154941][ T8150] veth1_vlan: entered promiscuous mode [ 443.188365][ T8327] loop8: detected capacity change from 0 to 8192 [ 443.239847][ T8334] loop5: detected capacity change from 0 to 256 [ 443.289125][ T8334] FAT-fs (loop5): bogus sectors per cluster 30 [ 443.295785][ T8334] FAT-fs (loop5): Can't find a valid FAT filesystem [ 443.428485][ T8150] veth0_macvtap: entered promiscuous mode [ 443.541640][ T8150] veth1_macvtap: entered promiscuous mode [ 443.769915][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.781019][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.795229][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.807238][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.817866][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.828758][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.853263][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.871948][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.882863][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.893083][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.904551][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.915511][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.926399][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.946942][ T8150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.966359][ T8150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.975554][ T8150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.984587][ T8150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.994864][ T8150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.336260][ T8027] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 444.424111][ T1587] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 444.616275][ T8027] usb 10-1: Using ep0 maxpacket: 16 [ 444.636280][ T8027] usb 10-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 444.647467][ T8027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.685982][ T1587] usb 3-1: Using ep0 maxpacket: 8 [ 444.707184][ T1587] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 444.730546][ T8027] usb 10-1: config 0 descriptor?? [ 444.777094][ T1587] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.787468][ T1587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.796061][ T1587] usb 3-1: Product: syz [ 444.800684][ T1587] usb 3-1: Manufacturer: syz [ 444.805934][ T1587] usb 3-1: SerialNumber: syz [ 445.146893][ T8343] loop2: detected capacity change from 0 to 128 [ 445.217483][ T8343] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.256540][ T8027] creative-sb0540 0003:041E:3100.0008: unknown main item tag 0x0 [ 445.269018][ T8027] creative-sb0540 0003:041E:3100.0008: unknown main item tag 0x0 [ 445.278469][ T8027] creative-sb0540 0003:041E:3100.0008: unknown main item tag 0x0 [ 445.287293][ T8027] creative-sb0540 0003:041E:3100.0008: unknown main item tag 0x0 [ 445.295731][ T8027] creative-sb0540 0003:041E:3100.0008: item fetching failed at offset 4/5 [ 445.553465][ T1587] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 445.561256][ T1587] cdc_ncm 3-1:1.0: bind() failure [ 445.581887][ T1587] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 445.589317][ T1587] cdc_ncm 3-1:1.1: bind() failure [ 445.619201][ T8027] creative-sb0540 0003:041E:3100.0008: parse failed [ 445.626676][ T8027] creative-sb0540 0003:041E:3100.0008: probe with driver creative-sb0540 failed with error -22 [ 445.699898][ T8027] usb 10-1: USB disconnect, device number 2 [ 445.751272][ T1587] usb 3-1: USB disconnect, device number 10 [ 446.573854][ T8376] loop9: detected capacity change from 0 to 1024 [ 446.876752][ T8376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.076375][ T29] audit: type=1800 audit(1735920009.064:120): pid=8376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.568" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 447.101519][ T8393] loop8: detected capacity change from 0 to 256 [ 447.157709][ T8393] exfat: Deprecated parameter 'utf8' [ 447.163496][ T8393] exfat: Deprecated parameter 'namecase' [ 447.171655][ T8393] exfat: Deprecated parameter 'namecase' [ 447.178743][ T8393] exfat: Deprecated parameter 'utf8' [ 447.323772][ T8015] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.386282][ T8393] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 447.752215][ T8407] loop5: detected capacity change from 0 to 128 [ 448.699187][ T8421] netlink: 'syz.5.578': attribute type 1 has an invalid length. [ 448.708078][ T8421] netlink: 'syz.5.578': attribute type 4 has an invalid length. [ 448.716838][ T8421] netlink: 15082 bytes leftover after parsing attributes in process `syz.5.578'. [ 448.873113][ T8426] netlink: 332 bytes leftover after parsing attributes in process `syz.2.579'. [ 448.905728][ T1587] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 449.077253][ T1587] usb 9-1: Using ep0 maxpacket: 16 [ 449.126099][ T1587] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.136746][ T1587] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 449.146295][ T1587] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.291093][ T1587] usb 9-1: config 0 descriptor?? [ 449.442768][ T8433] loop2: detected capacity change from 0 to 256 [ 449.508474][ T8433] exfat: Deprecated parameter 'utf8' [ 449.515342][ T8433] exfat: Deprecated parameter 'namecase' [ 449.675941][ T8438] loop9: detected capacity change from 0 to 512 [ 449.811341][ T8438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.824716][ T1587] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 449.824923][ T8438] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.832419][ T1587] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 449.851068][ T1587] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 449.858665][ T1587] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 449.867033][ T1587] lenovo 0003:17EF:60EE.0009: unknown main item tag 0x0 [ 449.890911][ T1587] lenovo 0003:17EF:60EE.0009: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.8-1/input0 [ 450.463469][ T8438] EXT4-fs error (device loop9): ext4_get_first_dir_block:3539: inode #12: comm syz.9.583: Attempting to read directory block (0) that is past i_size (3) [ 450.497465][ T8438] EXT4-fs (loop9): Remounting filesystem read-only [ 450.719648][ T4086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.728135][ T4086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.828762][ T8015] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.922810][ T4086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.923609][ T10] usb 9-1: USB disconnect, device number 2 [ 450.931336][ T4086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.707112][ T8459] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 451.800265][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.810331][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.853647][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.861593][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.870535][ T8459] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.878454][ T8459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.898889][ T8459] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 452.997484][ T8474] fuse: root generation should be zero [ 453.987741][ T8472] loop9: detected capacity change from 0 to 65536 [ 454.366463][ T8472] XFS (loop9): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 454.661831][ T8472] XFS (loop9): Ending clean mount [ 455.156670][ T8015] XFS (loop9): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 455.768534][ T8531] overlayfs: failed to resolve './file0': -2 [ 456.064861][ T8534] sctp: [Deprecated]: syz.0.608 (pid 8534) Use of int in max_burst socket option deprecated. [ 456.064861][ T8534] Use struct sctp_assoc_value instead [ 457.366853][ T8544] loop2: detected capacity change from 0 to 32768 [ 457.384005][ T8544] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.609 (8544) [ 457.425645][ T8544] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.425909][ T8544] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 457.428115][ T8544] BTRFS info (device loop2): using free-space-tree [ 458.004663][ T8544] BTRFS info (device loop2): rebuilding free space tree [ 459.175703][ T8027] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 459.188360][ T5789] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.360390][ T8027] usb 10-1: config 0 has an invalid interface number: 171 but max is 0 [ 459.369360][ T8027] usb 10-1: config 0 has no interface number 0 [ 459.376070][ T8027] usb 10-1: config 0 interface 171 has no altsetting 0 [ 459.741765][ T8027] usb 10-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 459.751803][ T8027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.761548][ T8027] usb 10-1: Product: syz [ 459.766242][ T8027] usb 10-1: Manufacturer: syz [ 459.771191][ T8027] usb 10-1: SerialNumber: syz [ 459.817746][ T8027] usb 10-1: config 0 descriptor?? [ 459.874933][ T8027] usb-storage 10-1:0.171: USB Mass Storage device detected [ 460.084280][ T8027] usb 10-1: USB disconnect, device number 3 [ 460.498176][ T8600] loop5: detected capacity change from 0 to 128 [ 460.558348][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c117a00: rx timeout, send abort [ 460.569731][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c117a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 460.780858][ T8600] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.810463][ T8600] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 460.842682][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.231998][ T6176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.569072][ T8623] loop5: detected capacity change from 0 to 8 [ 462.002580][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 462.247611][ T8634] loop2: detected capacity change from 0 to 1024 [ 462.668185][ T8634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.198095][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.338454][ T8658] sp0: Synchronizing with TNC [ 463.447482][ T8657] [U] ` [ 465.122355][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 465.136479][ T8680] netlink: 'syz.0.640': attribute type 7 has an invalid length. [ 465.144431][ T8680] netlink: 'syz.0.640': attribute type 8 has an invalid length. [ 465.154587][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 465.882113][ T8687] loop8: detected capacity change from 0 to 4096 [ 465.944060][ T8687] ntfs3(loop8): It is recommened to use chkdsk. [ 465.984715][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 465.993382][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 466.001884][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 466.010253][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00 [ 466.018679][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc1c00 [ 466.027067][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc2c00 [ 466.035276][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc4c00 [ 466.044186][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffc8c00 [ 466.058482][ T8687] ntfs3(loop8): try to read out of volume at offset 0x3fffffd0c00 [ 466.289582][ T8705] loop5: detected capacity change from 0 to 2048 [ 466.311893][ T8705] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 466.484776][ T8705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.926619][ T6176] UDF-fs: warning (device loop5): udf_evict_inode: Inode 1367 (mode 120777) has inode size 260 different from extent length 512. Filesystem need not be standards compliant. [ 469.029264][ T8751] loop5: detected capacity change from 0 to 256 [ 470.343679][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.350764][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.281505][ T8751] FAT-fs (loop5): Directory bread(block 64) failed [ 471.288639][ T8751] FAT-fs (loop5): Directory bread(block 65) failed [ 471.295842][ T8751] FAT-fs (loop5): Directory bread(block 66) failed [ 471.302646][ T8751] FAT-fs (loop5): Directory bread(block 67) failed [ 471.309802][ T8751] FAT-fs (loop5): Directory bread(block 68) failed [ 471.316806][ T8751] FAT-fs (loop5): Directory bread(block 69) failed [ 471.323742][ T8751] FAT-fs (loop5): Directory bread(block 70) failed [ 471.330771][ T8751] FAT-fs (loop5): Directory bread(block 71) failed [ 471.337818][ T8751] FAT-fs (loop5): Directory bread(block 72) failed [ 471.344611][ T8751] FAT-fs (loop5): Directory bread(block 73) failed [ 471.925721][ T8027] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 472.112120][ T8027] usb 9-1: Using ep0 maxpacket: 32 [ 472.201328][ T8027] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 472.209972][ T8027] usb 9-1: config 0 has no interface number 0 [ 472.216631][ T8027] usb 9-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 472.350656][ T8783] loop5: detected capacity change from 0 to 1024 [ 472.391039][ T8027] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 472.404906][ T8027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.414375][ T8027] usb 9-1: Product: syz [ 472.418909][ T8027] usb 9-1: Manufacturer: syz [ 472.423762][ T8027] usb 9-1: SerialNumber: syz [ 472.476271][ T8027] usb 9-1: config 0 descriptor?? [ 472.497753][ T8767] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 472.544710][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'. [ 472.595020][ T8027] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 472.610052][ T8027] em28xx 9-1:0.132: Video interface 132 found: bulk [ 472.642378][ T8783] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 472.649206][ T8783] hfsplus: xattr searching failed [ 473.039209][ T8027] em28xx 9-1:0.132: chip ID is em28174 [ 473.653850][ T8027] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 473.667535][ T8027] em28xx 9-1:0.132: board has no eeprom [ 473.785794][ T8027] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 473.793991][ T8027] em28xx 9-1:0.132: analog set to bulk mode. [ 473.801792][ T1587] em28xx 9-1:0.132: Registering V4L2 extension [ 473.990854][ T10] usb 9-1: USB disconnect, device number 3 [ 473.998644][ T10] em28xx 9-1:0.132: Disconnecting em28xx [ 474.696777][ T1587] usb 9-1: Decoder not found [ 474.701669][ T1587] em28xx 9-1:0.132: failed to create media graph [ 474.709240][ T1587] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 474.768553][ T1587] em28xx 9-1:0.132: Remote control support is not available for this card. [ 474.794843][ T8816] loop9: detected capacity change from 0 to 256 [ 474.807903][ T10] em28xx 9-1:0.132: Closing input extension [ 474.853564][ T10] em28xx 9-1:0.132: Freeing device [ 474.914760][ T29] audit: type=1326 audit(1735920036.884:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.0.683" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b90585d29 code=0x0 [ 475.011224][ T8825] loop5: detected capacity change from 0 to 128 [ 475.132627][ T8825] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 475.158955][ T8825] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.610934][ T6176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 475.946961][ T8837] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 476.234523][ T8849] 9pnet: p9_errstr2errno: server reported unknown error @%! [ 476.755831][ T1587] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 476.959724][ T1587] usb 3-1: Using ep0 maxpacket: 32 [ 476.982351][ T1587] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 476.991933][ T1587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.000387][ T1587] usb 3-1: Product: syz [ 477.004796][ T1587] usb 3-1: Manufacturer: syz [ 477.013331][ T1587] usb 3-1: SerialNumber: syz [ 477.026002][ T8027] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 477.138368][ T1587] usb 3-1: config 0 descriptor?? [ 477.170146][ T1587] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 477.263133][ T8027] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.264585][ T10] kernel write not supported for file /103/attr/exec (pid: 10 comm: kworker/0:1) [ 477.273836][ T8027] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.353871][ T8027] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 477.363825][ T8027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.372581][ T8027] usb 6-1: SerialNumber: syz [ 477.639177][ T8027] usb 6-1: 0:2 : does not exist [ 477.780764][ T8027] usb 6-1: USB disconnect, device number 7 [ 478.166522][ T5784] Bluetooth: hci0: command 0x0c1a tx timeout [ 478.194725][ T5782] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 478.554172][ T1587] gspca_ov534_9: reg_w failed -71 [ 478.962150][ T8885] loop5: detected capacity change from 0 to 512 [ 479.081888][ T8885] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.702: corrupted in-inode xattr: invalid ea_ino [ 479.145145][ T1587] gspca_ov534_9: Unknown sensor 0000 [ 479.149909][ T1587] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 479.150171][ T8885] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.702: couldn't read orphan inode 15 (err -117) [ 479.204982][ T1587] usb 3-1: USB disconnect, device number 11 [ 479.228253][ T8887] netlink: 'syz.9.703': attribute type 10 has an invalid length. [ 479.249599][ T8885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.291980][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.302011][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.326834][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.334612][ T8887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.342718][ T8898] input: syz0 as /devices/virtual/input/input14 [ 479.343467][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.357081][ T8887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.387082][ T8887] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 479.853668][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.419891][ T8977] serio: Serial port ptm0 [ 484.467049][ T8970] loop8: detected capacity change from 0 to 4096 [ 485.635861][ T29] audit: type=1326 audit(1735920047.624:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.636591][ T29] audit: type=1326 audit(1735920047.634:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.638570][ T29] audit: type=1326 audit(1735920047.634:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.639743][ T29] audit: type=1326 audit(1735920047.634:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.639964][ T29] audit: type=1326 audit(1735920047.634:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.641619][ T29] audit: type=1326 audit(1735920047.634:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.646277][ T29] audit: type=1326 audit(1735920047.634:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.646511][ T29] audit: type=1326 audit(1735920047.634:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.646718][ T29] audit: type=1326 audit(1735920047.634:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 485.646944][ T29] audit: type=1326 audit(1735920047.634:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.8.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f98f2b85d29 code=0x7ffc0000 [ 486.565826][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.734597][ T9015] loop8: detected capacity change from 0 to 164 [ 487.016595][ T9015] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 487.129227][ T9015] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 489.148480][ T9042] loop5: detected capacity change from 0 to 4096 [ 489.846057][ T10] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 490.076823][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 490.088523][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 490.100897][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 33657, setting to 64 [ 490.262262][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 490.272159][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.280692][ T10] usb 3-1: Product: syz [ 490.285113][ T10] usb 3-1: Manufacturer: syz [ 490.290115][ T10] usb 3-1: SerialNumber: syz [ 490.350741][ T10] usb 3-1: config 0 descriptor?? [ 490.359266][ T9061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.377434][ T9061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.449440][ T10] usb 3-1: ucan: probing device on interface #0 [ 490.724645][ T9061] loop2: detected capacity change from 0 to 128 [ 491.559239][ T10] usb 3-1: ucan: could not read protocol version, ret=-110 [ 491.566939][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 491.602105][ T9092] loop8: detected capacity change from 0 to 2048 [ 491.892774][ T5884] usb 3-1: USB disconnect, device number 12 [ 491.973527][ T9092] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.629151][ T9110] loop9: detected capacity change from 0 to 24 [ 492.927446][ T9110] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 495.005674][ T9136] loop2: detected capacity change from 0 to 32768 [ 495.470818][ T9136] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,norecovery,reconstruct_alloc [ 495.485890][ T9136] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 495.495371][ T9136] bcachefs (loop2): Version upgrade required: [ 495.495371][ T9136] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 495.495371][ T9136] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 495.495371][ T9136] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 495.654654][ T9136] bcachefs (loop2): dropping and reconstructing all alloc info [ 495.761401][ T9136] bcachefs (loop2): accounting_read... done [ 495.769446][ T9136] bcachefs (loop2): alloc_read... done [ 495.775351][ T9136] bcachefs (loop2): stripes_read... done [ 495.781783][ T9136] bcachefs (loop2): snapshots_read... done [ 495.788670][ T9136] bcachefs (loop2): check_allocations... done [ 495.978493][ T9136] bcachefs (loop2): going read-write [ 496.038135][ T9136] bcachefs (loop2): done starting filesystem [ 496.353493][ T5789] bcachefs (loop2): shutting down [ 496.359004][ T5789] bcachefs (loop2): going read-only [ 496.369913][ T5789] bcachefs (loop2): finished waiting for writes to stop [ 496.418710][ T5789] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 496.456651][ T5789] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 496.563351][ T5789] bcachefs (loop2): unshutdown complete, journal seq 13 [ 496.576498][ T5789] bcachefs (loop2): done going read-only, filesystem not clean [ 496.681185][ T5789] bcachefs (loop2): shutdown complete [ 496.862553][ T9174] loop8: detected capacity change from 0 to 2048 [ 496.910674][ T9174] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 498.969432][ T9209] loop8: detected capacity change from 0 to 1024 [ 499.010118][ T9209] EXT4-fs: Ignoring removed orlov option [ 499.065964][ T9209] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 499.190851][ T9209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.613742][ T9226] can0: slcan on pts0. [ 499.680358][ T9225] can0 (unregistered): slcan off pts0. [ 500.170454][ T7744] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.572699][ T9239] capability: warning: `syz.9.799' uses 32-bit capabilities (legacy support in use) [ 500.811142][ T9243] loop5: detected capacity change from 0 to 1024 [ 501.113875][ T9250] loop2: detected capacity change from 0 to 256 [ 501.217234][ T9243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.798622][ T9260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.879505][ T6176] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.127011][ T9260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.245646][ T9260] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 502.262326][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.272343][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.291879][ T9260] bond0 (unregistering): Released all slaves [ 502.578584][ T9274] loop9: detected capacity change from 0 to 7 [ 502.632365][ T9274] Dev loop9: unable to read RDB block 7 [ 502.639197][ T9274] loop9: unable to read partition table [ 502.689028][ T9274] loop9: partition table beyond EOD, truncated [ 502.697098][ T9274] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 504.906339][ T9305] loop9: detected capacity change from 0 to 1024 [ 504.951374][ T9305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.065194][ T9305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.166465][ T8027] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 505.341705][ T9310] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 505.406094][ T8027] usb 6-1: Using ep0 maxpacket: 16 [ 505.486498][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 505.494636][ T8027] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 505.497531][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 505.505089][ T8027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.513736][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 505.521189][ T8027] usb 6-1: Product: syz [ 505.532851][ T8027] usb 6-1: Manufacturer: syz [ 505.537319][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 505.537835][ T8027] usb 6-1: SerialNumber: syz [ 505.549287][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 505.551393][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.718107][ T8027] usb 6-1: config 0 descriptor?? [ 505.752738][ T8027] hub 6-1:0.0: bad descriptor, ignoring hub [ 505.759828][ T8027] hub 6-1:0.0: probe with driver hub failed with error -5 [ 506.048307][ T9315] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 506.061412][ T9315] EXT4-fs (loop9): This should not happen!! Data will be lost [ 506.061412][ T9315] [ 506.071568][ T9315] EXT4-fs (loop9): Total free blocks count 0 [ 506.078015][ T9315] EXT4-fs (loop9): Free/Dirty block details [ 506.084152][ T9315] EXT4-fs (loop9): free_blocks=68451041280 [ 506.094146][ T9315] EXT4-fs (loop9): dirty_blocks=80 [ 506.100928][ T9315] EXT4-fs (loop9): Block reservation details [ 506.107311][ T9315] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 506.286701][ T4086] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 506.726749][ T10] usb 6-1: USB disconnect, device number 8 [ 506.882517][ T9313] chnl_net:caif_netlink_parms(): no params data found [ 507.679940][ T5784] Bluetooth: hci4: command tx timeout [ 508.571093][ C0] Unknown status report in ack skb [ 508.595000][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.603114][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.611257][ T9313] bridge_slave_0: entered allmulticast mode [ 508.620451][ T9313] bridge_slave_0: entered promiscuous mode [ 508.638986][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.647151][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.662604][ T9313] bridge_slave_1: entered allmulticast mode [ 508.672000][ T9313] bridge_slave_1: entered promiscuous mode [ 508.884544][ T9313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.914780][ T9313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.217694][ T9313] team0: Port device team_slave_0 added [ 509.270685][ T9362] loop9: detected capacity change from 0 to 2048 [ 509.287934][ T9313] team0: Port device team_slave_1 added [ 509.349245][ T9362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 509.414197][ T9362] UDF-fs: warning (device loop9): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096 [ 509.614123][ T8015] UDF-fs: warning (device loop9): udf_evict_inode: Inode 1367 (mode 100000) has inode size 3200 different from extent length 4096. Filesystem need not be standards compliant. [ 509.724796][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.733383][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.761030][ T9313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.775816][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 509.946235][ T5784] Bluetooth: hci4: command tx timeout [ 510.018521][ T9313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.025973][ T9313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.052395][ T9313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.332445][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 510.342431][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.351021][ T10] usb 1-1: Product: syz [ 510.355507][ T10] usb 1-1: Manufacturer: syz [ 510.360346][ T10] usb 1-1: SerialNumber: syz [ 510.657663][ T9313] hsr_slave_0: entered promiscuous mode [ 510.738000][ T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 510.753086][ T5124] bcm5974 1-1:1.0: could not read from device [ 510.767171][ T9313] hsr_slave_1: entered promiscuous mode [ 510.788770][ T5124] bcm5974 1-1:1.0: could not read from device [ 510.806707][ T9313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.814737][ T9313] Cannot create hsr debugfs directory [ 510.832375][ T5124] bcm5974 1-1:1.0: could not read from device [ 510.863985][ T5124] bcm5974 1-1:1.0: could not read from device [ 510.871682][ T10] usb 1-1: USB disconnect, device number 2 [ 512.011473][ T9389] loop8: detected capacity change from 0 to 4096 [ 512.036970][ T5784] Bluetooth: hci4: command tx timeout [ 512.165053][ T9389] NILFS (loop8): invalid segment: Checksum error in segment payload [ 512.173768][ T9389] NILFS (loop8): trying rollback from an earlier position [ 512.451389][ T9389] NILFS (loop8): recovery complete [ 512.564886][ T9409] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 512.756368][ T9389] overlayfs: failed to create directory ./file0/work (errno: 1); mounting read-only [ 512.766677][ T9389] overlayfs: failed to get uuid (/file2, err=-95); falling back to uuid=null. [ 513.432939][ T9313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.482586][ T9313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.510928][ T9313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.532726][ T9313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.854772][ T9418] loop5: detected capacity change from 0 to 16 [ 513.864710][ T9419] syzkaller0: entered promiscuous mode [ 513.871077][ T9419] syzkaller0: entered allmulticast mode [ 513.950197][ T9418] erofs (device loop5): mounted with root inode @ nid 36. [ 514.289014][ T5784] Bluetooth: hci4: command tx timeout [ 514.310833][ T9313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.355113][ T9313] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.442279][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.450056][ T5046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.469074][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.476834][ T5046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.644572][ T9313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.655858][ T9313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.648509][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 515.687933][ T9450] dccp_invalid_packet: P.Data Offset(80) too large [ 515.788770][ T9452] loop8: detected capacity change from 0 to 128 [ 515.837283][ T10] usb 6-1: config 144 has an invalid descriptor of length 0, skipping remainder of the config [ 515.848205][ T10] usb 6-1: config 144 has 0 interfaces, different from the descriptor's value: 1 [ 515.866424][ T9452] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 515.904895][ T9452] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.031943][ T9313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.116326][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.130596][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.141276][ T10] usb 6-1: Product: syz [ 516.146510][ T10] usb 6-1: Manufacturer: syz [ 516.151372][ T10] usb 6-1: SerialNumber: syz [ 516.340098][ T9313] veth0_vlan: entered promiscuous mode [ 516.521420][ T9313] veth1_vlan: entered promiscuous mode [ 516.811584][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.855'. [ 517.053444][ T9313] veth0_macvtap: entered promiscuous mode [ 517.126562][ T9313] veth1_macvtap: entered promiscuous mode [ 517.249604][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.264823][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.276167][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.287962][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.298157][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.308973][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.319157][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.329950][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.344906][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.367358][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.378225][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.388367][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.399159][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.409414][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.420280][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.428156][ T9468] loop9: detected capacity change from 0 to 512 [ 517.430384][ T9313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.447528][ T9313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.467414][ T9313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.486462][ T9313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.495714][ T9313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.504762][ T9313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.513884][ T9313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.692180][ T9468] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 517.803086][ T9468] EXT4-fs (loop9): 1 truncate cleaned up [ 517.812331][ T9468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.203576][ T10] usb 6-1: USB disconnect, device number 9 [ 518.436985][ T8015] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.496396][ T5782] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.580987][ T9532] netlink: 'syz.8.872': attribute type 39 has an invalid length. [ 521.639756][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.765071][ T9532] bridge_slave_0 (unregistering): left allmulticast mode [ 521.772579][ T9532] bridge_slave_0 (unregistering): left promiscuous mode [ 521.780309][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.824615][ T9529] loop9: detected capacity change from 0 to 4096 [ 521.979743][ T9529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.199841][ T9529] fs-verity: sha256 using implementation "sha256-generic" [ 522.307617][ T9529] fs-verity (loop9, inode 16): fs-verity keyring is empty, rejecting signed file! [ 522.557619][ T9546] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 522.565134][ T9546] overlayfs: failed to set xattr on upper [ 522.571375][ T9546] overlayfs: ...falling back to redirect_dir=nofollow. [ 522.581900][ T9546] overlayfs: ...falling back to index=off. [ 522.589051][ T9546] overlayfs: ...falling back to uuid=null. [ 522.595078][ T9546] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 522.739581][ T8015] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.642823][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'. [ 524.144949][ T9563] loop9: detected capacity change from 0 to 512 [ 524.371404][ T3905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.379645][ T3905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.398911][ T5046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.407133][ T5046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.618422][ T9563] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.638857][ T9563] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.061218][ T9563] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 525.791344][ T8015] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.241698][ T1587] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 527.505300][ T1587] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 527.514826][ T1587] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.523555][ T1587] usb 9-1: Product: syz [ 527.528101][ T1587] usb 9-1: Manufacturer: syz [ 527.532952][ T1587] usb 9-1: SerialNumber: syz [ 527.626991][ T1587] usb 9-1: config 0 descriptor?? [ 527.934894][ T3633] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.959214][ T1587] hso 9-1:0.0: Failed to find BULK IN ep [ 527.980284][ T1587] usb-storage 9-1:0.0: USB Mass Storage device detected [ 528.086558][ T3633] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.929564][ T1587] usb 9-1: USB disconnect, device number 4 [ 529.104943][ T3633] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.611879][ T3633] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.877317][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 529.888456][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 529.897870][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.040710][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.180701][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 530.274305][ T3633] bridge_slave_1: left allmulticast mode [ 530.280440][ T3633] bridge_slave_1: left promiscuous mode [ 530.287258][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.346268][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 530.398523][ T3633] bridge_slave_0: left allmulticast mode [ 530.404486][ T3633] bridge_slave_0: left promiscuous mode [ 530.411322][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.728411][ T3633] hsr_slave_0: left promiscuous mode [ 531.748750][ T3633] hsr_slave_1: left promiscuous mode [ 531.782335][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.789395][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.851384][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.862234][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.880353][ T3633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.888653][ T3633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.953549][ T3633] veth1_macvtap: left promiscuous mode [ 531.962004][ T3633] veth0_macvtap: left promiscuous mode [ 531.968103][ T3633] veth1_vlan: left promiscuous mode [ 531.973746][ T3633] veth0_vlan: left promiscuous mode [ 532.257821][ T9675] loop3: detected capacity change from 0 to 128 [ 532.386076][ T9675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.466806][ T9675] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 532.496518][ T5782] Bluetooth: hci3: command tx timeout [ 532.796351][ T3633] team0 (unregistering): Port device team_slave_1 removed [ 532.860835][ T9675] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1633771873 (only 1 groups) [ 532.962333][ T3633] team0 (unregistering): Port device team_slave_0 removed [ 533.068746][ T9684] overlayfs: failed to resolve './file0': -2 [ 533.603444][ T9313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 534.117079][ T9696] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 534.146282][ T9635] chnl_net:caif_netlink_parms(): no params data found [ 534.555796][ T5782] Bluetooth: hci3: command tx timeout [ 534.694636][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 534.694723][ T29] audit: type=1326 audit(1735920096.614:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.724081][ T29] audit: type=1326 audit(1735920096.624:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.746827][ T29] audit: type=1326 audit(1735920096.624:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.773865][ T29] audit: type=1326 audit(1735920096.624:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.799728][ T29] audit: type=1326 audit(1735920096.624:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.822594][ T29] audit: type=1326 audit(1735920096.624:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.845574][ T29] audit: type=1326 audit(1735920096.634:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.872624][ T29] audit: type=1326 audit(1735920096.634:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.896947][ T29] audit: type=1326 audit(1735920096.634:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 534.919678][ T29] audit: type=1326 audit(1735920096.634:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9704 comm="syz.3.921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9b585d29 code=0x7ffc0000 [ 535.629701][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.639069][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.647180][ T9635] bridge_slave_0: entered allmulticast mode [ 535.656574][ T9635] bridge_slave_0: entered promiscuous mode [ 535.695094][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.703116][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.711220][ T9635] bridge_slave_1: entered allmulticast mode [ 535.720515][ T9635] bridge_slave_1: entered promiscuous mode [ 536.028015][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.123131][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.454597][ T9635] team0: Port device team_slave_0 added [ 536.498499][ T9733] Illegal XDP return value 4294967274 on prog (id 106) dev syz_tun, expect packet loss! [ 536.538934][ T9635] team0: Port device team_slave_1 added [ 536.636468][ T5782] Bluetooth: hci3: command tx timeout [ 536.865378][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.872669][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.912077][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.080860][ T9743] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 537.090968][ T9743] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 537.110130][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.121708][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.149292][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.375060][ T9635] hsr_slave_0: entered promiscuous mode [ 537.405275][ T9747] loop5: detected capacity change from 0 to 128 [ 537.445071][ T9635] hsr_slave_1: entered promiscuous mode [ 537.456586][ T9635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.464516][ T9635] Cannot create hsr debugfs directory [ 537.565025][ T9747] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 537.579518][ T9747] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 538.315338][ T6176] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 538.720772][ T5782] Bluetooth: hci3: command tx timeout [ 539.005353][ T9635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.098369][ T9635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.189655][ T9635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.257218][ T9635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.574002][ T9635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.718739][ T9635] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.784560][ T4985] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.792451][ T4985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.925182][ T4985] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.932954][ T4985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.169607][ T9810] loop8: detected capacity change from 0 to 512 [ 542.230708][ T9810] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 542.366483][ T9810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 542.403660][ T9810] EXT4-fs (loop8): orphan cleanup on readonly fs [ 542.470231][ T9810] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #11: comm syz.8.951: attempt to clear invalid blocks 1024 len 1 [ 542.515804][ T9810] EXT4-fs (loop8): Remounting filesystem read-only [ 542.563208][ T9810] EXT4-fs (loop8): 1 truncate cleaned up [ 542.571195][ T9810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 542.729182][ T9810] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.951: dx entry: limit 0 != root limit 125 [ 542.741626][ T9810] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.951: Corrupt directory, running e2fsck is recommended [ 542.765188][ T9635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.977134][ T9810] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.951: dx entry: limit 0 != root limit 125 [ 542.989376][ T9810] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.951: Corrupt directory, running e2fsck is recommended [ 543.168662][ T9810] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.951: dx entry: limit 0 != root limit 125 [ 543.181395][ T9810] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.951: Corrupt directory, running e2fsck is recommended [ 543.230124][ T9823] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 543.326430][ T9810] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.951: dx entry: limit 0 != root limit 125 [ 543.338751][ T9810] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.951: Corrupt directory, running e2fsck is recommended [ 543.419694][ T9831] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.951: dx entry: limit 0 != root limit 125 [ 543.427714][ T9635] veth0_vlan: entered promiscuous mode [ 543.431870][ T9831] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.951: Corrupt directory, running e2fsck is recommended [ 543.482540][ T9635] veth1_vlan: entered promiscuous mode [ 543.772528][ T9635] veth0_macvtap: entered promiscuous mode [ 543.856966][ T9635] veth1_macvtap: entered promiscuous mode [ 543.889063][ T7744] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 544.002772][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.013632][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.024069][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.034863][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.045143][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.056205][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.066359][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.078866][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.098791][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.418936][ T9839] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 544.446776][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.457796][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.468031][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.478978][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.489206][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.504411][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.515916][ T9635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.526878][ T9635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.541338][ T9635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.634247][ T9635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.644091][ T9842] loop5: detected capacity change from 0 to 2048 [ 544.651284][ T9635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.660632][ T9635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.669856][ T9635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.852222][ T9842] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 544.989828][ T9842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.623782][ T9859] loop3: detected capacity change from 0 to 16 [ 545.640602][ T9859] erofs: Unknown parameter '18446744073709551615' [ 547.956397][ T10] IPVS: starting estimator thread 0... [ 548.004818][ T4985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.046649][ T9884] IPVS: using max 240 ests per chain, 12000 per kthread [ 548.438516][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 548.553773][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 548.569988][ T4985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.606110][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 548.640642][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 548.674320][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 548.720155][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.782965][ T4985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.080784][ T4985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.168378][ T9914] loop8: detected capacity change from 0 to 32768 [ 550.177235][ T4985] bridge_slave_1: left allmulticast mode [ 550.183281][ T4985] bridge_slave_1: left promiscuous mode [ 550.190259][ T4985] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.250751][ T4985] bridge_slave_0: left allmulticast mode [ 550.257110][ T4985] bridge_slave_0: left promiscuous mode [ 550.263690][ T4985] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.759094][ T9914] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,norecovery,reconstruct_alloc [ 550.773929][ T9914] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 550.784009][ T9914] bcachefs (loop8): Version upgrade required: [ 550.784009][ T9914] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 550.784009][ T9914] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 550.784009][ T9914] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 550.861695][ T1587] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 550.863385][ T4985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.875861][ T9914] bcachefs (loop8): dropping and reconstructing all alloc info [ 550.888352][ T5784] Bluetooth: hci4: command tx timeout [ 550.961239][ T4985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.986194][ T9914] bcachefs (loop8): accounting_read... [ 550.990239][ T4985] bond0 (unregistering): Released all slaves [ 551.013629][ T9914] done [ 551.017498][ T9914] bcachefs (loop8): alloc_read... done [ 551.023389][ T9914] bcachefs (loop8): stripes_read... done [ 551.029634][ T9914] bcachefs (loop8): snapshots_read... done [ 551.036336][ T9914] bcachefs (loop8): check_allocations... [ 551.158768][ T9900] chnl_net:caif_netlink_parms(): no params data found [ 551.201538][ T9914] done [ 551.219987][ T9914] bcachefs (loop8): going read-write [ 551.245874][ T1587] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 551.258364][ T1587] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.268009][ T1587] usb 6-1: Product: syz [ 551.272438][ T1587] usb 6-1: Manufacturer: syz [ 551.277466][ T1587] usb 6-1: SerialNumber: syz [ 551.291870][ T9914] bcachefs (loop8): done starting filesystem [ 551.368114][ T1587] usb 6-1: config 0 descriptor?? [ 551.414901][ T1587] ch341 6-1:0.0: ch341-uart converter detected [ 551.819306][ T7744] bcachefs (loop8): shutting down [ 551.824588][ T7744] bcachefs (loop8): going read-only [ 551.830276][ T7744] bcachefs (loop8): finished waiting for writes to stop [ 551.949018][ T7744] bcachefs (loop8): flushing journal and stopping allocators, journal seq 11 [ 551.989656][ T7744] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 12 [ 552.056009][ T7744] bcachefs (loop8): unshutdown complete, journal seq 13 [ 552.064267][ T7744] bcachefs (loop8): done going read-only, filesystem not clean [ 552.535866][ T7744] bcachefs (loop8): shutdown complete [ 552.726338][ T1587] ch341-uart ttyUSB0: break control not supported, using simulated break [ 552.742731][ T1587] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 552.794550][ T4985] hsr_slave_0: left promiscuous mode [ 552.797963][ T1587] usb 6-1: USB disconnect, device number 10 [ 552.851294][ T4985] hsr_slave_1: left promiscuous mode [ 552.857959][ T1587] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 552.869340][ T1587] ch341 6-1:0.0: device disconnected [ 552.896798][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.904603][ T4985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.955645][ T5784] Bluetooth: hci4: command tx timeout [ 553.023612][ T4985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.031836][ T4985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.144165][ T4985] veth1_macvtap: left promiscuous mode [ 553.150314][ T4985] veth0_macvtap: left promiscuous mode [ 553.156850][ T4985] veth1_vlan: left promiscuous mode [ 553.162432][ T4985] veth0_vlan: left promiscuous mode [ 554.315131][ T4985] team0 (unregistering): Port device team_slave_1 removed [ 554.412572][ T4985] team0 (unregistering): Port device team_slave_0 removed [ 555.169373][ T5784] Bluetooth: hci4: command tx timeout [ 555.529083][ T9969] loop8: detected capacity change from 0 to 32768 [ 555.579466][ T4818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.587872][ T4818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.790206][ T3826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.799238][ T3826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.040219][ T9900] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.048274][ T9900] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.056402][ T9900] bridge_slave_0: entered allmulticast mode [ 556.070387][ T9900] bridge_slave_0: entered promiscuous mode [ 556.090740][ T9969] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,norecovery,reconstruct_alloc [ 556.105743][ T9969] bcachefs (loop8): recovering from clean shutdown, journal seq 10 [ 556.115194][ T9969] bcachefs (loop8): Version upgrade required: [ 556.115194][ T9969] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 556.115194][ T9969] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 556.115194][ T9969] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 556.179408][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.194828][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.202984][ T9900] bridge_slave_1: entered allmulticast mode [ 556.212530][ T9900] bridge_slave_1: entered promiscuous mode [ 556.214294][ T9969] bcachefs (loop8): dropping and reconstructing all alloc info [ 556.347494][ T9969] bcachefs (loop8): accounting_read... done [ 556.359708][ T9969] bcachefs (loop8): alloc_read... done [ 556.365765][ T9969] bcachefs (loop8): stripes_read... done [ 556.376840][ T9969] bcachefs (loop8): snapshots_read... done [ 556.383373][ T9969] bcachefs (loop8): check_allocations... [ 556.632577][ T9900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.670524][ T9969] done [ 556.744684][ T9969] bcachefs (loop8): going read-write [ 556.830465][ T9900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.949355][ T9969] bcachefs (loop8): done starting filesystem [ 557.022447][ T9900] team0: Port device team_slave_0 added [ 557.039677][ T9900] team0: Port device team_slave_1 added [ 557.195911][ T5784] Bluetooth: hci4: command tx timeout [ 557.398128][ T9987] ===================================================== [ 557.405741][ T9987] BUG: KMSAN: uninit-value in bch2_dirent_validate+0x5ee/0xc30 [ 557.413510][ T9987] bch2_dirent_validate+0x5ee/0xc30 [ 557.419100][ T9987] bch2_bkey_val_validate+0x2b5/0x440 [ 557.424697][ T9987] validate_bset_keys+0x1531/0x2080 [ 557.430299][ T9987] validate_bset_for_write+0x142/0x290 [ 557.436252][ T9987] __bch2_btree_node_write+0x53df/0x6830 [ 557.442119][ T9987] bch2_btree_node_write+0xa5/0x2e0 [ 557.447617][ T9987] __btree_node_flush+0x606/0x680 [ 557.452839][ T9987] bch2_btree_node_flush1+0x38/0x60 [ 557.458381][ T9987] journal_flush_pins+0xce6/0x1780 [ 557.463711][ T9987] __bch2_journal_reclaim+0xda8/0x1670 [ 557.471937][ T9987] bch2_journal_reclaim_thread+0x18e/0x760 [ 557.478089][ T9987] kthread+0x3e2/0x540 [ 557.482338][ T9987] ret_from_fork+0x6d/0x90 [ 557.487378][ T9987] ret_from_fork_asm+0x1a/0x30 [ 557.492370][ T9987] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 557.498666][ T9987] Uninit was stored to memory at: [ 557.504001][ T9987] bch2_sort_keys_keep_unwritten_whiteouts+0x12d5/0x19d0 [ 557.512588][ T9987] __bch2_btree_node_write+0x3ae8/0x6830 [ 557.519145][ T9987] bch2_btree_node_write+0xa5/0x2e0 [ 557.524572][ T9987] __btree_node_flush+0x606/0x680 [ 557.529942][ T9987] bch2_btree_node_flush1+0x38/0x60 [ 557.535346][ T9987] journal_flush_pins+0xce6/0x1780 [ 557.541503][ T9987] __bch2_journal_reclaim+0xda8/0x1670 [ 557.547362][ T9987] bch2_journal_reclaim_thread+0x18e/0x760 [ 557.553376][ T9987] kthread+0x3e2/0x540 [ 557.557726][ T9987] ret_from_fork+0x6d/0x90 [ 557.562333][ T9987] ret_from_fork_asm+0x1a/0x30 [ 557.567445][ T9987] [ 557.569863][ T9987] Uninit was created at: [ 557.574372][ T9987] ___kmalloc_large_node+0x22c/0x370 [ 557.580002][ T9987] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 557.586055][ T9987] __kmalloc_node_noprof+0xc96/0x1250 [ 557.591654][ T9987] __kvmalloc_node_noprof+0xc0/0x2d0 [ 557.601048][ T9987] btree_node_sort+0x78a/0x1d30 [ 557.607413][ T9987] bch2_btree_post_write_cleanup+0x1b0/0xf20 [ 557.613654][ T9987] bch2_btree_node_write+0x21c/0x2e0 [ 557.619313][ T9987] __btree_node_flush+0x606/0x680 [ 557.624533][ T9987] bch2_btree_node_flush0+0x35/0x60 [ 557.630060][ T9987] journal_flush_pins+0xce6/0x1780 [ 557.635367][ T9987] __bch2_journal_reclaim+0xda8/0x1670 [ 557.641162][ T9987] bch2_journal_reclaim_thread+0x18e/0x760 [ 557.647252][ T9987] kthread+0x3e2/0x540 [ 557.651507][ T9987] ret_from_fork+0x6d/0x90 [ 557.656273][ T9987] ret_from_fork_asm+0x1a/0x30 [ 557.661268][ T9987] [ 557.663704][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: bch-reclaim/loo Tainted: G W 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 557.676930][ T9987] Tainted: [W]=WARN [ 557.680852][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 557.691186][ T9987] ===================================================== [ 557.698348][ T9987] Disabling lock debugging due to kernel taint [ 557.708232][ T9987] Kernel panic - not syncing: kmsan.panic set ... [ 557.714835][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: bch-reclaim/loo Tainted: G B W 6.13.0-rc5-syzkaller-00012-g0bc21e701a6f #0 [ 557.727673][ T9987] Tainted: [B]=BAD_PAGE, [W]=WARN [ 557.732805][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 557.743002][ T9987] Call Trace: [ 557.746389][ T9987] [ 557.749433][ T9987] dump_stack_lvl+0x216/0x2d0 [ 557.754311][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.760310][ T9987] dump_stack+0x1e/0x24 [ 557.764661][ T9987] panic+0x4e2/0xcf0 [ 557.768744][ T9987] ? kmsan_get_metadata+0xd1/0x1c0 [ 557.774044][ T9987] kmsan_report+0x2c7/0x2d0 [ 557.778718][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.784703][ T9987] ? __msan_warning+0x95/0x120 [ 557.789681][ T9987] ? bch2_dirent_validate+0x5ee/0xc30 [ 557.795246][ T9987] ? bch2_bkey_val_validate+0x2b5/0x440 [ 557.801009][ T9987] ? validate_bset_keys+0x1531/0x2080 [ 557.806597][ T9987] ? validate_bset_for_write+0x142/0x290 [ 557.812452][ T9987] ? __bch2_btree_node_write+0x53df/0x6830 [ 557.818483][ T9987] ? bch2_btree_node_write+0xa5/0x2e0 [ 557.824066][ T9987] ? __btree_node_flush+0x606/0x680 [ 557.829458][ T9987] ? bch2_btree_node_flush1+0x38/0x60 [ 557.835018][ T9987] ? journal_flush_pins+0xce6/0x1780 [ 557.840489][ T9987] ? __bch2_journal_reclaim+0xda8/0x1670 [ 557.846319][ T9987] ? bch2_journal_reclaim_thread+0x18e/0x760 [ 557.852495][ T9987] ? kthread+0x3e2/0x540 [ 557.856930][ T9987] ? ret_from_fork+0x6d/0x90 [ 557.861714][ T9987] ? ret_from_fork_asm+0x1a/0x30 [ 557.866875][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.872872][ T9987] ? kmsan_get_metadata+0x13e/0x1c0 [ 557.878245][ T9987] ? kmsan_get_metadata+0x13e/0x1c0 [ 557.883620][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.889610][ T9987] ? kmsan_get_metadata+0x13e/0x1c0 [ 557.894983][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.900970][ T9987] ? kmsan_get_metadata+0x13e/0x1c0 [ 557.906531][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.912547][ T9987] ? kmsan_get_metadata+0x13e/0x1c0 [ 557.917931][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.923933][ T9987] __msan_warning+0x95/0x120 [ 557.928822][ T9987] bch2_dirent_validate+0x5ee/0xc30 [ 557.934212][ T9987] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 557.940196][ T9987] ? kmsan_get_metadata+0x13e/0x1c0 [ 557.945567][ T9987] ? __pfx_bch2_dirent_validate+0x10/0x10 [ 557.951486][ T9987] bch2_bkey_val_validate+0x2b5/0x440 [ 557.957087][ T9987] validate_bset_keys+0x1531/0x2080 [ 557.962552][ T9987] validate_bset_for_write+0x142/0x290 [ 557.968321][ T9987] __bch2_btree_node_write+0x53df/0x6830 [ 557.974183][ T9987] ? __update_load_avg_se+0xbb0/0x11a0 [ 557.979914][ T9987] bch2_btree_node_write+0xa5/0x2e0 [ 557.985341][ T9987] __btree_node_flush+0x606/0x680 [ 557.990558][ T9987] ? __btree_node_flush+0xd3/0x680 [ 557.995864][ T9987] ? __pfx_bch2_btree_node_flush1+0x10/0x10 [ 558.001955][ T9987] bch2_btree_node_flush1+0x38/0x60 [ 558.007358][ T9987] journal_flush_pins+0xce6/0x1780 [ 558.012696][ T9987] __bch2_journal_reclaim+0xda8/0x1670 [ 558.018348][ T9987] ? __try_to_del_timer_sync+0x3d3/0x420 [ 558.024222][ T9987] bch2_journal_reclaim_thread+0x18e/0x760 [ 558.030240][ T9987] kthread+0x3e2/0x540 [ 558.034486][ T9987] ? __pfx_bch2_journal_reclaim_thread+0x10/0x10 [ 558.041005][ T9987] ? __pfx_kthread+0x10/0x10 [ 558.045773][ T9987] ret_from_fork+0x6d/0x90 [ 558.050374][ T9987] ? __pfx_kthread+0x10/0x10 [ 558.055139][ T9987] ret_from_fork_asm+0x1a/0x30 [ 558.060141][ T9987] [ 558.063565][ T9987] Kernel Offset: disabled [ 558.067953][ T9987] Rebooting in 86400 seconds..