last executing test programs: 3m22.547172132s ago: executing program 3 (id=423): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e", @ANYRES64, @ANYRESDEC], 0x81, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") r0 = syz_create_resource$binfmt(&(0x7f0000001140)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 3m22.14445783s ago: executing program 3 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x44000) 3m21.783992367s ago: executing program 3 (id=429): r0 = msgget$private(0x0, 0x200) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0xff, 0x0) msgrcv(r0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) 3m21.596283794s ago: executing program 3 (id=430): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 3m20.860195924s ago: executing program 3 (id=441): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0xfbfb, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x4) 3m18.634776709s ago: executing program 3 (id=467): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x2000000, &(0x7f00000002c0)=ANY=[], 0x1, 0xacc, &(0x7f0000002700)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) 3m18.007135617s ago: executing program 32 (id=467): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x2000000, &(0x7f00000002c0)=ANY=[], 0x1, 0xacc, &(0x7f0000002700)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) 45.158865693s ago: executing program 5 (id=1799): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = getpid() ptrace$setopts(0x4206, r0, 0x0, 0x300010) 44.808710314s ago: executing program 5 (id=1804): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 44.469882602s ago: executing program 5 (id=1808): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 43.999314238s ago: executing program 5 (id=1812): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvbH8gv2xF/AGioGgkGltaUDl4AKOJB01M9IDH2haCLNTQaoQQXT3g0ZB4Nx5N/As86cWoJxOvejckxHAB9TJmdmfa3WV3bcvWAffzSbb73sxs3/v2zdt9b15nAxhY+7IfScS2iPg1IsYa2dYD9jWebly7OPvntYuzSaTpG38k9eOuX7s4WxxavG5rkam1bm+2eP7C6Zlqdf5cnp9cOvPu5OL5C8+cOjNzcv7k/NnpI0cOH5p6/rnpZ/sSZ1an67s/XNiz65W3Lr82e/zy2z9+nRTxt8Txfl/Ka/rVzYaKxBP9KuU2sb0pnQyXWBHWJDshs+Yaqff/sRiKlcYbi5c/KbVywIZK0zTd1H13LQX+x5IouwZAOfLP+SSiNpvNgZvn84Pg6rHGBCiL+0b+aOwZjkp+zEjb/LafstnW8dpfX2SPaLueAgCwEb491nguxn4r449Ky1X8o/na0HhE3BMROyLi3ojYGRH3RcT9EfFARDzY9JpO6z7t2hdJbh7/VK6sK7BVysZ/L+RrW63jv2L0F+NDeW57Pf6R5MSp6vzBiLg7Ig7EyKYsP9WjjO9e+uWzbvv2NY3/skdWfjEWzOtxZbjtAt3czNLMrcTc7OrHEbuHO8WfLK8EZO24KyJ2711fGaee+mpPt33/Hn8PfVhnSr+MeLLR/rVoi7+Q9F6fnLwrqvMHJ4uz4mY//Xzp9W7l31L8fZC1/5aO5/9y/ONJ83rt4trLuPTbp13nNKs8/0ebX5Od/6PJm/V0seODmaWlc1MRo8mr+faj+fbW8urHTa8cn8V/YH/n/r8jVv4SD0VEdhI/HBGPRMTevO6PRsRjEbG/R/w/vPj4O+uPf2Nl8c+tqf27Joq17Zt2DZ3+/pv6nqKxxnvEn0SH9j9cTx3It6zm/a9nTc/dytkMAAAAd55KRGyLpDKxnK5UJiYa/y+/M7ZUqguLS0+fWHjv7FzjHoHxGKkUV7rGlq+HRm0qn9YX10en2/KH8uvGnw9trucnZheqc2UHDwNua5f+n/l9qOzaARvO/VowuNbb/9M0/ajPVQH+Yz7/YXDp/zC4OvT/zW35Ht8RANzJOn3+m9jDYDD+h8Gl/8Pg0v9hcOn/MJDyO+GHV3OD/4Ylsvef8kpfeyJNSyp9tPzYlxNRKa30KDv2NSb+zr9s83apz6oSZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Mc/AQAA//+4C+Qb") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2b65cec, 0x0) 42.902211071s ago: executing program 5 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0, 0x0, 0x2000000}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 41.345240811s ago: executing program 5 (id=1844): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x7fffffff) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x3f, 0x7, 0x4, 0xb, 0x3}) 40.782599521s ago: executing program 33 (id=1844): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x7fffffff) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x3f, 0x7, 0x4, 0xb, 0x3}) 4.114364876s ago: executing program 7 (id=2173): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(r0) 3.972084979s ago: executing program 7 (id=2174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a09040000000004000000020000060900020073797a32000000000900010073797a30000000005c0004805800018007000100637400004c0002800800014000000013080002400000000a05000300b6"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x884) 3.868248678s ago: executing program 2 (id=2177): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f0000000380)=[{r0, 0xa003}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f046}) 3.58484428s ago: executing program 7 (id=2179): syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 3.538764873s ago: executing program 0 (id=2180): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r0], 0x0) 3.130279534s ago: executing program 2 (id=2183): r0 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x800, 0xfffffff7, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 3.068307798s ago: executing program 1 (id=2185): r0 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,;P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\x00\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x5) fallocate(r0, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 2.817028568s ago: executing program 1 (id=2187): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0x53}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0x0, 'veth0_to_hsr\x00', 'wg0\x00', {0xff}, {0xff}, 0x62}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@remote, @private=0xa010101, 0xff000000, 0xff000000, 'ip6gre0\x00', '\x00', {0xff}, {}, 0x5e, 0x2, 0x49}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x1, 0x6}, {0x1, 0x3, 0x2}, {0xffffffffffffffff}, 0x8, 0x10}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x4}, {0x0, 0x0, 0x5}, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 2.792468436s ago: executing program 2 (id=2188): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 2.544205191s ago: executing program 1 (id=2189): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) 2.484923425s ago: executing program 4 (id=2190): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x2e9aa845) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 2.45917109s ago: executing program 2 (id=2191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 2.234849646s ago: executing program 1 (id=2192): unshare(0x22020600) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x0) 2.176619475s ago: executing program 6 (id=2193): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xd, 0x0, 0x400, 0x0, 0xf1, 0x1}) 2.12793247s ago: executing program 2 (id=2194): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {}, {@nodiscard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x24, 0x6208, &(0x7f0000013980)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOqh9VfmvpuVFY1q591HvM8d9fTrucd669sXfnD3eXTmUrejv7VtdtX8vtdCfnf+Tp0bxy5sbN07fvnrr1o1zkSb7lp6PNHnM8vE/TF97P/9f3m3PP/frx+u9j0ZHzn9ebMVgYv4v1+ar/X1lxn1rQ85/lL5y/u+k9vHH/yLnP/n4f7WF/gAAAAAAAAAAAAAAAMBByrLcuUX0rYi4mO7/aeveTABgtvLrf5nk5bOq+zN+PLV6wetizvoz0/rTcr76o1YvYl1XjvdmvYiIv9W3qd4z/HrcNwMA5tmnEfHPtjtBa+TfYfnv/VXTU213Bpipmx98+NOr169v3LjZdk8AAAAAAAAAgIeVx/9cq43/fKosy7uN9faN//p2rD3q+J+DPLM3wOiEgar7R9+ng2z1Rv1ebbjxF2PS+N/DvbmDxv8eTHm84ZT20ZT2pSnty1Pax97oUZPzf7E23vmpiDjZGH69C+O/Nse874Kc/0u153OV/1ca69XzL3+/yPn39uV/5tb7vzhz84MPX7v2/tX3Nt7b+NmFc+fOXrh48dKlS2fevXZ94+zuvy32+Hjl/PPY164D7Zacf85c/t2S8/9SquXfLTn/L6da/t2S88/v9+TfLTn//NlH/t2S838l1fLvlpz/11It/27J+b+aavl3S87/66mWf7fk/F9Ltfy7Jed/OtXy75ac/5lUHzL/lePuF7OR889nuBz/3ZLzz1c2yL9bcv7nUy3/bsn5X0i1/Lsl5/96quXfLTn/b6Ra/t2S87+Yavl3S87/m6mWf7fk/C+lWv7dkvP/Vqrl3y05/2+nWv7dkvN/I9Xy75ac/3dSLf9uyfl/N9Xy75ac//dSLf9uyfm/mWr5d8uDv/9vxowZM3mm7Z9MAAAAAAAAAAAAAEDTLC4nbnsfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI9dZ3w/8zL557UBiIOTv5G9g4xhjnE12/RK/0LqY8NrwVgKh0Bds17s2C37Da5dAI9k0UCJhVFTRNly0BYTa3FT4ggtaAcoFaoXUCtoL2gtEhcpFVAUUkCrRCthqznmeZ2dmZ2d2veP1zDmfj5T8sjNn5pw5c2Z2v7v5zgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARne/dvaTtSzL6v/k/9qcZc+r//fGic35Za+62VsIAAAArNUv8n8/d1u64MgKbtSwzD++9NtfWVhYWMjeM/yno59dWEhXTGTZ6IYsy6+Lrv3gvbXGZYLHs/HaUMPXQ11WP9zl+pEu1492uX6sy/Ubulw/3uX6JTtgiY3F72PyO9ue/+fmYpdmt2ej+XXb29zq8dqGoaH4u5xcLb/NwujJbC47nc1m003LF8vW8uW/dnd9XW/K4rqGGta1tX6E/OSxE3EbamEfb29a1+J9Rj96TTbx0588duKvLz57Z7vZdTc03V+xnTu31bfz4+GSYltr2Ya0T+J2DjVs59Y2z8lw03bW8tvV/7t1O59b4XYOL27mump9zsezofy/v5Pvp5HGX+ul/bQ1XPaze7Isu7K42a3LLFlXNpRtarpkaPH5GS+OyPp91A+lF2YjqzpO717BcVqfM9ubj9PW10R8/u8OtxtZZhsan6YffWys4Xn/+cL1HKdR/VEv91ppPQZ7/Vrpl2MwHhffyR/0E22Pwe3h8T+2Y/ljsO2x0+YYTI+74Rjc1u0YHBobzrc5PQm1/DaLx+DupuWH8zXV8vnMjs7H4NTFM+en5j/y0fvmzhw/NXtq9uze3bun9+7ff/DgwamTc6dnp4t/X+fe7n+bsqH0GtgW9l18DbyiZdnGQ3XhC2NL3n+v93U43uF1uLll2V6/DkdaH1xtfV6QS4/p4rXxrvpOH786lC3zGsufn11rfx2mx93wOhxpeB22/Z7S5nU4soLXYX2Z87tW9jPLSMM/7bZh+e8FazsGNzccg60/j7Qeg73+eaRfjsHxcFx8b9fy3wu2hu19YnK1P48MLzkG08MN7z31S9LP++MH89HuuLyrfsUtY9ml+dkL9z96/OLFC7uzMNbFixqOldbjdVPDY8qWHK9Dqz5ej8y99Im72ly+Oeyr8fvq/xpf9rmqL7Pv/s7PVf7drf3+bLp0TxZGj633/mz33by+P8ey7HPf/NjDX3/sc69ddn/W8+bHp9b+s3jKpQ3vv6PLvP/G3P/LYn3prh4fHh0pXr/Dae+MNr0fNz9VI/l7Vy1f93NTK3s/Hg3/rPf78e0d3o+3tCzb6/fj0dYHF9+Pa91+27E2rc/neDhOTk93fj+uL7Nlz2qPyZGO78f3hFkL+/+VISmkXNRw7Cx33KZ1jYyMhsc1EtfQfJzubVp+NGSz+rqe2hN+KExbubLjdOc9xfLDDbeL1us4nWhZttfHafrd13LHaa3bb9+uT+vzOR6Oi9v3dj5O68s8vW/t750b4382vHeOdTsGR4fH6ts8mg7C/P0+W9gYj8H7sxPZuex0NpNfO5YfT7V8XZMPrOy9ciz8s97vlVs6HIM7W5bt9TGYvo8td+zVRpY++B5ofT7Hw3Hx5AOdj8H6Mq870NufXXeGS9IyDT+7tv5+bbnfed3Vsptu1LEyErbzmwc6/262vszpg6vNmZ33073hklva7KfW1+9yr6mZbH3205awnc8eXH4/1benvsxnD63weDqSZdnlDz2Y/743/H3l8qXvfqXp7y7t/qZz+UMP/vj5J/9hNdsPwOD7ZTE2Fd/rGv4ytZK//wMAAAADIeb+oTAT+R8AAABKI+b++H+FJ/I/AAAAlEbM/SNhJmXI/3/YfZEtr3t27peXs9TMXwji9Wk3PFQsFzuu0+HriYVF9csf/NLsf//95ZVt3lCWZT9/6A/aLr/lobhdhYmwndde33z5El+5b0XrPvbI5bTexv7658P9x8ez0sOgXQV3Osuyr9326Xw9E++9ms+nHzqWz4evPPF4fZnnDhVfx9s/86Ji+b8I5d8jJ4833f6ZsB9+GOb0m9vvj3i7L1995dYD715cX7xdbdut+cN+8n3F/cbPyfnM48XycT8vt/1f/9RTX64v/+jL22//5aH22/9UuN8vhfk/LymWb3wO6l/H230ibH9cX7zd/V/8Rtvtv/bJYvnzbyiWOxZmXP/O8PX2Nzw717i/Hq0db3pc2RuL5eL6p7/7x/n18f7i/bdu//jRq037o/X4ePpfi/uZalk+Xh7XE/1dy/rr99N4fMb1P/VHx5r2c7f1X3v4mZfU77d1/fe2LHf+Q7vy9S/eX/MnNv3lJz7ddn1xe4787fmmx3PkHeF1HNb/5PvC8Riu/99rxf21frrCsXc0v//E5T+/+XLT44ne9NNi/ddefSqfG8Y3brrlec+/9crL6vsuy76zobi/bus/9Vfnmrb/C3cU+yNeHzv6retfTlz/hQ9Pnj03f2luJu3Vx27LPzvnLcX2xO29Lby3tn599NzF989emJiemM6yifJ+hN51+2KYPy7Glc5LLyx5B931SHg+7/rzr23a8S+fipf/27uKy6++ufi+9Yqw3GfC5ZvD87e69S/15N135K/v2tNhCxeWfl7wWmzd/l8Hu32+by48/tafC+Lxfv7F78/3Q/26/PtGfF2vcfu/P1Pcz1fDfl0In8y87Y7F9TUuHz8b4eo7i9f7mvdfeJuLz+vfhOf7rT8s7j9uV3y83w8/x3xjS/P7XTw+vnp5qPX+80/xuBLeT7IrxfVxqbi/rz53R9vNi59Dkl25M//6T9L93Lmqh7mc+Y/MT52eO3vp0amLs/MXp+Y/8tGjZ85dOnvxaP5Znkc/0O32i+9Pm/L3p5nZ/fuy/N3qXDFusJu9/ecfOTFzYHrHzOzJ45dOXnzk/OyFUyfm50/MzszvOH7y5OyHu91+bubw7j2H9h7YM3lqbubwwUOH9h6anDt7rr4ZxUZ1sX/6g5NnLxzNbzJ/eN+h3Q88sG968sy5mdnDB6anJy91u33+vWmyfuvfn7wwe/r4xbkzs5Pzcx+dPbz70P79e7p+GuCZ8yfnJ6YuXDo7dWl+9sJU8VgmLuYX17/3dbs95TT/H8XPs61qxQfxZW+/d3/6fNa6L31s2bsqFmn5ANFnw2fRfOsF5w+u5OuY+0fDTMqQ/wEAAIBczP1jYSbyPwAAAJRGzP0bwkzkfwAAACiNmPvHw0z/S0BF8n/p+v9bLq9o/fr/+v+N+0v/v2L9/3f2W/+/eL/Q/++Ntfbvq9D/X9GC+v/6//r/+v/6//RAv/X/Y+7fmGX+/g8AAAAlFXP/pjAT+R8AAABKI+b+W8JM5H8AAAAojZj7nxdmUpH8r/+v/6//r/+v/99+/fr/g0n/vzP9/y70/6eyavX/r/Ry+29C/39j4xf6//Sjfuv/x9z//DCTiuR/AAAAqIKY+28NM5H/AQAAoDRi7r8tzET+BwAAgNKIuX9zmElF8r/+/5r6/6lzNbj9/2LN+v/6//r/+v9lof/fmf5/F/r/zv8/WP3/Jvr/9KN+6//H3P+CMJOK5H8AAACogpj7XxhmIv8DAABA/xm5vpvF3P+iMJMl+f86VwAAAADcdDH33561FMEr8vd//X/n/3f+f/1//f/26195/3840//vH/r/nen/d9GL/v8V/X/9f/1//X+ifuv/57k/G89eHGZSkfwPAAAAVRBz/x1hJvI/AAAAlEbM/f8vzET+BwAAgNKIuX9LmElF8r/+f2n6/z9rfOr0//X/O61f/9/5/8tM/78z/f8unP9f/1//X/+fnuq3/n/M/XeGmVQk/wMAAEAVxNx/V5iJ/A8AAAClEXP//w8zkf8BAACgNGLu3xpmUpH8r//f5/3/2Bx1/n/9f/3/vuz/j+v/9x39/870/7vQ/9f/1//X/6en+q3/H3P/S8JMKpL/AQAAoApi7n9pmIn8DwAAAKURc//LwkzkfwAAACiNmPsnwkwqkv9X0/+vXdH/X84NPv//2ArO/99E/1//v9P69f+d/7/M9P870//vQv9f/1//X/+fnuq3/n/M/XeHmVQk/wMAAEAVxNy/LcxE/gcAAIDSiLn/njAT+R8AAABKI+b+7WEmFcn/zv8/EP3/TP9f/1//X/9f/39l9P870//vQv9f/1//X/+fnuq3/n/M/S8PM6lI/gcAAIAqiLl/R5iJ/A8AAAClEXP/K8JM5H8AAAAojZj7d4aZVCT/6//r/+v/6//r/7dfv/7/YNL/70z/vwv9f/1//X/9f3qq3/r/Mfe/MsykIvkfAAAAqiDm/l1hJvI/AAAAlEbM/feGmcj/AAAAUBox90+GmVQk/+v/6/+Xs///7/r/Hdav/6//X2b6/53p/3eh/6//34v+/2i4QP9f/5+b3v+PP6/Fr2Puvy/MpCL5HwAAAKog5v77w0zkfwAAACiNmPunwkzkfwAAACiNmPunw0wqkv/1//X/y9n/d/7/TutfU///ZYv3q/9f0P/vL/r/nen/d6H/r/9/08//P6r/T6nc7P5/69cx9+8OM6lI/gcAAIAqiLl/T5iJ/A8AAAClEXP/3jAT+R8AAABKI+b+fWEmFcn/+v/6//r/+v/O/99+/fr/g0n/v7Pe9//jQ9T/1//X/+9N/9/5/ymXfuv/x9z/QJhJRfI/AAAAVEHM/fvDTOR/AAAAKI2Y+w+Emcj/AAAAUBox9x8MM6lI/tf/1//X/9f/1/9vv379/8Gk/9+Z8/93of+v/z/A/f/6saX/T7/pt/5/zP2Hwkwqkv8BAACgCmLuf1WYifwPAAAApRFz/6+Emcj/AAAAUBox9/9qmElF8r/+v/6//r/+/03u/4926/+P6f/r/6+C/n9n+v9d6P/r/w9w/9/5/+lH/db/j7n/cJhJRfI/AAAAVEHM/b8WZiL/AwAAQGnE3P/qMBP5HwAAAEoj5v4jYSYVyf/6/+vU/48X6v/r/+v/O/+//v8Npf/fmf5/F/r/+v/6/936/63fphP9f9rpt/5/zP2vCTOpSP4HAACAKoi5/8EwE/kfAAAASiPm/teGmcj/AAAAUBox978uzKQi+V//3/n/b37/f7Rp2/X/F2+n/1/Q/9f/Xw39/870/7vQ/9f/1/93/n96qt/6/zH3vz7MpCL5HwAAAKog5v43hJnI/wAAAFAaMfe/McxE/gcAAIDSiLn/TWEmFcn/+v/6/ze//+/8//r/Bf1//f9e0P/vTP+/C/1//X/9f/1/eqrf+v8x9/96mElF8j8AAABUQcz9D4WZyP8AAABQGjH3vznMRP4HAACA0oi5/y1hJhXJ//r/+v/6//r/+v/t16//P5j0/zsbsP7/L24Nl+v/F/T/+3v7V9v/H2n5+ob0/3+wXP9/YUPr7fX/uRH6rf8fc/9bw0wqkv8BAACgCmLuf1uYifwPAAAApRFz/9vDTOR/AAAAKI2Y+38jzKQi+V//v74di+1l/X/9//wC/X/9f/3/gaX/39mA9f+d/7+F/n9/b7/z/+v/s1S/9f9j7n9HmElF8j8AAABUQcz9D4eZyP8AAABQGjH3vzPMRP4HAACA0oi5/11hJhXJ//r/zv+v/6//r//ffv36/4NJ/78z/f8u9P/1//ut//+f+v8Mtn7r/8fc/0iYSUXyPwAAAFRBzP3vDjOR/wEAAKA0Yu7/zTAT+R8AAABKI+b+94SZVCT/6/8PSv9/Qv9/lf3/sXCZ/r/+v/5/tej/d6b/34X+v/5/v/X/nf+fAddv/f+Y+98bZrLy/D++4iUBAACAG6n1z0lJzP2/FWZSkb//AwAAQBXE3P/bYSbyPwAAAJRGzP2/E2ZSkfyv/z8o/X/n/8+c/1//v+Xx6P/r/7ezfv3/+M6j/6//r/8f6f/r/+v/06rf+v8x9/9umElF8j8AAABUQcz97wszkf8BAABgILT7f7Jbxdx/NMxE/gcAAIDSiLn/WJhJRfK//r/+v/5/n/b//2zbP33v2287tlv/X/9f/39V1vX8//UXv/P/6//r/yf6//r/+v+06rf+f8z9x8NMFoPfW5zgHwAAAAZbzP2/F2ZSkb//AwAAQBXE3H8izET+BwAAgNKIuX8mzKQi+V//X/9f/79P+/8DfP7/uD8Gqf8/uWGA+v/xTVf/v6117f+/e7Enrv+/2v7/WNtLW/v/Nf3/Jvr/q97+b2VZtm7bf/mf9f/1/2nVb/3/mPtnw0wqkv8BAACgCkLuHzpZzMUr5H8AAAAojZj7T4WZyP8AAABQGjH3vz/MpCL5X/9f/1//X//f+f/br79v+//O/9+R/n9n/dP/b8/5//X/B3n7nf9f/5+l+q3/H3P/XJhJRfI/AAAAVEHM/R8IM5H/AQAAoDRi7v9gmIn8DwAAAKURc//pMJOK5H/9f/1//X/9f/3/9uvX/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/jNhJhXJ///H3n08WVaXfxy/DU3RU2x+u9/Che79E1jIWv8AF2xYaJXlAlTMicEcMeeAlgkDBlDEhDmBCcUsKmYxY8YwFtPP83Q6fW73zO2+536/r9eCB5pp74WamvEzzXsOAAAA9CB3/6Vxi/0PAAAAzcjdf1ncYv8DAABAM3L3Pyxu6WT/6//1/832//fT/+/3+vp//X/L9P/j9P9z6P/1//p//T8LNbX+P3f/w+OWTvY/AAAA9CB3/yPiFvsfAAAAmpG7//K4xf4HAACAZuTuf2Tc0sn+39X/r8367P8z49X/t9T/e/7/vq+v/9f/t+x4+/8r7/mRT/+v/9f/B/2//l//z25T6/9z9z8qbulk/wMAAEAPcvc/Om6x/wEAAKAZufsfE7fY/wAAANCM3P2PjVs62f+e/+/5//p//b/+f/j19f+ryfP/x/XU/19+2wWX3nXDvW48zOvr//X/+n/9P4s1tf4/d//j4pZO9j8AAAD0IHf/4+MW+x8AAACakbv/CXGL/Q8AAAAr6MTgR3P3PzFu6WT/6//1//r/6P839P/6f/1/C/T/43rq/8/k9fX/+n/9v/6fxZpa/5+7/0lxSyf7HwAAAHqQu//JcYv9DwAAANM19B9ij8jdf0XcYv8DAABAM3L3n4xbOtn/+v+j7///o/9fjf7f8//1//r/Juj/x+n/59D/6//1//p/Fmpq/X/u/ivjlk72PwAAAPQgd/9T4hb7HwAAAJqRu/+pcYv9DwAAAM3I3f+0uKWT/a//9/x//b/+//j7/80fbPX/W/9W9f+Lo/8fp/+fQ/9/tv38efp//b/+n+0O2f/fPfLD9kL6/9z9T49bOtn/AAAA0IPc/c+IW+x/AAAAaEbu/mfGLfY/AAAANCN3/7Pilk72v/5f/6//1/+fcf+/97veaZ7/P0z/fzz0/+Mm0/+vrQ9+WP+/8v2/5//r//X/7DC15//n7n923NLJ/gcAAIAe5O5/Ttwysv8P/Yv5AAAAwFLl7n9u3OLr/wAAALDysjrL3f+8uKWT/a//1//r//X/x//8/9Xv/2/c9v70/9Oi/x83mf5/H/p//f8qv3/9v/6fvabW/+fuf37c0sn+BwAAgB7k7r8qbrH/AQAAoBm5+18Qt9j/AAAA0Izc/S+MWzrZ/8P9/9bfn3T/vzsSnun/k/6/7f4//xf1/6P9/0We/98n/f84/f8c+n/9v/5/v/7/xLzP1/8zZGr9f+7+F8Utnex/AAAA6EHu/hfHLfY/AAAANCN3/0viFvsfAAAAmpG7/6VxSyf73/P/9f/6/9Xr/z3/f9Myn/8/O/b+f13/f0DL7f/X/ps/g+r/z+z96//1/6v8/hvv/zef/z/yuwDo/xkytf4/d//L4pZO9j8AAAD0IHf/y+MW+x8AAABWw/b/dmDoWXGzWe3+V8Qt9j8AAAA0I3f/K+OWdvb/6LM69f/6f/2//l//P/z60+r/Pf//oDz/f5z+fw79/1H08+uN9f9X7/f5U+j/rzjq/n+E/p8hO/r/m7Y+vqz+P3f/q+KWdvY/AAAAdC93/6vjFvsfAAAAmpG7/zVxi/0PAAAAzcjd/9q4pZP9f+T9/8jvPqD/1//r//X/+n/9/6Lp/8fp/+fQ/3v+v+f/6/9ZqB39/zbL6v9z978ubulk/wMAAEAPcve/Pm6x/wEAAKAZufuvjlvsfwAAAGhG7v43xC2d7H/P/9f/6//1//r/4dfX/6+ms+rvz9H/F/2//l//r//X/7MAU+v/d+7+/vY/AAAA9OCNp/+4Eb9eb/8DAABAi3L3vylusf8BAACgGbn73xy3dLL/9f9H2//nx/X/+v+Z/l//r/8/Ft0+/39t6Geivfbp/295yMkH7PyI/l//r//X/+v/OaD/G/l7k+j/T239v8vc/W+JWzrZ/wAAANCD3P1vjVvsfwAAAGhG7v63xS32PwAAADQjd/81ccsh9/9Y8zBl+n/P/9f/6//1/8Ovr/9fTd32/wfk+f9z6P/1//p//T8LNYn+f9tf5+5/e9zi6/8AAADQjNz974hb7H8AAABoRu7+d8Yt9j8AAAA0I3f/u+KWTva//l//r//X/+v/h19f/7+a9P/j9P9zrFL/f81Z9P/rwx9edj9/tpb9/vX/+n/2mlr/n7v/2rilk/0PAAAAPcjd/+64xf4HAACAZuTuf0/cYv8DAABAM3L3vzdu6WT/6//1//p//b/+f/j19f+rSf8/Tv8/m82uG3kDQ/3/qfOn2f97/v/k3r/+X//PXlPr/3P3vy9u6WT/AwAAQA9y918Xt9j/AAAA0Izc/dfHLfY/AAAANCN3//vjlk72v/5f/6//1//r/4dfX/+/mvT/4/T/c6zS8//1/5N7//p//T97Ta3/z93/gbilk/0PAAAAPcjdf0PcYv8DAABAM3L3fzBusf8BAACgGbn7b4xbOtn/+n/9v/5f/6//H359/f9qOrr+f6b/1//r/+fQ/+v/9f/sNrX+P3f/h+KWTvY/AAAA9CB3/4fjFvsfAAAAmpG7/yNxi/0PAAAAzcjd/9G4pZP9r//X/+v/9f/6/+HX1/+vJs//H6f/n0P/r//X/+v/Wajh/v+KpfX/ufs/Frd0sv8BAACgB7n7b4pb7H8AAABoRu7+j8ct9j8AAAA0I3f/J+KWTva//l//v7P/n830//p//f+mY+j/N2b6/4XT/4/T/8+h/2+z/z9n1lD/f2Lfz9f/M0VTe/5/7v5Pxi2d7H8AAADoQe7+T8Ut9j8AAAA0I3f/p+MW+x8AAACakbv/M3FLJ/tf/6//X/Dz/++8ZOB96P836f/1/57/f/T0/+P0/3Po/9vs/z3/X//P0kyt/8/d/9m4pZP9DwAAAD3I3f+5uMX+BwAAgGbk7v983GL/AwAAQDNy938hbulk/+v/9f8L7v89/1//r//fh/7/eOj/x+n/59D/6//1//p/Fmpq/X/u/i/GLZ3sfwAAAOhB7v6b4xb7HwAAAJqRu/+WuMX+BwAAgGbk7v9S3NLJ/tf/6//1/6vZ/2/s6P/Pnen/t769/r9vU+n/L7zw/rfq//X/+n/9v/5f/9+7qfX/ufu/HLd0sv8BAACgB7n7vxK32P8AAADQjNz9X41b7H8AAABoRu7+r8Utnez/vf3/ebPNQnXTUP8fjZr+fxv9/873r/8f/v7h+f/6f/3/0ZtK/+/5/2f2/vX/+v9Vfv+H6v/vs/fz9f+0aGr9f+7+W+OWTvY/AAAA9CB3/9fjFvsfAAAAmpG7/xtxi/0PAAAAzcjdf1vc0sn+9/x//b/+X/+v/x9+ff3/atL/j9P/z6H/1/97/v9lDzpX/8/iTK3/z93/zbilk/0PAAAAPcjd/624xf4HAACAZuTu/3bcYv8DAABAM3L3fydu6WT/6//1//p//b/+f/j19f+rSf8/Tv9fdv+jbeqn/98Y+uCy+/mztez330z/7/n/LNDU+v/c/d+NWzrZ/wAAANCD3P3fi1vsfwAAAGhG7v7vxy32PwAAADQjd/8P4pZO9r/+X//ffv9/if5/1+vr//X/LdP/58/ow/T/c/TT/w9adj+/6u9f/6//Z6+p9f+5+2+PWzrZ/wAAANCD3P0/jFvsfwAAAGhG7v4fxS32PwAAADQjd/+P45ZO9r/+v6/+f23WY//v+f/6f/1/T/T/4/T/c+j/9f/6f/0/CzW1/j93/x1r613ufwAAAFhVD7zvQ28/6Le94/QfN2Y/iVsump064JexAQAAgIm7Z/evrc9mPz39V77+DwAAAC3K3f+zuKWT/a//76v/7/P5//p//b/+vyf6/3H6/zn0//p//b/+n4WaWv+fu//nccu24bd+6H9KAAAAYEpy9/8ibunk6/8AAADQg9z9v4xb9ux/vx0gAAAArKrc/b+KWzr5+r/+f+L9/+yI+v/4dvr/Tfp//f/Q6+v/V5P+f9xZ9v+n1vT/+v8R+n/9v/6f3abW/+fu/3Xc0sn+BwAAgEbt+BWF3P13xi32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//f+z9f6bqR/j8/xP1Z57/33n/f9XG4Ovr//X/LdP/j/P8/zn0/630/+fr//X/TMPU+v/c/b+LWzrZ/wAAANCD3P2/j1vsfwAAAGhG7v4/xC32PwAAADQjd/8f45ZO9r/+f+LP/z+j/v8Az//X//fR/+/z+u30//9/wcmbL37w9dfq/9lynP1/fl/Q/+v/9f+bJtT/e/6//p+JWHz/v77jg4ft/3P3/ylu6WT/AwAAQA9y998Vt9j/AAAA0Izc/X+OW+x/AAAAaEbu/r/ELZ3sf/2//n8q/X/+u15C/3/yjPv/E7PZbCn9fzbFvff/nv+v/9/L8//H6f/n0P/r//X/+n8WavH9/84PHrb/z93/17ilk/0PAAAAPcjd/7e4Jff/2qF/6R4AAACYmNz9f49bfP0fAAAAmpG7/x9xSyf7X/+v/59K/588/3/r89p6/v/FFaf22f/fu/5M/3+09P/j9P9z6P/1//p//T8LNbX+P3f/P+OWTvY/AAAA9CB3/91xi/0PAAAAzcjd/6+4xf4HAACAZuTu/3fc0sn+1/+32v9nEa//1/9Ppf/3/H/P/z8e+v9x+v859P/6f/2//p+Fmlr/n7v/fwEAAP//Aihonw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.117859578s ago: executing program 4 (id=2195): chdir(&(0x7f0000000480)='./cgroup\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 1.909608391s ago: executing program 1 (id=2196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0x6, 0x30, 0x1, 0x9, 0x9}) 1.865820252s ago: executing program 0 (id=2197): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40}) 1.810221602s ago: executing program 6 (id=2198): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/udp\x00') lseek(r0, 0x200, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1, 0x4, 0x101) 1.742009539s ago: executing program 4 (id=2199): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0xff09, 0x0) 1.519481165s ago: executing program 0 (id=2200): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x1c8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1a8, 0x1a, 0x0, 0x1, [@AF_INET={0x1a4, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x38, 0x21}, {0x8, 0x18}, {0x38, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x38, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffdb3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE]}]}, 0x1c8}}, 0x0) 1.492090802s ago: executing program 6 (id=2201): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x68, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "67f01a05647aca00"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2800a000}, 0x10) 1.384364503s ago: executing program 1 (id=2202): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffc) 1.340317068s ago: executing program 4 (id=2203): io_setup(0x5, &(0x7f0000000140)=0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x2}]) 1.198164453s ago: executing program 7 (id=2204): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) 1.197396565s ago: executing program 6 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) 1.070726289s ago: executing program 0 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x0) 895.7333ms ago: executing program 4 (id=2207): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x6000) 867.137416ms ago: executing program 6 (id=2208): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1}, 0x20000) 635.583407ms ago: executing program 4 (id=2209): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x200414, &(0x7f0000000400)=ANY=[@ANYRES16], 0xff, 0x5aab, &(0x7f0000006400)="$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") mkdir(&(0x7f0000000200)='./file1\x00', 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)) 559.455387ms ago: executing program 0 (id=2210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) 414.793678ms ago: executing program 6 (id=2211): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303034363032362c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d63703733372c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030363734352c00eedf227ab115e52b6bbf04b219b8c41485c3cd5eb13c86f761360530e373e289e07a73c8f8081b155bd313bf07fbf28d1fa54cb03990a77bbbcea814d9acaa995fc2a2a454793e855c11c116ac76d4a74cb5d771aa17"], 0x3, 0x6ac, &(0x7f00000021c0)="$eJzs3U+InGcdB/DvO5nMZiKk2zZNowhdGijaYLKboSaC0CgiOQQJeul1STbNkklaNltJi5iJWgVPnqQHDxWJh55ERKgnsZ4FwYun3APeBHNQt7zvvDM7uzvZ7CbZnW37+cC77/PO8z7P83t++/6ZeTdhAnxmnXst+3spcu74+Zvl9t07ne7dO51rg3KSqSSNpNlfpWgnxUfJ2fSXfL58se6ueNA4r9z7sGi+90Gnv9Wsl2r/xmbtNhi7Zy85MNzYl2SmX/zvlrvd0F+1VP1cXO3vERXDuMuEHRskDiZtZYPeamXjoc23ft4Ce9at/n1zg+nkYPp31/J9QOqrw8OvDJO36bWpt3txAAAAwE4Z+1l+1FP3cz83c2h3wgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBPh6L/nYFFvTQG5ZkUg+//b418p35rwuE+pncvV6vvPjXpQAAAAAAAAADgsbxwP/dzM4cG2ytF9Tf/F6uNw9XPz+Wt3MhClnIiNzOf5SxnKXNJpkc6at2cX15emtvY8pcpW66srNyqW54a2/LU2rh66wMd9y8NNuwEAAAAAAAAAJ9ZP8q51b//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXlAk+/qrajk8KE+n0UxyIEmrmBnu3pposE/AnycdAAAAAOy8dr0+VPy/X1gpqs/8R6rP/QfyVq5nOYtZTjcLuVQ9C+h/6m/8vdfp3r3TuVYuGzv+xr+2FUfVY/rPHsaPPFvt8dywxbl8O9/L8czkQpaymO9nPstZyEy+VZXmU2S6fnoxffdOO4NYN8Z7ds3WhfWxvTBSLuM7WkXSzuUsVrGdyMXWIPRGvd/RkdH+2ErWjXi7zE7xam2LObpUr8sZ/aJeP1n7Go/Wbrqa+f5hRmbr3JfdPT2a94253+Zxsn6kuTSGz6AOr45Sbq4f6ZFyfrBel7n+6Y7kfGibj9LWZqL383Jr8Os7snnOky//4y8XrjSuX71y+cbxHZzS7lh/THRGMvH8ljLRLTPRe4xMHHic+J+cVp2N/lV0e1fLF6u2h7KY7+SNXMpCTmc2czmT2Xwtp9LJqZG8Prd5XqtzrbG9c+3Yl+pCeU/62ci9addMPaiizOvTI3kdvdJNV3Wjr6xm6ZktZKloZXyW/jk2lOYX6kI5xo9H7jiTtz4TcyOZeHbTTPzn1/9bSXKje/3q0pX5N7c43kv1ujxt3117bf7Nk5nRttXTLY+XZ8pfVvq3jdGjo6x7dlC3Ll+t+i8uzbqzNXWtVOdzv+5hZ2rZ05Hb43rq1z0/dpROVXd0pG7Nu5y8ke7wXQgAe9jBlw+22vfaf2u/3/5J+0r7/IFvTp2Z+mIr+//a/NO+3zV+2/h68XLezw9zaNKRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAp8GNt9+5Ot/tLiztwUIaT7jD22OrBqnov9LaG3P/pBamNjuifp9kk+atScTcTtp74ixIcxfGmsqYqvPDV9pJYxhPkqt75AvugJ1wcvnamydvvP3OVxavzb++8PrC9VNnTr96uvPVuVsnLy92F2b7PycdJbATVt8GTDoSAAAAAAAAAAAAYKt24783jBm26E1grgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAn07nXsr+XInOzJ2bL7bt3Ot1yGZRX92wmaSQpfpAUHyVn018yPdJd8aBxXrn34a9eeu+DzmpfzcH+jXXt/vDvlZVtzqJXL5lJsq9eP9zUlvq7ONJfb5uB9RXDGZYJOzZIHEzaxwEAAP//tfkIYQ==") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$afs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0) 414.058622ms ago: executing program 7 (id=2212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000500000000001c0002800400010014000380"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0) 106.41841ms ago: executing program 2 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0xfffffffe, 0x18, 0xb, 0x2e, 0x3, 0x9, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) 62.792229ms ago: executing program 7 (id=2214): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 0s ago: executing program 0 (id=2215): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) kernel console output (not intermixed with test programs): 0047][T10071] F2FS-fs (loop2): Image doesn't support compression [ 262.057147][T10071] F2FS-fs (loop2): Image doesn't support compression [ 262.067335][T10079] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 262.120862][T10071] F2FS-fs (loop2): invalid crc value [ 262.130537][ T6033] corsair-psu 0003:1B1C:1C03.0016: item fetching failed at offset 5/7 [ 262.139764][ T6033] corsair-psu 0003:1B1C:1C03.0016: probe with driver corsair-psu failed with error -22 [ 262.175874][T10079] XFS (loop4): Starting recovery (logdev: internal) [ 262.308220][T10079] XFS (loop4): Ending recovery (logdev: internal) [ 262.339588][ T6033] usb 7-1: USB disconnect, device number 7 [ 262.501459][ T5840] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 262.506597][T10071] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.773811][ T5839] syz-executor: attempt to access beyond end of device [ 262.773811][ T5839] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.807829][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 262.807867][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.807884][ T5839] Call Trace: [ 262.807894][ T5839] [ 262.807905][ T5839] dump_stack_lvl+0x241/0x360 [ 262.807955][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.807995][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808024][ T5839] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 262.808066][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 262.808109][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808138][ T5839] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 262.808183][ T5839] f2fs_handle_critical_error+0x392/0x5a0 [ 262.808231][ T5839] f2fs_write_end_io+0x563/0x790 [ 262.808282][ T5839] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 262.808328][ T5839] ? bio_endio+0x7e4/0x890 [ 262.808360][ T5839] ? bio_endio+0x82a/0x890 [ 262.808404][ T5839] __submit_merged_bio+0x2a9/0x710 [ 262.808436][ T5839] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 262.808480][ T5839] f2fs_submit_merged_write_cond+0x29f/0x380 [ 262.808532][ T5839] f2fs_write_data_pages+0x2f99/0x38d0 [ 262.808633][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 262.808741][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808770][ T5839] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 262.808808][ T5839] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 262.808844][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808894][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808923][ T5839] ? __lock_acquire+0xad5/0xd80 [ 262.808968][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.808997][ T5839] ? do_raw_spin_lock+0x151/0x370 [ 262.809040][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809069][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.809106][ T5839] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 262.809149][ T5839] do_writepages+0x366/0x890 [ 262.809198][ T5839] ? __pfx_do_writepages+0x10/0x10 [ 262.809228][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809261][ T5839] ? __lock_acquire+0xad5/0xd80 [ 262.809306][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809333][ T5839] ? do_raw_spin_lock+0x151/0x370 [ 262.809382][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809411][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.809455][ T5839] filemap_fdatawrite+0x1f2/0x2a0 [ 262.809497][ T5839] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 262.809530][ T5839] ? mlock_drain_local+0x79/0x490 [ 262.809643][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.809673][ T5839] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.809718][ T5839] f2fs_sync_dirty_inodes+0x34f/0x860 [ 262.809783][ T5839] f2fs_write_checkpoint+0x857/0x1da0 [ 262.809861][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 262.810012][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810044][ T5839] ? kill_f2fs_super+0x290/0x6d0 [ 262.810102][ T5839] kill_f2fs_super+0x2b8/0x6d0 [ 262.810174][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 262.810241][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810276][ T5839] ? shrinker_free+0x2ca/0x3d0 [ 262.810316][ T5839] deactivate_locked_super+0xc6/0x130 [ 262.810367][ T5839] cleanup_mnt+0x422/0x4c0 [ 262.810400][ T5839] ? lockdep_hardirqs_on+0x9d/0x150 [ 262.810437][ T5839] task_work_run+0x253/0x310 [ 262.810492][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 262.810536][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.810573][ T5839] syscall_exit_to_user_mode+0x13f/0x340 [ 262.810621][ T5839] do_syscall_64+0x100/0x210 [ 262.810661][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.810690][ T5839] RIP: 0033:0x7f0140f8f497 [ 262.810717][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 262.810746][ T5839] RSP: 002b:00007ffd76452788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 262.810774][ T5839] RAX: 0000000000000000 RBX: 00007f0141010854 RCX: 00007f0140f8f497 [ 262.810795][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd76452840 [ 262.810816][ T5839] RBP: 00007ffd76452840 R08: 0000000000000000 R09: 0000000000000000 [ 262.810833][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd764538d0 [ 262.810856][ T5839] R13: 00007f0141010854 R14: 00000000000401c7 R15: 00007ffd76453910 [ 262.810907][ T5839] [ 262.828659][T10118] [U]  [ 262.853910][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 263.067397][T10108] loop1: detected capacity change from 0 to 32768 [ 263.092555][T10108] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1494 (10108) [ 263.405555][T10108] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 263.463375][T10108] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 263.533088][T10108] BTRFS info (device loop1): disk space caching is enabled [ 263.540350][T10108] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 263.793387][T10108] BTRFS info (device loop1): rebuilding free space tree [ 263.838395][T10108] BTRFS info (device loop1): disabling free space tree [ 263.868068][T10108] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.908456][T10108] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 264.164802][T10108] BTRFS info (device loop1): balance: start -f -sdrange=0..58785,stripes=3..3 [ 264.216276][T10108] BTRFS info (device loop1): balance: ended with status: 0 [ 264.370849][ T5834] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 264.526047][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 264.576251][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 264.631326][T10162] netlink: 'syz.2.1512': attribute type 21 has an invalid length. [ 265.097982][T10153] loop0: detected capacity change from 0 to 32768 [ 265.210119][T10153] find_entry called with index = 0 [ 265.259828][T10153] read_mapping_page failed! [ 265.280652][T10185] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 265.287357][T10185] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.324403][T10153] ERROR: (device loop0): txCommit: [ 265.324403][T10153] [ 265.393106][T10185] vhci_hcd vhci_hcd.0: Device attached [ 265.452939][T10189] loop6: detected capacity change from 0 to 1024 [ 265.499306][T10186] vhci_hcd: cannot find the pending unlink 6 [ 265.518558][T10186] vhci_hcd: connection closed [ 265.560510][ T53] vhci_hcd: stop threads [ 265.577073][ T53] vhci_hcd: release socket [ 265.582971][ T53] vhci_hcd: disconnect device [ 265.613325][ T10] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 265.625542][ T10] usb 41-1: enqueue for inactive port 0 [ 265.723187][ T10] vhci_hcd: vhci_device speed not set [ 266.355157][T10205] loop2: detected capacity change from 0 to 4096 [ 266.516884][T10215] loop0: detected capacity change from 0 to 4096 [ 266.599103][T10215] EXT4-fs (loop0): Test dummy encryption mode enabled [ 266.720073][T10215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.904621][T10193] loop5: detected capacity change from 0 to 32768 [ 266.959068][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.027596][T10193] (syz.5.1523,10193,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.081309][T10193] (syz.5.1523,10193,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.132711][T10193] (syz.5.1523,10193,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xb6797f2. Applying ECC. [ 267.195715][T10193] JBD2: Ignoring recovery information on journal [ 267.407659][T10193] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 267.449161][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 267.456464][T10219] loop1: detected capacity change from 0 to 32768 [ 267.725784][ T5836] ocfs2: Unmounting device (7,5) on (node local) [ 268.478301][T10234] loop4: detected capacity change from 0 to 32768 [ 268.553171][ T5901] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 268.725318][ T5901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.759861][ T5901] usb 2-1: config 0 has no interface number 0 [ 268.780084][ T5901] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 268.813142][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.851845][ T5901] usb 2-1: config 0 descriptor?? [ 268.866815][ T5901] usb 2-1: selecting invalid altsetting 1 [ 268.903264][ T5901] dvb_ttusb_budget: ttusb_init_controller: error [ 268.936706][ T5901] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 269.125770][T10259] loop2: detected capacity change from 0 to 4096 [ 269.146191][ T5901] DVB: Unable to find symbol cx22700_attach() [ 269.165680][T10259] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 269.292083][T10264] loop5: detected capacity change from 0 to 4096 [ 269.341356][ T5901] DVB: Unable to find symbol tda10046_attach() [ 269.342256][ T30] audit: type=1800 audit(1744938500.317:46): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1553" name="file2" dev="loop2" ino=31 res=0 errno=0 [ 269.353249][ T5901] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 269.480036][T10264] ntfs3(loop5): ino=1a, mi_enum_attr [ 269.489156][ T5901] usb 2-1: USB disconnect, device number 7 [ 269.501519][T10264] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 269.527566][T10250] loop6: detected capacity change from 0 to 32768 [ 269.992679][T10287] loop5: detected capacity change from 0 to 1024 [ 269.994804][T10250] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 270.077996][T10287] hfsplus: invalid catalog max_key_len 0 [ 270.103170][T10250] bcachefs (loop6): initializing new filesystem [ 270.113984][T10287] hfsplus: failed to load catalog file [ 270.114241][T10250] bcachefs (loop6): going read-write [ 270.199515][T10287] loop5: detected capacity change from 0 to 1024 [ 270.220240][T10250] bcachefs (loop6): marking superblocks [ 270.223574][ T5901] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 270.314300][T10250] bcachefs (loop6): initializing freespace [ 270.354389][T10250] bcachefs (loop6): done initializing freespace [ 270.386459][T10250] bcachefs (loop6): reading snapshots table [ 270.396236][ T5901] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 270.435135][ T5901] usb 1-1: config 0 has no interface number 0 [ 270.442793][ T5901] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.453489][T10250] bcachefs (loop6): reading snapshots done [ 270.481093][ T5901] usb 1-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.571575][ T5901] usb 1-1: config 0 interface 2 has no altsetting 0 [ 270.584599][T10250] bcachefs (loop6): done starting filesystem [ 270.642206][ T5901] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 270.703103][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.712742][T10305] loop1: detected capacity change from 0 to 512 [ 270.724755][ T5901] usb 1-1: config 0 descriptor?? [ 270.811358][T10305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 270.935097][T10305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.023185][ T7127] bcachefs (loop6): shutting down [ 271.028691][ T7127] bcachefs (loop6): going read-only [ 271.034051][ T7127] bcachefs (loop6): finished waiting for writes to stop [ 271.043623][T10305] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.070577][ T7127] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2 [ 271.126339][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1571'. [ 271.217351][T10316] loop4: detected capacity change from 0 to 512 [ 271.220353][ T7127] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3 [ 271.258252][ T7127] bcachefs (loop6): clean shutdown complete, journal seq 4 [ 271.258865][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.290203][T10316] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 271.319119][T10316] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.365595][ T7127] bcachefs (loop6): marking filesystem clean [ 271.386787][T10316] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 271.404823][ T5845] usb 1-1: USB disconnect, device number 9 [ 271.455001][T10316] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 271.483857][T10316] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1574: Failed to acquire dquot type 1 [ 271.495583][ T93] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 271.548676][T10316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1574: bg 0: block 40: padding at end of block bitmap is not set [ 271.621570][T10316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 271.642004][T10316] EXT4-fs (loop4): 1 truncate cleaned up [ 271.645174][ T7127] bcachefs (loop6): shutdown complete [ 271.661006][T10316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.693203][ T93] usb 3-1: Using ep0 maxpacket: 32 [ 271.713186][ T93] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 271.722897][T10316] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1574: bad symlink. [ 271.739275][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.740225][T10316] EXT4-fs error (device loop4): ext4_get_link:106: inode #16: comm syz.4.1574: bad symlink. [ 271.755293][ T93] usb 3-1: Product: syz [ 271.770790][ T93] usb 3-1: Manufacturer: syz [ 271.782520][ T93] usb 3-1: SerialNumber: syz [ 271.818120][ T93] usb 3-1: config 0 descriptor?? [ 271.843839][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.374585][T10324] loop1: detected capacity change from 0 to 32768 [ 272.411367][T10324] XFS: ikeep mount option is deprecated. [ 272.423090][T10324] XFS: noikeep mount option is deprecated. [ 272.439328][T10332] netlink: 'syz.4.1580': attribute type 1 has an invalid length. [ 272.449973][ T93] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 272.481364][T10324] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 272.595720][ T93] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 272.617330][T10324] XFS (loop1): Ending clean mount [ 272.624554][ T93] usb 3-1: USB disconnect, device number 11 [ 272.650313][T10324] XFS (loop1): Quotacheck needed: Please wait. [ 272.731412][T10344] xt_CT: No such helper "snmp" [ 272.760851][T10324] XFS (loop1): Quotacheck: Done. [ 272.955261][T10348] loop4: detected capacity change from 0 to 256 [ 273.021731][ T5834] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 273.091982][T10348] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 273.113511][T10348] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 273.523614][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 273.545930][T10328] loop0: detected capacity change from 0 to 40427 [ 273.600719][T10328] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3fffff [ 273.669586][T10328] F2FS-fs (loop0): heap/no_heap options were deprecated [ 273.698236][T10328] F2FS-fs (loop0): Image doesn't support compression [ 273.753798][T10328] F2FS-fs (loop0): invalid crc value [ 273.791217][T10339] loop5: detected capacity change from 0 to 32768 [ 273.990200][T10328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 274.167448][ T5835] syz-executor: attempt to access beyond end of device [ 274.167448][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.216038][T10367] loop1: detected capacity change from 0 to 8 [ 274.233206][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 274.233240][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.233254][ T5835] Call Trace: [ 274.233263][ T5835] [ 274.233272][ T5835] dump_stack_lvl+0x241/0x360 [ 274.233317][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.233352][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.233388][ T5835] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 274.233426][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.233472][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.233499][ T5835] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 274.233538][ T5835] f2fs_handle_critical_error+0x392/0x5a0 [ 274.233581][ T5835] f2fs_write_end_io+0x563/0x790 [ 274.233626][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 274.233667][ T5835] ? bio_endio+0x7e4/0x890 [ 274.233695][ T5835] ? bio_endio+0x82a/0x890 [ 274.233723][ T5835] __submit_merged_bio+0x2a9/0x710 [ 274.233751][ T5835] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 274.233789][ T5835] f2fs_submit_merged_write_cond+0x29f/0x380 [ 274.233834][ T5835] f2fs_write_data_pages+0x2f99/0x38d0 [ 274.233914][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 274.234000][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234026][ T5835] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 274.234061][ T5835] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 274.234092][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234136][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234163][ T5835] ? __lock_acquire+0xad5/0xd80 [ 274.234203][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234229][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 274.234267][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234294][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 274.234327][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 274.234367][ T5835] do_writepages+0x366/0x890 [ 274.234414][ T5835] ? __pfx_do_writepages+0x10/0x10 [ 274.234443][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234471][ T5835] ? __lock_acquire+0xad5/0xd80 [ 274.234510][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234537][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 274.234580][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234606][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 274.234645][ T5835] filemap_fdatawrite+0x1f2/0x2a0 [ 274.234684][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 274.234714][ T5835] ? mlock_drain_local+0x79/0x490 [ 274.234799][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.234826][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 274.234865][ T5835] f2fs_sync_dirty_inodes+0x34f/0x860 [ 274.234922][ T5835] f2fs_write_checkpoint+0x857/0x1da0 [ 274.234985][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 274.235072][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.235100][ T5835] ? kfree+0x198/0x430 [ 274.235120][ T5835] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 274.235146][ T5835] ? kill_f2fs_super+0x290/0x6d0 [ 274.235192][ T5835] kill_f2fs_super+0x2b8/0x6d0 [ 274.235238][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 274.235284][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.235311][ T5835] ? shrinker_free+0x2ca/0x3d0 [ 274.235337][ T5835] deactivate_locked_super+0xc6/0x130 [ 274.235370][ T5835] cleanup_mnt+0x422/0x4c0 [ 274.235403][ T5835] ? lockdep_hardirqs_on+0x9d/0x150 [ 274.235432][ T5835] task_work_run+0x253/0x310 [ 274.235470][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 274.235506][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.235538][ T5835] syscall_exit_to_user_mode+0x13f/0x340 [ 274.235568][ T5835] do_syscall_64+0x100/0x210 [ 274.235600][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.235623][ T5835] RIP: 0033:0x7f243958f497 [ 274.235644][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 274.235664][ T5835] RSP: 002b:00007ffce9ec4778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 274.235690][ T5835] RAX: 0000000000000000 RBX: 00007f2439610854 RCX: 00007f243958f497 [ 274.235707][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce9ec4830 [ 274.235722][ T5835] RBP: 00007ffce9ec4830 R08: 0000000000000000 R09: 0000000000000000 [ 274.235737][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce9ec58c0 [ 274.235754][ T5835] R13: 00007f2439610854 R14: 0000000000042e81 R15: 00007ffce9ec5900 [ 274.235791][ T5835] [ 274.709414][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 274.840672][T10375] loop6: detected capacity change from 0 to 2048 [ 274.859100][T10377] loop4: detected capacity change from 0 to 256 [ 274.981959][T10377] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 275.003207][T10380] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.224836][T10382] loop2: detected capacity change from 0 to 2048 [ 275.324015][T10382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.690442][T10397] loop6: detected capacity change from 0 to 128 [ 275.702073][T10398] loop5: detected capacity change from 0 to 128 [ 275.735575][T10398] befs: (loop5): No write support. Marking filesystem read-only [ 275.807679][T10398] befs: (loop5): invalid magic header [ 275.855357][T10398] loop5: detected capacity change from 0 to 8 [ 275.934544][T10398] unable to read xattr id index table [ 276.063453][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1592'. [ 276.184142][T10413] netlink: 'syz.4.1611': attribute type 298 has an invalid length. [ 276.228793][T10415] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 276.270922][T10414] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 276.293206][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 276.486283][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 276.533234][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.592457][T10420] dvmrp1: entered allmulticast mode [ 276.608281][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.642220][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 276.644244][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 276.691379][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 276.709872][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.754403][ T10] usb 7-1: config 0 descriptor?? [ 277.206132][ T10] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x2 [ 277.242253][ T10] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 277.323375][ T10] hid-picolcd 0003:04D8:C002.0018: No report with id 0x11 found [ 277.407506][ T10] usb 7-1: USB disconnect, device number 8 [ 277.419956][T10412] loop1: detected capacity change from 0 to 32768 [ 277.445331][T10412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1612 (10412) [ 277.527361][T10412] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 277.566732][T10412] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 277.601035][T10412] BTRFS info (device loop1): disk space caching is enabled [ 277.632653][T10412] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 277.838006][T10464] loop0: detected capacity change from 0 to 1024 [ 277.883588][T10412] BTRFS info (device loop1): rebuilding free space tree [ 277.959729][T10412] BTRFS info (device loop1): disabling free space tree [ 277.987592][T10412] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 278.027991][T10412] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 278.104642][ T62] hfsplus: b-tree write err: -5, ino 4 [ 278.631594][ T5834] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.651751][T10445] loop4: detected capacity change from 0 to 32768 [ 278.671615][T10445] (syz.4.1625,10445,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.720790][T10445] (syz.4.1625,10445,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 278.879900][T10445] (syz.4.1625,10445,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 278.961115][T10445] JBD2: Ignoring recovery information on journal [ 279.154190][T10445] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 279.232866][T10501] loop6: detected capacity change from 0 to 256 [ 279.240344][ T5845] kernel write not supported for file /stat (pid: 5845 comm: kworker/1:4) [ 279.302823][T10445] (syz.4.1625,10445,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 279.402181][T10445] (syz.4.1625,10445,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 279.490501][T10506] netlink: 'syz.0.1646': attribute type 10 has an invalid length. [ 279.523320][T10445] (syz.4.1625,10445,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 279.529486][T10508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1647'. [ 279.532163][T10445] (syz.4.1625,10445,0):ocfs2_quota_read:201 ERROR: status = -5 [ 279.542603][T10506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.589906][T10445] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 5 [ 279.611382][T10506] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 279.656802][T10445] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 279.714435][T10445] (syz.4.1625,10445,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 279.716038][T10503] (syz.4.1625,10503,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 279.737561][T10445] (syz.4.1625,10445,0):ocfs2_mknod:314 ERROR: status = -5 [ 279.797902][T10503] (syz.4.1625,10503,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 279.811299][T10503] (syz.4.1625,10503,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 279.831363][T10445] (syz.4.1625,10445,0):ocfs2_mknod:502 ERROR: status = -5 [ 279.837832][T10503] (syz.4.1625,10503,1):ocfs2_quota_read:201 ERROR: status = -5 [ 279.893063][T10445] (syz.4.1625,10445,0):ocfs2_create:675 ERROR: status = -5 [ 279.930804][T10503] Quota error (device loop4): find_next_id: Can't read quota tree block 5 [ 279.957144][T10503] (syz.4.1625,10503,0):ocfs2_get_next_id:921 ERROR: status = -5 [ 280.216189][ T5840] ocfs2: Unmounting device (7,4) on (node local) [ 280.378904][T10528] loop6: detected capacity change from 0 to 512 [ 280.434074][T10528] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 280.492287][T10528] EXT4-fs (loop6): invalid journal inode [ 280.520093][T10528] EXT4-fs (loop6): can't get journal size [ 280.626941][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1661'. [ 280.659045][T10528] EXT4-fs (loop6): 1 truncate cleaned up [ 280.666818][T10528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.681454][T10539] tc_dump_action: action bad kind [ 280.728122][T10544] loop0: detected capacity change from 0 to 1024 [ 280.815704][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.991568][ T62] hfsplus: b-tree write err: -5, ino 4 [ 281.008882][T10547] [U] ^C [ 281.165231][T10554] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1657'. [ 281.209692][T10554] netlink: 'syz.4.1657': attribute type 9 has an invalid length. [ 281.250170][T10554] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1657'. [ 281.297683][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1657'. [ 281.316983][T10559] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 281.662243][T10568] xt_CT: No such helper "pptp" [ 281.865304][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 281.959119][T10584] loop6: detected capacity change from 0 to 1024 [ 281.996752][T10584] hfsplus: bad catalog entry type [ 282.145377][ T53] hfsplus: b-tree write err: -5, ino 4 [ 282.160686][T10588] loop1: detected capacity change from 0 to 512 [ 282.224522][T10588] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 282.274906][T10588] EXT4-fs (loop1): 1 truncate cleaned up [ 282.282396][T10588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.529983][T10599] program syz.5.1687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.546168][T10556] loop0: detected capacity change from 0 to 32768 [ 282.610649][T10556] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 282.673562][T10556] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 282.693537][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.989536][T10613] loop5: detected capacity change from 0 to 512 [ 283.039093][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 283.071874][T10613] EXT4-fs (loop5): 1 orphan inode deleted [ 283.132051][T10619] program syz.1.1697 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.196482][T10613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.428094][T10579] loop2: detected capacity change from 0 to 40427 [ 283.481052][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.499050][T10579] F2FS-fs (loop2): invalid crc value [ 283.845755][T10579] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 284.006385][ T5839] syz-executor: attempt to access beyond end of device [ 284.006385][ T5839] loop2: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 284.069664][ T5839] syz-executor: attempt to access beyond end of device [ 284.069664][ T5839] loop2: rw=2051, sector=45096, nr_sectors = 85976 limit=40427 [ 284.120841][ T5839] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 284.140368][ T5839] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 284.523454][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 284.525724][T10636] loop1: detected capacity change from 0 to 32768 [ 284.573206][T10636] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1701 (10636) [ 284.610448][T10636] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 284.651397][T10636] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 284.700061][T10636] BTRFS info (device loop1): using free-space-tree [ 284.701289][T10657] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 284.948307][T10678] loop2: detected capacity change from 0 to 2048 [ 285.013080][T10678] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 285.068913][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1713'. [ 285.086458][T10678] syz.2.1704: attempt to access beyond end of device [ 285.086458][T10678] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 285.106218][T10683] tipc: Invalid UDP bearer configuration [ 285.106281][T10683] tipc: Enabling of bearer rejected, failed to enable media [ 285.113055][T10684] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.219141][ T5834] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.312811][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 285.374683][T10690] syz.2.1704: attempt to access beyond end of device [ 285.374683][T10690] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 285.480018][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.601910][T10690] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3) [ 285.627672][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 285.631655][T10678] Remounting filesystem read-only [ 285.659678][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 285.676427][T10690] NILFS (loop2): error -5 reading inode: ino=12 [ 285.712115][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 285.769985][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.832437][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 285.879823][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.912686][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 285.978299][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.027577][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.079876][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.127978][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.173102][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.203960][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.252834][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.306643][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.342112][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.411043][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.445278][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.503108][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.530326][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.580838][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.613112][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.634094][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.653085][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.704693][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.725457][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.778139][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.813560][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.845733][T10693] loop0: detected capacity change from 0 to 32768 [ 286.865008][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.895610][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 286.953098][T10678] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 286.983189][T10678] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 287.016450][ T30] audit: type=1800 audit(1744938517.997:47): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1704" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 287.253270][ T93] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 287.299420][T10725] loop4: detected capacity change from 0 to 16 [ 287.337638][T10725] erofs (device loop4): mounted with root inode @ nid 36. [ 287.441096][T10731] loop2: detected capacity change from 0 to 1024 [ 287.442760][ T93] usb 2-1: config 0 has no interfaces? [ 287.458094][ T93] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 287.495804][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.538335][ T93] usb 2-1: Product: syz [ 287.559166][ T93] usb 2-1: Manufacturer: syz [ 287.581169][ T93] usb 2-1: SerialNumber: syz [ 287.681869][ T93] usb 2-1: config 0 descriptor?? [ 287.833541][T10713] loop6: detected capacity change from 0 to 32768 [ 287.873898][T10713] XFS: ikeep mount option is deprecated. [ 287.879613][T10713] XFS: noikeep mount option is deprecated. [ 287.995068][T10713] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.074817][ T5901] usb 2-1: USB disconnect, device number 8 [ 288.243843][T10713] XFS (loop6): Ending clean mount [ 288.259481][T10713] XFS (loop6): Quotacheck needed: Please wait. [ 288.466629][T10713] XFS (loop6): Quotacheck: Done. [ 288.736395][ T7127] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 289.149131][T10780] netlink: 'syz.4.1739': attribute type 3 has an invalid length. [ 289.201643][T10780] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1739'. [ 289.510776][T10754] loop0: detected capacity change from 0 to 32768 [ 289.583382][T10754] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 289.773638][ T5826] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.801029][T10775] loop1: detected capacity change from 0 to 32768 [ 289.835990][T10767] loop5: detected capacity change from 0 to 32768 [ 289.857286][T10775] (syz.1.1738,10775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 289.885093][T10767] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 289.897185][T10762] loop2: detected capacity change from 0 to 40427 [ 289.936078][T10762] F2FS-fs (loop2): invalid crc value [ 289.944522][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 289.977013][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.993577][T10775] (syz.1.1738,10775,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 290.033414][T10754] XFS (loop0): Ending clean mount [ 290.071757][T10807] netlink: 19 bytes leftover after parsing attributes in process `syz.6.1742'. [ 290.079080][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.107179][T10754] XFS (loop0): Quotacheck needed: Please wait. [ 290.143420][T10767] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 290.184591][ T5826] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 290.273598][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.321112][T10775] JBD2: Ignoring recovery information on journal [ 290.346310][ T5826] usb 5-1: config 0 descriptor?? [ 290.399477][T10754] XFS (loop0): Quotacheck: Done. [ 290.445653][T10775] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 290.461965][T10754] XFS (loop0): syz.0.1727 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 290.499020][T10762] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 290.511551][ T5836] ocfs2: Unmounting device (7,5) on (node local) [ 290.684333][ T5835] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 290.785328][ T5839] syz-executor: attempt to access beyond end of device [ 290.785328][ T5839] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 290.842708][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 290.842744][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.842760][ T5839] Call Trace: [ 290.842770][ T5839] [ 290.842779][ T5839] dump_stack_lvl+0x241/0x360 [ 290.842825][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.842863][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.842892][ T5839] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 290.842932][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.842972][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843005][ T5839] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 290.843046][ T5839] f2fs_handle_critical_error+0x392/0x5a0 [ 290.843090][ T5839] f2fs_write_end_io+0x563/0x790 [ 290.843136][ T5839] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 290.843178][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843209][ T5839] ? blkg_put+0x18f/0x250 [ 290.843242][ T5839] ? bio_endio+0x7e4/0x890 [ 290.843269][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843296][ T5839] ? bio_endio+0x82a/0x890 [ 290.843321][ T5839] __submit_merged_bio+0x2a9/0x710 [ 290.843358][ T5839] f2fs_submit_merged_write+0x1f9/0x2d0 [ 290.843394][ T5839] f2fs_sync_node_pages+0x1563/0x1700 [ 290.843444][ T5839] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 290.843480][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843504][ T5839] ? __lock_acquire+0xad5/0xd80 [ 290.843562][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843591][ T5839] ? __pfx_up_write+0x10/0x10 [ 290.843614][ T5839] ? iput+0x3be/0xa50 [ 290.843645][ T5839] f2fs_write_checkpoint+0xce9/0x1da0 [ 290.843703][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 290.843784][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843810][ T5839] ? kill_f2fs_super+0x290/0x6d0 [ 290.843849][ T5839] kill_f2fs_super+0x2b8/0x6d0 [ 290.843890][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 290.843933][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.843958][ T5839] ? shrinker_free+0x2ca/0x3d0 [ 290.843982][ T5839] deactivate_locked_super+0xc6/0x130 [ 290.844013][ T5839] cleanup_mnt+0x422/0x4c0 [ 290.844038][ T5839] ? lockdep_hardirqs_on+0x9d/0x150 [ 290.844066][ T5839] task_work_run+0x253/0x310 [ 290.844105][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 290.844142][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 290.844176][ T5839] syscall_exit_to_user_mode+0x13f/0x340 [ 290.844207][ T5839] do_syscall_64+0x100/0x210 [ 290.844240][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.844264][ T5839] RIP: 0033:0x7f0140f8f497 [ 290.844285][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 290.844305][ T5839] RSP: 002b:00007ffd76452788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.844331][ T5839] RAX: 0000000000000000 RBX: 00007f0141010854 RCX: 00007f0140f8f497 [ 290.844375][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd76452840 [ 290.844390][ T5839] RBP: 00007ffd76452840 R08: 0000000000000000 R09: 0000000000000000 [ 290.844406][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd764538d0 [ 290.844423][ T5839] R13: 00007f0141010854 R14: 0000000000046f31 R15: 00007ffd76453910 [ 290.844468][ T5839] [ 290.912127][ T5826] kone 0003:1E7D:2CED.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 291.211486][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 291.254142][ T5826] kone 0003:1E7D:2CED.0019: couldn't init struct kone_device [ 291.261577][ T5826] kone 0003:1E7D:2CED.0019: couldn't install mouse [ 291.279279][ T5834] ocfs2: Unmounting device (7,1) on (node local) [ 291.295038][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 291.295070][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.295086][ T5839] Call Trace: [ 291.295095][ T5839] [ 291.295106][ T5839] dump_stack_lvl+0x241/0x360 [ 291.295150][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.295187][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.295215][ T5839] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 291.295254][ T5839] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.295295][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.295322][ T5839] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 291.295363][ T5839] f2fs_handle_critical_error+0x392/0x5a0 [ 291.295406][ T5839] f2fs_write_end_io+0x563/0x790 [ 291.295459][ T5839] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 291.295502][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.295529][ T5839] ? blkg_put+0x18f/0x250 [ 291.295564][ T5839] ? bio_endio+0x7e4/0x890 [ 291.295590][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.295618][ T5839] ? bio_endio+0x82a/0x890 [ 291.295647][ T5839] __submit_merged_bio+0x2a9/0x710 [ 291.295687][ T5839] f2fs_submit_merged_write+0x1f9/0x2d0 [ 291.295725][ T5839] f2fs_sync_node_pages+0x1563/0x1700 [ 291.295781][ T5839] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 291.295812][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.295840][ T5839] ? __lock_acquire+0xad5/0xd80 [ 291.295907][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.295937][ T5839] ? __pfx_up_write+0x10/0x10 [ 291.295963][ T5839] ? iput+0x3be/0xa50 [ 291.295997][ T5839] f2fs_write_checkpoint+0xce9/0x1da0 [ 291.296059][ T5839] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 291.296154][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.296183][ T5839] ? kill_f2fs_super+0x290/0x6d0 [ 291.296229][ T5839] kill_f2fs_super+0x2b8/0x6d0 [ 291.296275][ T5839] ? __pfx_kill_f2fs_super+0x10/0x10 [ 291.296324][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.296352][ T5839] ? shrinker_free+0x2ca/0x3d0 [ 291.296380][ T5839] deactivate_locked_super+0xc6/0x130 [ 291.296414][ T5839] cleanup_mnt+0x422/0x4c0 [ 291.296449][ T5839] ? lockdep_hardirqs_on+0x9d/0x150 [ 291.296479][ T5839] task_work_run+0x253/0x310 [ 291.296520][ T5839] ? __pfx_task_work_run+0x10/0x10 [ 291.296558][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 291.296593][ T5839] syscall_exit_to_user_mode+0x13f/0x340 [ 291.296623][ T5839] do_syscall_64+0x100/0x210 [ 291.296657][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.296680][ T5839] RIP: 0033:0x7f0140f8f497 [ 291.296702][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 291.296723][ T5839] RSP: 002b:00007ffd76452788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 291.296748][ T5839] RAX: 0000000000000000 RBX: 00007f0141010854 RCX: 00007f0140f8f497 [ 291.296765][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd76452840 [ 291.296781][ T5839] RBP: 00007ffd76452840 R08: 0000000000000000 R09: 0000000000000000 [ 291.296797][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd764538d0 [ 291.296813][ T5839] R13: 00007f0141010854 R14: 0000000000046f31 R15: 00007ffd76453910 [ 291.296852][ T5839] [ 291.296863][ T5839] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 291.644782][ T5826] kone 0003:1E7D:2CED.0019: probe with driver kone failed with error -5 [ 291.666397][ T5826] usb 5-1: USB disconnect, device number 14 [ 291.816600][T10836] loop4: detected capacity change from 0 to 256 [ 291.929836][T10836] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 292.429028][T10855] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 292.980179][T10874] batadv0: entered promiscuous mode [ 293.071329][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.237200][T10884] loop2: detected capacity change from 0 to 64 [ 293.278010][T10884] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 293.473619][T10888] loop1: detected capacity change from 0 to 2048 [ 293.636463][T10895] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.777552][T10900] loop4: detected capacity change from 0 to 1024 [ 293.818633][T10901] loop2: detected capacity change from 0 to 512 [ 293.826045][T10900] EXT4-fs: Ignoring removed orlov option [ 293.842897][T10900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.865888][T10901] EXT4-fs: Ignoring removed oldalloc option [ 293.957613][T10901] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 294.026786][T10900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.064510][T10901] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1770: Parent and EA inode have the same ino 15 [ 294.160239][T10866] loop0: detected capacity change from 0 to 32768 [ 294.183650][T10901] EXT4-fs (loop2): 1 orphan inode deleted [ 294.213440][T10901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.291062][T10866] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 294.305890][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.460586][T10927] loop1: detected capacity change from 0 to 2048 [ 294.505536][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.511683][T10933] loop6: detected capacity change from 0 to 512 [ 294.534819][T10927] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 294.589116][T10927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.604341][T10933] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 294.610653][T10939] loop4: detected capacity change from 0 to 512 [ 294.612613][T10933] EXT4-fs (loop6): orphan cleanup on readonly fs [ 294.694333][T10933] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 294.715378][T10866] XFS (loop0): Ending clean mount [ 294.731463][T10933] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 294.754775][T10939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1777: bg 0: block 248: padding at end of block bitmap is not set [ 294.786307][T10866] XFS (loop0): Quotacheck needed: Please wait. [ 294.791617][T10933] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 294.852116][T10933] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #16: comm syz.6.1778: casefold flag without casefold feature [ 294.865114][T10939] Quota error (device loop4): write_blk: dquota write failed [ 294.872587][T10939] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 294.899429][T10866] XFS (loop0): Quotacheck: Done. [ 294.937297][T10933] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.1778: couldn't read orphan inode 16 (err -117) [ 294.953615][T10939] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1777: Failed to acquire dquot type 1 [ 294.989946][T10933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.022616][T10939] EXT4-fs (loop4): 1 truncate cleaned up [ 295.096075][T10939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.172155][T10939] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.197021][ T5835] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 295.259304][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.530658][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.723150][ T5899] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 295.908349][ T5899] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 295.954535][ T5899] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 295.985605][ T5899] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.013305][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.047555][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 296.061096][T10958] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 296.077606][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 296.104433][ T5899] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.113149][T10973] netlink: 'syz.1.1794': attribute type 6 has an invalid length. [ 296.261632][T10977] loop5: detected capacity change from 0 to 4096 [ 296.352478][T10952] loop2: detected capacity change from 0 to 32768 [ 296.357667][T10977] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 296.384198][ T5899] usb 7-1: USB disconnect, device number 9 [ 296.394076][T10977] ntfs3(loop5): Failed to load $Extend (-22). [ 296.417051][T10977] ntfs3(loop5): Failed to initialize $Extend. [ 296.432915][T10981] netlink: 'syz.1.1798': attribute type 3 has an invalid length. [ 296.467790][T10952] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 296.602298][ T5839] (syz-executor,5839,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 296.662694][ T5839] ocfs2: Unmounting device (7,2) on (node local) [ 296.700948][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.231157][T10998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1807'. [ 297.557775][T11004] loop0: detected capacity change from 0 to 4096 [ 297.626763][T10988] loop4: detected capacity change from 0 to 32768 [ 297.665648][T10988] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 297.877516][T11023] loop5: detected capacity change from 0 to 512 [ 297.886095][T11023] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 297.948793][T10988] XFS (loop4): Ending clean mount [ 297.994780][T11023] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 298.024236][T10988] XFS (loop4): Quotacheck needed: Please wait. [ 298.039129][T10999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.089708][T10999] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 298.103224][T11023] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.1812: corrupted inode contents [ 298.156691][T11023] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.1812: mark_inode_dirty error [ 298.177313][T10988] XFS (loop4): Quotacheck: Done. [ 298.216067][T10999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.243613][T11031] loop1: detected capacity change from 0 to 2048 [ 298.251992][T11023] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1812: invalid indirect mapped block 1 (level 1) [ 298.273165][T10999] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.286926][T11023] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.1812: corrupted inode contents [ 298.304579][T11023] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 298.338206][T11023] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.1812: corrupted inode contents [ 298.364638][T10999] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 298.389956][T11036] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.411576][T10999] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 298.425978][T11023] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.1812: mark_inode_dirty error [ 298.450000][T11036] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 298.459016][T11023] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 298.473868][T11036] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 298.491667][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 298.506537][T11023] EXT4-fs (loop5): 1 truncate cleaned up [ 298.507214][T10999] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 298.542224][T11023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.555706][T11036] Remounting filesystem read-only [ 298.605608][T10999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.638349][T10999] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 298.758245][T10999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.793259][T10999] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 298.826856][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 298.956616][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.006418][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.065215][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.136812][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.184321][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.250357][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.294846][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.334380][T11060] loop6: detected capacity change from 0 to 512 [ 299.352113][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.390948][ T5836] EXT4-fs error (device loop5): ext4_empty_dir:3077: inode #11: comm syz-executor: invalid size [ 299.443136][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 299.449878][T11060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.523239][T11060] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.730173][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.243782][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 300.260647][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.406602][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 300.556661][T11095] loop6: detected capacity change from 0 to 1024 [ 300.643943][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 300.653362][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.861149][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.091685][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.447335][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.518085][T11117] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1858'. [ 301.532024][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 301.603083][ T93] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 301.770782][ T93] usb 1-1: Using ep0 maxpacket: 8 [ 301.809747][ T93] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.843615][ T93] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 301.852680][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.947887][ T93] usb 1-1: config 0 descriptor?? [ 301.991264][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 302.004815][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 302.016563][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 302.026213][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 302.042200][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 302.050185][ T5826] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 302.100232][T11136] loop4: detected capacity change from 0 to 1024 [ 302.133532][ T62] bridge_slave_1: left allmulticast mode [ 302.145658][ T62] bridge_slave_1: left promiscuous mode [ 302.161294][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.172950][T11136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.194311][ T62] bridge_slave_0: left allmulticast mode [ 302.207320][ T62] bridge_slave_0: left promiscuous mode [ 302.210122][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 302.223565][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.248366][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 302.275142][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 302.306077][ T5826] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 302.324841][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 302.335675][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.374978][ T5826] usb 3-1: Product: syz [ 302.385595][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.413641][ T5826] usb 3-1: Manufacturer: syz [ 302.417186][ T93] holtek 0003:1241:5015.001A: unknown main item tag 0x0 [ 302.425933][ T5826] usb 3-1: SerialNumber: syz [ 302.449291][ T93] holtek 0003:1241:5015.001A: unknown main item tag 0x0 [ 302.459906][ T93] holtek 0003:1241:5015.001A: unknown main item tag 0x0 [ 302.465029][ T5826] usb 3-1: config 0 descriptor?? [ 302.479341][ T93] holtek 0003:1241:5015.001A: unknown main item tag 0x0 [ 302.487312][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 302.504793][ T93] holtek 0003:1241:5015.001A: unknown main item tag 0x0 [ 302.534078][ T93] holtek 0003:1241:5015.001A: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 302.555813][ T93] holtek 0003:1241:5015.001A: no inputs found [ 302.634714][ T5845] usb 1-1: USB disconnect, device number 10 [ 302.737914][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 302.791689][ T5826] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 302.795040][ T5826] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 302.917186][ T5826] usb 3-1: USB disconnect, device number 12 [ 303.141818][T11157] overlayfs: workdir and upperdir must be separate subtrees [ 303.688389][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.706055][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.726190][ T62] bond0 (unregistering): Released all slaves [ 304.149535][T11184] loop1: detected capacity change from 0 to 4096 [ 304.163584][ T5843] Bluetooth: hci3: command tx timeout [ 304.185407][T11184] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 304.422389][T11184] ntfs3(loop1): failed to convert "c46c" to maccenteuro [ 304.476366][T11184] ntfs3(loop1): ino=20, mi_enum_attr [ 304.498245][T11184] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 304.563209][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 304.782275][ T62] hsr_slave_0: left promiscuous mode [ 304.852844][ T62] hsr_slave_1: left promiscuous mode [ 304.877618][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.923397][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.024914][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.042065][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.057678][T11206] loop2: detected capacity change from 0 to 1024 [ 305.211539][ T62] veth1_macvtap: left promiscuous mode [ 305.232552][ T62] veth0_macvtap: left promiscuous mode [ 305.258405][ T62] veth1_vlan: left promiscuous mode [ 305.279344][ T62] veth0_vlan: left promiscuous mode [ 305.292048][ T7238] hfsplus: b-tree write err: -5, ino 4 [ 306.253105][ T5843] Bluetooth: hci3: command tx timeout [ 306.396059][T11224] loop1: detected capacity change from 0 to 32768 [ 306.410795][T11224] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1900 (11224) [ 306.438092][T11244] loop4: detected capacity change from 0 to 128 [ 306.538331][T11246] loop0: detected capacity change from 0 to 1024 [ 306.562275][T11224] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 306.590648][T11224] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 306.625104][T11224] BTRFS info (device loop1): using free-space-tree [ 306.740346][T11224] BTRFS info (device loop1): rebuilding free space tree [ 306.786954][ T5826] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 306.796350][ T7238] hfsplus: b-tree write err: -5, ino 4 [ 306.969705][ T5826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.970443][ T5834] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 307.007433][ T5826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.054564][ T5826] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.071163][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.105637][ T5826] usb 3-1: Product: syz [ 307.109989][ T5826] usb 3-1: Manufacturer: syz [ 307.122901][ T5826] usb 3-1: SerialNumber: syz [ 307.393138][ T5826] usb 3-1: 0:2 : does not exist [ 307.429341][ T5826] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 307.494478][ T5826] usb 3-1: USB disconnect, device number 13 [ 307.548244][ T62] team0 (unregistering): Port device team_slave_1 removed [ 307.664701][ T62] team0 (unregistering): Port device team_slave_0 removed [ 307.723898][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.323350][ T5843] Bluetooth: hci3: command tx timeout [ 308.670094][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 308.763646][T11208] team_slave_0: entered promiscuous mode [ 308.769995][T11208] team_slave_1: entered promiscuous mode [ 308.795148][T11208] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 308.811189][T11208] team0: Device macvtap1 is already an upper device of the team interface [ 308.826663][T11208] team_slave_0: left promiscuous mode [ 308.832145][T11208] team_slave_1: left promiscuous mode [ 308.910488][T11292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1923'. [ 309.607304][T11326] loop6: detected capacity change from 0 to 512 [ 309.670893][T11132] chnl_net:caif_netlink_parms(): no params data found [ 309.711666][T11326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.027457][ T62] IPVS: stop unused estimator thread 0... [ 310.059939][T11314] loop0: detected capacity change from 0 to 32768 [ 310.121265][T11314] (syz.0.1933,11314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.136244][T11312] loop1: detected capacity change from 0 to 32768 [ 310.148887][T11312] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1934 (11312) [ 310.203810][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.247797][T11314] (syz.0.1933,11314,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 310.310442][T11312] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 310.351838][T11314] JBD2: Ignoring recovery information on journal [ 310.405572][T11312] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 310.413273][ T5843] Bluetooth: hci3: command tx timeout [ 310.530383][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.542559][T11314] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 310.550682][T11351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1944'. [ 310.554159][T11312] BTRFS info (device loop1): using free-space-tree [ 310.573892][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.581196][T11132] bridge_slave_0: entered allmulticast mode [ 310.630261][T11132] bridge_slave_0: entered promiscuous mode [ 310.677677][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.698724][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.707904][T11132] bridge_slave_1: entered allmulticast mode [ 310.717105][T11132] bridge_slave_1: entered promiscuous mode [ 310.732021][T11351] vlan2: entered allmulticast mode [ 310.737381][T11351] gretap0: entered allmulticast mode [ 310.790026][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1943'. [ 310.842094][ T5835] ocfs2: Unmounting device (7,0) on (node local) [ 311.153274][ T5834] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 311.311630][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.417549][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.485070][T11388] loop6: detected capacity change from 0 to 1024 [ 311.830010][T11132] team0: Port device team_slave_0 added [ 311.841736][T11395] loop2: detected capacity change from 0 to 4096 [ 311.899172][T11132] team0: Port device team_slave_1 added [ 311.973064][T11401] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.130819][T11402] loop4: detected capacity change from 0 to 1764 [ 312.135535][T11404] loop1: detected capacity change from 0 to 2048 [ 312.172326][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.200075][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.278481][T11406] loop6: detected capacity change from 0 to 1024 [ 312.281637][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.374331][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.402246][T11402] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 312.423225][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.470727][ T7238] hfsplus: b-tree write err: -5, ino 4 [ 312.541516][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.898595][T11132] hsr_slave_0: entered promiscuous mode [ 312.905803][ T5845] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 312.928136][T11132] hsr_slave_1: entered promiscuous mode [ 312.947013][T11132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.970027][T11132] Cannot create hsr debugfs directory [ 313.087371][ T5845] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 313.121579][T11399] loop0: detected capacity change from 0 to 32768 [ 313.133619][ T5845] usb 7-1: config 0 interface 0 has no altsetting 0 [ 313.158433][T11399] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1957 (11399) [ 313.170904][ T5845] usb 7-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 313.213542][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.255152][T11399] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.280029][ T5845] usb 7-1: config 0 descriptor?? [ 313.306621][T11399] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 313.307031][T11414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 313.351390][T11399] BTRFS info (device loop0): using free-space-tree [ 313.853613][ T5845] lenovo 0003:17EF:60B5.001B: unknown main item tag 0x0 [ 313.891004][ T5845] lenovo 0003:17EF:60B5.001B: unknown main item tag 0x0 [ 313.953558][ T5845] lenovo 0003:17EF:60B5.001B: hidraw0: USB HID v80.00 Device [HID 17ef:60b5] on usb-dummy_hcd.6-1/input0 [ 313.964400][ T5835] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.057615][ T5845] usb 7-1: USB disconnect, device number 10 [ 314.391136][T11474] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 314.429882][T11418] loop4: detected capacity change from 0 to 32768 [ 314.440246][T11132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 314.508800][T11418] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 314.533136][ T93] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 314.571904][T11132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 314.635481][T11132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 314.660618][T11418] XFS (loop4): Ending clean mount [ 314.676955][T11132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 314.694479][T11486] loop2: detected capacity change from 0 to 128 [ 314.725319][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.738860][T11486] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.772942][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.805465][T11418] XFS (loop4): Quotacheck needed: Please wait. [ 314.814052][ T93] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 314.830015][T11486] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.863352][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.905242][ T93] usb 2-1: config 0 descriptor?? [ 315.065159][T11418] XFS (loop4): Quotacheck: Done. [ 315.228028][T11132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.259481][ T1138] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 315.321120][ T5840] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 315.370297][T11132] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.383501][ T93] isku 0003:1E7D:319C.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 315.432076][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.439289][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.519058][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.526305][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.551138][T11503] nbd: socks must be embedded in a SOCK_ITEM attr [ 315.565257][ T93] isku 0003:1E7D:319C.001C: couldn't init struct isku_device [ 315.572727][ T93] isku 0003:1E7D:319C.001C: couldn't install keyboard [ 315.602785][ T93] isku 0003:1E7D:319C.001C: probe with driver isku failed with error -71 [ 315.676286][ T93] usb 2-1: USB disconnect, device number 9 [ 315.789436][T11132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.158349][T11518] loop0: detected capacity change from 0 to 64 [ 316.653882][T11132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.099601][T11501] loop2: detected capacity change from 0 to 32768 [ 317.135673][T11501] XFS: ikeep mount option is deprecated. [ 317.141373][T11501] XFS: noikeep mount option is deprecated. [ 317.252141][T11501] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 317.524064][T11501] XFS (loop2): Ending clean mount [ 317.577182][T11501] XFS (loop2): Quotacheck needed: Please wait. [ 317.700584][T11501] XFS (loop2): Quotacheck: Done. [ 317.850343][T11132] veth0_vlan: entered promiscuous mode [ 317.883279][T11572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2003'. [ 317.932938][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 317.947138][ T5839] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 317.971568][T11572] tipc: Enabling of bearer rejected, failed to enable media [ 318.023487][T11132] veth1_vlan: entered promiscuous mode [ 318.249505][T11132] veth0_macvtap: entered promiscuous mode [ 318.285415][T11132] veth1_macvtap: entered promiscuous mode [ 318.390121][T11586] IPv6: syztnl0: Disabled Multicast RS [ 318.434636][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.465850][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.476293][ T5826] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 318.498236][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.520482][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.533317][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.544319][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.554892][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.569580][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.579810][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.590813][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.611076][T11132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.613154][ T93] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 318.645499][ T5826] usb 7-1: Using ep0 maxpacket: 16 [ 318.662762][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.684788][ T5826] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.706587][ T5826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.722566][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.742075][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.761981][ T5826] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 318.772072][ T5826] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 318.782197][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.820248][ T5826] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.833648][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.847110][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.855139][ T93] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.858257][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.875800][ T5826] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 318.887011][ T5826] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 318.887341][ T93] usb 2-1: config 0 has no interface number 0 [ 318.915791][ T5826] usb 7-1: Manufacturer: syz [ 318.922138][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.930548][ T93] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 318.934066][ T5826] usb 7-1: config 0 descriptor?? [ 318.946389][T11132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.949233][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.957253][T11132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.989139][T11132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.018741][ T93] usb 2-1: Product: syz [ 319.048724][T11132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.060678][ T93] usb 2-1: Manufacturer: syz [ 319.064424][T11132] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.069287][ T93] usb 2-1: SerialNumber: syz [ 319.075771][T11132] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.100216][T11132] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.109122][ T93] usb 2-1: config 0 descriptor?? [ 319.324237][ T93] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 319.343275][ T5826] rc_core: IR keymap rc-hauppauge not found [ 319.349199][ T5826] Registered IR keymap rc-empty [ 319.359098][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.363318][ T93] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 319.381926][ T93] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 319.449085][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.460640][ T93] usb 2-1: media controller created [ 319.523411][T11607] loop2: detected capacity change from 0 to 47 [ 319.549710][ T93] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.554063][ T5826] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 319.582107][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.609314][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.639892][ T5826] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input12 [ 319.732449][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.793513][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.811454][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.824473][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.873336][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.903397][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.951867][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 319.969580][ T93] usb 2-1: USB disconnect, device number 10 [ 319.980038][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2017'. [ 320.002534][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 320.073564][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 320.104789][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 320.132513][T11621] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 320.173130][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 320.194905][ T5826] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 320.272871][ T5826] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 320.305079][ T5826] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 320.394694][ T5826] usb 7-1: USB disconnect, device number 11 [ 320.724337][T11635] loop7: detected capacity change from 0 to 256 [ 320.731426][T11635] exfat: Deprecated parameter 'utf8' [ 320.743949][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'. [ 320.774241][T11635] exfat: Deprecated parameter 'utf8' [ 320.792160][T11635] exfat: Deprecated parameter 'utf8' [ 320.877399][T11635] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 320.891544][T11638] sp0: Synchronizing with TNC [ 320.933828][T11641] sp0: Found TNC [ 321.371329][T11655] netlink: 'syz.7.2029': attribute type 1 has an invalid length. [ 321.411037][T11655] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2029'. [ 321.473294][T11655] netlink: 'syz.7.2029': attribute type 1 has an invalid length. [ 321.489957][T11609] loop0: detected capacity change from 0 to 40427 [ 321.490752][T11661] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2031'. [ 321.701939][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.713970][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.750379][T11670] netlink: zone id is out of range [ 321.793445][T11670] netlink: zone id is out of range [ 321.798599][T11670] netlink: zone id is out of range [ 321.830313][T11670] netlink: zone id is out of range [ 321.863975][T11670] netlink: zone id is out of range [ 321.891068][T11670] netlink: zone id is out of range [ 321.922124][T11670] netlink: zone id is out of range [ 321.948613][T11670] netlink: zone id is out of range [ 321.965452][T11670] netlink: zone id is out of range [ 321.999813][T11670] netlink: zone id is out of range [ 322.148648][T11609] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 322.298068][ T30] audit: type=1800 audit(1744938553.277:48): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2015" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 322.585619][ T5835] syz-executor: attempt to access beyond end of device [ 322.585619][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 322.656116][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 322.656153][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.656168][ T5835] Call Trace: [ 322.656178][ T5835] [ 322.656188][ T5835] dump_stack_lvl+0x241/0x360 [ 322.656236][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.656274][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.656302][ T5835] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 322.656343][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 322.656384][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.656411][ T5835] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 322.656455][ T5835] f2fs_handle_critical_error+0x392/0x5a0 [ 322.656512][ T5835] f2fs_write_end_io+0x563/0x790 [ 322.656561][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 322.656605][ T5835] ? bio_endio+0x7e4/0x890 [ 322.656637][ T5835] ? bio_endio+0x82a/0x890 [ 322.656668][ T5835] __submit_merged_bio+0x2a9/0x710 [ 322.656698][ T5835] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 322.656740][ T5835] f2fs_submit_merged_write_cond+0x29f/0x380 [ 322.656790][ T5835] f2fs_write_data_pages+0x2f99/0x38d0 [ 322.656883][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 322.656919][ T5835] ? 0xffffffffa0003d80 [ 322.656959][ T5835] ? __kernel_text_address+0xd/0x40 [ 322.657037][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657064][ T5835] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 322.657100][ T5835] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 322.657134][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657182][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657210][ T5835] ? __lock_acquire+0xad5/0xd80 [ 322.657253][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657280][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 322.657323][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657349][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 322.657384][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 322.657423][ T5835] do_writepages+0x366/0x890 [ 322.657468][ T5835] ? __pfx_do_writepages+0x10/0x10 [ 322.657512][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657539][ T5835] ? __lock_acquire+0xad5/0xd80 [ 322.657580][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657607][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 322.657654][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657681][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 322.657724][ T5835] filemap_fdatawrite+0x1f2/0x2a0 [ 322.657763][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 322.657795][ T5835] ? mlock_drain_local+0x79/0x490 [ 322.657893][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.657920][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 322.657963][ T5835] f2fs_sync_dirty_inodes+0x34f/0x860 [ 322.658024][ T5835] f2fs_write_checkpoint+0x857/0x1da0 [ 322.658094][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 322.658205][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.658234][ T5835] ? kill_f2fs_super+0x290/0x6d0 [ 322.658282][ T5835] kill_f2fs_super+0x2b8/0x6d0 [ 322.658331][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 322.658381][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.658408][ T5835] ? shrinker_free+0x2ca/0x3d0 [ 322.658437][ T5835] deactivate_locked_super+0xc6/0x130 [ 322.658472][ T5835] cleanup_mnt+0x422/0x4c0 [ 322.658507][ T5835] ? lockdep_hardirqs_on+0x9d/0x150 [ 322.658540][ T5835] task_work_run+0x253/0x310 [ 322.658582][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 322.658622][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 322.658657][ T5835] syscall_exit_to_user_mode+0x13f/0x340 [ 322.658689][ T5835] do_syscall_64+0x100/0x210 [ 322.658725][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.658749][ T5835] RIP: 0033:0x7f243958f497 [ 322.658769][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 322.658790][ T5835] RSP: 002b:00007ffce9ec4778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 322.658816][ T5835] RAX: 0000000000000000 RBX: 00007f2439610854 RCX: 00007f243958f497 [ 322.658833][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce9ec4830 [ 322.658849][ T5835] RBP: 00007ffce9ec4830 R08: 0000000000000000 R09: 0000000000000000 [ 322.658865][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce9ec58c0 [ 322.658882][ T5835] R13: 00007f2439610854 R14: 000000000004eb5a R15: 00007ffce9ec5900 [ 322.658926][ T5835] [ 322.749168][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 323.095296][T11702] loop7: detected capacity change from 0 to 4096 [ 323.227058][T11714] loop4: detected capacity change from 0 to 512 [ 323.283282][T11714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 323.352145][T11714] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #17: comm syz.4.2051: inline data xattr refers to an external xattr inode [ 323.401010][T11714] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.2051: couldn't read orphan inode 17 (err -117) [ 323.476227][T11714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.623217][ T5826] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 323.720497][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.794035][ T5826] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.817315][ T5826] usb 2-1: not running at top speed; connect to a high speed hub [ 323.851471][ T5826] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 323.913143][ T5826] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.923282][T11727] UHID_CREATE from different security context by process 467 (syz.6.2056), this is not allowed. [ 323.975832][ T5826] usb 2-1: config 1 interface 0 has no altsetting 0 [ 324.012625][ T5826] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 324.039273][T11731] loop7: detected capacity change from 0 to 47 [ 324.052214][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.105928][ T5826] usb 2-1: Product: syz [ 324.110163][ T5826] usb 2-1: Manufacturer: syz [ 324.153224][ T5826] usb 2-1: SerialNumber: syz [ 324.164237][T11709] loop2: detected capacity change from 0 to 32768 [ 324.200259][T11733] MINIX-fs: deleted inode referenced: 9 [ 324.201272][T11720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 324.517750][ T5826] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input13 [ 324.559055][ T5191] bcm5974 2-1:1.0: could not read from device [ 324.614328][ T93] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 324.688619][ T5826] usb 2-1: USB disconnect, device number 11 [ 324.713810][ T5191] bcm5974 2-1:1.0: could not read from device [ 324.826180][ T93] usb 7-1: Using ep0 maxpacket: 32 [ 324.850563][ T93] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.891703][ T93] usb 7-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 324.924624][ T93] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 324.977055][ T93] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 325.013200][ T93] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 325.091009][ T93] usb 7-1: config 0 interface 0 has no altsetting 0 [ 325.113231][ T93] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 325.176220][ T93] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.217963][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'. [ 325.218028][T11764] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2068'. [ 325.244181][ T93] usb 7-1: config 0 descriptor?? [ 325.505876][ T6033] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 325.679351][ T93] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 325.706584][T11780] loop7: detected capacity change from 0 to 16 [ 325.715853][ T93] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 325.726034][ T6033] usb 5-1: Using ep0 maxpacket: 16 [ 325.736177][T11782] loop2: detected capacity change from 0 to 16 [ 325.751653][ T6033] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.752802][T11782] erofs (device loop2): mounted with root inode @ nid 36. [ 325.771624][T11780] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 325.778789][ T93] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 325.803631][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.815226][ T93] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 325.853094][ T93] hid-thrustmaster 0003:044F:B65D.001D: unknown main item tag 0x0 [ 325.861031][ T6033] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.904332][ T5826] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 325.916863][ T93] hid-thrustmaster 0003:044F:B65D.001D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 325.929075][ T6033] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.953112][ T6033] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 325.969148][ T93] hid-thrustmaster 0003:044F:B65D.001D: setup data couldn't be sent [ 325.986621][ C0] hid-thrustmaster 0003:044F:B65D.001D: URB to get model id failed with error -71 [ 326.028218][ T6033] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.047874][ T93] usb 7-1: USB disconnect, device number 12 [ 326.057615][ T6033] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 326.096255][ T6033] usb 5-1: Manufacturer: syz [ 326.096804][ T5826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.140770][ T6033] usb 5-1: config 0 descriptor?? [ 326.156196][T11786] loop0: detected capacity change from 0 to 1764 [ 326.180856][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.228214][T11789] loop2: detected capacity change from 0 to 256 [ 326.256022][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.308287][T11789] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 326.331015][ T5826] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 326.354783][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.387097][ T5826] usb 2-1: config 0 descriptor?? [ 326.580184][ T6033] rc_core: IR keymap rc-hauppauge not found [ 326.610155][ T6033] Registered IR keymap rc-empty [ 326.639808][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.724109][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 326.796946][ T6033] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 326.832634][ T5826] aquacomputer_d5next 0003:0C70:F014.001E: unknown main item tag 0x0 [ 326.847288][ T6033] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 326.907028][ T5826] aquacomputer_d5next 0003:0C70:F014.001E: hidraw0: USB HID v1.01 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 326.929596][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.013419][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.034875][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.061323][T11808] loop2: detected capacity change from 0 to 512 [ 327.101042][ T5826] usb 2-1: USB disconnect, device number 12 [ 327.113258][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.141428][T11808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.173261][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.198567][T11808] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.2084: bad orphan inode 11 [ 327.225361][T11808] ext4_test_bit(bit=10, block=4) = 1 [ 327.231719][T11808] is_bad_inode(inode)=0 [ 327.236510][T11808] NEXT_ORPHAN(inode)=2080374784 [ 327.237570][T11816] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2087'. [ 327.241449][T11808] max_ino=32 [ 327.250762][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.254510][T11808] i_nlink=0 [ 327.266556][T11808] EXT4-fs (loop2): 1 truncate cleaned up [ 327.270999][T11811] loop6: detected capacity change from 0 to 64 [ 327.276687][T11808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.306726][T11816] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2087'. [ 327.347191][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.403268][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.463602][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.515032][ T6033] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 327.576738][ T6033] mceusb 5-1:0.0: Registered 蹍檻狦倜⇿ with mce emulator interface version 1 [ 327.592724][ T6033] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 327.679580][ T6033] usb 5-1: USB disconnect, device number 15 [ 327.763445][ T5826] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 327.811420][T11826] loop6: detected capacity change from 0 to 512 [ 327.881569][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.898408][T11826] EXT4-fs: Ignoring removed oldalloc option [ 327.958376][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 327.970455][T11826] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.001179][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 328.044310][T11826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 328.084752][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 328.112843][T11826] EXT4-fs (loop6): orphan cleanup on readonly fs [ 328.140199][T11826] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 328.174521][ T5826] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 328.190081][T11826] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 328.213111][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.221567][ T5826] usb 1-1: Product: syz [ 328.243362][T11826] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2090: Failed to acquire dquot type 1 [ 328.265039][ T5826] usb 1-1: Manufacturer: syz [ 328.269702][ T5826] usb 1-1: SerialNumber: syz [ 328.299230][ T5826] usb 1-1: config 0 descriptor?? [ 328.326382][T11826] EXT4-fs (loop6): 1 truncate cleaned up [ 328.337723][T11820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.347544][T11826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 328.360414][T11820] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.369515][ T5826] usb 1-1: ucan: probing device on interface #0 [ 328.426358][ T7127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.808004][ T5826] usb 1-1: ucan: device reported invalid tx-fifo size [ 328.826208][ T5826] usb 1-1: ucan: probe failed; try to update the device firmware [ 328.948019][ T5995] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 329.051429][ T5901] usb 1-1: USB disconnect, device number 11 [ 329.123928][ T5995] usb 2-1: Using ep0 maxpacket: 16 [ 329.150912][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.186223][ T5995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.218301][ T5995] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 329.227037][T11862] loop2: detected capacity change from 0 to 1024 [ 329.244038][ T5995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.276484][ T5995] usb 2-1: config 0 descriptor?? [ 329.289880][T11862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.457027][T11831] loop7: detected capacity change from 0 to 32768 [ 329.511459][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.536573][T11831] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.698492][ T5995] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 329.712448][T11878] loop2: detected capacity change from 0 to 8 [ 329.793623][ T5995] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 329.800561][ T5995] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 329.819586][T11831] XFS (loop7): Ending clean mount [ 329.836781][T11831] XFS (loop7): Quotacheck needed: Please wait. [ 329.847302][ T5995] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 329.876869][T11880] loop4: detected capacity change from 0 to 2048 [ 329.884152][ T5995] savu 0003:1E7D:2D5A.001F: unknown main item tag 0x0 [ 329.892599][T11855] loop6: detected capacity change from 0 to 40427 [ 329.949656][ T5995] savu 0003:1E7D:2D5A.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 329.965954][T11880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.980327][T11831] XFS (loop7): Quotacheck: Done. [ 330.013312][T11855] F2FS-fs (loop6): invalid crc value [ 330.100701][ T5995] usb 2-1: USB disconnect, device number 13 [ 330.318100][T11132] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 330.496588][T11855] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 330.910310][T11901] loop2: detected capacity change from 0 to 4096 [ 330.964562][T11901] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 331.099396][T11906] loop4: detected capacity change from 0 to 2048 [ 331.118989][T11906] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 331.140057][T11901] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 331.143065][T11906] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 331.190971][T11901] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update [ 331.204615][T11906] EXT4-fs (loop4): failed to initialize system zone (-117) [ 331.230088][T11906] EXT4-fs (loop4): mount failed [ 331.417480][ T53] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update [ 331.990204][T11890] loop0: detected capacity change from 0 to 40427 [ 332.082055][T11890] F2FS-fs (loop0): invalid crc value [ 332.145195][T11933] loop2: detected capacity change from 0 to 256 [ 332.161745][T11935] loop6: detected capacity change from 0 to 8 [ 332.182649][T11928] loop4: detected capacity change from 0 to 512 [ 332.194126][T11933] exfat: Deprecated parameter 'namecase' [ 332.256871][T11928] EXT4-fs: Ignoring removed i_version option [ 332.279811][T11933] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 332.302840][T11935] SQUASHFS error: Unable to read directory block [2c0:35] [ 332.325183][T11928] EXT4-fs: Ignoring removed nobh option [ 332.380067][T11928] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 332.493323][T11928] EXT4-fs (loop4): 1 truncate cleaned up [ 332.536076][T11928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.555986][T11890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 332.835472][ T5840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.945431][ T5835] syz-executor: attempt to access beyond end of device [ 332.945431][ T5835] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 333.007903][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 333.007942][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.007958][ T5835] Call Trace: [ 333.007968][ T5835] [ 333.007978][ T5835] dump_stack_lvl+0x241/0x360 [ 333.008026][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.008064][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.008094][ T5835] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 333.008136][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 333.008178][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.008206][ T5835] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 333.008248][ T5835] f2fs_handle_critical_error+0x392/0x5a0 [ 333.008293][ T5835] f2fs_write_end_io+0x563/0x790 [ 333.008341][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 333.008385][ T5835] ? bio_endio+0x7e4/0x890 [ 333.008415][ T5835] ? bio_endio+0x82a/0x890 [ 333.008445][ T5835] __submit_merged_bio+0x2a9/0x710 [ 333.008476][ T5835] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 333.008517][ T5835] f2fs_submit_merged_write_cond+0x29f/0x380 [ 333.008564][ T5835] f2fs_write_data_pages+0x2f99/0x38d0 [ 333.008648][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 333.008708][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.008805][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.008833][ T5835] ? __lock_acquire+0xad5/0xd80 [ 333.008876][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.008904][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 333.008945][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.008973][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.009009][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 333.009050][ T5835] do_writepages+0x366/0x890 [ 333.009095][ T5835] ? __pfx_do_writepages+0x10/0x10 [ 333.009125][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.009154][ T5835] ? __lock_acquire+0xad5/0xd80 [ 333.009195][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.009224][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 333.009269][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.009298][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.009340][ T5835] filemap_fdatawrite+0x1f2/0x2a0 [ 333.009380][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 333.009412][ T5835] ? mlock_drain_local+0x79/0x490 [ 333.009500][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.009529][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.009571][ T5835] f2fs_sync_dirty_inodes+0x34f/0x860 [ 333.009630][ T5835] f2fs_write_checkpoint+0x857/0x1da0 [ 333.009701][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 333.009798][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.009827][ T5835] ? kill_f2fs_super+0x290/0x6d0 [ 333.009875][ T5835] kill_f2fs_super+0x2b8/0x6d0 [ 333.009924][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 333.009973][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.010002][ T5835] ? shrinker_free+0x2ca/0x3d0 [ 333.010030][ T5835] deactivate_locked_super+0xc6/0x130 [ 333.010065][ T5835] cleanup_mnt+0x422/0x4c0 [ 333.010096][ T5835] ? lockdep_hardirqs_on+0x9d/0x150 [ 333.010127][ T5835] task_work_run+0x253/0x310 [ 333.010170][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 333.010209][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 333.010244][ T5835] syscall_exit_to_user_mode+0x13f/0x340 [ 333.010277][ T5835] do_syscall_64+0x100/0x210 [ 333.010311][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.010336][ T5835] RIP: 0033:0x7f243958f497 [ 333.010359][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 333.010380][ T5835] RSP: 002b:00007ffce9ec4778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 333.010407][ T5835] RAX: 0000000000000000 RBX: 00007f2439610854 RCX: 00007f243958f497 [ 333.010425][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce9ec4830 [ 333.010441][ T5835] RBP: 00007ffce9ec4830 R08: 0000000000000000 R09: 0000000000000000 [ 333.010457][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce9ec58c0 [ 333.010475][ T5835] R13: 00007f2439610854 R14: 00000000000513c4 R15: 00007ffce9ec5900 [ 333.010514][ T5835] [ 333.010524][ T5835] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 333.662712][T11964] loop4: detected capacity change from 0 to 256 [ 333.690784][T11964] exfat: Deprecated parameter 'utf8' [ 333.708728][T11964] exfat: Deprecated parameter 'namecase' [ 333.749765][T11964] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 334.731380][T11987] loop4: detected capacity change from 0 to 8192 [ 334.739212][T11946] loop2: detected capacity change from 0 to 40427 [ 334.777637][T11946] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 334.779617][T11987] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.835773][T11946] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 334.904716][T11946] F2FS-fs (loop2): invalid crc value [ 335.241706][T12007] loop0: detected capacity change from 0 to 512 [ 335.278235][T11946] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 335.299185][T12007] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 335.307348][T11946] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.320374][T12007] EXT4-fs (loop0): orphan cleanup on readonly fs [ 335.384734][T11946] syz.2.2132: attempt to access beyond end of device [ 335.384734][T11946] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 335.460713][T12007] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #16: comm syz.0.2158: casefold flag without casefold feature [ 335.484891][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.2.2132 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 335.484930][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.484947][T11946] Call Trace: [ 335.484957][T11946] [ 335.484969][T11946] dump_stack_lvl+0x241/0x360 [ 335.485020][T11946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.485059][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.485089][T11946] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 335.485131][T11946] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.485174][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.485203][T11946] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 335.485247][T11946] f2fs_handle_critical_error+0x392/0x5a0 [ 335.485296][T11946] f2fs_write_end_io+0x563/0x790 [ 335.485347][T11946] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 335.485393][T11946] ? bio_endio+0x7e4/0x890 [ 335.485425][T11946] ? bio_endio+0x82a/0x890 [ 335.485465][T11946] __submit_merged_bio+0x2a9/0x710 [ 335.485496][T11946] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 335.485539][T11946] f2fs_submit_merged_write_cond+0x29f/0x380 [ 335.485592][T11946] f2fs_write_data_pages+0x2f99/0x38d0 [ 335.485689][T11946] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 335.485726][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.485826][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.485855][T11946] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 335.485894][T11946] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 335.485933][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.485983][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486012][T11946] ? __lock_acquire+0xad5/0xd80 [ 335.486057][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486087][T11946] ? do_raw_spin_lock+0x151/0x370 [ 335.486131][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486159][T11946] ? do_raw_spin_unlock+0x13c/0x8b0 [ 335.486197][T11946] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 335.486240][T11946] do_writepages+0x366/0x890 [ 335.486290][T11946] ? __pfx_do_writepages+0x10/0x10 [ 335.486321][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486350][T11946] ? __lock_acquire+0xad5/0xd80 [ 335.486394][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486423][T11946] ? do_raw_spin_lock+0x151/0x370 [ 335.486490][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486520][T11946] ? do_raw_spin_unlock+0x13c/0x8b0 [ 335.486565][T11946] filemap_fdatawrite+0x1f2/0x2a0 [ 335.486609][T11946] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 335.486641][T11946] ? mlock_drain_local+0x79/0x490 [ 335.486743][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.486773][T11946] ? do_raw_spin_unlock+0x13c/0x8b0 [ 335.486819][T11946] f2fs_sync_dirty_inodes+0x34f/0x860 [ 335.486887][T11946] f2fs_write_checkpoint+0x857/0x1da0 [ 335.486961][T11946] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 335.487000][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.487098][T11946] ? __pfx_down_write+0x10/0x10 [ 335.487149][T11946] f2fs_issue_checkpoint+0x372/0x5a0 [ 335.487189][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.487225][T11946] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 335.487269][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.487297][T11946] ? do_raw_spin_lock+0x151/0x370 [ 335.487370][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.487399][T11946] ? f2fs_sync_fs+0x214/0x3f0 [ 335.487445][T11946] f2fs_mkdir+0x44f/0x540 [ 335.487486][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.487524][T11946] vfs_mkdir+0x2fb/0x500 [ 335.487577][T11946] do_mkdirat+0x273/0x3f0 [ 335.487621][T11946] ? __pfx_do_mkdirat+0x10/0x10 [ 335.487662][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.487691][T11946] ? getname_flags+0x1e0/0x530 [ 335.487725][T11946] __x64_sys_mkdirat+0x87/0xa0 [ 335.487763][T11946] do_syscall_64+0xf3/0x210 [ 335.487801][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.487826][T11946] RIP: 0033:0x7f0140f8c9d7 [ 335.487849][T11946] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.487870][T11946] RSP: 002b:00007f0141d5be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 335.487898][T11946] RAX: ffffffffffffffda RBX: 00007f0141d5bef0 RCX: 00007f0140f8c9d7 [ 335.487917][T11946] RDX: 00000000000001ff RSI: 0000200000000400 RDI: 00000000ffffff9c [ 335.487934][T11946] RBP: 0000200000000140 R08: 00002000000000c0 R09: 0000000000000000 [ 335.487951][T11946] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000400 [ 335.487968][T11946] R13: 00007f0141d5beb0 R14: 0000000000000000 R15: 0000000000000000 [ 335.488012][T11946] [ 335.488025][T11946] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 335.594022][T12007] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.2158: couldn't read orphan inode 16 (err -117) [ 335.652058][T11984] loop7: detected capacity change from 0 to 32768 [ 335.776267][T12007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.219025][T12007] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 336.361864][T12011] loop4: detected capacity change from 0 to 32768 [ 336.404227][T12011] XFS: attr2 mount option is deprecated. [ 336.430145][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.548521][T12011] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.664675][T12024] loop7: detected capacity change from 0 to 2048 [ 336.792948][T12025] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.895777][T12011] XFS (loop4): Ending clean mount [ 336.955777][T12011] XFS (loop4): Quotacheck needed: Please wait. [ 337.015097][T12011] XFS (loop4): Quotacheck: Done. [ 337.240289][ T5840] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 337.384003][T12041] loop2: detected capacity change from 0 to 128 [ 337.475774][T12041] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.603242][T12041] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.844908][ T5845] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 337.916546][ T5839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.945162][T12059] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2174'. [ 338.053205][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 338.124127][ T5845] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.163163][ T5845] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 338.172255][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.178963][T12065] process 'syz.4.2169' launched '/dev/fd/3' with NULL argv: empty string added [ 338.261529][ T5845] usb 7-1: config 0 descriptor?? [ 338.306757][ T5845] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 338.589410][ T5826] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 338.788992][ T5826] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.842000][ T5826] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.867584][ T5826] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.884229][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.923138][ T5845] gspca_vc032x: reg_r err -71 [ 338.927939][ T5845] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 338.944075][ T5826] usb 1-1: SerialNumber: syz [ 338.972722][ T5845] usb 7-1: USB disconnect, device number 13 [ 339.098188][T12099] loop2: detected capacity change from 0 to 8 [ 339.197256][ T5826] usb 1-1: 0:2 : does not exist [ 339.271179][ T5826] usb 1-1: USB disconnect, device number 12 [ 339.584201][ T7020] udevd[7020]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.627774][T12073] loop7: detected capacity change from 0 to 32768 [ 339.695773][T12073] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2179 (12073) [ 339.755074][T12073] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 339.808721][T12073] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 339.902277][T12073] BTRFS info (device loop7): using free-space-tree [ 340.445709][T12154] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2200'. [ 340.518689][T12154] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2200'. [ 340.569409][T11132] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 340.793778][ T5826] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 340.979351][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 341.009191][ T5826] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 341.042146][T12167] block device autoloading is deprecated and will be removed. [ 341.044880][ T5826] usb 2-1: config 0 has no interface number 0 [ 341.113648][ T5826] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.186130][ T5826] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 341.236866][ T5826] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 341.247259][T12120] loop2: detected capacity change from 0 to 32768 [ 341.292388][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 341.343931][ T5826] usb 2-1: Product: syz [ 341.348151][ T5826] usb 2-1: SerialNumber: syz [ 341.378577][ T30] audit: type=1800 audit(1744938572.347:49): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2194" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 341.460744][ T5826] usb 2-1: config 0 descriptor?? [ 341.467037][T12182] loop6: detected capacity change from 0 to 1024 [ 341.512395][ T5826] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 341.590065][ T5826] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input15 [ 341.736191][ T5826] ------------[ cut here ]------------ [ 341.742261][ T5826] URB ffff88802d9dfe00 submitted while active [ 341.758873][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.769312][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.776619][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.784537][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.791699][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.799324][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.807228][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.814796][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.822256][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.832129][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 341.859531][ T5826] WARNING: CPU: 1 PID: 5826 at drivers/usb/core/urb.c:379 usb_submit_urb+0x103d/0x18c0 [ 341.870239][ T5826] Modules linked in: [ 341.874887][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/1:3 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 341.887246][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 341.897557][ T5826] Workqueue: usb_hub_wq hub_event [ 341.902733][ T5826] RIP: 0010:usb_submit_urb+0x103d/0x18c0 [ 341.909262][ T5826] Code: 00 eb 66 e8 95 66 32 fa e9 75 f0 ff ff e8 8b 66 32 fa c6 05 50 87 b9 08 01 90 48 c7 c7 e0 58 f2 8c 4c 89 ee e8 e4 c1 f1 f9 90 <0f> 0b 90 90 e9 3c f0 ff ff e8 65 66 32 fa eb 12 e8 5e 66 32 fa 41 [ 341.931043][ T5826] RSP: 0018:ffffc90003866ab8 EFLAGS: 00010246 [ 341.937320][ T5826] RAX: 9e9c23091440d300 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 341.945697][ T5826] RDX: ffffc9001b6cc000 RSI: 0000000000068ff0 RDI: 0000000000068ff1 [ 341.954962][ T5826] RBP: ffff88802d9dfe08 R08: ffffffff818218d2 R09: fffffbfff1d7a960 [ 341.963148][ T5826] R10: dffffc0000000000 R11: fffffbfff1d7a960 R12: 1ffff11004ea540a [ 341.971462][ T5826] R13: ffff88802d9dfe00 R14: dffffc0000000000 R15: ffff88802752a050 [ 341.980001][ T5826] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 341.989416][ T5826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.996918][ T5826] CR2: 0000001b30618ff8 CR3: 00000000529c6000 CR4: 0000000000350ef0 [ 342.005420][ T5826] Call Trace: [ 342.008920][ T5826] [ 342.012035][ T5826] ? __pm_runtime_resume+0x12d/0x180 [ 342.017933][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.024080][ T5826] cm109_input_open+0x1f9/0x480 [ 342.029139][ T5826] input_open_device+0x1ed/0x360 [ 342.034973][ T5826] kbd_connect+0xe9/0x130 [ 342.039486][ T5826] input_register_device+0xce4/0x10c0 [ 342.045408][ T5826] cm109_usb_probe+0x1177/0x16d0 [ 342.050501][ T5826] usb_probe_interface+0x652/0xbc0 [ 342.055918][ T5826] ? __pfx_usb_probe_interface+0x10/0x10 [ 342.061898][ T5826] really_probe+0x2bb/0xad0 [ 342.066680][ T5826] __driver_probe_device+0x1a2/0x390 [ 342.072344][ T5826] driver_probe_device+0x50/0x430 [ 342.078332][ T5826] __device_attach_driver+0x2d6/0x530 [ 342.084105][ T5826] bus_for_each_drv+0x25a/0x2e0 [ 342.089152][ T5826] ? __pfx___device_attach_driver+0x10/0x10 [ 342.095302][ T5826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 342.101083][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.107293][ T5826] __device_attach+0x341/0x530 [ 342.112328][ T5826] ? __pfx___device_attach+0x10/0x10 [ 342.119429][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.125710][ T5826] ? do_raw_spin_unlock+0x13c/0x8b0 [ 342.131006][ T5826] bus_probe_device+0x189/0x260 [ 342.136176][ T5826] device_add+0x856/0xbf0 [ 342.140722][ T5826] usb_set_configuration+0x1999/0x1fe0 [ 342.146780][ T5826] usb_generic_driver_probe+0x88/0x140 [ 342.152430][ T5826] usb_probe_device+0x1ba/0x380 [ 342.158214][ T5826] ? __pfx_usb_probe_device+0x10/0x10 [ 342.170544][ T5826] really_probe+0x2bb/0xad0 [ 342.176282][ T5826] __driver_probe_device+0x1a2/0x390 [ 342.181933][ T5826] driver_probe_device+0x50/0x430 [ 342.187498][ T5826] __device_attach_driver+0x2d6/0x530 [ 342.193131][ T5826] bus_for_each_drv+0x25a/0x2e0 [ 342.199014][ T5826] ? __pfx___device_attach_driver+0x10/0x10 [ 342.205019][ T5826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 342.210473][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.216724][ T5826] __device_attach+0x341/0x530 [ 342.222063][ T5826] ? __pfx___device_attach+0x10/0x10 [ 342.228059][ T5826] bus_probe_device+0x189/0x260 [ 342.233282][ T5826] device_add+0x856/0xbf0 [ 342.237872][ T5826] usb_new_device+0x1052/0x19a0 [ 342.244093][ T5826] ? __pfx_usb_new_device+0x10/0x10 [ 342.249354][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.255395][ T5826] ? lockdep_hardirqs_on+0x9d/0x150 [ 342.260806][ T5826] hub_event+0x2bfd/0x50f0 [ 342.266025][ T5826] ? __pfx_hub_event+0x10/0x10 [ 342.270955][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.276845][ T5826] ? __lock_acquire+0xad5/0xd80 [ 342.281927][ T5826] ? __entry_text_end+0xfdfc5/0x1020c9 [ 342.288469][ T5826] ? process_scheduled_works+0x9cb/0x18e0 [ 342.294702][ T5826] process_scheduled_works+0xac5/0x18e0 [ 342.300687][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.306951][ T5826] ? assign_work+0x367/0x3d0 [ 342.311900][ T5826] worker_thread+0x870/0xd50 [ 342.316826][ T5826] ? __kthread_parkme+0x1a8/0x200 [ 342.322469][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 342.328098][ T5826] kthread+0x7b9/0x940 [ 342.333351][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 342.338674][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.343658][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.348432][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.353237][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.358013][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.363854][ T5826] ? lockdep_hardirqs_on+0x9d/0x150 [ 342.369237][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.374778][ T5826] ret_from_fork+0x4d/0x80 [ 342.379471][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.384474][ T5826] ret_from_fork_asm+0x1a/0x30 [ 342.389650][ T5826] [ 342.392827][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 342.400135][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/1:3 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(full) [ 342.412219][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 342.422815][ T5826] Workqueue: usb_hub_wq hub_event [ 342.427962][ T5826] Call Trace: [ 342.431268][ T5826] [ 342.434266][ T5826] dump_stack_lvl+0x241/0x360 [ 342.439088][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.444330][ T5826] ? __pfx__printk+0x10/0x10 [ 342.448979][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.454667][ T5826] ? vscnprintf+0x5d/0x90 [ 342.459037][ T5826] panic+0x349/0x880 [ 342.462967][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.468716][ T5826] ? __warn+0x174/0x4d0 [ 342.472890][ T5826] ? __pfx_panic+0x10/0x10 [ 342.477388][ T5826] ? ret_from_fork_asm+0x1a/0x30 [ 342.482392][ T5826] __warn+0x344/0x4d0 [ 342.486481][ T5826] ? usb_submit_urb+0x103d/0x18c0 [ 342.491534][ T5826] report_bug+0x2b3/0x500 [ 342.495872][ T5826] ? usb_submit_urb+0x103d/0x18c0 [ 342.500917][ T5826] ? usb_submit_urb+0x103d/0x18c0 [ 342.506126][ T5826] ? usb_submit_urb+0x103f/0x18c0 [ 342.511190][ T5826] handle_bug+0x89/0x170 [ 342.515556][ T5826] exc_invalid_op+0x1a/0x50 [ 342.520088][ T5826] asm_exc_invalid_op+0x1a/0x20 [ 342.525042][ T5826] RIP: 0010:usb_submit_urb+0x103d/0x18c0 [ 342.530708][ T5826] Code: 00 eb 66 e8 95 66 32 fa e9 75 f0 ff ff e8 8b 66 32 fa c6 05 50 87 b9 08 01 90 48 c7 c7 e0 58 f2 8c 4c 89 ee e8 e4 c1 f1 f9 90 <0f> 0b 90 90 e9 3c f0 ff ff e8 65 66 32 fa eb 12 e8 5e 66 32 fa 41 [ 342.550436][ T5826] RSP: 0018:ffffc90003866ab8 EFLAGS: 00010246 [ 342.556582][ T5826] RAX: 9e9c23091440d300 RBX: 0000000000000cc0 RCX: 0000000000100000 [ 342.564783][ T5826] RDX: ffffc9001b6cc000 RSI: 0000000000068ff0 RDI: 0000000000068ff1 [ 342.572774][ T5826] RBP: ffff88802d9dfe08 R08: ffffffff818218d2 R09: fffffbfff1d7a960 [ 342.580763][ T5826] R10: dffffc0000000000 R11: fffffbfff1d7a960 R12: 1ffff11004ea540a [ 342.588977][ T5826] R13: ffff88802d9dfe00 R14: dffffc0000000000 R15: ffff88802752a050 [ 342.596989][ T5826] ? __warn_printk+0x2a2/0x360 [ 342.601803][ T5826] ? usb_submit_urb+0x103c/0x18c0 [ 342.606874][ T5826] ? __pm_runtime_resume+0x12d/0x180 [ 342.612192][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.617883][ T5826] cm109_input_open+0x1f9/0x480 [ 342.622786][ T5826] input_open_device+0x1ed/0x360 [ 342.627767][ T5826] kbd_connect+0xe9/0x130 [ 342.632118][ T5826] input_register_device+0xce4/0x10c0 [ 342.637534][ T5826] cm109_usb_probe+0x1177/0x16d0 [ 342.642534][ T5826] usb_probe_interface+0x652/0xbc0 [ 342.647688][ T5826] ? __pfx_usb_probe_interface+0x10/0x10 [ 342.653335][ T5826] really_probe+0x2bb/0xad0 [ 342.657868][ T5826] __driver_probe_device+0x1a2/0x390 [ 342.663175][ T5826] driver_probe_device+0x50/0x430 [ 342.668234][ T5826] __device_attach_driver+0x2d6/0x530 [ 342.673629][ T5826] bus_for_each_drv+0x25a/0x2e0 [ 342.678512][ T5826] ? __pfx___device_attach_driver+0x10/0x10 [ 342.684443][ T5826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 342.689861][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.695520][ T5826] __device_attach+0x341/0x530 [ 342.700331][ T5826] ? __pfx___device_attach+0x10/0x10 [ 342.705632][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.711276][ T5826] ? do_raw_spin_unlock+0x13c/0x8b0 [ 342.716510][ T5826] bus_probe_device+0x189/0x260 [ 342.721388][ T5826] device_add+0x856/0xbf0 [ 342.725740][ T5826] usb_set_configuration+0x1999/0x1fe0 [ 342.731247][ T5826] usb_generic_driver_probe+0x88/0x140 [ 342.736825][ T5826] usb_probe_device+0x1ba/0x380 [ 342.741779][ T5826] ? __pfx_usb_probe_device+0x10/0x10 [ 342.747165][ T5826] really_probe+0x2bb/0xad0 [ 342.751700][ T5826] __driver_probe_device+0x1a2/0x390 [ 342.757014][ T5826] driver_probe_device+0x50/0x430 [ 342.762062][ T5826] __device_attach_driver+0x2d6/0x530 [ 342.767549][ T5826] bus_for_each_drv+0x25a/0x2e0 [ 342.772426][ T5826] ? __pfx___device_attach_driver+0x10/0x10 [ 342.778335][ T5826] ? __pfx_bus_for_each_drv+0x10/0x10 [ 342.783752][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.789407][ T5826] __device_attach+0x341/0x530 [ 342.794284][ T5826] ? __pfx___device_attach+0x10/0x10 [ 342.799599][ T5826] bus_probe_device+0x189/0x260 [ 342.804483][ T5826] device_add+0x856/0xbf0 [ 342.808844][ T5826] usb_new_device+0x1052/0x19a0 [ 342.813738][ T5826] ? __pfx_usb_new_device+0x10/0x10 [ 342.818963][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.824613][ T5826] ? lockdep_hardirqs_on+0x9d/0x150 [ 342.830000][ T5826] hub_event+0x2bfd/0x50f0 [ 342.834498][ T5826] ? __pfx_hub_event+0x10/0x10 [ 342.839280][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.844938][ T5826] ? __lock_acquire+0xad5/0xd80 [ 342.849830][ T5826] ? __entry_text_end+0xfdfc5/0x1020c9 [ 342.855404][ T5826] ? process_scheduled_works+0x9cb/0x18e0 [ 342.861145][ T5826] process_scheduled_works+0xac5/0x18e0 [ 342.866761][ T5826] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.872811][ T5826] ? assign_work+0x367/0x3d0 [ 342.877429][ T5826] worker_thread+0x870/0xd50 [ 342.882052][ T5826] ? __kthread_parkme+0x1a8/0x200 [ 342.887095][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 342.892216][ T5826] kthread+0x7b9/0x940 [ 342.896315][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 342.901438][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.906041][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.910645][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.915246][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.919848][ T5826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.925493][ T5826] ? lockdep_hardirqs_on+0x9d/0x150 [ 342.930706][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.935396][ T5826] ret_from_fork+0x4d/0x80 [ 342.939824][ T5826] ? __pfx_kthread+0x10/0x10 [ 342.944444][ T5826] ret_from_fork_asm+0x1a/0x30 [ 342.949240][ T5826] [ 342.952619][ T5826] Kernel Offset: disabled [ 342.956975][ T5826] Rebooting in 86400 seconds..