last executing test programs: 2m52.673623305s ago: executing program 3 (id=219): r0 = epoll_create1(0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) sendmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xa}, 0x80, 0x0}}], 0x1, 0xc88c4) (async) socket$inet6(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2}, 0x20048894) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r4]) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) getpid() (async, rerun: 32) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10) (async) getpeername(r5, 0x0, 0x0) close(r0) 2m52.294616959s ago: executing program 3 (id=220): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000071180f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x6, 0x4b, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x82, 0x59, 0xdc, 0x40, 0x167b, 0x4001, 0x2257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x39, 0x1, 0x5, 0x7, 0x10, 0xb, "", [{{0x9, 0x4, 0xf, 0x1, 0x1, 0x75, 0x53, 0x8a, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x1e}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x4, 0x3, 0x7}, @mixer_unit={0xb, 0x24, 0x4, 0x4, 0xe, "6be2ec17e745"}]}], [{{0x9, 0x5, 0xa, 0x2, 0x40, 0xcb, 0x7, 0x7}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2m51.539252995s ago: executing program 3 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x9c}}, 0x0) 2m51.387454521s ago: executing program 3 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getneightbl={0x14, 0x42, 0x200, 0x70bd2b, 0x25dedbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r1 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x210803) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0000}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000003c0)={0x1}, 0x1) listen(r3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004081000418e00000004fcff", 0x58}], 0x1) close_range(r2, 0xffffffffffffffff, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000001180)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000100)=0x6a1) r6 = socket(0x22, 0x2, 0x2) sendto(r6, 0x0, 0x0, 0x4008044, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000011c0), 0x531401, 0x0) ioctl$PPPIOCDISCONN(r7, 0x7439) socket$nl_route(0x10, 0x3, 0x0) fchdir(0xffffffffffffffff) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2m50.940436345s ago: executing program 3 (id=227): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0xffff}}, 0x14}}, 0x0) r2 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) pipe(&(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) write$uinput_user_dev(r6, &(0x7f0000003440)={'syz1\x00', {0x0, 0x6c, 0x4, 0x2}, 0x47, [0x2, 0x4, 0x2, 0x6, 0xde4, 0xfffffffe, 0x3, 0x6, 0x8, 0x4000000, 0x10, 0x5, 0x0, 0x3ff, 0x8, 0x55a858d3, 0x1, 0x101, 0xe, 0x7, 0x10001, 0x5, 0x120000, 0x7, 0x4, 0x7, 0x2, 0x6, 0x2006, 0x8, 0x1000, 0x2, 0xe, 0xb, 0x5, 0x2, 0x9, 0x0, 0x1, 0x40, 0x10000, 0xe, 0x80000000, 0x7f, 0x1, 0xc787, 0xa, 0x3, 0x6, 0x7fffffff, 0x8, 0xff, 0x7, 0x6, 0x5, 0x48, 0x8, 0x7, 0x9, 0x9, 0x2, 0x8, 0x3, 0x4], [0x6, 0x8b34, 0x3, 0x2, 0x8, 0x3, 0xffff215c, 0xfffffffe, 0x6, 0x3, 0x6, 0x5f6, 0xfffffffb, 0x4, 0x6, 0x5, 0x10, 0x5a7, 0x9, 0x9, 0x8, 0xffff, 0x3, 0x3ff, 0x0, 0xa31, 0x8, 0x7, 0x7, 0xfff, 0x1, 0x1400000, 0x200003, 0xe, 0x42ed, 0x3, 0xd717, 0xfd, 0x10000, 0x1, 0x5, 0x7, 0x200, 0x8279, 0x1, 0x3, 0x4816de0f, 0x5, 0x10, 0xc4f0, 0x9, 0xc, 0x7, 0xfffffffb, 0x4d7c2167, 0x3, 0x2, 0x7ff, 0x0, 0x10001, 0x7fffffff, 0x7f, 0x8, 0x9], [0xd, 0x2, 0x1, 0x7, 0xfff, 0x7ff, 0xfffffffe, 0xffffffff, 0xbaf3, 0xfffffff6, 0x1, 0x3, 0x0, 0x2, 0x3d67, 0x2, 0x1, 0x1000, 0x6, 0x7, 0x80000001, 0x80000001, 0xffff, 0x3, 0x0, 0x5, 0x0, 0xffffffff, 0xfcd8, 0x46d, 0x1, 0x3, 0x8, 0x8, 0xf, 0xdef, 0x8, 0x0, 0x8, 0x103, 0xffffff43, 0x3ff, 0xf9, 0x6, 0xfffffffa, 0x5, 0x2, 0x2, 0x401, 0x3d8, 0x6c647fbc, 0x10000, 0x57, 0xfffff000, 0x80000001, 0x4, 0x5, 0x8, 0x4, 0xfff, 0xad, 0x1, 0x9, 0xe], [0x0, 0x40, 0x2000, 0x5, 0xfffffac9, 0x2, 0x7fffffff, 0x0, 0x6, 0xb8, 0x41d, 0x1a, 0x6, 0xffffffff, 0x2, 0x79, 0x2, 0x3a2, 0x2, 0xa, 0x6, 0x6, 0x1, 0x7fffffff, 0x3, 0x7, 0x4, 0x800, 0x5, 0x200, 0x8, 0x400008, 0x6b0, 0x40, 0x8000, 0x0, 0x6, 0x3, 0x0, 0x6, 0x7, 0x4, 0x6, 0x7c7d914, 0x2, 0x1, 0x5, 0x4, 0x2, 0xe, 0x2, 0x3, 0x2, 0x5, 0x7, 0x4, 0xfffff0ad, 0x1000, 0x3, 0x7fff, 0x5, 0xfff80000, 0x1, 0x2]}, 0x45c) writev(r6, &(0x7f0000005000)=[{0x0}, {&(0x7f0000003d00)='Q', 0x1}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r11 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r11}) io_uring_enter(r2, 0xf, 0x7929, 0x1, 0x0, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 2m50.543473402s ago: executing program 3 (id=232): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) stat(0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000180)={[{@norecovery}, {@norecovery}, {@nodiscard}, {@discard}, {@nobarrier}, {@discard}, {@errors_continue}, {@order_strict}], [], 0x2c}, 0x3, 0xf46, &(0x7f0000000400)="$eJzs3U9sHNUZAPA3a6+dxE68BgoGSkihFYGCHZJUTW9BoB4Rl95BIaERhtKGHoj4E3pAVEIUCXGqOFBxoVRKkVoJVKlCPdGe+ufWE+qFVlUqBfXQIiWuYr+x189+3fV4Pbvr/f2kz89v3ux832Qda2Y8+yYAI6ux/PX48bkihLc+evOhFx4vfn1t2e2raxxa/lrEXiuE0GzrF8n2Po0Lrlx+/tRmbRGOLn8t++HhS6uvnQohXAiHwsehFd5fWPz8vbcfPPzBK3tufP38ky/u0O6vSvcDAAB2o4t/WPzr3X///b2zX1w8eDJMri4vj89bsT8Vj/uPxAPl8ni5Edb3i7ZoN5GsNxajkaw3lqw3nuQZz+RrJttpZtab6JBvrG3ZZvsJAAAAw6g8r22FojG/rt9ozM+vnPdf8+nMRDH/9NnFM+f6VCgAAABQ2b9fWr7pVoxErN3f0f9ahBBCCCFE91E4jhNCbDuWZvpy2QEAAAAYYe3zhe3ZbIULvZ2pa3VrrY35N1v/0gONzV8PPdDp56/XP/+Dmv8/S0tL/czf7/3P5X/3Zb9xAACobrceTZb7VR5Hl/MYpPMIjiWv2+rxfyPZzvgW68zNKzgs8w3m6kz/XQdVrv6tvo/9kqs/nQ9zUOXqT+fpHFS5+idrrqOqXP2bXnsdQLn699ZcR1W5+vfVXEdVufqnaq6jqlz90zXXUVWu/v0111FVrv4DNddRVa7+YbmtNld/q+Y6qsrVP1tzHVXl6r+uu5f/o5e1VJGr//qa66gqV/8NNdfRL7fFtvx3OJiMt58/p+d0w3KOBwAAAKPuv+b/EwMUjQGoQQghhBBCCCF2Y7zU7wsQAAAAQN+VnwsoP/W+FJXjYx3GxzuMNzuMT3QYn+wwDgAAAITwm1fP3PxGsfY5/+3Oh1fOG1XOv7TVeYzS+Qi3mn+7855tN/+wzFsGAADAaCm+/fHVex5659nZLy4ePNl29ns1nu+W84COx2sDH8Z+eV/AdNIvynPok+vzNDLrpdcH9ue298g2dxQAAABGWHn+3gpFY77tvLsVGo35+bXz8bnQLM6cXTx9JPbL57N8MtOcvLb8/q6yDctTyQAAAGB3WTvf3/z8v3yO71yYKOafPrt45txKf3p1ebPRfl1gZm150X5doJUsP5pZfiz2y+d3fndm7/Ly+VPfW3y81zsPAAAAI+Lcc+effGxx8fQPevlNONnjDfrGNzv2zb7BKGPQvun3byYAAKDXPvvszeYPj03/duXz/2vz35Wf/z8U+604t98f4wrlfQLl5wA2fF7/0fV5ZnLrPbN+vVay3liMyaTuPW3bCW3zDZavm83la63fzkQm31SSbzrJl85TMJ6sX+Y7kCxPPwFRrjeTLE/nYRxPchRJ/jsCAAAA5C08+9QzC+eeO3/f2acee+L0E6efPnb0xLdOnDhy/zfvX1i+r3+h/e5+AAAAYBit3fTb70oAAAAAAAAAAAAAAAAAAABgdNXxOLF+7yMAAACMun+9FEK4IITIxMojMPtfhxBCDF2c9fuzv1E+LHnLrx1feRByv+sfpdjTw22NDcD+9D8mBuP4rbF20tX3WsRORHMI39+lpfRJ8wAAAAA768rl50+1txtcKHqab3VrrZXmasxbttP3/WX2WpSrXXpg/fWSfSGEPy8tLfW0KEZW3T//8g9X/ndf7m3+8k+D3f/+a6zfwMlqee9a+Plce/5bxvP523+5Xkr3/5Fq+Q8n+e8K+fzt+7/0TpL/0RD/0LY1dyf593WZf8P+P7Pl1MvuifnnYv/wnd3mX//+T8a23I+9Xeb/erL/j4du8yf73+oyYeLemB8ARlGj3wXskPIooTyOnor9cn/j4eaGI7etHv83ku2Mb7vy9dstj4Nuiv3yeGk6yVvaav1Tyfb2rw01t1JnaljuKsnV36v3cafl6u/qzRsAufonaq6jqlz9kzXXUVWu/j0111FVrv5uz0P7LVf/vprrqCpX/1TNdVSVq3+65jqqytW/v+Y6qsrVf6DmOqrK1T9Tcx1V5eqveFmtdrn6Z2uuo6pc/dfVXEdVufqvr7mOqnL131BzHf1ya2xz58Pl+edMHCv7raQ/ucm/5W69tgAAAADD5p9x/r9PKs8RI4QQQgixWbTdDdP3WoQQQoi+xPe/0f8aVsMn10fbzn6aGYBB5ff/aNvw/g/LB8foCf//R5v3n/+nvIe/SPqlsQ7j4x3Gmx3GJ5Lx9Od1ssP49cl2l6Jy/IYO41/qMH6gw/hNHcbnOozf3GH8lg7jt3YYBwAAYDTcGFvnhwAAALB7vfCLD1/71V2PXp794uLBk2Fiw7zzR2J/Mv5t/dXYT+e9LzXj3/x/FPs/i+3vYvu3ZH33nwAAAMDOK58T4+//AAAAsHuVzyl1/g8AAAC712xsnf8DAADA7nVdbJ3/AwAAwC5W7Nl8cWzL6wJ3xLbbef0AgMH35djeFtuDsb09tl+JbXkccGdsv1pTfQBA7/z0Oz8+8UaxNt//sWT8SlxethtcWLlSUDTWz+S/N7b7Yvu1LutJnwfQbf7SgS7z7FT+mW3mBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2j8by1+PH54oQ3vrozYd+MvHan64tu311jUPLX4vYa4UQmquvK0fX+r+MK165/Pyp9vZqbItwNBShWF0eHr60mmkqhHAhHAofh1Z4f2Hx8/fefvDwB6/sufH180++uIP/BOv2DwAAAHaj/wUAAP//hwkcVQ==") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000000600)=""/4099, 0x1003, 0x110) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000200)="9207", 0x2}], 0x1, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000140)={r1, 0x2, 0xfff, 0x7, &(0x7f0000000100)=[{0x4, 0xe, 0xc61, 0xf}, {0x151d, 0x8000, 0x5, 0x100}, {0x8, 0x6c6a, 0x80, 0x3}, {0x8, 0x300, 0x1, 0xff80}, {0x0, 0xf193, 0xfff8}, {0x4, 0x5, 0x1, 0x7f}, {0x3ff, 0x3, 0x40, 0xf6bf}]}) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000080)=0x36) 2m50.302673622s ago: executing program 32 (id=232): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) stat(0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000180)={[{@norecovery}, {@norecovery}, {@nodiscard}, {@discard}, {@nobarrier}, {@discard}, {@errors_continue}, {@order_strict}], [], 0x2c}, 0x3, 0xf46, &(0x7f0000000400)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000000600)=""/4099, 0x1003, 0x110) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$minix(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x1000008, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000200)="9207", 0x2}], 0x1, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000140)={r1, 0x2, 0xfff, 0x7, &(0x7f0000000100)=[{0x4, 0xe, 0xc61, 0xf}, {0x151d, 0x8000, 0x5, 0x100}, {0x8, 0x6c6a, 0x80, 0x3}, {0x8, 0x300, 0x1, 0xff80}, {0x0, 0xf193, 0xfff8}, {0x4, 0x5, 0x1, 0x7f}, {0x3ff, 0x3, 0x40, 0xf6bf}]}) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000080)=0x36) 1m3.939120325s ago: executing program 4 (id=557): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) syz_open_dev$sg(&(0x7f0000000180), 0x401, 0x8000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x77cf7163, 0x84, 0x105}, 0x50) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, &(0x7f0000000100)="7e0680f4b7e98d61972c5e348504a3f3ff515b6df33209f4207414fbd6f3bc010fab027a6500ac547edd7be48657036af5fa3c815422ea333007a8218a9a6a937e70694390a28ed31f51868320752c39790a7f5da4b9efd08dda21efd240222dfe405ee26bb71d37aa07b26799", &(0x7f0000000240)=""/254, 0x4}, 0x20) (async) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80, &(0x7f0000000e00)={[{@umask={'umask', 0x3d, 0xe}}, {@creator={'creator', 0x3d, "71c54bc5"}}, {@umask={'umask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x5}}, {@nobarrier}, {@part={'part', 0x3d, 0x8d4}}, {@nls={'nls', 0x3d, 'cp866'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") (async) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) (async) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$midi(0x2, 0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011001000000400c200b104000010203010902380001010740f8090400000001033000132403030406040806470208030803040c08c2132403020706010608010000000937010980"], 0x0) 1m1.005686096s ago: executing program 4 (id=564): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000005c0)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8000}}}}}}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_io_uring_setup(0x1105, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x8000000, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)={0x40000006}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x803a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x10000, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x187], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0xc, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x1000, 0x2, 0x4, 0x9, 0x3, 0x7, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xc, 0x3, 0x9, 0x3e7, 0xb, 0x5, 0x6, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x2, 0x59, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x2, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 1m0.291197446s ago: executing program 4 (id=565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x796}, &(0x7f0000000240)=0x8) 1m0.071377353s ago: executing program 4 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000000c0)="9aafb355000f90e3660f73f2650f01d7670f01dfaa0fc7bfb100660f0f1ba0360f20d1266300", 0x26}], 0x1, 0x10, &(0x7f00000002c0), 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000140)) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) epoll_create1(0x80000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x9, 0xfffffffe, 0x18, 0xb, 0x2e, 0x2, 0x2000009, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r10, &(0x7f00000003c0)={0xa, 0x4e21, 0x400d, @remote, 0xb5}, 0xb) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) 59.25384494s ago: executing program 4 (id=569): sendmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x2}, 0x80, 0x0}}], 0x1, 0x48c5) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000080), 0x1000000000000152) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000004480)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x68}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='cpuset\x00') lseek(r2, 0x6, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000000180)={&(0x7f00000006c0)=[{0x8, 0x1000, 0x1, 0xb}, {0x1f, 0x4, 0x3}], 0x2, 0x20, 0x0, 0x6}) 58.926422884s ago: executing program 4 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0xf}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000002c0)={0xfcc, 0x1ff, {}, {0x0}, 0x5, 0x8001}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r6, 0x0) setresuid(r4, 0x0, r6) r7 = getuid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)=0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_loose}, {@access_uid={'access', 0x3d, r2}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@flag='nomand'}, {@euid_gt={'euid>', r6}}, {@obj_role}, {@measure}, {@pcr={'pcr', 0x3d, 0x21}}, {@pcr={'pcr', 0x3d, 0x13}}, {@permit_directio}, {@fowner_lt={'fowner<', r7}}, {@fowner_lt={'fowner<', r8}}]}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = getpgid(0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x44287}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000080)={0x8, 0x8, 0x3, 0x0, 0x1, [0xffffffff, 0xcb, 0x6, 0x9]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 43.73398377s ago: executing program 33 (id=571): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0xf}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000002c0)={0xfcc, 0x1ff, {}, {0x0}, 0x5, 0x8001}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r6, 0x0) setresuid(r4, 0x0, r6) r7 = getuid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000300)=0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_loose}, {@access_uid={'access', 0x3d, r2}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@flag='nomand'}, {@euid_gt={'euid>', r6}}, {@obj_role}, {@measure}, {@pcr={'pcr', 0x3d, 0x21}}, {@pcr={'pcr', 0x3d, 0x13}}, {@permit_directio}, {@fowner_lt={'fowner<', r7}}, {@fowner_lt={'fowner<', r8}}]}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = getpgid(0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x74, 0x0, 0x800, 0x44287}, [@IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000080)={0x8, 0x8, 0x3, 0x0, 0x1, [0xffffffff, 0xcb, 0x6, 0x9]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.230024416s ago: executing program 6 (id=913): ptrace(0x10, 0x0) ptrace$setopts(0x4202, 0x0, 0xe96, 0x455b843fbdb64c65) 2.08962748s ago: executing program 6 (id=917): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x1, r0, &(0x7f0000000040), 0x6) 1.895485342s ago: executing program 6 (id=921): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40008087}, 0x2d1c97c1054d85c4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x19, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 1.634792766s ago: executing program 2 (id=923): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'io'}, 0xa) 1.634436766s ago: executing program 5 (id=925): r0 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 1.606014641s ago: executing program 2 (id=926): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000280)=ANY=[], 0x0) 1.513046847s ago: executing program 5 (id=927): ptrace(0x10, 0x0) ptrace$setopts(0x4202, 0x0, 0xe96, 0x455b843fbdb64c65) 1.447671887s ago: executing program 2 (id=928): request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, 0x0, 0x0) 1.447521728s ago: executing program 0 (id=929): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240)=0x29, 0x4) 1.406772554s ago: executing program 5 (id=930): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x1000) 1.365031821s ago: executing program 2 (id=931): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 1.299632302s ago: executing program 0 (id=932): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="71050406030508200501"], 0x11) 1.224327325s ago: executing program 5 (id=934): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@ethernet={0x1}, {&(0x7f00000000c0)=""/205, 0xcd}, 0x0, 0x11}, 0xa0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 994.230513ms ago: executing program 6 (id=937): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xdb6d4b04508a3c99) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 923.386376ms ago: executing program 0 (id=939): unshare(0x22020400) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x7}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff5, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0x8000, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x3, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0xfffffffd, 0x3, 0xfffffffd, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffef, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0xb, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x3, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x4452e3f, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0xfffffffe, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0xd33, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x14, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 827.054241ms ago: executing program 0 (id=941): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x3000000, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in6=@loopback, 0x0, 0x33}, 0x1e, @in6=@empty, 0x0, 0x1, 0x3, 0x0, 0x4, 0x49}]}]}, 0x13c}}, 0x0) 735.577737ms ago: executing program 1 (id=942): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) 735.347927ms ago: executing program 2 (id=943): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20002016}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x6, 0x2, 0x562, 0x7f, 0x1b, "0e4c25a4651306c0ab46b52445abf3859952fd"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x2, 0x4351, 0x10000, 0x10, "99acbb61299737c41bb6fc16976cc7adbdcb6d"}) 713.004691ms ago: executing program 5 (id=944): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r0, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) 697.716383ms ago: executing program 6 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000040a030000000000000000000a00000a0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 627.595995ms ago: executing program 0 (id=946): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20) 594.6937ms ago: executing program 5 (id=947): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40008087}, 0x2d1c97c1054d85c4) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x19, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) 593.139071ms ago: executing program 1 (id=957): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x2df8, &(0x7f00000000c0)={0x0, 0x2e87, 0x10, 0x3, 0x1d2}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x378, &(0x7f0000000200)={0x0, 0x2d48, 0x40, 0x3, 0x312, 0x0, r0}, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 536.80671ms ago: executing program 6 (id=948): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x1b, &(0x7f0000002000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, 0x0) 431.478568ms ago: executing program 0 (id=949): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r5 = shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmdt(r5) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 298.13039ms ago: executing program 1 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 235.947931ms ago: executing program 1 (id=951): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) 120.27719ms ago: executing program 1 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f00)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x42220, 0x10708}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20048000) 9.434119ms ago: executing program 1 (id=953): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) unshare(0x68040200) memfd_create(0x0, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000010001fff000000000100007f84000000", @ANYRES32=0x0, @ANYBLOB="00000000022100007c0012800b00010067656e65766500006c000280050009000100000008000b40000007f5060005004e20000005000a000100000005000a00092074b3140007000000000000000000000000000000000005000400020000000500"], 0xa4}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=954): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000001c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rXFUbAPDn3nz2M3n79v1orRotQlBMmrRqF24UBZGKgi7qMk6mJXTaSBPBfmCjiCtBCroWl6J/gbgRQdSV4Epw5UoKRbNp6ypyZ+5NMpNM2iSTTO38fjCZc+aemXueOffce+45kwA61lD2J4nYHRG/RsRALVtfYKj2dHP+cunW/OVSEgsLr/6RVMvdmL9cKooW79uVZ4bTiPT9JN9JvZkLF89MVCrl83l+dPZsX56cOF0+XT43fvz4saNjTz05/kRL4sziunHwnelDB154/epLpZNX3/jhy6y+u/Pty+NYp19Gm2wYygL/c6GqcdsjG9zZ3WrPsnTS3caKsC5dEZE1V0+1/w9EVyw13kA8/15bKwdsqeza1Nd889wCcA9Lot01ANqjuNDvnO8qZffAK++DB7Zy+NF215+p3QBlcd/MH7Ut3ZHmZXoa7m9baSgiTs799Wn2iM3NQwAA3JEPS5+c6I2IS7e+eDEbeyyN9tLu/1aff6v+3ZuPBAcj4l8RsS8i/h0R+yPiPxGRlf1fRPx/k/VZOf5Jr23yI9eUjf+ezte26sd/xegvBrvy3J5q/D3JqalK+Uj+nQxHT1+WH1tjH9889/NHzbYtH/9lj2z/xVgwr8e17oYJusmJ2YnqoLQFrr8bcbA7SVbGnyyuBCQRcSAiDq7vo/cWialHPz/UrNDt419DC9aZFj7LwpvL2n8uGuIvJLX1yTdHZy5cfHzqbOP65Gh/VMpHRoujYqUff/rglWb7r8Xfn+dWj3/H5sNs6nq59rys/ZdtXewDS+u1M63d/waP/7Q3ea26ztybv/b2xOzs+bGI3uRENV/3+vjSe4t8UT47/ocPr97/9+Xvydr/vojIDuL7I+KBiHgwr/tDEfFwRBxeI8bvn719/JFu4PhvgSz+yVXPf4vH/2BS1/7rT3Sd+e6rZvu/s/Y/Vk0N569Uz38Nkob8atXpjuhrrOBmvz8AAAD4J0irv4FP0pHFdJqOjNR+w78/dqaV6ZnZx05Nv3VusvZb+cHoSYuZroF8PrQyVSmPJXP5J9bmR8fzueJivvRoPm/8cdeOan6kNF2ZbHPs0Ol2Nen/md+72l07YIvVLy8VC8DjvW2pDLDNGtfR0/rslZfDyQDuVf5fGzrXbfp/ul31ALaf6z90rtX6/5WGvLUAuDe5/kPn0v+hQ6Xfrvry19teEaAdXP+hI23m//q3MNF/d1SjPYntbpRYV+EoEmnbv6hWJfrjrqjGxhOX8t7cyk9u84kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRf4OAAD//+Nr2uw=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) kernel console output (not intermixed with test programs): after KVM_RUN may cause guest instability [ 207.636661][ T6542] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 207.683392][ T5119] usb 2-1: Using ep0 maxpacket: 16 [ 207.729210][ T4973] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.786766][ T5120] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 208.531327][ T5119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.543408][ T4973] usb 6-1: Using ep0 maxpacket: 32 [ 208.574197][ T5119] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.590710][ T5119] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 208.600434][ T5120] usb 5-1: Using ep0 maxpacket: 16 [ 208.607119][ T5119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.621312][ T5119] usb 2-1: config 0 descriptor?? [ 208.622367][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 208.669324][ T5120] usb 5-1: device descriptor read/all, error -71 [ 208.751005][ T6560] loop0: detected capacity change from 0 to 64 [ 208.893145][ T6537] loop1: detected capacity change from 0 to 256 [ 208.921609][ T4973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.933254][ T4973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.943291][ T4973] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 208.952541][ T4973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.962485][ T4973] usb 6-1: config 0 descriptor?? [ 209.022068][ T6537] FAT-fs (loop1): Directory bread(block 64) failed [ 209.046574][ T6537] FAT-fs (loop1): Directory bread(block 65) failed [ 209.184706][ T6537] FAT-fs (loop1): Directory bread(block 66) failed [ 209.454452][ T6537] FAT-fs (loop1): Directory bread(block 67) failed [ 209.707259][ T6537] FAT-fs (loop1): Directory bread(block 68) failed [ 209.802209][ T6537] FAT-fs (loop1): Directory bread(block 69) failed [ 209.823404][ T6537] FAT-fs (loop1): Directory bread(block 70) failed [ 209.851612][ T6537] FAT-fs (loop1): Directory bread(block 71) failed [ 209.898803][ T6537] FAT-fs (loop1): Directory bread(block 72) failed [ 210.010652][ T6537] FAT-fs (loop1): Directory bread(block 73) failed [ 210.023587][ T26] audit: type=1326 audit(1775951412.348:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.0.432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79669be819 code=0x0 [ 210.066083][ T26] audit: type=1326 audit(1775951412.378:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6568 comm="syz.0.432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79669be819 code=0x0 [ 210.223347][ T5119] usbhid 2-1:0.0: can't add hid device: -71 [ 210.229573][ T5119] usbhid: probe of 2-1:0.0 failed with error -71 [ 210.285921][ T5119] usb 2-1: USB disconnect, device number 14 [ 210.342727][ T6577] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.403357][ T4236] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 210.476175][ T6577] loop1: detected capacity change from 0 to 4096 [ 210.963341][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 211.030947][ T6580] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.263822][ T4973] usbhid 6-1:0.0: can't add hid device: -71 [ 211.270150][ T4236] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 211.279561][ T4973] usbhid: probe of 6-1:0.0 failed with error -71 [ 211.293354][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.310075][ T6582] loop5: detected capacity change from 0 to 512 [ 211.313585][ T4973] usb 6-1: USB disconnect, device number 10 [ 211.338121][ T4236] usb 3-1: Product: syz [ 211.342463][ T4236] usb 3-1: Manufacturer: syz [ 211.366678][ T4236] usb 3-1: SerialNumber: syz [ 211.383857][ T4236] usb 3-1: config 0 descriptor?? [ 211.400951][ T6577] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 211.414889][ T6577] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 211.441779][ T26] audit: type=1804 audit(1775951413.758:27): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.434" name="/newroot/90/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 211.581123][ T6582] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.596032][ T6582] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.187427][ T4236] airspy 3-1:0.0: Board ID: 00 [ 212.192277][ T4236] airspy 3-1:0.0: Firmware version: [ 212.341841][ T26] audit: type=1800 audit(1775951414.658:28): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.436" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 212.392232][ T6595] loop1: detected capacity change from 0 to 512 [ 212.398457][ T6596] loop4: detected capacity change from 0 to 512 [ 212.456073][ T6596] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 212.479769][ T6596] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 212.482637][ T6574] loop2: detected capacity change from 0 to 1024 [ 212.515574][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.534467][ T6574] hfsplus: invalid gid specified [ 212.539528][ T6574] hfsplus: unable to parse mount options [ 212.544514][ T6596] EXT4-fs (loop4): 1 truncate cleaned up [ 212.564235][ T6596] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 212.593723][ T6595] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.933450][ T26] audit: type=1800 audit(1775951415.238:29): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.447" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 213.363458][ T4236] airspy 3-1:0.0: usb_control_msg() failed -110 request 0e [ 213.507829][ T4236] airspy 3-1:0.0: Registered as swradio24 [ 213.518249][ T4236] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 213.688827][ T4973] usb 3-1: USB disconnect, device number 24 [ 213.854726][ T6612] loop4: detected capacity change from 0 to 512 [ 214.183660][ T6616] loop2: detected capacity change from 0 to 2048 [ 214.376818][ T6612] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.650832][ T6616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.779208][ T6612] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.873791][ T4973] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 215.973464][ T6607] loop0: detected capacity change from 0 to 32768 [ 216.030138][ T6607] JBD2: Ignoring recovery information on journal [ 216.320636][ T4973] usb 6-1: Using ep0 maxpacket: 16 [ 217.094612][ T6607] JBD2: recovery failed [ 217.098937][ T6607] (syz.0.439,6607,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 217.169517][ T6607] (syz.0.439,6607,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 217.233538][ T4973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.236151][ T6607] (syz.0.439,6607,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 217.313352][ T4973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.333244][ T4973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.343276][ T6607] (syz.0.439,6607,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 217.364519][ T4973] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.379248][ T6607] (syz.0.439,6607,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 217.409370][ T4973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.430709][ T4973] usb 6-1: config 0 descriptor?? [ 217.717461][ T1109] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 218.093513][ T1109] usb 5-1: Using ep0 maxpacket: 32 [ 218.213533][ T1109] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 218.221672][ T1109] usb 5-1: config 0 has no interface number 0 [ 218.348136][ T6656] loop2: detected capacity change from 0 to 512 [ 218.366929][ T4973] HID 045e:07da: Invalid code 65791 type 1 [ 218.387727][ T4973] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input12 [ 218.389645][ T6660] loop0: detected capacity change from 0 to 512 [ 218.422388][ T4973] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 218.428195][ T1109] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 218.450071][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.462405][ T6656] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 218.473385][ T6656] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 218.478052][ T1109] usb 5-1: Product: syz [ 218.492737][ T1109] usb 5-1: Manufacturer: syz [ 218.519425][ T6656] EXT4-fs (loop2): 1 truncate cleaned up [ 218.533898][ T1109] usb 5-1: SerialNumber: syz [ 218.553492][ T6656] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none. [ 218.611194][ T1109] usb 5-1: config 0 descriptor?? [ 218.655539][ T6660] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 218.667337][ T6624] loop5: detected capacity change from 0 to 256 [ 218.673814][ T6660] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.704960][ T1109] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 218.921713][ T6624] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 219.334249][ T1109] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 219.389677][ T26] audit: type=1800 audit(1775951421.708:30): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.443" name="file1" dev="loop5" ino=1048615 res=0 errno=0 [ 219.412082][ T1109] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 219.541198][ T26] audit: type=1800 audit(1775951421.768:31): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.450" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 219.555951][ T6658] loop1: detected capacity change from 0 to 32768 [ 219.645130][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 219.666717][ T6658] JBD2: Ignoring recovery information on journal [ 219.708127][ T6658] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 219.723543][ T5120] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 219.840723][ T4236] usb 5-1: USB disconnect, device number 22 [ 219.843682][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 219.858965][ T4236] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 219.914672][ T4236] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 219.947404][ T4236] quatech2 5-1:0.51: device disconnected [ 220.193791][ T6676] Illegal XDP return value 697532416, expect packet loss! [ 220.274442][ T5234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.428162][ T6683] loop0: detected capacity change from 0 to 256 [ 220.448731][ T6685] loop4: detected capacity change from 0 to 2048 [ 220.504930][ T6683] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 220.543645][ T5234] usb 2-1: Using ep0 maxpacket: 16 [ 220.663669][ T5234] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 220.685616][ T5234] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 220.709739][ T1109] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 220.740363][ T5234] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 220.771185][ T5234] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 220.803316][ T5234] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 220.820246][ T5234] usb 2-1: config 1 interface 0 has no altsetting 0 [ 220.827614][ T5234] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 220.844779][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.896394][ T5234] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 220.941406][ T5119] usb 6-1: USB disconnect, device number 11 [ 220.953581][ T1109] usb 3-1: Using ep0 maxpacket: 32 [ 221.009667][ T6690] loop4: detected capacity change from 0 to 32768 [ 221.111158][ T6690] XFS (loop4): Mounting V5 Filesystem [ 221.134207][ T5234] scsi host1: usb-storage 2-1:1.0 [ 221.175463][ T6703] loop5: detected capacity change from 0 to 512 [ 221.191497][ T6690] XFS (loop4): Ending clean mount [ 221.233501][ T1109] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 221.245313][ T26] audit: type=1800 audit(1775951423.568:32): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 221.245335][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.283381][ T26] audit: type=1800 audit(1775951423.598:33): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 221.343781][ T1109] usb 3-1: Product: syz [ 221.348027][ T1109] usb 3-1: Manufacturer: syz [ 221.352659][ T1109] usb 3-1: SerialNumber: syz [ 221.357812][ T6703] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.395334][ T1109] usb 3-1: config 0 descriptor?? [ 221.456525][ T6703] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.575929][ T4193] XFS (loop4): Unmounting Filesystem [ 221.781204][ T5120] usb 2-1: USB disconnect, device number 15 [ 221.873829][ T1109] airspy 3-1:0.0: Board ID: 00 [ 221.889524][ T1109] airspy 3-1:0.0: Firmware version: [ 222.294767][ T6674] loop2: detected capacity change from 0 to 1024 [ 222.354443][ T6674] hfsplus: invalid gid specified [ 222.359472][ T6674] hfsplus: unable to parse mount options [ 222.391293][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 222.692503][ T26] audit: type=1800 audit(1775951425.008:34): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.459" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 222.870904][ T6721] loop4: detected capacity change from 0 to 32768 [ 222.955204][ T6721] JBD2: Ignoring recovery information on journal [ 222.993843][ T6723] loop0: detected capacity change from 0 to 32768 [ 223.050668][ T6721] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.077193][ T6723] XFS (loop0): Mounting V5 Filesystem [ 223.153317][ T5234] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 223.175326][ T1109] airspy 3-1:0.0: usb_control_msg() failed -110 request 0e [ 223.229352][ T1109] airspy 3-1:0.0: Registered as swradio24 [ 223.249391][ T1109] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 223.264827][ T6723] XFS (loop0): Ending clean mount [ 223.369249][ T5120] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 223.415568][ T1109] usb 3-1: USB disconnect, device number 25 [ 223.442910][ T4196] XFS (loop0): Unmounting Filesystem [ 223.594899][ T5225] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 223.663425][ T5120] usb 6-1: Using ep0 maxpacket: 16 [ 223.764187][ T5234] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 223.764225][ T5234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.764245][ T5234] usb 2-1: Product: syz [ 223.764261][ T5234] usb 2-1: Manufacturer: syz [ 223.764278][ T5234] usb 2-1: SerialNumber: syz [ 223.783564][ T5120] usb 6-1: config 0 has no interfaces? [ 223.843333][ T5225] usb 5-1: Using ep0 maxpacket: 16 [ 223.961580][ T6750] loop0: detected capacity change from 0 to 128 [ 223.963652][ T5225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.981788][ T5225] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 223.983636][ T5120] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 223.991902][ T5225] usb 5-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.000585][ T5120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.019203][ T5225] usb 5-1: config 1 interface 0 has no altsetting 0 [ 224.030900][ T6725] udc-core: couldn't find an available UDC or it's busy [ 224.037920][ T5225] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 224.037953][ T5225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.055393][ T6750] EXT4-fs (loop0): test_dummy_encryption requires encrypt feature [ 224.063570][ T5120] usb 6-1: Product: syz [ 224.071530][ T5120] usb 6-1: Manufacturer: syz [ 224.076379][ T5120] usb 6-1: SerialNumber: syz [ 224.079018][ T5225] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 224.082914][ T5120] usb 6-1: config 0 descriptor?? [ 224.131534][ T6725] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.178817][ T5234] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 224.197542][ T5234] usb 2-1: No valid video chain found. [ 224.216097][ T5234] gspca_main: pac207-2.14.0 probing 093a:2476 [ 224.283415][ T5234] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 224.303792][ T5234] usb 2-1: USB disconnect, device number 16 [ 224.489494][ T6761] loop2: detected capacity change from 0 to 512 [ 224.510022][ T6761] EXT4-fs (loop2): Unrecognized mount option "uid<00000000000000000000" or missing value [ 224.586448][ T6732] loop5: detected capacity change from 0 to 8192 [ 224.635441][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.466'. [ 224.661110][ T4236] usb 6-1: USB disconnect, device number 12 [ 224.889999][ T6771] loop1: detected capacity change from 0 to 64 [ 225.113137][ T6776] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 225.118646][ T6777] loop0: detected capacity change from 0 to 512 [ 225.233753][ T6777] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 225.242230][ T6777] EXT4-fs error (device loop0): ext4_get_journal_inode:5185: comm syz.0.476: inode #1792: comm syz.0.476: iget: illegal inode # [ 225.293959][ T6777] EXT4-fs (loop0): Remounting filesystem read-only [ 225.313359][ T6777] EXT4-fs (loop0): no journal found [ 225.318900][ T6777] EXT4-fs (loop0): can't get journal size [ 225.330958][ T6776] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 225.380420][ T6780] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.395179][ T6777] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 225.445038][ T6777] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 225.510770][ T6777] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota="errors=continue,noload,sb=0x0000000000000001,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 225.851800][ T5120] usb 5-1: USB disconnect, device number 23 [ 225.910001][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 225.960772][ T6790] xt_l2tp: missing protocol rule (udp|l2tpip) [ 226.173344][ T4236] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 226.392105][ T6796] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.476: Logical block already allocated [ 226.425124][ T6796] EXT4-fs (loop0): Remounting filesystem read-only [ 226.433365][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 226.714198][ T4236] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 226.789318][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.973449][ T4236] usb 3-1: Product: syz [ 227.030297][ T6785] set_capacity_and_notify: 1 callbacks suppressed [ 227.030315][ T6785] loop5: detected capacity change from 0 to 32768 [ 227.044025][ T4236] usb 3-1: Manufacturer: syz [ 227.048656][ T4236] usb 3-1: SerialNumber: syz [ 227.100378][ T4236] usb 3-1: config 0 descriptor?? [ 227.299423][ T6785] XFS (loop5): Mounting V5 Filesystem [ 227.401034][ T6811] loop1: detected capacity change from 0 to 512 [ 227.476048][ T6785] XFS (loop5): Ending clean mount [ 227.537329][ T6785] XFS (loop5): Quotacheck needed: Please wait. [ 227.559552][ T6811] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 227.573476][ T6811] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.613425][ T4236] airspy 3-1:0.0: Board ID: 00 [ 227.618396][ T4236] airspy 3-1:0.0: Firmware version: [ 227.652379][ T6801] tipc: Enabling of bearer rejected, failed to enable media [ 227.731391][ T6785] XFS (loop5): Quotacheck: Done. [ 227.751138][ T26] audit: type=1800 audit(1775951430.068:35): pid=6785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.478" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 227.890010][ T5404] XFS (loop5): Unmounting Filesystem [ 227.938910][ T5119] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 228.032781][ T6787] loop2: detected capacity change from 0 to 1024 [ 228.084995][ T6787] hfsplus: invalid gid specified [ 228.090102][ T6787] hfsplus: unable to parse mount options [ 228.233588][ T5119] usb 1-1: Using ep0 maxpacket: 32 [ 228.332830][ T6827] loop4: detected capacity change from 0 to 4096 [ 228.393447][ T5119] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.426113][ T5119] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.613477][ T7] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 228.633622][ T5119] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 228.660522][ T5119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.681013][ T5119] usb 1-1: Product: syz [ 228.695495][ T5119] usb 1-1: Manufacturer: syz [ 228.708787][ T5119] usb 1-1: SerialNumber: syz [ 228.883348][ T4236] airspy 3-1:0.0: usb_control_msg() failed -110 request 0e [ 228.891924][ T4236] airspy 3-1:0.0: Registered as swradio24 [ 228.898071][ T4236] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 229.053377][ T1109] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 229.117429][ T5119] usb 1-1: interface 1 not found [ 229.134032][ T5119] usb 1-1: USB disconnect, device number 22 [ 229.203677][ T7] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 229.217717][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.235576][ T7] usb 2-1: Product: syz [ 229.245007][ T7] usb 2-1: Manufacturer: syz [ 229.256587][ T7] usb 2-1: SerialNumber: syz [ 229.257996][ T4236] usb 3-1: USB disconnect, device number 26 [ 229.270942][ T7] usb 2-1: config 0 descriptor?? [ 229.634433][ T1109] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 229.659040][ T1109] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 229.698085][ T6844] loop5: detected capacity change from 0 to 128 [ 229.709143][ T1109] usb 5-1: Product: syz [ 229.726193][ T1109] usb 5-1: Manufacturer: syz [ 229.743401][ T1109] usb 5-1: SerialNumber: syz [ 229.767293][ T6844] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 229.788929][ T1109] usb 5-1: config 0 descriptor?? [ 229.847317][ T6848] fuse: Bad value for 'fd' [ 230.084366][ T1109] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 230.209261][ T6861] loop2: detected capacity change from 0 to 8 [ 230.303490][ T1109] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 230.320767][ T1109] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 230.328629][ T1109] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 230.340098][ T6861] SQUASHFS error: xz decompression failed, data probably corrupt [ 230.358812][ T6861] SQUASHFS error: Failed to read block 0x108: -5 [ 230.391254][ T6861] SQUASHFS error: Unable to read metadata cache entry [106] [ 230.420121][ T6861] SQUASHFS error: Unable to read inode 0x11f [ 230.696970][ T6853] loop5: detected capacity change from 0 to 32768 [ 231.338920][ T6863] loop0: detected capacity change from 0 to 131072 [ 231.407410][ T4973] usb 2-1: USB disconnect, device number 17 [ 231.450549][ T6853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.497 (6853) [ 231.566897][ T6853] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 231.608507][ T6853] BTRFS info (device loop5): setting nodatasum [ 231.659094][ T6853] BTRFS info (device loop5): force zlib compression, level 3 [ 231.669974][ T6877] ipt_ECN: cannot use operation on non-tcp rule [ 231.703489][ T6853] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 231.747461][ T6853] BTRFS info (device loop5): use lzo compression, level 0 [ 231.782795][ T1109] peak_usb: probe of 5-1:0.0 failed with error -22 [ 231.797473][ T1109] usb 5-1: USB disconnect, device number 24 [ 231.803818][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.502'. [ 231.813637][ T6853] BTRFS info (device loop5): turning on flush-on-commit [ 231.840746][ T6853] BTRFS info (device loop5): enabling auto defrag [ 231.873595][ T6853] BTRFS info (device loop5): max_inline at 4096 [ 232.003419][ T6853] BTRFS info (device loop5): using free space tree [ 232.043384][ T6853] BTRFS info (device loop5): has skinny extents [ 232.110479][ T6877] loop1: detected capacity change from 0 to 4096 [ 232.211612][ T6877] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 232.289490][ T4193] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 232.304624][ T6886] loop2: detected capacity change from 0 to 4096 [ 232.344159][ T4193] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 232.354362][ T6877] ntfs: volume version 3.1. [ 232.413287][ T4228] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 232.425866][ T6853] BTRFS info (device loop5): enabling ssd optimizations [ 232.567871][ T6910] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.638229][ T26] audit: type=1800 audit(1775951434.958:36): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.497" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 232.683538][ T4228] usb 1-1: Using ep0 maxpacket: 32 [ 232.732107][ T6910] loop4: detected capacity change from 0 to 4096 [ 232.743516][ T26] audit: type=1800 audit(1775951435.018:37): pid=6853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.497" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 232.880064][ T6917] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.023621][ T4228] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 233.032835][ T26] audit: type=1800 audit(1775951435.348:38): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.497" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 233.054244][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.062400][ T4228] usb 1-1: Product: syz [ 233.083370][ T4228] usb 1-1: Manufacturer: syz [ 233.088034][ T4228] usb 1-1: SerialNumber: syz [ 233.160404][ T4228] usb 1-1: config 0 descriptor?? [ 233.684201][ T4228] airspy 1-1:0.0: Board ID: 00 [ 233.689092][ T4228] airspy 1-1:0.0: Firmware version: [ 233.840626][ T6912] loop2: detected capacity change from 0 to 40427 [ 233.892415][ T6912] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 233.929099][ T6912] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 233.951180][ T6912] F2FS-fs (loop2): invalid crc value [ 234.004584][ T6912] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 234.054092][ T6930] loop1: detected capacity change from 0 to 32768 [ 234.060745][ T6912] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 234.116090][ T6887] loop0: detected capacity change from 0 to 1024 [ 234.192165][ T6912] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 234.204912][ T6887] hfsplus: invalid gid specified [ 234.209953][ T6887] hfsplus: unable to parse mount options [ 234.217772][ T6912] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 234.239538][ T6958] loop4: detected capacity change from 0 to 512 [ 234.267870][ T6930] XFS (loop1): Mounting V5 Filesystem [ 234.404570][ T6958] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.409420][ T6930] XFS (loop1): Ending clean mount [ 234.433755][ T6958] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.550838][ T4185] XFS (loop1): Unmounting Filesystem [ 234.673432][ T6952] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 234.863283][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 234.933599][ T4228] airspy 1-1:0.0: usb_control_msg() failed -110 request 0e [ 234.952736][ T6978] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 234.956035][ T4228] airspy 1-1:0.0: Registered as swradio24 [ 234.973520][ T6952] usb 3-1: Using ep0 maxpacket: 8 [ 235.009167][ T4228] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 235.021181][ T6978] loop4: detected capacity change from 0 to 4096 [ 235.103477][ T6952] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 235.104150][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 235.112175][ T6952] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.162269][ T6952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.178431][ T6952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.190060][ T6952] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.203650][ T6987] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.214634][ T6952] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.224383][ T6952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.253488][ T23] usb 6-1: config 64 has an invalid interface number: 19 but max is 0 [ 235.272099][ T23] usb 6-1: config 64 has no interface number 0 [ 235.282822][ T4228] usb 1-1: USB disconnect, device number 23 [ 235.302500][ T23] usb 6-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.336867][ T23] usb 6-1: config 64 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.360410][ T23] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 235.382890][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.543463][ T6952] usb 3-1: GET_CAPABILITIES returned 0 [ 235.549501][ T6952] usbtmc 3-1:16.0: can't read capabilities [ 235.714277][ T6995] loop4: detected capacity change from 0 to 128 [ 236.059590][ T6995] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.095859][ T6976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.149198][ T6995] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.211376][ T6976] team0: Port device bond1 added [ 236.265383][ T4973] usb 3-1: USB disconnect, device number 27 [ 236.345333][ T6994] overlayfs: failed to resolve './file2': -2 [ 236.353309][ T6986] loop1: detected capacity change from 0 to 40427 [ 236.503766][ T6986] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 236.538968][ T6986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 236.569336][ T6986] F2FS-fs (loop1): invalid crc value [ 236.652625][ T6986] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 236.809487][ T6986] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 236.827506][ T6986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 236.941877][ T6998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.518 (6998) [ 237.015858][ T6998] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 237.044617][ T6998] BTRFS info (device loop5): setting nodatasum [ 237.059889][ T6998] BTRFS info (device loop5): force zlib compression, level 3 [ 237.089329][ T6998] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 237.119769][ T6998] BTRFS info (device loop5): use lzo compression, level 0 [ 237.171113][ T6998] BTRFS info (device loop5): turning on flush-on-commit [ 237.200405][ T6998] BTRFS info (device loop5): enabling auto defrag [ 237.217734][ T6998] BTRFS info (device loop5): max_inline at 4096 [ 237.237655][ T6998] BTRFS info (device loop5): using free space tree [ 237.255641][ T6998] BTRFS info (device loop5): has skinny extents [ 237.437385][ T6998] BTRFS info (device loop5): enabling ssd optimizations [ 237.540337][ T7002] set_capacity_and_notify: 1 callbacks suppressed [ 237.540355][ T7002] loop0: detected capacity change from 0 to 32768 [ 237.641257][ T7007] loop4: detected capacity change from 0 to 32768 [ 237.673474][ T23] usb 6-1: string descriptor 0 read error: -71 [ 237.704117][ T23] usb 6-1: probing VID:PID(2201:012C) [ 237.714841][ T23] usb 6-1: vub300 testing BULK OUT EndPoint(0) 02 [ 237.729681][ T23] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 237.760869][ T7002] JBD2: Ignoring recovery information on journal [ 237.794369][ T23] vub300: probe of 6-1:64.19 failed with error -22 [ 237.798909][ T7007] XFS (loop4): Mounting V5 Filesystem [ 237.803335][ T5227] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 237.823799][ T23] usb 6-1: USB disconnect, device number 13 [ 237.908640][ T7002] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 237.946784][ T7007] XFS (loop4): Ending clean mount [ 237.978760][ T7007] XFS (loop4): Quotacheck needed: Please wait. [ 238.162499][ T7007] XFS (loop4): Quotacheck: Done. [ 238.243608][ T5227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.293406][ T6952] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 238.354973][ T5227] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.371603][ T5227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.533272][ T6952] usb 1-1: Using ep0 maxpacket: 16 [ 238.543988][ T7037] loop1: detected capacity change from 0 to 32768 [ 238.577762][ T5227] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 238.598302][ T5227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.617522][ T5227] usb 3-1: Product: syz [ 238.621872][ T5227] usb 3-1: Manufacturer: syz [ 238.653477][ T6952] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.664056][ T5227] usb 3-1: SerialNumber: syz [ 238.673367][ T6952] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 238.682594][ T6952] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 238.696276][ T6952] usb 1-1: config 1 interface 0 has no altsetting 0 [ 238.703498][ T6952] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 238.712934][ T6952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.764631][ T6952] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 238.829101][ T7037] XFS (loop1): Mounting V5 Filesystem [ 238.912213][ T4193] XFS (loop4): Unmounting Filesystem [ 238.991870][ T7037] XFS (loop1): Ending clean mount [ 239.123562][ T5227] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 239.154136][ T5227] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 239.158785][ T7074] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 239.180641][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.198276][ T5227] usb 3-1: USB disconnect, device number 28 [ 239.309552][ T4185] XFS (loop1): Unmounting Filesystem [ 239.316517][ T7074] loop5: detected capacity change from 0 to 4096 [ 239.442555][ T7077] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.867983][ T7079] loop2: detected capacity change from 0 to 32768 [ 239.979190][ T7086] loop4: detected capacity change from 0 to 512 [ 240.197811][ T7086] EXT4-fs (loop4): 1 orphan inode deleted [ 240.271719][ T7086] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,user_xattr,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 240.311433][ T7086] EXT4-fs (loop4): shut down requested (0) [ 240.535193][ T7062] usb 1-1: USB disconnect, device number 24 [ 240.610892][ T4196] ocfs2: Unmounting device (7,0) on (node local) [ 240.633021][ T7095] loop5: detected capacity change from 0 to 512 [ 240.818923][ T7095] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.834616][ T7102] loop4: detected capacity change from 0 to 256 [ 240.841380][ T7095] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.088629][ T7102] exfat: Deprecated parameter 'namecase' [ 241.103416][ T7102] exfat: Deprecated parameter 'utf8' [ 241.149687][ T7102] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 241.353354][ T4236] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 241.514908][ T7093] loop2: detected capacity change from 0 to 40427 [ 241.550477][ T7093] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 241.570228][ T7093] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.590724][ T7093] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 241.613123][ T7093] F2FS-fs (loop2): invalid crc value [ 241.618897][ T4236] usb 2-1: Using ep0 maxpacket: 32 [ 241.634932][ T7093] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 241.769720][ T7093] F2FS-fs (loop2): Start checkpoint disabled! [ 241.786034][ T7105] loop0: detected capacity change from 0 to 32768 [ 241.827535][ T7093] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 241.841289][ T7093] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 241.933701][ T4236] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 241.953707][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.961992][ T4236] usb 2-1: Product: syz [ 241.977058][ T4236] usb 2-1: Manufacturer: syz [ 242.003228][ T4236] usb 2-1: SerialNumber: syz [ 242.015573][ T4236] usb 2-1: config 0 descriptor?? [ 242.271004][ T4312] attempt to access beyond end of device [ 242.271004][ T4312] loop2: rw=2049, want=45104, limit=40427 [ 242.331539][ T7116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.525811][ T4236] airspy 2-1:0.0: Board ID: 00 [ 242.530879][ T4236] airspy 2-1:0.0: Firmware version: [ 242.963143][ T7103] set_capacity_and_notify: 2 callbacks suppressed [ 242.969768][ T7103] loop1: detected capacity change from 0 to 1024 [ 243.117636][ T7062] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 243.127749][ T7103] hfsplus: invalid gid specified [ 243.132755][ T7103] hfsplus: unable to parse mount options [ 243.547420][ T7124] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.754851][ T7062] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 243.777367][ T7062] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 243.817939][ T7062] usb 1-1: Product: syz [ 243.824641][ T4236] airspy 2-1:0.0: usb_control_msg() failed -110 request 0e [ 243.842240][ T4236] airspy 2-1:0.0: Registered as swradio24 [ 243.851613][ T7062] usb 1-1: Manufacturer: syz [ 243.867179][ T7062] usb 1-1: SerialNumber: syz [ 243.872086][ T4236] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 243.901987][ T7062] usb 1-1: config 0 descriptor?? [ 243.903381][ T7118] loop5: detected capacity change from 0 to 32768 [ 243.966607][ T7128] loop4: detected capacity change from 0 to 2048 [ 244.039306][ T7118] XFS (loop5): Mounting V5 Filesystem [ 244.080168][ T7137] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.148805][ T7122] loop2: detected capacity change from 0 to 32768 [ 244.184020][ T7062] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 244.263507][ T4236] usb 2-1: USB disconnect, device number 18 [ 244.291889][ T7122] JBD2: Ignoring recovery information on journal [ 244.303363][ T7118] XFS (loop5): Ending clean mount [ 244.336351][ T7122] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 244.458792][ T5404] XFS (loop5): Unmounting Filesystem [ 244.464710][ T7062] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 244.478870][ T7062] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 244.486609][ T7062] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 244.583397][ T7062] peak_usb: probe of 1-1:0.0 failed with error -22 [ 244.732502][ T7149] loop1: detected capacity change from 0 to 64 [ 244.771958][ T6952] usb 1-1: USB disconnect, device number 25 [ 244.880520][ T7151] Core dump to core aborted: cannot preserve file permissions [ 245.183725][ T4236] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 245.191598][ T7147] loop4: detected capacity change from 0 to 32768 [ 245.250183][ T7147] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 245.289720][ T7156] loop5: detected capacity change from 0 to 512 [ 245.317242][ T7147] JBD2: Ignoring recovery information on journal [ 245.359643][ T4196] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 245.366495][ T4196] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 245.388662][ T7156] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 245.423462][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 245.431872][ T7147] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 245.479900][ T7156] loop5: detected capacity change from 0 to 512 [ 245.522525][ T7156] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 245.573704][ T4236] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.607463][ T7159] loop0: detected capacity change from 0 to 2048 [ 245.613336][ T4236] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 245.638306][ T4236] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 245.652745][ T4236] usb 3-1: config 1 interface 0 has no altsetting 0 [ 245.660390][ T4236] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 245.670122][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.703888][ T7159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.744566][ T4236] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 245.771354][ T7163] loop1: detected capacity change from 0 to 512 [ 245.855379][ T7156] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 245.892472][ T7163] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.935512][ T7163] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.723325][ T6949] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 246.749580][ T7156] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 246.988629][ T7156] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 247.103742][ T6949] usb 5-1: Using ep0 maxpacket: 16 [ 247.746512][ T4973] usb 3-1: USB disconnect, device number 29 [ 247.820562][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 247.891152][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 247.954086][ T6949] usb 5-1: device descriptor read/all, error -71 [ 248.002624][ T7156] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 248.177596][ T7156] set_capacity_and_notify: 5 callbacks suppressed [ 248.177614][ T7156] loop5: detected capacity change from 0 to 512 [ 248.281421][ T7175] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 248.367024][ T7175] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.745531][ T7185] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 249.959603][ T7177] loop1: detected capacity change from 0 to 262144 [ 250.033410][ T6949] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 250.099552][ T7177] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:1 [ 250.114155][ T7177] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 250.128607][ T5227] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 250.151024][ T7182] loop5: detected capacity change from 0 to 32768 [ 250.293625][ T6949] usb 5-1: Using ep0 maxpacket: 32 [ 250.302232][ T7182] XFS (loop5): Mounting V5 Filesystem [ 250.332300][ T7213] loop0: detected capacity change from 0 to 128 [ 250.389021][ T7213] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 250.416705][ T6949] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.418257][ T5227] usb 3-1: Using ep0 maxpacket: 32 [ 250.433293][ T6949] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 250.446964][ T6949] usb 5-1: config 0 interface 0 has no altsetting 0 [ 250.454211][ T6949] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 250.463551][ T6949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.476006][ T6949] usb 5-1: config 0 descriptor?? [ 250.485057][ T7213] hpfs: filesystem error: improperly stopped [ 250.494072][ T7213] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 250.501867][ T7213] hpfs: You really don't want any checks? You are crazy... [ 250.520250][ T7217] loop1: detected capacity change from 0 to 512 [ 250.527248][ T7213] hpfs: hpfs_map_sector(): read error [ 250.533367][ T7213] hpfs: code page support is disabled [ 250.538930][ T7213] hpfs: hpfs_map_4sectors(): unaligned read [ 250.544561][ T7182] XFS (loop5): Ending clean mount [ 250.545024][ T7213] hpfs: hpfs_map_4sectors(): unaligned read [ 250.556657][ T7213] hpfs: filesystem error: unable to find root dir [ 250.627222][ T5404] XFS (loop5): Unmounting Filesystem [ 250.664058][ T7213] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.666024][ T7217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.562: inode #93: comm syz.1.562: iget: illegal inode # [ 250.768207][ T7218] hpfs: hpfs_map_4sectors(): unaligned read [ 250.837387][ T5227] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 250.863523][ T6949] usbhid 5-1:0.0: can't add hid device: -71 [ 250.870135][ T6949] usbhid: probe of 5-1:0.0 failed with error -71 [ 250.877369][ T5227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.883330][ T7217] EXT4-fs (loop1): Remounting filesystem read-only [ 250.892394][ T7213] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.905390][ T7217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.562: error while reading EA inode 93 err=-117 [ 250.930039][ T6949] usb 5-1: USB disconnect, device number 26 [ 250.931823][ T5227] usb 3-1: Product: syz [ 250.958848][ T5227] usb 3-1: Manufacturer: syz [ 250.980316][ T5227] usb 3-1: SerialNumber: syz [ 250.996734][ T5227] usb 3-1: config 0 descriptor?? [ 251.008883][ T7217] EXT4-fs (loop1): Remounting filesystem read-only [ 251.033453][ T7217] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 251.077004][ T7217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.562: inode #93: comm syz.1.562: iget: illegal inode # [ 251.121552][ T7213] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.134021][ T7217] EXT4-fs (loop1): Remounting filesystem read-only [ 251.140601][ T7217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.562: error while reading EA inode 93 err=-117 [ 251.194132][ T7217] EXT4-fs (loop1): Remounting filesystem read-only [ 251.201653][ T7217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.562: ea_inode with extended attributes [ 251.250231][ T7217] EXT4-fs (loop1): Remounting filesystem read-only [ 251.303643][ T7217] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.562: error while reading EA inode 11 err=-117 [ 251.344017][ T7217] EXT4-fs (loop1): Remounting filesystem read-only [ 251.372651][ T7217] EXT4-fs (loop1): 1 orphan inode deleted [ 251.377966][ T7213] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.393376][ T7217] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,errors=remount-ro,delalloc,journal_ioprio=0x0000000000000001,init_itable=0x0000000000008d55,. Quota mode: none. [ 251.515371][ T5227] airspy 3-1:0.0: Board ID: 00 [ 251.520229][ T5227] airspy 3-1:0.0: Firmware version: [ 251.695927][ T7213] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.712288][ T7226] loop5: detected capacity change from 0 to 2048 [ 251.761641][ T7213] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.806599][ T7213] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.830265][ T7213] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.903643][ T7226] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.953511][ T7193] loop2: detected capacity change from 0 to 1024 [ 252.004664][ T7193] hfsplus: invalid gid specified [ 252.009819][ T7193] hfsplus: unable to parse mount options [ 252.813430][ T5227] airspy 3-1:0.0: usb_control_msg() failed -110 request 0e [ 252.839052][ T5227] airspy 3-1:0.0: Registered as swradio24 [ 252.844881][ T7240] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 252.853241][ T5227] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 252.871536][ T7239] loop0: detected capacity change from 0 to 256 [ 253.019956][ T7245] fuse: Bad value for 'fd' [ 253.088950][ T7239] loop0: detected capacity change from 0 to 512 [ 253.366443][ T7239] loop0: detected capacity change from 0 to 2048 [ 253.461703][ T7239] program syz.0.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.662036][ T6949] usb 3-1: USB disconnect, device number 30 [ 253.723787][ T7231] loop1: detected capacity change from 0 to 32768 [ 253.801728][ T7231] JBD2: Ignoring recovery information on journal [ 254.009143][ T7231] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 254.055702][ T6950] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 254.072144][ T7260] loop2: detected capacity change from 0 to 2048 [ 254.150594][ T7260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.214617][ T7243] loop4: detected capacity change from 0 to 32768 [ 254.373407][ T7243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.571 (7243) [ 254.453494][ T6950] usb 1-1: Using ep0 maxpacket: 32 [ 254.465339][ T7243] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 254.495365][ T7243] BTRFS info (device loop4): force clearing of disk cache [ 254.501744][ T7254] loop5: detected capacity change from 0 to 32768 [ 254.502718][ T7243] BTRFS info (device loop4): metadata ratio 0 [ 254.519112][ T7243] BTRFS info (device loop4): enabling ssd optimizations [ 254.528782][ T7243] BTRFS info (device loop4): using spread ssd allocation scheme [ 254.536673][ T7243] BTRFS info (device loop4): using free space tree [ 254.544815][ T7243] BTRFS info (device loop4): has skinny extents [ 254.728472][ T7254] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.572 (7254) [ 255.072960][ T6948] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 255.094359][ T7254] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 255.111536][ T7254] BTRFS info (device loop5): setting nodatasum [ 255.118117][ T6950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.132031][ T7243] BTRFS info (device loop4): clearing free space tree [ 255.139626][ T7254] BTRFS info (device loop5): force zlib compression, level 3 [ 255.143280][ T6950] usb 1-1: config 0 has no interfaces? [ 255.163658][ T7254] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 255.172942][ T7254] BTRFS info (device loop5): use lzo compression, level 0 [ 255.183406][ T7243] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.233925][ T7243] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.283529][ T7254] BTRFS info (device loop5): turning on flush-on-commit [ 255.291830][ T7254] BTRFS info (device loop5): enabling auto defrag [ 255.313867][ T6950] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 255.323073][ T6950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.330477][ T4185] ocfs2: Unmounting device (7,1) on (node local) [ 255.340457][ T7254] BTRFS error (device loop5): unrecognized mount option 'euid>00000000000000000000' [ 255.383270][ T6950] usb 1-1: Product: syz [ 255.387730][ T6950] usb 1-1: Manufacturer: syz [ 255.403905][ T7243] BTRFS info (device loop4): creating free space tree [ 255.413308][ T6950] usb 1-1: SerialNumber: syz [ 255.423015][ T7243] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 255.428254][ T6950] usb 1-1: config 0 descriptor?? [ 255.433139][ T7243] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 255.502790][ T7285] loop2: detected capacity change from 0 to 8192 [ 255.503539][ T7254] BTRFS error (device loop5): open_ctree failed: -22 [ 255.513396][ T6948] usb 2-1: device not accepting address 19, error -71 [ 255.643398][ T7285] loop2: p1 p2[DM] p4 [ 255.657788][ T7285] loop2: partition table partially beyond EOD, truncated [ 255.671562][ T7287] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 255.717403][ T7285] loop2: p1 size 196608 extends beyond EOD, truncated [ 255.782934][ T7287] netlink: 48 bytes leftover after parsing attributes in process `syz.4.571'. [ 255.799337][ T7285] loop2: p2 size 150994946 extends beyond EOD, truncated [ 255.853771][ T7285] loop2: p4 start 25600 is beyond EOD, truncated [ 255.946934][ T7292] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 255.957190][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965798][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.081948][ T4344] udevd[4344]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 256.100327][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 256.121561][ T7286] loop2: detected capacity change from 0 to 4096 [ 256.387491][ T7298] loop2: detected capacity change from 0 to 512 [ 256.443842][ T7062] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 256.488980][ T7301] loop1: detected capacity change from 0 to 128 [ 256.538680][ T7298] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.583450][ T7298] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.866558][ T7062] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 256.884424][ T7062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.929838][ T7062] usb 6-1: config 0 descriptor?? [ 257.467647][ T5227] usb 1-1: USB disconnect, device number 26 [ 257.758375][ T7309] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.869406][ T7309] loop0: detected capacity change from 0 to 4096 [ 257.919884][ T7312] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.932846][ T26] audit: type=1800 audit(1775951460.248:39): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.578" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 258.104429][ T6948] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 258.466510][ T7316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.264927][ T7062] usb 6-1: Cannot set autoneg [ 259.273694][ T7062] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 259.315720][ T7062] usb 6-1: USB disconnect, device number 14 [ 259.375467][ T7328] loop5: detected capacity change from 0 to 64 [ 259.809658][ T7338] xt_connbytes: Forcing CT accounting to be enabled [ 259.816907][ T7338] Cannot find set identified by id 0 to match [ 260.383317][ T6948] usb 2-1: Using ep0 maxpacket: 16 [ 260.617872][ T7342] loop2: detected capacity change from 0 to 1024 [ 260.733799][ T7341] loop0: detected capacity change from 0 to 32768 [ 260.774625][ T6948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.790996][ T6948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.853329][ T6948] usb 2-1: string descriptor 0 read error: -71 [ 260.860998][ T6948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 260.876676][ T6948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.904302][ T7341] XFS (loop0): Mounting V5 Filesystem [ 260.936770][ T6948] usb 2-1: can't set config #1, error -71 [ 260.953905][ T6948] usb 2-1: USB disconnect, device number 21 [ 261.041128][ T7341] XFS (loop0): Ending clean mount [ 261.058343][ T7341] XFS (loop0): Quotacheck needed: Please wait. [ 261.190151][ T7341] XFS (loop0): Quotacheck: Done. [ 261.674966][ T6950] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 261.981549][ T7362] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 262.023557][ T6950] usb 6-1: Using ep0 maxpacket: 32 [ 262.054507][ T7363] loop1: detected capacity change from 0 to 4096 [ 262.117564][ T4196] XFS (loop0): Unmounting Filesystem [ 262.155391][ T6950] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.177302][ T6950] usb 6-1: config 0 has no interfaces? [ 262.209772][ T7365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.343443][ T6950] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 262.363288][ T6950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.371367][ T6950] usb 6-1: Product: syz [ 262.383233][ T6950] usb 6-1: Manufacturer: syz [ 262.387939][ T6950] usb 6-1: SerialNumber: syz [ 262.434209][ T6950] usb 6-1: config 0 descriptor?? [ 262.683581][ T7370] mmap: syz.0.594 (7370) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 263.032703][ T7372] loop0: detected capacity change from 0 to 512 [ 263.108457][ T7368] loop1: detected capacity change from 0 to 40427 [ 263.142878][ T7372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 263.160347][ T7372] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.206576][ T7368] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x1ffff [ 263.236354][ T7368] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 263.583258][ T7380] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.169602][ T7368] F2FS-fs (loop1): invalid crc value [ 264.197518][ T7368] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 22694528485) [ 264.210212][ T5225] usb 6-1: USB disconnect, device number 15 [ 264.279901][ T7385] loop5: detected capacity change from 0 to 512 [ 264.294374][ T7368] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 264.401568][ T7385] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 264.425358][ T7385] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.442729][ T26] audit: type=1800 audit(1775951466.758:40): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.606" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 264.483683][ T7368] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 264.504133][ T7385] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.597: corrupted inode contents [ 264.609520][ T7389] block nbd2: shutting down sockets [ 264.654345][ T7385] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.597: mark_inode_dirty error [ 264.737669][ T7385] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.597: corrupted inode contents [ 264.752209][ T7385] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.597: mark_inode_dirty error [ 264.822596][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.597'. [ 265.573363][ T6948] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 265.685707][ T5227] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 265.829418][ T6948] usb 6-1: Using ep0 maxpacket: 16 [ 265.953612][ T6948] usb 6-1: config 0 has no interfaces? [ 266.117774][ T6948] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 266.134975][ T5227] usb 1-1: Using ep0 maxpacket: 16 [ 266.138016][ T6948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.173352][ T6948] usb 6-1: Product: syz [ 266.177675][ T6948] usb 6-1: Manufacturer: syz [ 266.182304][ T6948] usb 6-1: SerialNumber: syz [ 266.200592][ T6948] usb 6-1: config 0 descriptor?? [ 266.802800][ T4228] usb 6-1: USB disconnect, device number 16 [ 267.027547][ T5227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.038945][ T5227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.097818][ T7412] loop2: detected capacity change from 0 to 1024 [ 267.166959][ T7412] EXT4-fs (loop2): inline encryption not supported [ 267.183343][ T7412] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 267.221872][ T7414] loop1: detected capacity change from 0 to 4096 [ 267.233731][ T5227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.245844][ T5227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.255222][ T5227] usb 1-1: Product: syz [ 267.260375][ T5227] usb 1-1: Manufacturer: syz [ 267.265618][ T5227] usb 1-1: SerialNumber: syz [ 267.266108][ T7412] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,nodiscard,grpquota,noblock_validity,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,sb=0x4000000000000000,sb=0x0000000000000. Quota mode: writeback. [ 267.413567][ T7418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 267.587916][ T7421] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.604: Allocating blocks 257-513 which overlap fs metadata [ 267.602999][ T7421] EXT4-fs (loop2): Remounting filesystem read-only [ 267.783754][ T5227] usb 1-1: 0:2 : does not exist [ 267.843253][ T6948] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 268.083389][ T6948] usb 6-1: Using ep0 maxpacket: 8 [ 268.230534][ T7406] hub 8-0:1.0: USB hub found [ 268.244486][ T7406] hub 8-0:1.0: 1 port detected [ 268.365082][ T6948] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 268.383379][ T5227] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 268.384519][ T6948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.395576][ T7434] udc-core: couldn't find an available UDC or it's busy [ 268.400450][ T6948] usb 6-1: Product: syz [ 268.411082][ T6948] usb 6-1: Manufacturer: syz [ 268.416077][ T6948] usb 6-1: SerialNumber: syz [ 268.454712][ T7434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.487532][ T7406] udc-core: couldn't find an available UDC or it's busy [ 268.509662][ T7406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 268.542321][ T7062] usb 1-1: USB disconnect, device number 27 [ 268.655042][ T5227] usb 2-1: Using ep0 maxpacket: 32 [ 268.734995][ T7432] chnl_net:caif_netlink_parms(): no params data found [ 268.783469][ T5227] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 268.792036][ T5227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.803136][ T5227] usb 2-1: config 0 has no interface number 0 [ 268.809728][ T5227] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.865334][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.891155][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.919794][ T7432] device bridge_slave_0 entered promiscuous mode [ 268.949766][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.967657][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.989098][ T7432] device bridge_slave_1 entered promiscuous mode [ 268.998599][ T5227] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 269.013044][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.041798][ T5227] usb 2-1: Product: syz [ 269.056467][ T5227] usb 2-1: Manufacturer: syz [ 269.078263][ T5227] usb 2-1: SerialNumber: syz [ 269.101011][ T7432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.122887][ T5227] usb 2-1: config 0 descriptor?? [ 269.174599][ T7432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.199175][ T7441] loop0: detected capacity change from 0 to 64 [ 269.214925][ T5227] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 269.260224][ T7432] team0: Port device team_slave_0 added [ 269.276028][ T7432] team0: Port device team_slave_1 added [ 269.285807][ T7441] hfs: unable to parse mount options [ 269.337566][ T7420] loop5: detected capacity change from 0 to 32768 [ 269.351381][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.366719][ T7420] udc-core: couldn't find an available UDC or it's busy [ 269.382132][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.423355][ T5227] usb 2-1: qt2_setup_urbs - submit read urb failed -8 [ 269.430917][ T5227] quatech2: probe of 2-1:0.51 failed with error -8 [ 269.438477][ T7420] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 269.478903][ T7432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.518783][ T7432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.538517][ T7432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.603213][ T4344] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop5 scanned by udevd (4344) [ 269.613483][ T6948] usb 6-1: USB disconnect, device number 17 [ 269.637588][ T5227] usb 2-1: USB disconnect, device number 22 [ 269.670021][ T7432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.739883][ T7441] loop0: detected capacity change from 0 to 8192 [ 269.784784][ T7432] device hsr_slave_0 entered promiscuous mode [ 269.802392][ T4178] loop0: p4 < > [ 269.811326][ T7432] device hsr_slave_1 entered promiscuous mode [ 269.828651][ T7441] loop0: p4 < > [ 269.837382][ T7432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.872837][ T7432] Cannot create hsr debugfs directory [ 269.905822][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.984019][ T6950] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 270.150738][ T7446] loop5: detected capacity change from 0 to 256 [ 270.242965][ T6950] usb 1-1: Using ep0 maxpacket: 32 [ 270.325145][ T7449] fuse: Bad value for 'fd' [ 270.432959][ T6952] Bluetooth: hci5: command 0x0409 tx timeout [ 270.463397][ T6950] usb 1-1: config 1 has an invalid interface number: 67 but max is 0 [ 270.467151][ T7432] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.471637][ T6950] usb 1-1: config 1 has no interface number 0 [ 270.471682][ T6950] usb 1-1: config 1 interface 67 has no altsetting 0 [ 270.568139][ T7432] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.580938][ T7458] loop5: detected capacity change from 0 to 512 [ 270.600806][ T7432] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.623191][ T6950] usb 1-1: New USB device found, idVendor=0bba, idProduct=ff22, bcdDevice=56.79 [ 270.642530][ T6950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.654123][ T7432] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.658623][ T6950] usb 1-1: Product: syz [ 270.699684][ T6950] usb 1-1: Manufacturer: syz [ 270.713562][ T6950] usb 1-1: SerialNumber: syz [ 270.738580][ T7458] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 270.763079][ T7458] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.029365][ T7441] Cannot find del_set index 1 as target [ 271.039631][ T26] audit: type=1800 audit(1776475761.364:41): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.615" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 271.103304][ T4973] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 271.174626][ T6950] usb-storage 1-1:1.67: USB Mass Storage device detected [ 271.291054][ T7432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.310920][ T6950] usb 1-1: USB disconnect, device number 28 [ 271.366503][ T4973] usb 2-1: Using ep0 maxpacket: 16 [ 271.367487][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.417539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.426239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.478528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.490963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.503192][ T4973] usb 2-1: config 0 has no interfaces? [ 271.507109][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.516190][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.535103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 271.554375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.575410][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.582551][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.642471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.673054][ T4973] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 271.673556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 271.690416][ T4973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.690465][ T4973] usb 2-1: Product: syz [ 271.690482][ T4973] usb 2-1: Manufacturer: syz [ 271.690498][ T4973] usb 2-1: SerialNumber: syz [ 271.692279][ T4973] usb 2-1: config 0 descriptor?? [ 271.830990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 271.883942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 271.947364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.957348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.972984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.981715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.005304][ T5225] usb 2-1: USB disconnect, device number 23 [ 272.043333][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.100139][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.114168][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.145790][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.182524][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.192397][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.213118][ T7482] bridge0: port 2(erspan0) entered blocking state [ 272.232692][ T7482] bridge0: port 2(erspan0) entered disabled state [ 272.242022][ T7482] device erspan0 entered promiscuous mode [ 272.252149][ T7470] loop5: detected capacity change from 0 to 32768 [ 272.263436][ T7482] bridge0: port 2(erspan0) entered blocking state [ 272.270744][ T7482] bridge0: port 2(erspan0) entered forwarding state [ 272.288770][ T7432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.342513][ T26] audit: type=1800 audit(1776475762.654:42): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.619" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 272.366749][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.512722][ T6952] Bluetooth: hci5: command 0x041b tx timeout [ 272.640626][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.007798][ T7496] loop1: detected capacity change from 0 to 64 [ 273.237120][ T6948] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 273.343432][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 273.443689][ T7502] xt_connbytes: Forcing CT accounting to be enabled [ 273.452554][ T7502] Cannot find set identified by id 0 to match [ 274.262561][ T6948] usb 1-1: Using ep0 maxpacket: 32 [ 274.334265][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 274.346075][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.381837][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.389527][ T6948] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 274.438837][ T6948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.448112][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.560433][ T6948] usb 1-1: config 0 has no interface number 0 [ 274.611784][ T6948] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.667154][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.699247][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.709774][ T7472] device bridge_slave_0 entered promiscuous mode [ 274.731585][ T1109] Bluetooth: hci5: command 0x040f tx timeout [ 274.777789][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.786343][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.813833][ T7472] device bridge_slave_1 entered promiscuous mode [ 274.852665][ T6948] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 274.875897][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.882387][ T6948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.919205][ T6948] usb 1-1: Product: syz [ 274.939944][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.944150][ T6948] usb 1-1: Manufacturer: syz [ 274.994673][ T6948] usb 1-1: SerialNumber: syz [ 275.012658][ T6948] usb 1-1: config 0 descriptor?? [ 275.053963][ T6948] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 275.088497][ T7472] team0: Port device team_slave_0 added [ 275.107994][ T7472] team0: Port device team_slave_1 added [ 275.183867][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.199866][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.232903][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.249023][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.260746][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.283691][ T7516] loop1: detected capacity change from 0 to 32768 [ 275.288011][ T6948] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 275.321466][ T6948] quatech2: probe of 1-1:0.51 failed with error -8 [ 275.338749][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.413975][ T7516] XFS (loop1): Mounting V5 Filesystem [ 275.428433][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.451711][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.498223][ T7516] XFS (loop1): Ending clean mount [ 275.524454][ T4973] usb 1-1: USB disconnect, device number 29 [ 275.558783][ T4185] XFS (loop1): Unmounting Filesystem [ 275.603121][ T7472] device hsr_slave_0 entered promiscuous mode [ 275.643878][ T7472] device hsr_slave_1 entered promiscuous mode [ 275.666771][ T7472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.699223][ T7472] Cannot create hsr debugfs directory [ 275.716321][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.730774][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.852587][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.893884][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.911005][ T7550] loop5: detected capacity change from 0 to 16 [ 275.950538][ T7432] device veth0_vlan entered promiscuous mode [ 275.980345][ T7550] erofs: (device loop5): mounted with root inode @ nid 36. [ 276.014114][ T7432] device veth1_vlan entered promiscuous mode [ 276.050036][ T7550] attempt to access beyond end of device [ 276.050036][ T7550] loop5: rw=524288, want=32, limit=16 [ 276.151199][ T7550] erofs: (device loop5): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 276.219309][ T7432] device veth0_macvtap entered promiscuous mode [ 276.232746][ T7550] erofs: (device loop5): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 276.251499][ T7550] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 276.262986][ T7550] attempt to access beyond end of device [ 276.262986][ T7550] loop5: rw=524288, want=56, limit=16 [ 276.288796][ T7550] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 276.312008][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.331374][ T7559] loop0: detected capacity change from 0 to 256 [ 276.343567][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 276.352457][ T6948] Bluetooth: hci3: command 0x041b tx timeout [ 276.366526][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.387656][ T7559] exfat: Deprecated parameter 'utf8' [ 276.420584][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.434118][ T26] audit: type=1800 audit(1776475766.754:43): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.630" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 276.475099][ T7432] device veth1_macvtap entered promiscuous mode [ 276.549631][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.560703][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.571831][ T7559] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 276.599478][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.630713][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.677450][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.712707][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.738591][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.752194][ T6948] Bluetooth: hci5: command 0x0419 tx timeout [ 276.781330][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.820602][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.851944][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.886805][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.968799][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.994505][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.146282][ T7571] loop0: detected capacity change from 0 to 2048 [ 277.184973][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.220317][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.230347][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.254960][ T7557] loop1: detected capacity change from 0 to 32768 [ 277.261763][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.273771][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.284735][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.294983][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.305628][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.316552][ T7432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.327073][ T7432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.338675][ T7432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.366844][ T7571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.413631][ T154] device hsr_slave_0 left promiscuous mode [ 277.437047][ T154] device hsr_slave_1 left promiscuous mode [ 277.666556][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.676508][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.687682][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.727258][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.997419][ T154] device bridge_slave_1 left promiscuous mode [ 278.023522][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.058083][ T154] device bridge_slave_0 left promiscuous mode [ 278.091053][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.171361][ T154] device veth1_macvtap left promiscuous mode [ 278.192702][ T154] device veth0_macvtap left promiscuous mode [ 278.215349][ T154] device veth1_vlan left promiscuous mode [ 278.254504][ T154] device veth0_vlan left promiscuous mode [ 278.355996][ T7062] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 278.427264][ T7587] loop0: detected capacity change from 0 to 128 [ 278.433915][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 278.523215][ T7587] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.544801][ T7587] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 278.652057][ T7062] usb 2-1: Using ep0 maxpacket: 16 [ 278.790401][ T7062] usb 2-1: config 0 has no interfaces? [ 279.062811][ T7062] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 279.106429][ T7062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.203383][ T7062] usb 2-1: Product: syz [ 279.334026][ T7062] usb 2-1: Manufacturer: syz [ 279.338699][ T7062] usb 2-1: SerialNumber: syz [ 279.372649][ T7062] usb 2-1: config 0 descriptor?? [ 279.389133][ T154] team0 (unregistering): Port device team_slave_1 removed [ 279.404503][ T154] team0 (unregistering): Port device team_slave_0 removed [ 279.417360][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.433058][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.516538][ T154] bond0 (unregistering): Released all slaves [ 279.575572][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.588738][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.606049][ T7432] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.620282][ T7432] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.630331][ T7432] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.639957][ T7432] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.651979][ T7585] tipc: Enabling of bearer rejected, failed to enable media [ 280.276980][ T7605] netlink: 76 bytes leftover after parsing attributes in process `syz.5.639'. [ 280.308411][ T4973] usb 2-1: USB disconnect, device number 24 [ 280.444829][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.465090][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.483114][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.511935][ T6948] Bluetooth: hci3: command 0x0419 tx timeout [ 280.606185][ T5307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.630204][ T5307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.670363][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.722684][ T7599] loop0: detected capacity change from 0 to 32768 [ 280.789137][ T7472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.858218][ T7472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.934303][ T7472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.969026][ T7472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.035117][ T7629] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.643'. [ 281.086325][ T7599] XFS (loop0): Mounting V5 Filesystem [ 281.253788][ T7599] XFS (loop0): Ending clean mount [ 281.350964][ T4196] XFS (loop0): Unmounting Filesystem [ 281.431438][ T7642] loop6: detected capacity change from 0 to 2048 [ 281.472886][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.494085][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 281.543003][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 281.558972][ T7642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.585528][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.673855][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.703834][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 281.734144][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.741281][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.862404][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 281.907496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 281.942279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.241303][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.248535][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.343637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.407508][ T7661] loop1: detected capacity change from 0 to 2048 [ 282.446535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.514134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.529051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.542094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.551216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 282.578203][ T7472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.602655][ T7472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.711565][ T7666] netlink: 'syz.1.649': attribute type 21 has an invalid length. [ 282.797481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 282.809891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 282.846778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 282.870172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 282.886149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 282.913658][ T7681] netlink: 76 bytes leftover after parsing attributes in process `syz.6.650'. [ 282.958437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.168910][ T7671] device syzkaller0 entered promiscuous mode [ 283.451551][ T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 283.515124][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.531668][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.579676][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.644922][ T7700] loop0: detected capacity change from 0 to 1024 [ 283.655888][ T7708] fuse: Bad value for 'fd' [ 283.679295][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.703187][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.721453][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 283.759306][ T7700] hfsplus: bad catalog entry type [ 283.834989][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.863362][ T23] usb 2-1: config 0 has no interfaces? [ 283.902451][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.923120][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.958890][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.000376][ T7472] device veth0_vlan entered promiscuous mode [ 284.032412][ T23] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 284.036296][ T7472] device veth1_vlan entered promiscuous mode [ 284.056713][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.085471][ T23] usb 2-1: Product: syz [ 284.097572][ T23] usb 2-1: Manufacturer: syz [ 284.121387][ T23] usb 2-1: SerialNumber: syz [ 284.152013][ T23] usb 2-1: config 0 descriptor?? [ 284.161672][ T9] hfsplus: b-tree write err: -5, ino 25 [ 284.167461][ T9] hfsplus: b-tree write err: -5, ino 4 [ 284.176348][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.195004][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.211758][ T9] hfsplus: b-tree write err: -5, ino 2 [ 284.236073][ T7472] device veth0_macvtap entered promiscuous mode [ 284.280219][ T7472] device veth1_macvtap entered promiscuous mode [ 284.367319][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.385382][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.412342][ T23] usb 2-1: USB disconnect, device number 25 [ 284.441150][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.452790][ T7727] fuse: Bad value for 'fd' [ 284.471256][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.495247][ T7731] loop0: detected capacity change from 0 to 2048 [ 284.507767][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.543569][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.563908][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.590388][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.620172][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.647342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.659469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.663159][ T7731] UDF-fs: bad mount option "0177777777777777777777700000000000000000000" or missing value [ 284.678409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.696744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.719126][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.757716][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.789304][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.819067][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.860853][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.899032][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.918339][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.929084][ T7713] loop6: detected capacity change from 0 to 32768 [ 285.007069][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.051371][ T7713] XFS (loop6): Mounting V5 Filesystem [ 285.094228][ T7472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.181523][ T7472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.193576][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.202525][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.221323][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.250386][ T7713] XFS (loop6): Ending clean mount [ 285.294081][ T7432] XFS (loop6): Unmounting Filesystem [ 285.380760][ T7472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.446617][ T7472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.491097][ T7472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.528943][ T7472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.705404][ T7751] loop1: detected capacity change from 0 to 32768 [ 285.783702][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.811612][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.862294][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.930391][ T4312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.937945][ T7751] XFS (loop1): Mounting V5 Filesystem [ 285.958901][ T4312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.053567][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.216637][ T7751] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 286.363848][ T7751] XFS (loop1): Starting recovery (logdev: internal) [ 286.444633][ T7751] XFS (loop1): Ending recovery (logdev: internal) [ 286.516919][ T7770] loop2: detected capacity change from 0 to 4096 [ 286.523850][ T6948] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 286.560950][ T6948] XFS (loop1): Unmount and run xfs_repair [ 286.591256][ T6948] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 286.619632][ T6948] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 286.632717][ T6948] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 286.666862][ T7773] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.681827][ T6948] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 286.699047][ T6948] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 286.709041][ T6948] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 286.727220][ T6948] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 286.738347][ T6948] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 286.780532][ T7758] loop0: detected capacity change from 0 to 32768 [ 286.790917][ T6948] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 286.808754][ T7751] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 286.967572][ T7780] mmap: syz.5.667 (7780): VmData 175874048 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 287.025410][ T7758] XFS (loop0): Mounting V5 Filesystem [ 287.037154][ T4185] XFS (loop1): Unmounting Filesystem [ 287.287380][ T7772] loop6: detected capacity change from 0 to 32768 [ 287.401449][ T7758] XFS (loop0): Ending clean mount [ 287.427418][ T7758] FAULT_INJECTION: forcing a failure. [ 287.427418][ T7758] name failslab, interval 1, probability 0, space 0, times 1 [ 287.496428][ T7795] loop2: detected capacity change from 0 to 512 [ 287.503020][ T7758] CPU: 1 PID: 7758 Comm: syz.0.664 Not tainted syzkaller #0 [ 287.510584][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 287.520675][ T7758] Call Trace: [ 287.523986][ T7758] [ 287.526945][ T7758] dump_stack_lvl+0x188/0x250 [ 287.531694][ T7758] ? show_regs_print_info+0x20/0x20 [ 287.536929][ T7758] ? load_image+0x400/0x400 [ 287.541641][ T7758] ? __might_sleep+0xf0/0xf0 [ 287.546360][ T7758] ? __lock_acquire+0x7d10/0x7d10 [ 287.551436][ T7758] should_fail+0x38c/0x4c0 [ 287.555902][ T7758] should_failslab+0x5/0x20 [ 287.560532][ T7758] slab_pre_alloc_hook+0x51/0xc0 [ 287.565525][ T7758] ? getname_flags+0xb5/0x500 [ 287.570327][ T7758] kmem_cache_alloc+0x3d/0x290 [ 287.575132][ T7758] getname_flags+0xb5/0x500 [ 287.579678][ T7758] user_path_at_empty+0x2a/0x190 [ 287.584743][ T7758] path_listxattr+0xac/0x1b0 [ 287.589370][ T7758] ? getxattr+0x410/0x410 [ 287.593742][ T7758] ? lockdep_hardirqs_on+0x94/0x140 [ 287.598990][ T7758] do_syscall_64+0x4c/0xa0 [ 287.603436][ T7758] ? clear_bhb_loop+0x30/0x80 [ 287.608323][ T7758] ? clear_bhb_loop+0x30/0x80 [ 287.613127][ T7758] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.619143][ T7758] RIP: 0033:0x7f79669be819 [ 287.623590][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.643243][ T7758] RSP: 002b:00007f7964c18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 287.651896][ T7758] RAX: ffffffffffffffda RBX: 00007f7966c37fa0 RCX: 00007f79669be819 [ 287.659915][ T7758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 287.667923][ T7758] RBP: 00007f7964c18090 R08: 0000000000000000 R09: 0000000000000000 [ 287.675926][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.683935][ T7758] R13: 00007f7966c38038 R14: 00007f7966c37fa0 R15: 00007fffc87005a8 [ 287.691963][ T7758] [ 287.718929][ T4196] XFS (loop0): Unmounting Filesystem [ 287.721997][ T7772] XFS (loop6): Mounting V5 Filesystem [ 287.980538][ T7795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.670: inode #1: comm syz.2.670: iget: illegal inode # [ 288.001619][ T7795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.670: error while reading EA inode 1 err=-117 [ 288.021943][ T7772] XFS (loop6): Ending clean mount [ 288.079495][ T7795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.670: inode #1: comm syz.2.670: iget: illegal inode # [ 288.117581][ T7795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.670: error while reading EA inode 1 err=-117 [ 288.146296][ T7795] EXT4-fs (loop2): 1 orphan inode deleted [ 288.179340][ T7795] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 288.181147][ T7807] fuse: Bad value for 'fd' [ 288.245261][ T7795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'. [ 288.294891][ T7432] XFS (loop6): Unmounting Filesystem [ 288.877580][ T7823] device syzkaller1 entered promiscuous mode [ 288.919857][ T7827] loop1: detected capacity change from 0 to 512 [ 289.023084][ T7827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.080918][ T7827] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.142731][ T7827] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 289.235848][ T7827] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 289.280968][ T7827] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.677: Failed to acquire dquot type 1 [ 289.374723][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'. [ 289.570648][ T7846] loop2: detected capacity change from 0 to 512 [ 289.646689][ T7846] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 290.340321][ T7866] loop2: detected capacity change from 0 to 512 [ 290.427326][ T7871] loop1: detected capacity change from 0 to 512 [ 290.463854][ T7866] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.502383][ T7866] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 290.557657][ T7871] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 290.612930][ T7866] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 290.617617][ T7871] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.636613][ T7866] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 290.645399][ T7866] System zones: 0-2, 18-18, 34-35 [ 290.654039][ T7866] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.761961][ T7882] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 290.883138][ T7882] team0: Port device dummy0 added [ 290.931257][ T7886] netlink: 'syz.0.698': attribute type 10 has an invalid length. [ 291.064546][ T7886] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 291.107511][ T7895] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 291.227750][ T7886] team0: Failed to send options change via netlink (err -105) [ 291.290958][ T7886] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 291.336816][ T7886] team0: Port device dummy0 removed [ 291.387974][ T7886] device dummy0 entered promiscuous mode [ 291.443724][ T7886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 291.635419][ T7915] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 291.665808][ T7915] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.821708][ T7923] netlink: 'syz.5.716': attribute type 1 has an invalid length. [ 292.021140][ T7934] loop6: detected capacity change from 0 to 4096 [ 292.082610][ T7933] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.130448][ T7933] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.144016][ T7933] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.166556][ T7933] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.207397][ T7933] bond2: (slave geneve2): making interface the new active one [ 292.250643][ T7933] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 292.281951][ T7928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.716'. [ 292.295913][ T7928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.356885][ T7934] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 292.370739][ T7942] netlink: 16 bytes leftover after parsing attributes in process `syz.5.722'. [ 292.502390][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 293.071885][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 293.366785][ T7977] device syzkaller1 entered promiscuous mode [ 294.415881][ T7993] netlink: 'syz.6.742': attribute type 1 has an invalid length. [ 294.459730][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.742'. [ 294.535294][ T7999] tipc: Failed to remove unknown binding: 66,2,2/0:436415564/436415567 [ 294.860399][ T8009] loop2: detected capacity change from 0 to 512 [ 295.780912][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'. [ 296.381780][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.760'. [ 296.419974][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.760'. [ 296.586971][ T8043] loop2: detected capacity change from 0 to 128 [ 296.735314][ T8043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 296.800680][ T8043] System zones: 1-3, 19-19, 35-36 [ 297.234276][ T8043] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 297.411986][ T8043] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 297.463334][ T8056] loop1: detected capacity change from 0 to 1024 [ 297.534711][ T8043] EXT4-fs warning (device loop2): verify_group_input:147: Cannot add at group 5 (only 1 groups) [ 297.624030][ T8056] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000005,noquota,journal_ioprio=0x0000000000000003,nombcache,nodioread_nolock,,errors=continue. Quota mode: none. [ 297.649928][ T8056] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.207953][ T8082] loop2: detected capacity change from 0 to 764 [ 298.369127][ T8082] Symlink component flag not implemented [ 298.433849][ T8082] Symlink component flag not implemented (116) [ 298.552792][ T8066] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 298.694838][ T8106] loop2: detected capacity change from 0 to 512 [ 298.797377][ T8106] EXT4-fs (loop2): Ignoring removed nobh option [ 298.854911][ T8106] EXT4-fs (loop2): orphan cleanup on readonly fs [ 298.919617][ T8106] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.782: EA inode hash validation failed [ 299.023632][ T8106] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 299.050480][ T8106] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.782: corrupted inode contents [ 299.201404][ T8106] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #15: comm syz.2.782: mark_inode_dirty error [ 299.453019][ T8106] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #15: comm syz.2.782: corrupted inode contents [ 299.751353][ T8106] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2952: inode #15: comm syz.2.782: mark_inode_dirty error [ 299.830765][ T8106] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #15: comm syz.2.782: mark inode dirty (error -117) [ 299.919834][ T8106] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117) [ 299.951799][ T8106] EXT4-fs (loop2): 1 orphan inode deleted [ 299.957606][ T8106] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,auto_da_alloc=0x0000000000000004,debug_want_extra_isize=0x000000000000005c,delalloc,nobh,min_batch_time=0x000000000000b656,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 300.030821][ T26] audit: type=1326 audit(1776475790.357:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54f49e819 code=0x7ffc0000 [ 300.079453][ T8133] loop1: detected capacity change from 0 to 512 [ 300.139275][ T26] audit: type=1326 audit(1776475790.357:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54f49e819 code=0x7ffc0000 [ 300.200343][ T8135] loop0: detected capacity change from 0 to 256 [ 300.218926][ T8133] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 300.259370][ T26] audit: type=1326 audit(1776475790.357:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa54f49e819 code=0x7ffc0000 [ 300.305480][ T8133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0102] [ 300.323840][ T8133] EXT4-fs (loop1): orphan cleanup on readonly fs [ 300.351816][ T8135] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 300.366750][ T26] audit: type=1326 audit(1776475790.357:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54f49e819 code=0x7ffc0000 [ 300.389455][ T26] audit: type=1326 audit(1776475790.357:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8130 comm="syz.5.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54f49e819 code=0x7ffc0000 [ 300.420215][ T8133] EXT4-fs warning (device loop1): ext4_enable_quotas:6486: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 300.547152][ T8133] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 300.638753][ T8133] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz.1.795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 300.771826][ T8133] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.795: couldn't read orphan inode 13 (err -117) [ 300.840855][ T8142] loop2: detected capacity change from 0 to 8192 [ 300.934007][ T8133] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x0000000000000833,nomblk_io_submit,debug,abort,grpid,noquota,,errors=continue. Quota mode: writeback. [ 301.014324][ T8142] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 301.393539][ T8165] loop2: detected capacity change from 0 to 512 [ 301.564507][ T8165] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,acl,,errors=continue. Quota mode: writeback. [ 301.664705][ T8165] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.791954][ T8179] tipc: Started in network mode [ 301.809762][ T8133] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.795: inode #15: comm syz.1.795: iget: illegal inode # [ 301.837628][ T8179] tipc: Node identity 2, cluster identity 4711 [ 301.860313][ T8179] tipc: Node number set to 2 [ 301.865979][ T8179] tipc: Cannot configure node identity twice [ 302.048180][ T8183] loop0: detected capacity change from 0 to 512 [ 302.075660][ T8184] device syzkaller1 entered promiscuous mode [ 302.131801][ T8185] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.331409][ T8183] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 302.400184][ T8183] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.814: Invalid inode bitmap blk 4 in block_group 0 [ 302.476820][ T8195] loop6: detected capacity change from 0 to 164 [ 302.539338][ T8183] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 302.627806][ T8195] rock: directory entry would overflow storage [ 302.654849][ T8195] rock: sig=0x4f50, size=4, remaining=3 [ 302.685881][ T8195] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 303.154683][ T8222] loop6: detected capacity change from 0 to 1024 [ 303.473533][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 303.494546][ T8222] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: none. [ 303.508043][ T8236] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.518164][ T8236] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.526983][ T8236] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.535943][ T8236] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.485066][ T8253] loop0: detected capacity change from 0 to 512 [ 304.602591][ T8253] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 304.623842][ T8253] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.837: Invalid inode bitmap blk 4 in block_group 0 [ 304.624162][ T8253] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 304.793667][ T8263] netlink: 'syz.6.841': attribute type 13 has an invalid length. [ 304.793695][ T8263] netlink: 'syz.6.841': attribute type 17 has an invalid length. [ 304.854495][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060921800: rx timeout, send abort [ 304.857626][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060921800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 305.010864][ T8263] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.060336][ T8263] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.033348][ T8328] loop6: detected capacity change from 0 to 512 [ 306.109211][ T8328] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.176352][ T8328] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 306.209540][ T8328] Quota error (device loop6): write_blk: dquota write failed [ 306.245933][ T8328] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 306.313730][ T8328] Quota error (device loop6): write_blk: dquota write failed [ 306.321789][ T8328] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 306.331915][ T8328] EXT4-fs error (device loop6): ext4_acquire_dquot:6234: comm syz.6.870: Failed to acquire dquot type 1 [ 306.352611][ T8328] EXT4-fs (loop6): 1 truncate cleaned up [ 306.362350][ T8328] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,inode_readahead_blks=0x0000000000200000,resgid=0x0000000000000000,norecovery,quota,resuid=0x0000000000000000,sysvgroups,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 306.554082][ T8310] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 307.195939][ T8355] loop2: detected capacity change from 0 to 1024 [ 307.405552][ T8355] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.877: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 307.432258][ T8355] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.877: couldn't read orphan inode 11 (err -117) [ 307.491452][ T8355] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: writeback. [ 307.909356][ T8377] loop0: detected capacity change from 0 to 1024 [ 308.215300][ T8377] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000005,noquota,journal_ioprio=0x0000000000000003,nombcache,nodioread_nolock,,errors=continue. Quota mode: none. [ 308.268564][ T8377] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.345451][ T8377] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.436441][ T8377] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 308.488358][ T8377] EXT4-fs (loop0): This should not happen!! Data will be lost [ 308.488358][ T8377] [ 308.533577][ T8395] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.535709][ T8396] usb usb7: usbfs: process 8396 (syz.6.894) did not claim interface 0 before use [ 308.606276][ T8376] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.689080][ T8376] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.770727][ T8376] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.847694][ T8408] 9pnet: Insufficient options for proto=fd [ 308.888749][ T8376] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.936400][ T8395] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.962364][ T8412] loop2: detected capacity change from 0 to 512 [ 309.008807][ T8376] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.060504][ T8412] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.901: iget: bad i_size value: 38620345925642 [ 309.077390][ T8395] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.129881][ T8376] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #15: block 1: comm syz.0.888: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.157792][ T8412] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.901: couldn't read orphan inode 15 (err -117) [ 309.173599][ T8412] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 309.304450][ T8430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.901: bg 0: block 5: invalid block bitmap [ 309.354702][ T8430] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 72 with error 28 [ 309.424548][ T8430] EXT4-fs (loop2): This should not happen!! Data will be lost [ 309.424548][ T8430] [ 309.482760][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 309.502079][ T8430] EXT4-fs (loop2): Total free blocks count 0 [ 309.518253][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.910'. [ 309.522344][ T8430] EXT4-fs (loop2): Free/Dirty block details [ 309.556466][ T8430] EXT4-fs (loop2): free_blocks=0 [ 309.623742][ T8430] EXT4-fs (loop2): dirty_blocks=72 [ 309.668264][ T8430] EXT4-fs (loop2): Block reservation details [ 309.705172][ T8430] EXT4-fs (loop2): i_reserved_data_blocks=72 [ 309.708485][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.915'. [ 310.605202][ T8484] loop2: detected capacity change from 0 to 2048 [ 310.720911][ T8484] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000002d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 310.989511][ T8484] loop_set_status: loop2 () has still dirty pages (nrpages=5) [ 311.133883][ T7472] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 311.208582][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.6.945'. [ 311.903014][ T8544] loop2: detected capacity change from 0 to 512 [ 311.933928][ T8544] EXT4-fs (loop2): Ignoring removed nobh option [ 311.954834][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 311.967355][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 311.991260][ T8544] [ 311.993934][ T8544] ====================================================== [ 311.997975][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 312.001264][ T8544] WARNING: possible circular locking dependency detected [ 312.001280][ T8544] syzkaller #0 Not tainted [ 312.001292][ T8544] ------------------------------------------------------ [ 312.001299][ T8544] syz.2.954/8544 is trying to acquire lock: [ 312.001312][ T8544] ffff88807b770bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 312.044902][ T8544] [ 312.044902][ T8544] but task is already holding lock: [ 312.052290][ T8544] ffff8880601ba8a8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 312.062450][ T8544] [ 312.062450][ T8544] which lock already depends on the new lock. [ 312.062450][ T8544] [ 312.072991][ T8544] [ 312.072991][ T8544] the existing dependency chain (in reverse order) is: [ 312.082005][ T8544] [ 312.082005][ T8544] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 312.089660][ T8544] down_write+0x38/0x60 [ 312.094377][ T8544] ext4_destroy_inline_data+0x24/0xe0 [ 312.100284][ T8544] ext4_writepages+0x670/0x2df0 [ 312.105668][ T8544] do_writepages+0x476/0x6e0 [ 312.110800][ T8544] filemap_fdatawrite_wbc+0x1eb/0x240 [ 312.116842][ T8544] file_write_and_wait_range+0x14d/0x220 [ 312.123024][ T8544] ext4_sync_file+0x1ff/0xae0 [ 312.128229][ T8544] ext4_buffered_write_iter+0x338/0x3b0 [ 312.134313][ T8544] ext4_file_write_iter+0x74d/0x1700 [ 312.140337][ T8544] do_iter_readv_writev+0x47e/0x5f0 [ 312.146082][ T8544] do_iter_write+0x205/0x7b0 [ 312.151201][ T8544] do_pwritev+0x240/0x3a0 [ 312.156070][ T8544] do_syscall_64+0x4c/0xa0 [ 312.161012][ T8544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.167424][ T8544] [ 312.167424][ T8544] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 312.176158][ T8544] __lock_acquire+0x2c42/0x7d10 [ 312.181600][ T8544] lock_acquire+0x19e/0x400 [ 312.186652][ T8544] percpu_down_read+0x46/0x1b0 [ 312.191980][ T8544] ext4_writepages+0x20f/0x2df0 [ 312.197445][ T8544] do_writepages+0x476/0x6e0 [ 312.202652][ T8544] __writeback_single_inode+0x153/0xda0 [ 312.208731][ T8544] writeback_single_inode+0x3cb/0x8e0 [ 312.214641][ T8544] write_inode_now+0x23b/0x2c0 [ 312.220165][ T8544] iput+0x5ab/0x8a0 [ 312.224517][ T8544] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 312.230665][ T8544] ext4_xattr_block_set+0x4fd/0x2d20 [ 312.236585][ T8544] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 312.243034][ T8544] __ext4_expand_extra_isize+0x301/0x3e0 [ 312.249993][ T8544] __ext4_mark_inode_dirty+0x469/0x700 [ 312.256362][ T8544] ext4_evict_inode+0xa8d/0x1090 [ 312.262042][ T8544] evict+0x4c9/0x8d0 [ 312.266497][ T8544] ext4_orphan_cleanup+0xad2/0x1320 [ 312.272244][ T8544] ext4_fill_super+0x8e25/0x95a0 [ 312.277717][ T8544] mount_bdev+0x287/0x3c0 [ 312.282668][ T8544] legacy_get_tree+0xe6/0x180 [ 312.287965][ T8544] vfs_get_tree+0x88/0x270 [ 312.292912][ T8544] do_new_mount+0x24a/0xa40 [ 312.297945][ T8544] __se_sys_mount+0x2e3/0x3d0 [ 312.303166][ T8544] do_syscall_64+0x4c/0xa0 [ 312.308122][ T8544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.314803][ T8544] [ 312.314803][ T8544] other info that might help us debug this: [ 312.314803][ T8544] [ 312.325609][ T8544] Possible unsafe locking scenario: [ 312.325609][ T8544] [ 312.333060][ T8544] CPU0 CPU1 [ 312.338446][ T8544] ---- ---- [ 312.343927][ T8544] lock(&ei->xattr_sem); [ 312.348276][ T8544] lock(&sbi->s_writepages_rwsem); [ 312.356000][ T8544] lock(&ei->xattr_sem); [ 312.362859][ T8544] lock(&sbi->s_writepages_rwsem); [ 312.368072][ T8544] [ 312.368072][ T8544] *** DEADLOCK *** [ 312.368072][ T8544] [ 312.376313][ T8544] 3 locks held by syz.2.954/8544: [ 312.381333][ T8544] #0: ffff88807a1120e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950 [ 312.391443][ T8544] #1: ffff88807a112650 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x44a/0x1090 [ 312.401188][ T8544] #2: ffff8880601ba8a8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3e8/0x700 [ 312.411569][ T8544] [ 312.411569][ T8544] stack backtrace: [ 312.417454][ T8544] CPU: 0 PID: 8544 Comm: syz.2.954 Not tainted syzkaller #0 [ 312.425259][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 312.435581][ T8544] Call Trace: [ 312.438875][ T8544] [ 312.441821][ T8544] dump_stack_lvl+0x188/0x250 [ 312.446675][ T8544] ? load_image+0x400/0x400 [ 312.451184][ T8544] ? show_regs_print_info+0x20/0x20 [ 312.456495][ T8544] ? print_circular_bug+0x12b/0x1a0 [ 312.461702][ T8544] check_noncircular+0x296/0x330 [ 312.466647][ T8544] ? look_up_lock_class+0x71/0x110 [ 312.471945][ T8544] ? add_chain_block+0x940/0x940 [ 312.476998][ T8544] ? lockdep_lock+0xf1/0x1f0 [ 312.481613][ T8544] ? mark_lock+0x94/0x320 [ 312.486038][ T8544] __lock_acquire+0x2c42/0x7d10 [ 312.490939][ T8544] ? __lock_acquire+0x7d10/0x7d10 [ 312.495966][ T8544] ? verify_lock_unused+0x140/0x140 [ 312.501179][ T8544] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.507364][ T8544] ? __queue_work+0x9e2/0xd50 [ 312.512056][ T8544] lock_acquire+0x19e/0x400 [ 312.516562][ T8544] ? ext4_writepages+0x20f/0x2df0 [ 312.521768][ T8544] ? __might_sleep+0xf0/0xf0 [ 312.526359][ T8544] ? read_lock_is_recursive+0x10/0x10 [ 312.531926][ T8544] ? mark_lock+0x94/0x320 [ 312.536259][ T8544] ? __lock_acquire+0x13bc/0x7d10 [ 312.541290][ T8544] percpu_down_read+0x46/0x1b0 [ 312.546058][ T8544] ? ext4_writepages+0x20f/0x2df0 [ 312.551083][ T8544] ext4_writepages+0x20f/0x2df0 [ 312.555952][ T8544] ? verify_lock_unused+0x140/0x140 [ 312.561295][ T8544] ? verify_lock_unused+0x140/0x140 [ 312.566529][ T8544] ? mark_lock+0x94/0x320 [ 312.570865][ T8544] ? ext4_readpage+0x2e0/0x2e0 [ 312.575636][ T8544] ? __lock_acquire+0x13bc/0x7d10 [ 312.580805][ T8544] ? ext4_readpage+0x2e0/0x2e0 [ 312.585785][ T8544] do_writepages+0x476/0x6e0 [ 312.590476][ T8544] ? __writepage+0x130/0x130 [ 312.595078][ T8544] ? writeback_single_inode+0x3c0/0x8e0 [ 312.600628][ T8544] ? __lock_acquire+0x7d10/0x7d10 [ 312.605662][ T8544] ? do_raw_spin_lock+0x128/0x2f0 [ 312.610706][ T8544] __writeback_single_inode+0x153/0xda0 [ 312.616356][ T8544] writeback_single_inode+0x3cb/0x8e0 [ 312.621733][ T8544] ? write_inode_now+0x2c0/0x2c0 [ 312.626688][ T8544] write_inode_now+0x23b/0x2c0 [ 312.631461][ T8544] ? bdi_split_work_to_wbs+0x8a0/0x8a0 [ 312.637017][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 312.642227][ T8544] iput+0x5ab/0x8a0 [ 312.646130][ T8544] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 312.651514][ T8544] ? ext4_xattr_ibody_set+0x330/0x330 [ 312.656899][ T8544] ? __ext4_journal_get_write_access+0x2ea/0x6e0 [ 312.663240][ T8544] ? __might_sleep+0xf0/0xf0 [ 312.667920][ T8544] ? ext4_xattr_block_set+0xc2/0x2d20 [ 312.673391][ T8544] ext4_xattr_block_set+0x4fd/0x2d20 [ 312.678698][ T8544] ? ext4_get_inode_loc+0x120/0x120 [ 312.684002][ T8544] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 312.689787][ T8544] ? ext4_xattr_block_find+0x500/0x500 [ 312.695324][ T8544] ? ext4_xattr_block_find+0x433/0x500 [ 312.700838][ T8544] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 312.706677][ T8544] __ext4_expand_extra_isize+0x301/0x3e0 [ 312.712418][ T8544] __ext4_mark_inode_dirty+0x469/0x700 [ 312.718060][ T8544] ext4_evict_inode+0xa8d/0x1090 [ 312.723157][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 312.728083][ T8544] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 312.734039][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 312.739243][ T8544] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 312.745226][ T8544] evict+0x4c9/0x8d0 [ 312.749135][ T8544] ? proc_nr_inodes+0x320/0x320 [ 312.753991][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 312.759202][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 312.764248][ T8544] ? iput+0x706/0x8a0 [ 312.768242][ T8544] ext4_orphan_cleanup+0xad2/0x1320 [ 312.773452][ T8544] ? ext4_orphan_del+0xbf0/0xbf0 [ 312.778653][ T8544] ? errseq_check_and_advance+0x62/0x120 [ 312.784295][ T8544] ext4_fill_super+0x8e25/0x95a0 [ 312.789251][ T8544] ? ext4_mount+0x40/0x40 [ 312.793583][ T8544] ? set_blocksize+0x1f3/0x370 [ 312.798527][ T8544] ? sb_set_blocksize+0xa5/0xe0 [ 312.803378][ T8544] mount_bdev+0x287/0x3c0 [ 312.807717][ T8544] ? ext4_mount+0x40/0x40 [ 312.812062][ T8544] legacy_get_tree+0xe6/0x180 [ 312.816784][ T8544] ? ext4_errno_to_code+0x160/0x160 [ 312.821985][ T8544] vfs_get_tree+0x88/0x270 [ 312.826410][ T8544] do_new_mount+0x24a/0xa40 [ 312.830920][ T8544] __se_sys_mount+0x2e3/0x3d0 [ 312.835611][ T8544] ? __x64_sys_mount+0xc0/0xc0 [ 312.840384][ T8544] ? lockdep_hardirqs_on+0x94/0x140 [ 312.845685][ T8544] ? __x64_sys_mount+0x1c/0xc0 [ 312.850540][ T8544] do_syscall_64+0x4c/0xa0 [ 312.854964][ T8544] ? clear_bhb_loop+0x30/0x80 [ 312.859646][ T8544] ? clear_bhb_loop+0x30/0x80 [ 312.864327][ T8544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.870224][ T8544] RIP: 0033:0x7f3a2cd23a8a [ 312.874647][ T8544] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.894344][ T8544] RSP: 002b:00007f3a2af7be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.902891][ T8544] RAX: ffffffffffffffda RBX: 00007f3a2af7bee0 RCX: 00007f3a2cd23a8a [ 312.910878][ T8544] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f3a2af7bea0 [ 312.918866][ T8544] RBP: 0000200000000180 R08: 00007f3a2af7bee0 R09: 0000000000800718 [ 312.927050][ T8544] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 312.935023][ T8544] R13: 00007f3a2af7bea0 R14: 00000000000004a3 R15: 00002000000001c0 [ 312.943018][ T8544] [ 312.992588][ T8544] ------------[ cut here ]------------ [ 312.998430][ T8544] EA inode 11 i_nlink=1026 [ 312.998645][ T8544] WARNING: CPU: 0 PID: 8544 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e7/0x540 [ 313.011003][ T23] usb 7-1: device descriptor read/64, error -71 [ 313.023190][ T8544] Modules linked in: [ 313.027341][ T8544] CPU: 0 PID: 8544 Comm: syz.2.954 Not tainted syzkaller #0 [ 313.053832][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.067198][ T8544] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 313.074638][ T8544] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 1a e6 a1 ff 49 8b 37 48 c7 c7 40 9b 3d 8a 89 da e8 f9 32 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 43 22 a0 07 [ 313.094698][ T8544] RSP: 0018:ffffc9000322f160 EFLAGS: 00010246 [ 313.100898][ T8544] RAX: 55d62efc1a6eb600 RBX: 0000000000000402 RCX: 0000000000080000 [ 313.110083][ T8544] RDX: ffffc9001ab30000 RSI: 000000000007ffff RDI: 0000000000080000 [ 313.118271][ T8544] RBP: ffffc9000322f250 R08: ffffc9000322ec87 R09: 1ffff92000645d90 [ 313.126272][ T8544] R10: dffffc0000000000 R11: fffff52000645d91 R12: ffff88805ef87048 [ 313.134350][ T8544] R13: 1ffff1100bdf0e48 R14: dffffc0000000000 R15: ffff88805ef87088 [ 313.142397][ T8544] FS: 00007f3a2af7c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 313.151432][ T8544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 313.158174][ T8544] CR2: 00007fa54f6eb2f8 CR3: 000000002ed5e000 CR4: 00000000003506f0 [ 313.166294][ T8544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 313.176095][ T8544] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 313.184465][ T8544] Call Trace: [ 313.187933][ T8544] [ 313.190887][ T8544] ? ext4_xattr_block_csum+0x560/0x560 [ 313.196349][ T8544] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 313.202018][ T8544] ext4_xattr_set_entry+0xed9/0x3ea0 [ 313.207564][ T8544] ? __sync_dirty_buffer+0x32d/0x370 [ 313.213445][ T8544] ? __ext4_handle_dirty_metadata+0x39d/0x800 [ 313.219766][ T8544] ? ext4_xattr_block_set+0xda0/0x2d20 [ 313.225354][ T8544] ? ext4_xattr_ibody_set+0x330/0x330 [ 313.230797][ T8544] ? ext4_get_inode_loc+0x120/0x120 [ 313.236127][ T8544] ext4_xattr_ibody_set+0x112/0x330 [ 313.241488][ T8544] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 313.247423][ T8544] __ext4_expand_extra_isize+0x301/0x3e0 [ 313.253259][ T8544] __ext4_mark_inode_dirty+0x469/0x700 [ 313.258807][ T8544] ext4_evict_inode+0xa8d/0x1090 [ 313.263775][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 313.268726][ T8544] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 313.274656][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 313.281027][ T8544] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 313.287173][ T8544] evict+0x4c9/0x8d0 [ 313.291402][ T8544] ? proc_nr_inodes+0x320/0x320 [ 313.296392][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 313.301696][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 313.306626][ T8544] ? iput+0x706/0x8a0 [ 313.310858][ T8544] ext4_orphan_cleanup+0xad2/0x1320 [ 313.316997][ T8544] ? ext4_orphan_del+0xbf0/0xbf0 [ 313.317746][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 313.322068][ T8544] ? errseq_check_and_advance+0x62/0x120 [ 313.335494][ T8544] ext4_fill_super+0x8e25/0x95a0 [ 313.340671][ T8544] ? ext4_mount+0x40/0x40 [ 313.345417][ T8544] ? set_blocksize+0x1f3/0x370 [ 313.350263][ T8544] ? sb_set_blocksize+0xa5/0xe0 [ 313.355417][ T8544] mount_bdev+0x287/0x3c0 [ 313.360076][ T8544] ? ext4_mount+0x40/0x40 [ 313.364439][ T8544] legacy_get_tree+0xe6/0x180 [ 313.369164][ T8544] ? ext4_errno_to_code+0x160/0x160 [ 313.374382][ T8544] vfs_get_tree+0x88/0x270 [ 313.378883][ T8544] do_new_mount+0x24a/0xa40 [ 313.383419][ T8544] __se_sys_mount+0x2e3/0x3d0 [ 313.389579][ T8544] ? __x64_sys_mount+0xc0/0xc0 [ 313.394368][ T8544] ? lockdep_hardirqs_on+0x94/0x140 [ 313.399719][ T8544] ? __x64_sys_mount+0x1c/0xc0 [ 313.404634][ T8544] do_syscall_64+0x4c/0xa0 [ 313.409474][ T8544] ? clear_bhb_loop+0x30/0x80 [ 313.414281][ T8544] ? clear_bhb_loop+0x30/0x80 [ 313.419796][ T8544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.425843][ T8544] RIP: 0033:0x7f3a2cd23a8a [ 313.430521][ T8544] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.450536][ T8544] RSP: 002b:00007f3a2af7be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.459361][ T8544] RAX: ffffffffffffffda RBX: 00007f3a2af7bee0 RCX: 00007f3a2cd23a8a [ 313.467462][ T8544] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f3a2af7bea0 [ 313.475491][ T8544] RBP: 0000200000000180 R08: 00007f3a2af7bee0 R09: 0000000000800718 [ 313.483547][ T8544] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 313.491657][ T8544] R13: 00007f3a2af7bea0 R14: 00000000000004a3 R15: 00002000000001c0 [ 313.501167][ T8544] [ 313.504389][ T8544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.511691][ T8544] CPU: 0 PID: 8544 Comm: syz.2.954 Not tainted syzkaller #0 [ 313.519368][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.529578][ T8544] Call Trace: [ 313.532882][ T8544] [ 313.535826][ T8544] dump_stack_lvl+0x188/0x250 [ 313.540518][ T8544] ? show_regs_print_info+0x20/0x20 [ 313.545852][ T8544] ? load_image+0x400/0x400 [ 313.550381][ T8544] panic+0x2e5/0x810 [ 313.554406][ T8544] ? bpf_jit_dump+0xd0/0xd0 [ 313.558297][ T23] usb 7-1: device descriptor read/64, error -71 [ 313.558927][ T8544] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 313.558957][ T8544] __warn+0x248/0x2b0 [ 313.558979][ T8544] ? ext4_xattr_inode_update_ref+0x4e7/0x540 [ 313.558998][ T8544] report_bug+0x1b7/0x2e0 [ 313.559020][ T8544] handle_bug+0x3a/0x70 [ 313.559038][ T8544] exc_invalid_op+0x16/0x40 [ 313.559057][ T8544] asm_exc_invalid_op+0x16/0x20 [ 313.559076][ T8544] RIP: 0010:ext4_xattr_inode_update_ref+0x4e7/0x540 [ 313.559103][ T8544] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 1a e6 a1 ff 49 8b 37 48 c7 c7 40 9b 3d 8a 89 da e8 f9 32 95 07 <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 43 22 a0 07 [ 313.559123][ T8544] RSP: 0018:ffffc9000322f160 EFLAGS: 00010246 [ 313.559144][ T8544] RAX: 55d62efc1a6eb600 RBX: 0000000000000402 RCX: 0000000000080000 [ 313.559160][ T8544] RDX: ffffc9001ab30000 RSI: 000000000007ffff RDI: 0000000000080000 [ 313.559173][ T8544] RBP: ffffc9000322f250 R08: ffffc9000322ec87 R09: 1ffff92000645d90 [ 313.559187][ T8544] R10: dffffc0000000000 R11: fffff52000645d91 R12: ffff88805ef87048 [ 313.559201][ T8544] R13: 1ffff1100bdf0e48 R14: dffffc0000000000 R15: ffff88805ef87088 [ 313.559222][ T8544] ? ext4_xattr_block_csum+0x560/0x560 [ 313.559241][ T8544] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 313.559266][ T8544] ext4_xattr_set_entry+0xed9/0x3ea0 [ 313.559292][ T8544] ? __sync_dirty_buffer+0x32d/0x370 [ 313.559314][ T8544] ? __ext4_handle_dirty_metadata+0x39d/0x800 [ 313.699806][ T8544] ? ext4_xattr_block_set+0xda0/0x2d20 [ 313.705307][ T8544] ? ext4_xattr_ibody_set+0x330/0x330 [ 313.707847][ T23] usb usb7-port1: attempt power cycle [ 313.710684][ T8544] ? ext4_get_inode_loc+0x120/0x120 [ 313.721288][ T8544] ext4_xattr_ibody_set+0x112/0x330 [ 313.726592][ T8544] ext4_expand_extra_isize_ea+0x10d3/0x19b0 [ 313.732509][ T8544] __ext4_expand_extra_isize+0x301/0x3e0 [ 313.738156][ T8544] __ext4_mark_inode_dirty+0x469/0x700 [ 313.743888][ T8544] ext4_evict_inode+0xa8d/0x1090 [ 313.749203][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 313.754092][ T8544] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 313.760122][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 313.765392][ T8544] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 313.771323][ T8544] evict+0x4c9/0x8d0 [ 313.775403][ T8544] ? proc_nr_inodes+0x320/0x320 [ 313.780274][ T8544] ? do_raw_spin_unlock+0x11d/0x230 [ 313.785702][ T8544] ? _raw_spin_unlock+0x24/0x40 [ 313.790942][ T8544] ? iput+0x706/0x8a0 [ 313.795137][ T8544] ext4_orphan_cleanup+0xad2/0x1320 [ 313.800345][ T8544] ? ext4_orphan_del+0xbf0/0xbf0 [ 313.805303][ T8544] ? errseq_check_and_advance+0x62/0x120 [ 313.810955][ T8544] ext4_fill_super+0x8e25/0x95a0 [ 313.815911][ T8544] ? ext4_mount+0x40/0x40 [ 313.820368][ T8544] ? set_blocksize+0x1f3/0x370 [ 313.825285][ T8544] ? sb_set_blocksize+0xa5/0xe0 [ 313.830160][ T8544] mount_bdev+0x287/0x3c0 [ 313.834523][ T8544] ? ext4_mount+0x40/0x40 [ 313.838861][ T8544] legacy_get_tree+0xe6/0x180 [ 313.843624][ T8544] ? ext4_errno_to_code+0x160/0x160 [ 313.848919][ T8544] vfs_get_tree+0x88/0x270 [ 313.853354][ T8544] do_new_mount+0x24a/0xa40 [ 313.857885][ T8544] __se_sys_mount+0x2e3/0x3d0 [ 313.862587][ T8544] ? __x64_sys_mount+0xc0/0xc0 [ 313.867385][ T8544] ? lockdep_hardirqs_on+0x94/0x140 [ 313.872604][ T8544] ? __x64_sys_mount+0x1c/0xc0 [ 313.877529][ T8544] do_syscall_64+0x4c/0xa0 [ 313.881980][ T8544] ? clear_bhb_loop+0x30/0x80 [ 313.886674][ T8544] ? clear_bhb_loop+0x30/0x80 [ 313.891489][ T8544] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.897670][ T8544] RIP: 0033:0x7f3a2cd23a8a [ 313.902089][ T8544] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.922064][ T8544] RSP: 002b:00007f3a2af7be58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.930672][ T8544] RAX: ffffffffffffffda RBX: 00007f3a2af7bee0 RCX: 00007f3a2cd23a8a [ 313.938852][ T8544] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f3a2af7bea0 [ 313.947187][ T8544] RBP: 0000200000000180 R08: 00007f3a2af7bee0 R09: 0000000000800718 [ 313.955262][ T8544] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 313.963239][ T8544] R13: 00007f3a2af7bea0 R14: 00000000000004a3 R15: 00002000000001c0 [ 313.971430][ T8544] [ 313.974850][ T8544] Kernel Offset: disabled [ 313.979184][ T8544] Rebooting in 86400 seconds..