last executing test programs: 4m35.683596527s ago: executing program 4 (id=71): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 4m34.89678917s ago: executing program 4 (id=75): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0x56, 0x5, @vifc_lcl_addr=@empty, @private=0xa010102}, 0x10) 4m33.860297612s ago: executing program 4 (id=82): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030428bd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="c9e1c4bee15709190a0001"], 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x8000) 4m33.439295208s ago: executing program 4 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x19cc5, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m32.897837799s ago: executing program 4 (id=90): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m31.807417155s ago: executing program 4 (id=102): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4m31.064351623s ago: executing program 32 (id=102): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3m25.552218172s ago: executing program 5 (id=385): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000001c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 3m25.044799769s ago: executing program 5 (id=390): bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f"], 0xdc}}, 0x0) 3m24.418535098s ago: executing program 5 (id=395): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m21.714858s ago: executing program 5 (id=410): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000580), 0x7, 0x460, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x30000, 0x1b0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 3m20.170191853s ago: executing program 5 (id=415): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="f1bc", 0x2}], 0x1, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 3m15.087237741s ago: executing program 5 (id=437): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) 3m14.338426099s ago: executing program 33 (id=437): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) 29.960656287s ago: executing program 7 (id=1240): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x6}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x2007, @fd, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 29.569090329s ago: executing program 7 (id=1244): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x819, &(0x7f0000000540)={0x0, 0x10000080, 0x10100, 0xffffffff, 0x307}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 29.055705291s ago: executing program 7 (id=1247): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet(0x2, 0x1, 0x100) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) 28.002788562s ago: executing program 7 (id=1253): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800044, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x365, &(0x7f0000000440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 27.259473186s ago: executing program 7 (id=1258): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) fallocate(r1, 0x8, 0x4000, 0x4000) 26.244276519s ago: executing program 7 (id=1268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 24.925106902s ago: executing program 34 (id=1268): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14.242372438s ago: executing program 3 (id=1291): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 13.602713671s ago: executing program 3 (id=1293): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, r0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r0, 0x5452, 0x0) read(r0, 0x0, 0x0) 11.39879043s ago: executing program 3 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)) 10.755290823s ago: executing program 3 (id=1323): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 8.855304846s ago: executing program 3 (id=1337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES8], 0x1, 0x5a0c, &(0x7f00000001c0)="$eJzs3X+QXFW9IPBzu3syk5n8mAR4RJDJEMh7PHiaCb8K5dUz7+17+gp4VCxe+QgbhUAmGE1CKj8EAkpwwSUFWGhhKeofaCG7SLSoglUiJfJjE1bRLKtLbSG1uov+4RaypASylOUyr2b6np6e233n9vT05Ad8PpXM7XP69Pece+7p231O35kOAAAAvCPsu3XrwYtP+IeffHb4jZv+8Qcbbw595bH8nligP91ed7hayKHUXVk0ts2Oi7+44du/Hbzq7378UO+33ty79uR1v/z7Y6567BMX7Lnna0++PveRt14qihvH0+nj6eSVJISeHx740uf2Pnv8aF4yb/RnaWcIC5KFTy5IMiGG/hhCWJsmFmXufPiNs9aNbm++vXtC/vxMOeP9nW30OI8OrB0Hrz0j/OpvV93ys8Xf/U7X7pd3jhdJeurGUwjzrqh/fFcIYXb6f1QcbXE8xkG7MoTQW/e48wradUqL7V+Wkz4x3c5Kt30FceL9SzLpUqZcNh11Zba9BfVNV1472i1XZE4mnT0ZTVdeO2P+gnT7/XR7+hTjl9N9KCehlIRKrfkbkvExEuqOWxKSsWPZU0uXasc2pPufSSeZdCmTLndl9mus3nSglZNkYv7rc6vpTH48HVfS/JPrz9VNXJKT/65025M+Ud+M6ZC9UdXXcKO2X2Niuw5M0pZDoVR3DmqWXzvw6cHoS/P6koUNjxlpIt63d9UdS8urn9rXn9OO5KEkjZ+0FX/HTxfM+diDu7ZnX9dr8a8opfFLbcX/9YX7X71s1ze/mhv/rhi/3Fb8Mx/vfeXCp29dkts/B2L/VNqKv+alZ+5cfOyVu3Pbf2+M39NW/BV79nfPPfj4E7ntH4r9M7ut+C+e/8HfPPD8oy/nxg8xfm9b8Vfv2fz57oGDp+XGfyL2T1974+e13ee+MDDwu8G8+M/F+HPbin//znvef9/82y/IPb4rY//0txX/olMfu2XOwUdPyjt3Jvd26pUT4J3pmPQ91m1put155nTVzRe+Mlipvuebk/6f28mKMm8+R+uZ18n4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBCOO6M//Kh//2R/lcqabo7vfFiqbqN+bNCSGaHELZuW7Nl2/pNVw9+4prtWzat2TC4Ztvg8KZtW64fPPuvBrcMb96w5vrRe4fec1b1cQtDUt0mJzXU3T0yMlLqn5gX6/s3p+7+1dLz/s/vQxg67hcDldz2L7tn433HNvmZkawY+cDG7Rf/4pxvpPvVn7arv0m7RkZGRkJOu/7vpX+674sHfntaCEN/Nlm7nnnxb340oUFjGeNxUqXuUG1Qd9LbtB21Vqftif1VWbd+w/DQ5P07+vhyzn782xte/uO6677wp2r/9uTuR4v9O3vFyIbSl1dd9P+/fGM1o6hdh+u4F/V33IvYvth/PWl/z0v3a17OflVy9uvWnz3x/A9P2PX6zjBUeW1xY91F+9WVDoCu5F0t1Rtr6E0WTMjvScvHIx4ft2zbxs3Ltl6/4z3rN665evjq4U3vW3728nOHzjn3nGVje76sw/sf6//zFvf/0Iyn+Z/a+f34s7XxNLFds6bcH6PtKu6P+hblPf96L/nc3e+75+mLqxlF4zyWrp1P0m3v6HFeHurGW2NfNduvouMTQhhs1g+vvn5BOP5/rL+l6DxUf2Tqf2YkK0aeXfKHb5z39UV/Xc04JOf5+ga1eZ6vtXq8PWP91ZMej5EjtH+7Qzndr76m7Vr+7NNdd+z7/adr7Zs1K1y3Ztu2LcurP+ekLZ2TnNi0XdncuF+Lx36WQ9otoTZMm4zXUV2h2r7s+TMWz/ZqX3pfX7Kw6X5lxfv2rrpjaXn1U/vyejp5qFrj7DC3uk3enVNyQ+aB5VqDm9V/pD7/isbHwIe+/shHHvne2Q3j48zqz6L9SnL267vP33/3t77w77/Xuf360N/s7//D//z40mrGEX9eKVcbUmt12p6k/rxyZghFz7/Fofl+5D7/Ss33p+j5l61nvHzzeIOZdF8ot/V8PfPx3lcufPrWJbnP1wOTPV/rd/bGCY8rFzxfj5Txk31+JZWJ7Zi559eEgZKsGPnxbcfsfPKmlSdUM4peL2ulm43rs1qYf+Ts148ue2HgmsF/9987d9749l89fPkv16z4TDWj/eMe29KZ496T9m9PTv/WWh3nnfX9+96rrtmwtppf1M+H7/1vui2Y/8RTydbrd3xyzYYNw1u2trZfrb6exnqyvdzu62k8uy0s2K9Sw37N3I1W+qvV51ts/9q2+2vi860vJG29Luz46YI5H3tw1/b+hkelFV1RSuOX2or/6wv3v3rZrm9+NTf+XTF+pa34a1565s7Fx165Ozf+vUkav6et+Cv27O+ee/DxJ3LjD8X2z24r/ovnf/A3Dzz/6Mu58UOM39de/7+2+9wXBgZ+lxv/uSStZ/Q9UggPv3HWumo6CV3p8y22o2tCu0I2nWTSpUy6XJ8uxVWEtIJykkzMj+XS/JPr2tLMv+Tkx3dhPYuq2zdjOmRvTJ5/pCnVnfub5Re9TwUAeLuLn//H96Dx8//h9I1S/koDjJvuPGxRTtw4Dxtfz5n4GeuiNH58fFwHHHhvGBrd3jxYfaM/1c8R4vMhu84Z6zntlIkxCtc5R8bqb1jnLFp/X5JJx3ZV18srdfPQVOO8phJaWH9vrGfy9ffM7hd/njV4W0OzBuvWrbLHrytdMWt2vUOmvZXRCHnjI7suFq/nGJgXVo7V1+L4yF5HE49D9jqaWM8JmRNnu9fR5I2P/sZ+mNCuOD5iuUnGx1iTiz+PbDx+YZL+HT9+zaNlj98UjnfPaPmOfj77Vu3u2uezHVg3bHpKO3TrhjP7eZh1yZz46RPsSF83jPlxPyotrid+JCe/U+uJ8XQR23VgkrYcCtYTgberOP+PrxGj8//RN+D/L1OuaJ6SfdcY4+VeJ1Ru3p6ieUfjdXq9bb2Or96z+fPdAwdPy32f80Sr1+ltnpDqLbjup6gfl2bShf2Ys0BTNN/L1lPU79nrMvrC3Lb6/f6d97z/vvm3X5Db7yurL6TF/X53dXNf2o8F/T7T13Me/dcZmC80jX+UXMdQtH522OYj6YVPMzUf+eec/KnOR3obbtT2a8yROx8ZfyGdMB/pOrTtAgCOHnH+X/v8LJ3//69YIH0fUTRvPT2TjvFy560570/y5q3/lG6vy5TvS3+jYqrvmy869bFb5hx89KTcecu9rc5D/+OEVH/hPHR68+bcecTKzlwvnjuPqM2zpjdPzG1/bZ44vXl6zse0dfP06c2jc/unNo+euA5w9/7W4sd1gBg/+3HC+DpAB+e5b40XOnTz3IL1ukxlMdnqet1hmUfPm7ifMzKPTn99dqbm0Zfk5E91Ht3XcKO2X2OO3Hn0xHzzaADg7SrO/+PbuDj/fzpTbrqfs+fOCzr0vj3790Bq8Z+bkXnlePwOff6bO+/o0Oe/xfPWmZ7Xz/S6xNH++e9Mrwv1j/0Bz5laJztsny8fKfPitFLzYgAAjmRx/j87TefP/6c3P2mYv3VV30KOz0+Ovvl5fTnz85z4b5v5ee/Yjhy9618ze53MoZj/j9Slj7j5f0ynyRHzfwAAjkBx/h9/7TH+/b//nKazf7f+aJynB5+jv5Pm6Uf5dSodXmeL8euvAzjK1wGO6OsAYjrU3Zg9Xt46AAAAh0PX2Eyp8ffsP5pus79nn/d7+ZfllG9VJX17fOW2LcPDl2/fvHbNtuHLN12zdnjr5dduWb9t2/Cmarnpzhtz5y3pvLErVNL+aF4uO2+bn/49hPk5fw8hWz6GPXHsRuPfQ8hWO7vg7wiMH7/W2pt3/EqTlG82PvKOd178f8kpH9WO/1UfP/PydVsvX79p/bb1yc6GcqOz1t4pfG9mkv6f0velZn40KE39+zvj4ZleO0oN7ehK+yPv+9mTTDsWpC1ZkPf9Bznt/sl/++KnTh350wMhDB1Xfve0+i9ZMfKfLh3+p237frF5tP2lSdtfK5m2q+j7SrPl4/5UNlyzddsZ667Zvin7jZLtiesZpVp6htYz0qd/ucX1idU5+VP9/f1yw40jU8vrEwAATBA//4/vZ+Pnh19I30DF/Nbn6dP7/Dh3nj7U2jw9+71kRfP0bPm4v63O03uaztP/6/1xj4vm6dn6i+bpzco3m6fnzbvz4v9zTvmpan2ctHGdR5x+Prhre+44uaK1cZL9PoOicZItP9VxkkxzPSdbf9E4aVa+2TjJO+558T+cUz5P0Xio1MbD9K7LyR0Pd7U2Hv4yky4aD9nyUx0PpWmOh2z9ReOhWflm4yHv+ObFvzinfKsmjo/RgTE2LoYvv/aaLZ+sKzfT338RGi/JaKV9s8YfO7Pf/9Gu1vt3Zq/7mn77Q1gxlpPX/pm9rmz67S/q/ylcVzYvNFxXltv+56a3EtZ6+2f2+10y8oo3Pv5QrdemZ4Ki68+K1nFX5eRPdR13VsONI5N1XDh84vw/ftwT5/+3p9tOfwx09H9Pmu8xaxq/Q99jVvQ+5h33ep79yN3rOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDbQndl0dh2361bD158wj/85LPDb9z0jz/YePNf3PDt3w5e9Xc/fqj3W2/uXXvyul/+/TFXPfaJC/bc87UnX5/7yFsvFQbuH/tZOT1N9oSQvJKE0PPDA1/63N5njx/NS0II5aR/ZwgLkoVPLkgyEYb+GEJYW2vnxDsffuOsdaPbm2/vnpA/PxMku1+hrxzbU9/OEK4r3COOQvE47zh47RnhV3+76pafLf7ud7p2v7xzvEjSUzeeQph3Rf3ju0IIs9P/o+JoWxQfnG5XhhB66x53XkG7Tmmx/cty0iem21nptq8gTrx/SSZdypTLpqOuzLa3oL7pymtHu+WKzMmksyej6cprZ8xfkG6/n25Pn2L8cvyfhFISKrXmb0jGx0ioO25JSMaOZU8tXaod25DufyadZNKlTLrcldmvsXrTgVZOkon5sVwmP56OK2n+yfXn6iYuycl/V7rtSZ+ob8Z0yN6o6mu4UduvMbFdByZpS+o/FBdpX6nuHNQsv3bg04PRl+b1JQsbHjPSRLxv76o7lpZXP7WvP6cdyUNJGj9pK/6Ony6Y87EHd21flBf/ilIav9RW/F9fuP/Vy3Z986u58e+K8cttxT/z8d5XLnz61iW5/XMg9k+lrfhrXnrmzsXHXrk7t/33xvg9bcVfsWd/99yDjz+R2/6h2D+z24r/4vkf/M0Dzz/6cm78EOP3thV/9Z7Nn+8eOHhabvwnYv/0tTd+Xtt97gsDA78bzIv/XIw/t6349++85/33zb/9gkU5LwzJytg//W3Fv+jUx26Zc/DRk/LOncm9nXrlBHhnOiZ9j3Vbmm53njlddfOFrwxWqu/55qT/53ayoozReuZVb1ZmsBoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN5mfn7j2R+99AMfXlVJQkhyyow0Ee8rz1qxYrCNete89Mydi4+9cnd93qI24gAAAADF4jy8VMvpCYvCtcnscGLT8nGN4MSYSibmZ9cQYpzsGkG7cUpN4pTaiFPuUHsqHYrT1aE4szoUp7tDcXoK4vSE1uLMniROZXQEtNie3knb03qcvg7FmdOhOHM7FGdeh+LM71Cc/knjtD4OF3QozsIOxTmmQ3GO7VCc4zoU5886FOf4DsXJrilPdRzOTUuekBdn7Ea5ME4lKdfuaLaefnxaz0nTrKevoJ65Ra/HLdYzu8V6Tsk8rjTFenparOfPW6gnabK/tXSL9fzlNPenVFBPHLfXZdsX64mpFsf/9R2Ks6NDcW7oUJwbOxTn0x2K85kOxblpmnEAWhXn/+Pzvf7QXfnr0JuecbKrAHG+u3jsZ+PrXd4JKcZ7dyZ/VlG87EQ9E2/xVNuXXUDIxFuSye+aEK9Sm49MEq+nPt7SzJ2T7e/5K5q3rT7e6Zn87kniTdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgEfn7j2R+99AMfXhWSMPqvqZEm4n3lWStWDLZR795Vdywtr35qX31ed6WNQAAAAEChOA/vquX0hO7K8tCdzJpQriddB+hJ0+X+6nZgXlg5uk0GS2Pp3mTBpI+rpI9btm3j5mVbr9/xnvUb11w9fPXwpvctP3v5uUPnnHvOsnXrNwwPVX+G0F0QL4Qwtvyw9fodn1yzYcPwlq3VzGz7F6WPW5Smk/RxA+8NQ6Pbm9P2Lyyor9RQX4du7AoNdxUfPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf2XX3kLkPMsHgL/fzOzMdNv8O396moZmM+RQolZN4lZSLd0PBAvNgSwFma2uJdgEi5smtEmJdWwDtjVBEVoCIZILI7HYWrzpwRaxBwKRGg24MUhbNBd6obRaSUsuJGVkd+ab08501qEkafz9Lr7D8z7v+3zvd7HwfDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwbk1XRifLY+MTw1EIUY+cahfJWDobx6UB6n7lxe0/yI2cWdEay2UGWAgAAADoK+nDhxqRfMjlQ0iHa2fvloSWgdDs+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8905XRyfLY+MSlUQhRj5xqF8lYOhvHpQHqnnr36c++PjLyt9ZYcYB1AAAAgP6SPjzViORDMSwNQ9G1M51/I5p8G1jYMb+W15Sss2ieeZ3fDnrlLZ1n3vXzzPtYn7wN9fOuAAAAAB99Sf+faUQKIZdZMKcfTvr/fn19kre4Iy9dP8//twLZeWcCAAAAHyzp/3ONSDHkMsVGvz7ffn9JR14yv9//7ZP5y3vM7/f//PX1s//TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBHx3RldLI8Nj6RjkKIeuRUu0jG0tk4Lg1Qd/VLw/9Ye+SRJa2xXGaAhQAAAIC+kj682XrnQy4zHIbCpbN9/8itB5/90rPPj4YQam1+Nht2bdqx497VtWOSt+rYkaHvH33723PyVtWO522DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh2a6MjpZHhufuCQKIeqRU+0iGUtn47g0QN03P//Fvzx58oW3WmPFAdYBAAAA+kv68Gbvnw/FkA3ZcPXsXWuvPyPVMb/XNwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg4nHfNx/4xqapqc33ujg/F9V0CBfAY7hw0X5xvv8yAQAAH7bFIQrV/9I1G8/3UwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeC6croZHlsfCIfhRD1yKl2kYyls3FcGqBu/OLx3IIzL73SGisOsA4AAADQX9KHN3v/fCiGoTAUrpq96/ZNYLb/L5zDhwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuKNOV0cny2PjEgiiEqEdOtYtkLJ2N49IAdZ/YfeBzhy//3m2tsVxmgIUAAACAvpI+PNuI5EMu8/GQC9fV76faJ0Tp+rn7d4HmvO1t04bnPa/SNi8973l7OnaWqe+mNi+frFeonRvzSs15qfq8Usu8YmiULzXmzb6sfW3VFvR5zrlvHgAAAM6dpP/PNSKFkMvkWvr/n7blF/S5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAP05XRyfLY+EQUhRD1yKl2kYyls3FcGqDuA7/9/8u++rO9O1tjxQHWAQAAAPpL+vBm758PxbAo/F9YNNv3h0J7fpL3z/LZw4//668rQlh59YmRTOeyP0oufv3mLS93HkJItWenQri8Xi/qUe83v3/8/mXVs0+GsPKq9HVz6oUPrte+ZFx9rrx5/Y6jJ7b3eTkAAABwkUj6/6FGpBBymXt69v9J592n/2+YbcAvv3/3L66sH+sdeceMVKFeL9Wj3heWPf3n5Wv+/vZM/z+33icbV58+sPXwlW0Fa5EOUVwd27pzw4kbD6WSXdfqpzvqJ+/ly996699bdj12tlY/H/L1+MKOR6lVm3vsKB/i6lRq/8S69/dX2utneuz/kd+9cvJXC/e+N1P/3cXDjfrXh271azvP9KwfLomrw7c/uu+mA0c2tNcPIZS61X/nvdvCNX+8++HO/Q93LNz65luPnS8grh5bcvrQmoPFm9vrRx31k/f/85NP7PvJY999Pqmf/FZkxdL51k911H9tzxW7X31o48L2+qke+3/5jtdHtpW+84fO/d/Vtmqm51PM3f9TNzxz5xub4gc7hwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4u05XRyfLY+EQqCiHqkVPtIhlLZ+O4NEDdU2uPv3PH3h//sDVWHGAdAAAAoL+kD2/2/vlQDNmQDcOzff9z5c3rdxw9sT0UaqNR/ZyZ2nbfjk9s2bbznrvO05MDAAAA83VqbTTb/2cakULIZZaFoXr/P7Z154YTNx5KJf1/auYchRC23D21eWVo5L2254rdrz60cWHjO0EIsz8LyM/kfaaZd+stxwun//T15V3zVjfzji05fWjNweLNSV5ozVsVGt8nnrrhmTvf2BQ/2Hi+1rxPfW3bVP3zRLLu8O2P7rvpwJENqeQ7Rv08XF83yZtK7Z9Y9/7+SqoQcjPj6Xpevr5vAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCu6croZHlsfCKkQ4h65FRb1QPJWDobx6UB6q5b9suHLzvzwqLWWC4zwEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9hBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCvv1FyJV2ccB/Hlmdt+d3dnVXX2hrWhdrSjsQimIqJuKitAIoStDwtK8iIIgorCL1tBIrOgmyLqRqKDaQjDITRIt1uifdNNFBQXWRSDSQu0iXVTMzHPG2eOcRmctqD4fGJ59nnPO9/zOeZ45swcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/lL6e0Xp7ZMdDc7dfcPMnT9w7+/it7z2w7bLH3vhhfNONH+8dePXk9OblW76+aemmA/etmdr90uFfht757VjH4EcbzcrUrYQQT8QQKu/PPP/k9Kfn1cZiCKEchydCGIlLDo/EXMLqX0MIm5t1zt+4b/aqLbV2266+eeOLcyH56wrVclZPw/D8evl3qaR1tnXukSvCtzes3/75srff6p08PnFql1jbp5zWUwiLNrYe3xtC6E+fmmy1jWYHp3ZdCGGg5bhrOtR18RnWv6qgf2Fq/5faaoecbPuKXL+U2y/fz/Tm2oEO51uoojq63a+TwVw//zBaqGadq9qPj6T23dSuPMv8cvaJoRRDT7P8++OpNRJa5i2GWJ/LSrNfas5tSNef68dcv5Trl3tz11U/b1po5Rjnj2f75cazx3FPGl/e+qxu446C8fNTW0lf1JNZP+T/aKie9kfzuuqyumb+pJa/Q6nlGdRuvDnxaTKqaawal5x2zO9tZNum1z99aXnDB0eGC+qIe2PKj13lb/1sZPCuN3c+PFqUv7GU8ktd5X+39uhPd+58+cXC/Oey/HJX+VceHDix9sMdKwrvz0x2f3rOKD+mfrbt7mMfPbPs//dMtpvrev6eLL/SVf3XTx3tG5o7eKiw/tXZ/envKv+b6275/vUv9x8vzA9Z/kBX+RumHny2b2zu8sL8Q42vQrW+QrtYPz9PXv3V2NiP40X5X2T3f6hNfuyY/9rE7mtfWbxrTeH6XJfdn+GU339W9d92yYHtg3P7Lyp6dsY95+qXE+C/aWn6H+up1O/0nrlvttT2PXOhWt4XXhjvafwCDabP0Lk8UU7tPIv+wnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeCgAA///z+CSd") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffa, 0x13, r0, 0x3000) fallocate(r0, 0x0, 0x5f2a, 0x1000f4) r1 = open(0x0, 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) write$binfmt_register(r0, &(0x7f0000005c00)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x40, 0x3a, '', 0x3a, '^', 0x3a, './bus', 0x3a, [0x4f, 0x43, 0x50, 0x46, 0x46]}, 0x2b) 6.211374182s ago: executing program 8 (id=1350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) 6.159349477s ago: executing program 6 (id=1351): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0xeffd, 0x0, 0x0, 0x0) 5.586775411s ago: executing program 8 (id=1354): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 5.300693505s ago: executing program 8 (id=1356): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 5.235281866s ago: executing program 6 (id=1357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0xc1, &(0x7f0000000000)={0x4b5a9da54893e163, 0x14, 0x8, 0x2}, 0x8, 0x3, 0x200, 0x0, 0xfffffffc, 0x20000, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) prlimit64(0x0, 0x4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.027405987s ago: executing program 3 (id=1359): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x8001, 0x3}, 0x0, 0x0, 0x0, 0x0) 4.783786367s ago: executing program 8 (id=1361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0xfffffffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.780305713s ago: executing program 1 (id=1373): r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@tail_call]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.269425218s ago: executing program 1 (id=1363): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0x0, 0x2}}, 0x18) r2 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x186b, &(0x7f00000003c0)={0x0, 0xaf1, 0x400, 0x200, 0x2c6}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x8184c, 0x0, 0x9, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.944696397s ago: executing program 6 (id=1366): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000340)=[0xee00]) setregid(0x0, r2) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 3.943854751s ago: executing program 8 (id=1367): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000002ac0), 0x0, 0x0, 0x29, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='coredump_filter\x00') syz_usb_disconnect(0xffffffffffffffff) write$cgroup_int(r2, &(0x7f0000000140)=0x8, 0x12) 3.814532209s ago: executing program 1 (id=1368): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0x2, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000240)=@v2={0x2000000, [{0x0, 0x2}, {0x7, 0x3}]}, 0x14, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 3.625438394s ago: executing program 6 (id=1369): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000002500)=ANY=[@ANYRES16=r8, @ANYRES64=r6, @ANYRES16=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRES16=r4, @ANYBLOB="5642adaa2272b5a85a2c57e127897bd6ab46d6114de291fe33fa33a909ad626253d1afaf3a8474d80e773e2f81d70e84b2fcfbd1f7f112868cbab7346bad0a3f96adb784bb18106edf154056575504e9c80f574c4bdc34ae7cafbfe30688ba462766b1e42a1f607be7c527f11e87de4e2a6a220beec62ae1b107636c0352db2b6dd712f6269d8f5fedbebaeebcce2e6e4d9e7258e6f9ec6b08e3ce201a556a68dca27ca2026fd78bcf5798d2f98a44b5e09537a79f6281b1f000782ab6092738e172b7fef9b93ace59f38a025418f368633f31ab091aacf49666f5aea7bd65f04ee6d787ce05af7b358885d55e431ce776b84e3a3c547eb77f994d495b16089cca3e56b10327c8375aa4f9a20f7a5da1aba023ad32ee95be4e14ae967b686a18217e06447761eb57e36d5219f7c9f0e7d87e1b8fa31c281ed6bbd57589708691891a68a36c1a6f52b899b87a9cad72b44175af489ce11b407a900e7b53195647bfb75622f1bd5b36a5e2f832c89e7013383e86e03e262714bd0549063c9fe57226fc5b45d4d3cfe340b0c94bb111cd0a0cec9f0e4ce610506f58f6bddda26789b5d6bcd64ae7a19164c01a99abf3bb27829f56a428ffcc8724700716dbd1428bb536a3d712c3eb565738cdb5606c9f016179deb03c474239239ef44f306c52bf7fa4126ef05fca64ce5ac6af4e8972e45ec45c99312a25a1bccfdb3e558683a9c71f2ff51062ae9385bc7a2ad463e0f7c3eae976a830cb0a2c473ab47e2f246bdcb03ba9f11991f3f088dc73404aa61f7e40fe3d4c8dbd9363f82ac9cad0a99ed0b46c7e43c4de33740698e5febe8e86b8f254c749f2f2afae27b82daba037c8f6ee1fd2bb5289766dd1713604ceef018e96c9a40582bc8f31d88b01df2a00c3e5e8edc165b3fe368bfc35cadd4b24986f21ce5237e7595c9ef8e535f8bc5064b8c3715b265d54ef66afaf4d13e28b2f980d2208b37f951d4024a420216539e38e338481c3887bb44d4c61259dba206df6d842929e3ca49d5ebaa4d1073b980cd9746f044dcba62ff7dd8db11d5edaa05df1fcf867dccbd2489d7be005b9f24e87da665f0908b6f4f955a2d5c89a3b633fffc7ce5891149e94fde63133fc9bc2697ae8e230e2ff24fdb6498ecd729888aa0e5c44c49d0d275ae5378430a53af50656c7cc43fc08f31be9cd890de6b820571eefa8d3c27b5dcdc250f3fc065a59c40ea357ef11294d54a8cac8a80942e3681a9c51c15010d88b1b67ed9e6fe7108094da4105f0daa0fc83f282cad011d942017791de8dd2d4f26072be3b64dcadb2d7c43b6ca63911f5567281e26a7091d9680c0d3c429ece80752b0266692a4be7ee3013c50fb63bff38566cbe917971211513c3a8ea9d39b996539ec4832c4669511d16656e20e54d280656e2d546a4f97982bcea5d1c1688ed9b6a5385e890761ac847e0086e2f93623626d3c1e174eede7e8f5fd58fdb64006b7da70b26f199e2d6d99243e76bd661b3469ed2fdfc3b472a2429721c22c3f2057afa2031172cbd7c4da48e01dc822095860da28a98b962f0f8f7689ec5c2f628230f90907f3f8614ff0b8155011a47ec2456dcfd1d43ad854b88bb1c56948e5d48f7cc741f94a4c38d6a52430060678fa737458e65517fd227cec3833d98274dbc53736ee28dae7fbb56bdc147db8a45707cc9ea959f079f0e2d5f56e839ad841d221a326780f83bc75fc5b90b9ff2ab2fd0556bb8e1b1923596829ee7148b393596bf555e590fd77976a6202836ee6130eae81b9b6838a355fdbfcabedd325dfe123239fe686ad4a9193f4d82c6373aae4ddfb5809d99227bc77526af543783578c0da46fa772604118da8add28c6260938c7781cc9dc75751636e146257b33ba8236dfd671ab4b78f0d0a2140050a323d9d4c18e0929b5e42a6f604979fd009b3f00f1117320c1f901ad5c971a65cbf1bd4af4cf7f07556c901f1fe9ff00791f20f29e66982c90b52e87df190dde1c2aba90551e2df0e8872b787a9ee698ebbf4c713a94bc194c1523d7b69e2766b05aa30b93c6017d57527dd21b8e092b7e4177d723afa3425f8e2057acaa9003752c2664fe9b811d4afc17709d442607df499eb866eb4cbcf3982670239b6b060d0406a898975fd1a1b507497b1288a8ad9c95c796ce732d7410fb37d1c0154fb43f6983c41267747710ecb70dcdf7f139a117772a9d6fcdade88b7db125e7aaa341e9057fc684bb35082cb51343737b64eb8c640de26de6f2dae3361c2e6e2cd1158fc9dad84ff36736d60de62b029bbbf6a9c16438a9d17096ec989ff3abb024d45c2174dff0f2af20cf9189c19886e273fce33b8eb256e0e8b0788af64bb24717f21deedaadc351b9284baaa30c1258164aeca781dcaa3e8d162c54fcbe7b1ef962d60af4f7ac11437dc29c79954f89c0ea338bd34c157c62d4d2d335d6f54fd41e74f5665d298ee7493cad4039ee4c6df99b83924045abb54e5b71feabb5ae178f2d1eb76b1fe3c15caaaebbc3b8c36178748b2646df8df872c890569cce1929667f5c35d5123ba26f511f0a6e9a6dd65a9cea440ba23cd7d5a5c2adc0a2210af6832f0c4f0202436b2965c5b021e03a013e63d9d65b35acae4cdd4a32d5ac4fd4a800761b113bf09aaef5f961cb2ae347c9c84243239d8176238fac633d4908d65f4202d1cb4d370b1247f32a2f07b0e101901c525034c8fb596eb187bf901a3a7500056a27cbf61f91beb0717e6dca4ed2f45f85f93c4189cb5faaf3af3632eb0c7ab1ab918e68fc7675cdfabf165ef953e87e15b9a513f1da59b7de6140470adf030adba2810c81f4bcd33650156fc7bddb8e92eddfbd6f2956ba1f551806fd4ebab08328cdd62dc8f957969775fb89cac2dad0b73407981249d5217313666c0c3a8ca39d310aca8e579a811a109001892fff7735a05bf91bfcb00ee4c6933a58386c62569e544773e9e9b5a0ecbfc35d6e7cc8429a29b38ec5d1cbbe26e6e399d6c3ab78113cf52a5f65f2df7241166a7673a3902137276b6e0b48150b93670cdb2fb7ba34893984f1879e9dde618001fdb1cf7eb3d8b5bc382f9dce71f0b560c815d88758607d0f9de12cecaa1d7f48586deb5c02af2d3bc02ddc4293fc9329aa4453ed30124e70f76145afa6e0f3504423831b287b019c6a217d1e93737f6e33d870c5da74a47b9cf23dc1d43d2b466db560bb8a31840cea07857d68078db6978952e3a7070819cc62cd786c63f3a5d0965bc1b6e30381c5b8d3b591d7d294beb987e2fbb2c9358cde24ab33fe9af7e087a11fff06dd9ec32d8fd1ef2e05f7f08d29061de998a75c359e5a51c02fbeea78b10d0becafb871959f63b77bede114da9bac04f6d36149888a8f1f9e5b6ec01da2387084058680fc340c09d8c0729f4c85de3291894775dca5b5ec65305150e7d1f391092efb31b12abfa8d4e4af0d4cb4d2c21e021b82e9517e08722f19399e710d3307ad5b59cfb7d83b7ec580be747f274c9c5d233421f80726dbc55b6bed68f06fa636de1d5a9e8eb87d3f355215efd053338e498f955185ce7574108a8629a48dd5cd122c23b1cddc0fb32b4bd7dd2bb2a9c343bd5c85f348b6d982151d838e2531d368c4c01204aa586f6d567b28e929b35a794fbf77ea138b2bba12d3722df5ed8d23ec6b4064f23edd9e01bb2a222c81fa9971f97da541b7ebe185837a08c38d12ee627c8bb7614f0fe96f6da07fe439b5a90f082c145f4146afbbe591d0b39d091c376bfc9df68caa96fa64bad3433b125c200217449d0b62f0721782253a2cac85f883c06c4926bd68beb33d6f47d97d17e5e651177f6b31532cd68e4efb75acc8ec4ea87765ec0c06dce417834a29320cc14caf291a52e93cf36204a05f7407cb2e7d37049b8de7a18a23a89c7aa82b2766bbf77cf0387e3ce72194a3a909f0c6782d63c27683d63c26630d81050be56bf4590f5cea5c580b993734dfdbe0e483709a9f18efdbdf84c6690bb4a074a1caca0970b9e49da9b491d99750642a4fc49bcddd0b5d93f95f9383994ca1996829162a2d14a21d854a546276b554b18ee5a0f777e5acce6d836bd7672210cca6df512ff4f81a54f5e07fca2f5762e7bb7a62e3bdbeeb32d5046943c78c827dd296fb5b16309b90838a1e9c83bad921d9d689b0d30772a202537d9c1d9f0fd3d309bb97de122d78e4a8e070c0495cf791efac844a09936c4c462dc7829245ced7f65076ddc816c05acc237e1d88084fb0b309f558b902dac5888979413631e8bc7da8d4332369cbdf38885c163aa6a8a45cd9917a9f51d4e88b889bf356c2ac2473b0caac6c34a69d0fdb98704189b2663f3aab324bdbb0dc1680185f817c380319a569a1c6f4b5374b722e5a7a5ad653bf256998283623d3fbc981aaeb84f273df59ec52ab80d2a384e5bc2726226fac944cc7f709235548d022318e295e18f44b4126eabf9b865182a0ee668c53e3356ba064339f508ac24c5ca7b3590abc600a3ad9cdd14917ece7d8db70bd7910a0be023bc0086e782e854548bfb03cd4ba4bcf075514be5e8488d7f8a4e12c22c23585464e3f623c62531681efa48211a1a1f7d998aa4ad91c082bbe97362f4fea0e614d13d354c1575530de5260c31aacd0b52039f6c464cb38a00b9f7b62de6eb40169417d4a27339debc6cb5e1323c089432aa8fa0a8327146117eaefcc6e7510c15942115840ac79f4f21bbb6abcbf278bead44c9dc4edd07984b9bef583043296dc6d3c53db57c26e1bcbd42385feba7a1ce68861b460bb1d5e2454f475b9ec0cbdaec92f560fcae7f23e2d3107daa0ed5c24e2667b61e10856116909439b65e5e13fda9b7b0b17ecaca20601f4aeff74101d183dfa3e5426f3f817835981fbd817e52b644276806a71281257e139b6e82f4f6225f4c383e8bcfd1361cab95b4246ed02e32be1ef603e1ab4aed30113657a3f6993571de11d45d8518c3d8c0384b59884dc20de854bf34b1ab402e6e56a787daf64d84b76f1b4982c819cf136818927ac98c7b848d4bdabae4f36e8294bdf7c6ef62fd0130dac0f2755a5136c0e8e343c6657ca55dce4aa30bda465c5869e2158d2b30dd0f7127a230b1a6fc91ce4a3d627624c7649babbeaa7b101ad06ca00d7083313df1e8555717cc8e2d74bf5bc375c4940e85611b5e60118e869b7b829e36fcc66eb625834c8e09746154b20a8ff934292e1fa68d78da20c5c41ce87a7338fd2c67d464627fddd55b4d3680c39533c10f508d5d0de7c0af738dae72ac266fe08c75b3c92984b810376867ee03973b86ec5e5b476e55c2c5616fa822d06898834ae82dec6cb6d97e33ea177991990f355a37989d19ee20eec48c6dd5287e19cc908b661bbb0c52a55c0e8202a81ec28935e91bfb065d4003ce8c03dd79ee50b1d508f40789fd8d0116b6d709a1edeab5882e695fd519239f6460a46a7397f15835ff513731bda80a8b2c7129a71761929083eaf49733e3eb7eb24e956da683bf29bec82e9361dc91566021647474aff3bd1ffa6eae469953c522602f4efc7bb845ea100410081557628a9c2f9c982241c455bdd7d139f84a0bfd2001f6c46c380130c66b326cd11a73ff31e3cc4fb0ee7953598121b4b83db0f2ef04e949a079ccb1367fa25d3f1c3e4459895f3f2bd0dd2ae4e7bc0c9525ca364e3a3c39fef1a50cd3bc5e0efa0c8bbfbdcc107a104944c9a2f80cdcc6245e3b3b295b1568a32a9c96d81e9223c8fe720ddc27eeb241249732889cd08a6640ca917708da7e0eb16474dbd", @ANYBLOB="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", @ANYRES8=r2, @ANYRES32=r3], 0x5, 0x0, &(0x7f0000000000)) lseek(r0, 0x4, 0x0) getdents(r0, 0x0, 0x0) 3.299701653s ago: executing program 1 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$bcachefs(&(0x7f00000003c0), &(0x7f0000000080)='./file1\x00', 0x808040, &(0x7f0000000400)=ANY=[@ANYBLOB='data_checksum=xxhash,str_hash=crc64,norecovery,read_only,metadata_checksum=xxhash,fix_errors=exit,errors=continue,reconstruct_alloc,journal_transaction_names,gc_reserve_bytes=0\x00\x00\x00\x0000000000000e8,no_data_io,verbose,inodes_use_key_cache,compression=lz4,very_degraded,hash,\x00'], 0xfd, 0x5934, &(0x7f0000000540)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) splice(r0, 0x0, r2, 0x0, 0x200000000001, 0x0) 3.298495555s ago: executing program 0 (id=1383): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="0b8393b6167aa5d73dada991d28a336cca044293db2a5ce953fb457118d42ccc80b9e740666d04f30bfa09707e214a460730b90536ede71fc2fa5056bf7c5d0d8f570b7463c53bad6743015fef14e990e7c1f6f8d6e3c4452631f40593663340cc79614ffbc64af02a00cd10d1b4a35f120f9c926cfe05ee444a8654fce6b731491c7d83e1fe7f5384008021badcea76b34855353f04bd12f1b66757c7501a9257bfa1", 0xa3) write$qrtrtun(r0, &(0x7f0000000780)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a1622da79faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805d", 0x6c) write$UHID_INPUT(r0, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 2.425705704s ago: executing program 0 (id=1371): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x7, 0x8000fffe, 0x800, 0xffffffff, 0x2f, 0x200, 0x4, 0x2c, 0xffffffff, 0x1}) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 2.388775298s ago: executing program 8 (id=1372): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.334859101s ago: executing program 2 (id=1374): socket$phonet(0x23, 0x2, 0x1) r0 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6e9, 0x10100, 0x2, 0xfffffffb}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.112238264s ago: executing program 0 (id=1375): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) 2.111100026s ago: executing program 1 (id=1388): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.857140323s ago: executing program 2 (id=1376): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) 1.596298233s ago: executing program 0 (id=1377): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) 1.444803974s ago: executing program 2 (id=1378): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000fa7f0000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.031334406s ago: executing program 0 (id=1379): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x20000001}) r3 = dup3(r1, r0, 0x0) write$sndseq(r3, &(0x7f0000000480)=[{0x50, 0xeb, 0xf3, 0xaf, @tick=0xd63, {0x47, 0x90}, {0x5, 0x8}, @control={0xf9, 0x8, 0x1}}], 0x1c) 1.031040656s ago: executing program 2 (id=1380): r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 754.718264ms ago: executing program 0 (id=1381): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x400000000010, 0x3, 0xfffffffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 630.297377ms ago: executing program 6 (id=1382): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000c22000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mlock(&(0x7f0000389000/0x2000)=nil, 0x2000) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 495.504797ms ago: executing program 2 (id=1384): capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000040c0)={0x200000, 0x200000, 0x1000, 0x200000}) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x0, 0x6017}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d7e, 0x0, 0x0, 0x0, 0x0) 101.853671ms ago: executing program 1 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) io_setup(0x8, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_pgetevents(r1, 0x1, 0x1, &(0x7f0000000140)=[{}], 0x0, 0x0) shutdown(r0, 0x0) 1.579942ms ago: executing program 6 (id=1386): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1547, 0x10100, 0x0, 0x100, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000b80)=""/215, 0xd7) 0s ago: executing program 2 (id=1399): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) kernel console output (not intermixed with test programs): ount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.069290][ T7135] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 189.112417][ T7157] loop6: detected capacity change from 0 to 8192 [ 189.123355][ T7135] BTRFS info (device loop2): using free-space-tree [ 189.165275][ T7157] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 189.817600][ T7196] batadv_slave_1: entered promiscuous mode [ 189.898056][ T7195] batadv_slave_1: left promiscuous mode [ 190.063691][ T7198] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 190.077144][ T5825] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.735585][ T7165] loop3: detected capacity change from 0 to 32768 [ 190.961022][ T7165] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 191.063236][ T7224] loop1: detected capacity change from 0 to 2048 [ 191.149114][ T7224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.445235][ T7165] XFS (loop3): Ending clean mount [ 191.722523][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 191.942209][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 191.966419][ T5896] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.006882][ T5896] usb 6-1: config 179 has no interface number 0 [ 192.027801][ T5826] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.046721][ T5896] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.088459][ T5896] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.184494][ T5896] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.252249][ T5896] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.327824][ T5896] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 192.377727][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.486275][ T7236] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 193.097564][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input7 [ 193.329942][ T9] usb 6-1: USB disconnect, device number 4 [ 193.330022][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.344212][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.437933][ T9] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 194.762410][ T5889] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 194.967828][ T5889] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 194.982174][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.022626][ T5889] usb 7-1: Product: syz [ 195.026889][ T5889] usb 7-1: Manufacturer: syz [ 195.031523][ T5889] usb 7-1: SerialNumber: syz [ 195.071704][ T5889] usb 7-1: config 0 descriptor?? [ 195.107442][ T5889] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 195.517655][ T7289] cgroup: fork rejected by pids controller in /syz6 [ 195.918120][ T5889] usb 7-1: USB disconnect, device number 3 [ 198.212395][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 198.377368][ T5896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.394846][ T5896] usb 1-1: config 0 has no interfaces? [ 198.406852][ T5896] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.422047][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.439667][ T7327] loop3: detected capacity change from 0 to 32768 [ 198.453641][ T5896] usb 1-1: config 0 descriptor?? [ 198.486997][ T7327] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 198.540154][ T7327] XFS (loop3): Ending clean mount [ 198.719920][ T7319] Unknown status report in ack skb [ 198.784279][ T7345] netlink: 548 bytes leftover after parsing attributes in process `syz.0.377'. [ 198.985337][ T7334] netlink: 'syz.0.377': attribute type 29 has an invalid length. [ 199.002854][ T7344] netlink: 'syz.0.377': attribute type 29 has an invalid length. [ 199.028187][ T5826] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.077466][ T9] usb 1-1: USB disconnect, device number 6 [ 199.467774][ T4362] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.662600][ T4362] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.948409][ T4362] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.347832][ T4362] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.640678][ T7381] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 200.671531][ T7382] netlink: 88 bytes leftover after parsing attributes in process `syz.5.390'. [ 200.722615][ T7382] netlink: 48 bytes leftover after parsing attributes in process `syz.5.390'. [ 201.240060][ T7400] input: syz1 as /devices/virtual/input/input8 [ 201.337159][ T4362] bridge_slave_1: left allmulticast mode [ 201.360121][ T4362] bridge_slave_1: left promiscuous mode [ 201.380063][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.462385][ T5975] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 201.478181][ T4362] bridge_slave_0: left allmulticast mode [ 201.531066][ T4362] bridge_slave_0: left promiscuous mode [ 201.558537][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.688184][ T5975] usb 6-1: Using ep0 maxpacket: 8 [ 201.694287][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.712649][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.717966][ T5975] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 201.730752][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.748604][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.757392][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.760725][ T5975] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.893213][ T5975] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.975942][ T5975] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.043172][ T5975] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.129652][ T5975] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.161968][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.431884][ T5975] usb 6-1: GET_CAPABILITIES returned 0 [ 202.452264][ T5975] usbtmc 6-1:16.0: can't read capabilities [ 202.708028][ T5975] usb 6-1: USB disconnect, device number 5 [ 202.832194][ T7426] netlink: 72 bytes leftover after parsing attributes in process `syz.0.405'. [ 202.935451][ T4362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.947801][ T4362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.959943][ T4362] bond0 (unregistering): (slave team0): Releasing backup interface [ 202.975174][ T4362] bond0 (unregistering): Released all slaves [ 203.522299][ T7434] binder: 7431:7434 ioctl c0306201 200000000240 returned -14 [ 203.823967][ T5844] Bluetooth: hci5: command tx timeout [ 203.825269][ T7435] loop1: detected capacity change from 0 to 40427 [ 203.852533][ T7435] F2FS-fs (loop1): Invalid log sectorsize (512) [ 203.859224][ T7435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 203.892458][ T7435] F2FS-fs (loop1): invalid crc value [ 203.921413][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.928053][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.068205][ T7435] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:6,ofs:0,cpver:1219692001,blkaddr:4098] [ 204.092533][ T7435] F2FS-fs (loop1): Failed to read root inode [ 204.110131][ T7447] loop5: detected capacity change from 0 to 512 [ 204.213926][ T7452] loop0: detected capacity change from 0 to 512 [ 204.230570][ T7447] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 204.258234][ T7447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.314722][ T7452] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.411: casefold flag without casefold feature [ 204.384902][ T7447] EXT4-fs (loop5): 1 truncate cleaned up [ 204.405544][ T7452] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.411: couldn't read orphan inode 15 (err -117) [ 204.459549][ T7447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.554714][ T7452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.677556][ T7447] syz.5.410 (pid 7447) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 204.854579][ T7447] EXT4-fs error (device loop5): ext4_lookup:1789: inode #14: comm syz.5.410: invalid fast symlink length 39 [ 204.955938][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.990562][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 205.169643][ T5831] EXT4-fs error (device loop5): htree_dirblock_to_tree:1079: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 205.208255][ T4362] hsr_slave_0: left promiscuous mode [ 205.215920][ T5889] usb 2-1: device descriptor read/64, error -71 [ 205.240965][ T7471] input: syz1 as /devices/virtual/input/input9 [ 205.305700][ T4362] hsr_slave_1: left promiscuous mode [ 205.348439][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.392266][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.445791][ T4362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.476542][ T5889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 205.478878][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.639853][ T5889] usb 2-1: device descriptor read/64, error -71 [ 205.654070][ T4362] veth1_macvtap: left promiscuous mode [ 205.659780][ T4362] veth0_macvtap: left promiscuous mode [ 205.686595][ T4362] veth1_vlan: left promiscuous mode [ 205.709982][ T4362] veth0_vlan: left promiscuous mode [ 205.795371][ T5889] usb usb2-port1: attempt power cycle [ 205.904686][ T5844] Bluetooth: hci5: command tx timeout [ 206.162391][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 206.204542][ T5889] usb 2-1: device descriptor read/8, error -71 [ 206.452552][ T5889] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 206.702662][ T5889] usb 2-1: device not accepting address 9, error -71 [ 206.722682][ T5889] usb usb2-port1: unable to enumerate USB device [ 207.704596][ T4362] team0 (unregistering): Port device team_slave_1 removed [ 207.928175][ T4362] team0 (unregistering): Port device team_slave_0 removed [ 207.994100][ T5844] Bluetooth: hci5: command tx timeout [ 208.499208][ T5975] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 208.577620][ T7516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.692710][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 208.709308][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 208.734693][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 208.748062][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.759525][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.800348][ T5975] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 208.819671][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.837234][ T5975] usb 4-1: Product: syz [ 208.847020][ T5975] usb 4-1: Manufacturer: syz [ 208.866236][ T5975] usb 4-1: SerialNumber: syz [ 208.914824][ T5975] usb 4-1: config 0 descriptor?? [ 208.967750][ T5975] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 209.149035][ T5975] imon:send_packet: packet tx failed (-71) [ 209.189555][ T5975] imon 4-1:0.0: panel buttons/knobs setup failed [ 209.332324][ T5975] rc_core: IR keymap rc-imon-pad not found [ 209.339700][ T5975] Registered IR keymap rc-empty [ 209.347364][ T5975] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 209.358453][ T5975] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 209.375604][ T5975] imon:send_packet: packet tx failed (-71) [ 209.402375][ T5975] imon 4-1:0.0: remote input dev register failed [ 209.409087][ T5975] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 209.516796][ T5975] imon 4-1:0.0: unable to initialize intf0, err 0 [ 209.545991][ T5975] imon:imon_probe: failed to initialize context! [ 209.599374][ T5975] imon 4-1:0.0: unable to register, err -19 [ 209.643758][ T5975] usb 4-1: USB disconnect, device number 4 [ 209.860632][ T7524] loop6: detected capacity change from 0 to 128 [ 209.951589][ T7524] blk_print_req_error: 24 callbacks suppressed [ 209.951617][ T7524] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.055613][ T7524] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.072267][ T5844] Bluetooth: hci5: command tx timeout [ 210.101945][ T7524] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 210.111586][ T7524] buffer_io_error: 23 callbacks suppressed [ 210.111608][ T7524] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 210.138200][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.327217][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 210.960072][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.976027][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.993943][ T7403] bridge_slave_0: entered allmulticast mode [ 211.008624][ T7403] bridge_slave_0: entered promiscuous mode [ 211.026607][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.033992][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.041295][ T7403] bridge_slave_1: entered allmulticast mode [ 211.069361][ T7403] bridge_slave_1: entered promiscuous mode [ 211.391945][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.499969][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.892074][ T7403] team0: Port device team_slave_0 added [ 211.920470][ T7562] loop1: detected capacity change from 0 to 1024 [ 211.953551][ T7403] team0: Port device team_slave_1 added [ 211.963446][ T7562] ext4: Unknown parameter 'nouser_xattr' [ 212.139923][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.155360][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.270754][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.369445][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.399552][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.539832][ T7559] loop3: detected capacity change from 0 to 131072 [ 212.541502][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.563860][ T7559] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 212.572000][ T7559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 212.619918][ T7559] F2FS-fs (loop3): invalid crc value [ 212.761421][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.446'. [ 212.848775][ T7559] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 212.855054][ T7572] netlink: 'syz.2.446': attribute type 7 has an invalid length. [ 212.856031][ T7559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 212.881961][ T7572] netlink: 'syz.2.446': attribute type 8 has an invalid length. [ 212.909508][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.910997][ T7572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 212.943834][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.953053][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.966475][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.974392][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.983913][ T7559] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 213.618049][ T7403] hsr_slave_0: entered promiscuous mode [ 213.662459][ T7403] hsr_slave_1: entered promiscuous mode [ 213.706594][ T7403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.805422][ T7403] Cannot create hsr debugfs directory [ 213.989446][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.574477][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.088697][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.102926][ T5834] Bluetooth: hci4: command tx timeout [ 215.302466][ T5975] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 215.309761][ T7591] loop2: detected capacity change from 0 to 40427 [ 215.316408][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.487716][ T5975] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 215.507085][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.526048][ T5975] usb 1-1: Product: syz [ 215.531293][ T5975] usb 1-1: Manufacturer: syz [ 215.540715][ T5975] usb 1-1: SerialNumber: syz [ 215.557676][ T5975] usb 1-1: config 0 descriptor?? [ 215.599106][ T5975] ch341 1-1:0.0: ch341-uart converter detected [ 215.819446][ T7591] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.910597][ T7613] loop1: detected capacity change from 0 to 256 [ 216.114564][ T7613] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 216.194140][ T7613] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff05) [ 216.272373][ T7613] exFAT-fs (loop1): failed to initialize root inode [ 216.822680][ T5975] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 216.852844][ T7577] chnl_net:caif_netlink_parms(): no params data found [ 217.036792][ T5890] usb 1-1: USB disconnect, device number 7 [ 217.066328][ T13] bridge_slave_1: left allmulticast mode [ 217.110508][ T13] bridge_slave_1: left promiscuous mode [ 217.128127][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.163472][ T5890] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 217.194539][ T5834] Bluetooth: hci4: command tx timeout [ 217.207567][ T5890] ch341 1-1:0.0: device disconnected [ 217.479462][ T7632] loop3: detected capacity change from 0 to 32768 [ 217.487458][ T7632] XFS: noikeep mount option is deprecated. [ 217.505502][ T7632] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 217.591767][ T13] bridge_slave_0: left allmulticast mode [ 217.628216][ T13] bridge_slave_0: left promiscuous mode [ 217.646657][ T7632] XFS (loop3): Ending clean mount [ 217.660007][ T7632] XFS (loop3): Quotacheck needed: Please wait. [ 217.690971][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.779166][ T7632] XFS (loop3): Quotacheck: Done. [ 218.104380][ T5826] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 218.932295][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 219.102061][ T5890] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.118146][ T5890] usb 4-1: config 0 has no interface number 0 [ 219.128734][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.152323][ T5890] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.169292][ T5890] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 219.178743][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.198610][ T5890] usb 4-1: config 0 descriptor?? [ 219.272195][ T5834] Bluetooth: hci4: command tx timeout [ 219.652257][ T5890] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 219.673383][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.694552][ T5890] hid_prodikeys: hid-prodikeys: failed to find output report [ 219.694552][ T5890] [ 219.729198][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.751751][ T13] bond0 (unregistering): Released all slaves [ 219.847898][ T5890] usb 4-1: USB disconnect, device number 5 [ 219.891015][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:041E:2801.0007/report_descriptor': No such file or directory [ 219.923999][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 220.058417][ T7660] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.068109][ T7660] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.077187][ T7660] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.086264][ T7660] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.130032][ T7660] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.139143][ T7660] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.149470][ T7660] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.158779][ T7660] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.216875][ T13] tipc: Disabling bearer [ 220.228202][ T13] tipc: Left network mode [ 220.450526][ T7577] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.460689][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.480495][ T7577] bridge_slave_0: entered allmulticast mode [ 220.498783][ T7577] bridge_slave_0: entered promiscuous mode [ 220.541700][ T7577] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.549354][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.556664][ T7577] bridge_slave_1: entered allmulticast mode [ 220.564938][ T7577] bridge_slave_1: entered promiscuous mode [ 220.664897][ T13] hsr_slave_0: left promiscuous mode [ 220.671607][ T13] hsr_slave_1: left promiscuous mode [ 220.685868][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.700076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.709629][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.717481][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.757483][ T13] veth1_macvtap: left promiscuous mode [ 220.768053][ T13] veth0_macvtap: left promiscuous mode [ 221.374293][ T5834] Bluetooth: hci4: command tx timeout [ 221.438690][ T13] team0 (unregistering): Port device team_slave_1 removed [ 221.487793][ T13] team0 (unregistering): Port device team_slave_0 removed [ 221.865076][ T7577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.932016][ T7577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.002975][ T7577] team0: Port device team_slave_0 added [ 222.030852][ T7577] team0: Port device team_slave_1 added [ 222.071760][ T7403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.085794][ T7403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.100328][ T7403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.132116][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.139290][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.166030][ T7577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.186568][ T7403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 222.222100][ T7577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.229321][ T7577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.255388][ T7577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.398919][ T7577] hsr_slave_0: entered promiscuous mode [ 222.410245][ T7577] hsr_slave_1: entered promiscuous mode [ 222.423987][ T7577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.439700][ T7577] Cannot create hsr debugfs directory [ 222.766117][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.861606][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.906708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.913955][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.970563][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.977826][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.101439][ T7577] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.123350][ T7577] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.173738][ T7577] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.227240][ T7577] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.537141][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.588993][ T7577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.649582][ T7577] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.680828][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.688121][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.714406][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.721633][ T7459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.414626][ T7403] veth0_vlan: entered promiscuous mode [ 224.454711][ T7403] veth1_vlan: entered promiscuous mode [ 224.534976][ T7577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.597658][ T7403] veth0_macvtap: entered promiscuous mode [ 224.650593][ T7403] veth1_macvtap: entered promiscuous mode [ 224.723462][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.748473][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.767222][ T7403] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.787945][ T7403] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.799538][ T7403] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.809594][ T7403] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.971306][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.991700][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.050492][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.067984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.416962][ T7577] veth0_vlan: entered promiscuous mode [ 225.446194][ T7577] veth1_vlan: entered promiscuous mode [ 225.818402][ T7753] Bluetooth: MGMT ver 1.23 [ 225.859490][ T7577] veth0_macvtap: entered promiscuous mode [ 225.887739][ T7577] veth1_macvtap: entered promiscuous mode [ 225.997317][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.135546][ T7577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.271546][ T7577] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.351697][ T7577] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.425999][ T7577] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.465934][ T7577] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.007775][ T7766] loop0: detected capacity change from 0 to 8192 [ 227.335988][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.382225][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.592384][ T7459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.600288][ T7459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.592270][ T5975] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 228.782815][ T5975] usb 8-1: Using ep0 maxpacket: 8 [ 228.832857][ T5975] usb 8-1: config 0 has no interfaces? [ 228.838417][ T5975] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.915442][ T5975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.993841][ T5975] usb 8-1: config 0 descriptor?? [ 229.260342][ T5975] usb 8-1: USB disconnect, device number 2 [ 229.919565][ T7788] loop0: detected capacity change from 0 to 32768 [ 229.955354][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 230.003762][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 230.072381][ T7788] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.632810][ T7788] XFS (loop0): Ending clean mount [ 230.653319][ T7788] XFS (loop0): Quotacheck needed: Please wait. [ 230.852935][ T7788] XFS (loop0): Quotacheck: Done. [ 231.118667][ T5824] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.447760][ T7865] syz.1.503 uses obsolete (PF_INET,SOCK_PACKET) [ 231.582775][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 231.589711][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 231.596658][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 231.600921][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 232.342304][ T5888] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 232.949291][ T5888] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 233.132245][ T5888] usb 4-1: config 0 has no interface number 0 [ 233.167659][ T5888] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 233.546592][ T5888] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 233.557855][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 233.616937][ T5888] usb 4-1: config 0 interface 230 has no altsetting 0 [ 233.654486][ T5888] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 233.703347][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.752251][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 233.772721][ T5888] usb 4-1: Product: syz [ 233.776965][ T5888] usb 4-1: Manufacturer: syz [ 233.781597][ T5888] usb 4-1: SerialNumber: syz [ 233.802763][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.828484][ T7913] netlink: 'syz.7.516': attribute type 1 has an invalid length. [ 233.842360][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.822682][ T5888] usb 4-1: config 0 descriptor?? [ 234.830926][ T7887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.853005][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.872578][ T7887] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.880028][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.890386][ T7910] loop1: detected capacity change from 0 to 131072 [ 234.903900][ T7913] gretap1: entered allmulticast mode [ 234.911002][ T5888] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 235.015595][ T7910] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 235.044771][ T5890] usb 3-1: config 0 descriptor?? [ 235.105407][ T5888] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 235.119421][ T7913] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 235.128157][ T5890] hub 3-1:0.0: USB hub found [ 235.281345][ T7921] netlink: 'syz.6.517': attribute type 10 has an invalid length. [ 235.289275][ T5890] hub 3-1:0.0: 1 port detected [ 235.366458][ T7921] syz_tun: entered promiscuous mode [ 235.559360][ T7921] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.582722][ T5888] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 235.724338][ T5888] usb 4-1: USB disconnect, device number 6 [ 235.953775][ T5890] hub 3-1:0.0: activate --> -90 [ 236.356753][ T5888] usb 3-1: USB disconnect, device number 5 [ 237.463501][ T7960] loop2: detected capacity change from 0 to 4096 [ 237.542641][ T7960] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 238.299699][ T7930] loop7: detected capacity change from 0 to 40427 [ 238.378663][ T7930] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 238.410159][ T7930] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 238.471882][ T5975] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.695426][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 238.745322][ T5975] usb 4-1: config 0 has no interfaces? [ 238.797099][ T5975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.830751][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.879712][ T5975] usb 4-1: Product: syz [ 238.918416][ T5975] usb 4-1: Manufacturer: syz [ 238.932443][ T5975] usb 4-1: SerialNumber: syz [ 238.975850][ T5975] usb 4-1: config 0 descriptor?? [ 239.304136][ T5890] usb 4-1: USB disconnect, device number 7 [ 240.822648][ T5888] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 241.007772][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 241.046146][ T5888] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 241.076072][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.152226][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.202227][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.259872][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.268664][ T8040] loop1: detected capacity change from 0 to 128 [ 241.332686][ T5888] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 241.354760][ T8040] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.374736][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.404553][ T8040] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.473807][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.546582][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 241.632270][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 241.677958][ T8040] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 28 bytes, need 32+ bytes) [ 241.742867][ T5888] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 241.750374][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 241.780566][ T8040] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 28 bytes, need 32+ bytes) [ 241.872226][ T5888] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 241.956202][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 242.052231][ T5888] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 242.129918][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 242.192335][ T5888] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.272300][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.296520][ T5835] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.385323][ T5888] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 242.432298][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 242.653992][ T8063] syz_tun: entered allmulticast mode [ 242.665152][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.732733][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.764831][ T8062] syz_tun: left allmulticast mode [ 242.792520][ T5889] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 242.833825][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.877162][ T5889] usb 4-1: config 0 descriptor?? [ 244.095248][ T5894] usb 1-1: USB disconnect, device number 8 [ 244.171281][ T8086] loop1: detected capacity change from 0 to 1024 [ 244.216587][ T5889] uclogic 0003:256C:006D.0008: v1 frame probing failed: -71 [ 244.233545][ T5889] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 244.243368][ T5889] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 244.260580][ T5889] usb 4-1: USB disconnect, device number 8 [ 244.723924][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 244.723950][ T30] audit: type=1800 audit(1748026251.415:19): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.570" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 244.792232][ T5890] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 244.996369][ T5894] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 245.046952][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.085716][ T5894] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.113319][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.164486][ T5890] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 245.205284][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.240017][ T5890] usb 1-1: config 0 descriptor?? [ 245.661633][ T8113] loop7: detected capacity change from 0 to 32768 [ 245.692266][ T8113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.573 (8113) [ 245.723667][ T8113] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.733916][ T8113] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 245.743087][ T8113] BTRFS info (device loop7): using free-space-tree [ 245.761881][ T5890] pyra 0003:1E7D:2CF6.000A: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 246.006921][ T5894] usb 1-1: USB disconnect, device number 9 [ 246.537203][ T8134] fido_id[8134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 246.663845][ T7577] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.265953][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 248.296274][ T8182] loop3: detected capacity change from 0 to 128 [ 248.345603][ T8182] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.476803][ T8182] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.717993][ T8190] loop7: detected capacity change from 0 to 256 [ 248.791489][ T8190] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 248.864931][ T8190] exFAT-fs (loop7): error, invalid access to FAT bad cluster (entry 0x00000005) [ 248.894471][ T4362] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.924697][ T8190] exFAT-fs (loop7): failed to initialize root inode [ 249.062810][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.7.592'. [ 249.306323][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 249.576600][ T8214] loop7: detected capacity change from 0 to 128 [ 249.628867][ T8214] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.773162][ T5890] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.812412][ T8214] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.925950][ T8214] fscrypt (loop7, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 249.964670][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.035938][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.085992][ T5890] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 250.105663][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.123229][ T5890] usb 2-1: SerialNumber: syz [ 250.204170][ T7577] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.375455][ T5890] usb 2-1: 0:2 : does not exist [ 250.406697][ T5890] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 250.561970][ T5890] usb 2-1: USB disconnect, device number 10 [ 250.762424][ T5888] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 250.766232][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.966125][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0 [ 251.000899][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 251.025025][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.052397][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.6.609'. [ 251.079847][ T5888] usb 4-1: Product: syz [ 251.084762][ T5888] usb 4-1: Manufacturer: syz [ 251.099648][ T5888] usb 4-1: SerialNumber: syz [ 251.451650][ T8247] loop1: detected capacity change from 0 to 64 [ 251.610991][ T5888] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 251.880763][ T8221] loop0: detected capacity change from 0 to 32768 [ 251.992964][ T8221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.603 (8221) [ 252.048001][ T8259] @: renamed from vlan0 (while UP) [ 252.102446][ T8221] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.140799][ T8221] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 252.188757][ T8221] BTRFS info (device loop0): using free-space-tree [ 253.114814][ T5824] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 253.560644][ T5156] usb 4-1: USB disconnect, device number 9 [ 253.761197][ T8316] loop7: detected capacity change from 0 to 256 [ 253.781330][ T8316] exfat: Deprecated parameter 'namecase' [ 253.809480][ T5156] usblp0: removed [ 253.900890][ T30] audit: type=1326 audit(1748026260.595:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 254.004539][ T8316] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 254.072483][ T30] audit: type=1326 audit(1748026260.645:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 254.239873][ T30] audit: type=1326 audit(1748026260.645:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 254.374415][ T30] audit: type=1326 audit(1748026260.645:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 254.543082][ T30] audit: type=1326 audit(1748026260.645:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 254.696222][ T30] audit: type=1326 audit(1748026260.645:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 255.779050][ T30] audit: type=1326 audit(1748026262.475:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a30d8e969 code=0x0 [ 256.280642][ T8324] loop6: detected capacity change from 0 to 32768 [ 256.326374][ T8330] loop2: detected capacity change from 0 to 32768 [ 256.397275][ T8324] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 256.487905][ T8381] loop0: detected capacity change from 0 to 1024 [ 256.587986][ T8381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.631991][ T8324] XFS (loop6): Ending clean mount [ 256.651757][ T30] audit: type=1800 audit(1748026263.355:27): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.634" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 256.774539][ T8381] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm +}[@: bg 0: block 88: padding at end of block bitmap is not set [ 256.937058][ T8381] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2847: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 257.202112][ T7403] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 257.343587][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.075853][ T8404] loop3: detected capacity change from 0 to 32768 [ 258.277532][ T8407] loop6: detected capacity change from 0 to 4096 [ 258.350227][ T8419] loop7: detected capacity change from 0 to 512 [ 258.368934][ T8404] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 258.456065][ T8404] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,reconstruct_alloc [ 258.456065][ T8404] allowing incompatible features above 0.0: (unknown version) [ 258.484993][ T8404] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 258.493763][ T8404] bcachefs (loop3): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 258.493763][ T8404] Doing compatible version upgrade from 1.19: autofix_errors to 1.25: extent_flags [ 258.493763][ T8404] running recovery passes: check_extents_to_backpointers [ 258.521902][ T8404] bcachefs (loop3): dropping and reconstructing all alloc info [ 258.619247][ T8404] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree dirents level 0/0 [ 258.619284][ T8404] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 258.619316][ T8404] node offset 8/24 bset u64s 6 bset byte offset 40: bad k->u64s 0 (min 3 max 253), fixing [ 258.655420][ T8404] bcachefs (loop3): bcachefs (loop3): error validating btree node at btree dirents level 0/0 [ 258.655454][ T8404] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 258.655486][ T8404] node offset 16/24 bset u64s 36 bset byte offset 200: keys out of order: u64s 7 type dirent 4096:4330382808765833931:U32_MAX len 0 ver 0 > u64s 8 type dirent 0:112405674:U32_MAX len 0 ver 0, fixing [ 258.700947][ T8404] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 258.700947][ T8404] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 258.732134][ T8404] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 258.752232][ T8404] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree xattrs level 0/0 [ 258.752266][ T8404] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 258.752298][ T8404] node offset 0/16: got wrong btree node: got [ 258.752319][ T8404] btree=xattrs level=0 seq ded0abe32 1 [ 258.752339][ T8404] min: POS_MIN [ 258.752354][ T8404] max: SPOS_MAX, btree topology error: [ 258.809284][ T8404] bcachefs (loop3): flagging btree xattrs lost data [ 258.819495][ T8404] bcachefs (loop3): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 258.832825][ T8404] bcachefs (loop3): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 258.845754][ T8404] bcachefs (loop3): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 258.868571][ T8419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.913329][ T8404] bcachefs (loop3): scan_for_btree_nodes... [ 258.943393][ T8419] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.962335][ T8428] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.001982][ T8404] bcachefs (loop3): btree node scan found 3 nodes after overwrites [ 259.010109][ T8404] done [ 259.013480][ T8404] bcachefs (loop3): check_topology... [ 259.014768][ T8404] bcachefs (loop3): btree root xattrs unreadable, must recover from scan [ 259.029664][ T8404] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=xattrs level=0 POS_MIN - SPOS_MAX [ 259.044230][ T8404] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ded0abe32 written 8 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 259.077752][ T8404] done [ 259.081073][ T8404] bcachefs (loop3): accounting_read... done [ 259.128496][ T8404] bcachefs (loop3): alloc_read... done [ 259.137532][ T8404] bcachefs (loop3): snapshots_read... done [ 259.141395][ T30] audit: type=1800 audit(1748026265.855:28): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.655" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 259.143722][ T8404] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 259.144392][ T8404] bcachefs (loop3): done starting filesystem [ 259.248953][ T8404] bcachefs (loop3): btree_path_down(): fatal error node not found at pos 536870912:4645534210120580903:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 259.268012][ T8404] bcachefs (loop3): fatal error - emergency read only [ 259.345810][ T8436] bcachefs (loop3): btree_path_down(): fatal error node not found at pos 536870912:4762709891319000742:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 259.366067][ T30] audit: type=1800 audit(1748026265.925:29): pid=8433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.655" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 259.475092][ T30] audit: type=1800 audit(1748026266.165:30): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.655" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 259.525396][ T8437] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.' [ 259.619472][ T8437] Remounting filesystem read-only [ 259.702777][ T5826] bcachefs (loop3): shutting down [ 259.822736][ T5889] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 259.880407][ T7577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.039054][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.097288][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.154205][ T5889] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 260.161420][ T5826] bcachefs (loop3): shutdown complete [ 260.219400][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.355760][ T5889] usb 1-1: config 0 descriptor?? [ 260.382310][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.434250][ T8452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 260.592780][ T5156] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 260.602583][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 260.662230][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.685168][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.735594][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.773965][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.797310][ T5156] usb 8-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 1023 [ 260.833072][ T5156] usb 8-1: config 1 interface 0 has no altsetting 0 [ 260.834994][ T5889] uclogic 0003:5543:0522.000B: No inputs registered, leaving [ 260.869832][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.877305][ T5156] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 260.898538][ T5156] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.907643][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.920333][ T8458] loop6: detected capacity change from 0 to 64 [ 260.924696][ T5889] uclogic 0003:5543:0522.000B: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input0 [ 260.951436][ T5156] usb 8-1: Product: syz [ 260.981876][ T5156] usb 8-1: Manufacturer: syz [ 261.008433][ T5156] usb 8-1: SerialNumber: syz [ 261.049252][ T8449] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 261.056216][ T5889] usb 1-1: USB disconnect, device number 10 [ 261.160807][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 261.202235][ T9] usbtmc 3-1:16.0: can't read capabilities [ 261.366682][ T8447] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 261.416271][ T8459] fido_id[8459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 261.436900][ T5889] usb 3-1: USB disconnect, device number 6 [ 261.762307][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.022524][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 262.047941][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.108657][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.152655][ T5156] usb 8-1: USB disconnect, device number 3 [ 262.171023][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 262.192244][ T30] audit: type=1804 audit(1748026268.895:31): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.668" name="/newroot/108/file0" dev="tmpfs" ino=606 res=1 errno=0 [ 262.225032][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.295672][ T9] usb 2-1: config 0 descriptor?? [ 262.425347][ T8475] 9pnet: p9_errstr2errno: server reported unknown error J»ÒT}é|»öï²&ñ›ù [ 262.697062][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 262.732337][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.793308][ T9] usb 2-1: USB disconnect, device number 11 [ 263.152488][ T8493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 263.951311][ T8506] loop1: detected capacity change from 0 to 256 [ 263.981611][ T8506] exfat: Invalid uid '0x00000000ffffffff' [ 264.117734][ T8510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.491398][ T8516] loop1: detected capacity change from 0 to 64 [ 264.653976][ T30] audit: type=1804 audit(1748026271.355:32): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.684" name="/newroot/120/file0/file0" dev="loop1" ino=3 res=1 errno=0 [ 265.356925][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.377178][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.436102][ T8530] syz.1.687: attempt to access beyond end of device [ 265.436102][ T8530] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 265.479635][ T8530] syz.1.687: attempt to access beyond end of device [ 265.479635][ T8530] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 266.415430][ T8524] loop0: detected capacity change from 0 to 32768 [ 266.459602][ T8524] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.686 (8524) [ 266.564489][ T8524] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 266.616560][ T8524] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 266.651385][ T8524] BTRFS info (device loop0): using free-space-tree [ 268.575796][ T8609] loop7: detected capacity change from 0 to 512 [ 268.724597][ T8609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.740581][ T8609] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.743029][ T5824] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.066095][ T7577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.358904][ T8620] input: syz1 as /devices/virtual/input/input14 [ 269.851725][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 270.468463][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 270.488860][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 270.803396][ T8630] loop7: detected capacity change from 0 to 40427 [ 270.820265][ T8630] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 270.828117][ T8630] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 270.839596][ T8630] F2FS-fs (loop7): invalid crc value [ 271.032013][ T8630] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 271.039430][ T8630] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 271.935438][ T8630] F2FS-fs (loop7): Start checkpoint disabled! [ 271.949663][ T8662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.252258][ T5890] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.472786][ T5890] usb 3-1: config 0 has no interfaces? [ 272.508915][ T5890] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.551055][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.588628][ T5890] usb 3-1: Product: syz [ 272.620627][ T5890] usb 3-1: Manufacturer: syz [ 272.651682][ T5890] usb 3-1: config 0 descriptor?? [ 272.782871][ T5889] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 273.016200][ T5889] usb 7-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 1023 [ 273.082808][ T5889] usb 7-1: config 1 interface 0 has no altsetting 0 [ 273.143967][ T5889] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 273.174285][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.207751][ T5889] usb 7-1: Product: syz [ 273.211985][ T5889] usb 7-1: Manufacturer: syz [ 273.258124][ T5889] usb 7-1: SerialNumber: syz [ 273.293004][ T8670] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 273.735994][ T9] usb 3-1: USB disconnect, device number 7 [ 276.117850][ T5889] usb 7-1: USB disconnect, device number 4 [ 276.257865][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.994899][ T8731] syz.6.733: attempt to access beyond end of device [ 276.994899][ T8731] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 276.999923][ T8726] loop7: detected capacity change from 0 to 2048 [ 277.027733][ T8731] syz.6.733: attempt to access beyond end of device [ 277.027733][ T8731] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 277.312658][ T8726] EXT4-fs: Ignoring removed bh option [ 277.873635][ T8726] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.202408][ T30] audit: type=1800 audit(1748026284.885:33): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.732" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 278.273480][ T8726] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 278.416119][ T8726] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 278.488274][ T8759] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 278.558183][ T8726] EXT4-fs (loop7): This should not happen!! Data will be lost [ 278.558183][ T8726] [ 278.703289][ T8726] EXT4-fs (loop7): Total free blocks count 0 [ 278.709368][ T8726] EXT4-fs (loop7): Free/Dirty block details [ 278.762311][ T5896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.831882][ T8759] EXT4-fs (loop7): This should not happen!! Data will be lost [ 278.831882][ T8759] [ 278.912267][ T8759] EXT4-fs (loop7): Total free blocks count 0 [ 278.922410][ T8726] EXT4-fs (loop7): free_blocks=2415919104 [ 278.942324][ T8726] EXT4-fs (loop7): dirty_blocks=16 [ 278.993054][ T5896] usb 4-1: config 0 has no interfaces? [ 279.003110][ T30] audit: type=1800 audit(1748026285.715:34): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.732" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 279.024301][ T5896] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.061653][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.090122][ T5896] usb 4-1: Product: syz [ 279.112299][ T5896] usb 4-1: Manufacturer: syz [ 279.162062][ T5896] usb 4-1: config 0 descriptor?? [ 279.178693][ T8777] loop6: detected capacity change from 0 to 512 [ 279.345061][ T8777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.492437][ T8777] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.670705][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 279.946903][ T7403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.014476][ T8791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.064599][ T8800] gretap0: entered promiscuous mode [ 280.070820][ T8800] vlan0: entered promiscuous mode [ 280.152046][ T5890] usb 4-1: USB disconnect, device number 10 [ 280.378717][ T8808] input: syz1 as /devices/virtual/input/input15 [ 284.008418][ T8898] input: syz1 as /devices/virtual/input/input16 [ 284.342842][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 284.413407][ T5896] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 284.648191][ T5896] usb 7-1: config 0 has no interfaces? [ 284.656378][ T5896] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.686028][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.717189][ T5896] usb 7-1: Product: syz [ 284.721430][ T5896] usb 7-1: Manufacturer: syz [ 284.749944][ T5896] usb 7-1: config 0 descriptor?? [ 285.232690][ T5889] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 285.442527][ T5889] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.450650][ T5889] usb 4-1: config 0 has no interface number 0 [ 285.487267][ T5889] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 285.542248][ T5889] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.593392][ T5889] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 285.644348][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.680619][ T5889] usb 4-1: config 0 descriptor?? [ 286.374690][ T5889] uclogic 0003:28BD:0071.000C: pen parameters not found [ 286.381740][ T5889] uclogic 0003:28BD:0071.000C: interface is invalid, ignoring [ 286.677716][ T9] usb 4-1: USB disconnect, device number 11 [ 286.868884][ T5888] usb 7-1: USB disconnect, device number 5 [ 288.490010][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.784'. [ 289.164839][ T8993] loop3: detected capacity change from 0 to 8 [ 290.481359][ T9021] loop6: detected capacity change from 0 to 1024 [ 290.618281][ T9021] hfsplus: failed to load attributes file [ 291.010192][ T8997] loop7: detected capacity change from 0 to 32768 [ 291.549042][ T8997] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 291.677108][ T9052] loop6: detected capacity change from 0 to 2048 [ 291.719105][ T8997] XFS (loop7): Ending clean mount [ 291.774061][ T9052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 291.851905][ T30] audit: type=1800 audit(1748026298.555:35): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.788" name="file1" dev="loop7" ino=6150 res=0 errno=0 [ 291.867558][ T8997] XFS (loop7): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 292.588277][ T7577] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.742362][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 292.974117][ T5888] usb 4-1: config 1 interface 0 altsetting 254 bulk endpoint 0x1 has invalid maxpacket 1023 [ 293.010785][ T5888] usb 4-1: config 1 interface 0 has no altsetting 0 [ 293.031043][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 293.062593][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.094164][ T5888] usb 4-1: Product: syz [ 293.098383][ T5888] usb 4-1: Manufacturer: syz [ 293.117156][ T5888] usb 4-1: SerialNumber: syz [ 293.139601][ T9067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.325001][ T30] audit: type=1326 audit(1748026299.875:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 293.437918][ T30] audit: type=1326 audit(1748026299.875:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 293.528059][ T30] audit: type=1326 audit(1748026299.875:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 293.656865][ T30] audit: type=1326 audit(1748026299.875:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 294.005446][ T30] audit: type=1326 audit(1748026299.875:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 294.097762][ T5888] usb 4-1: USB disconnect, device number 12 [ 294.132255][ T30] audit: type=1326 audit(1748026299.885:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 294.292910][ T30] audit: type=1326 audit(1748026299.885:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 294.366879][ T30] audit: type=1326 audit(1748026299.885:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 294.512365][ T30] audit: type=1326 audit(1748026299.885:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9073 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x7ffc0000 [ 294.542584][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 294.712784][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 294.769842][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 294.805587][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 294.835289][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.882764][ T9] usb 8-1: Product: syz [ 294.887018][ T9] usb 8-1: Manufacturer: syz [ 294.891691][ T9] usb 8-1: SerialNumber: syz [ 294.983512][ T9] usb 8-1: config 0 descriptor?? [ 295.021188][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 295.066643][ T9069] loop6: detected capacity change from 0 to 32768 [ 295.083861][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 295.163191][ T9069] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.316473][ T9069] XFS (loop6): Ending clean mount [ 295.436607][ T9069] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 295.630256][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 296.125127][ T7403] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 296.247653][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 296.287687][ T9] em28xx 8-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 296.339360][ T9] em28xx 8-1:0.0: board has no eeprom [ 296.446518][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 296.476672][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 296.504424][ T5896] em28xx 8-1:0.0: Binding DVB extension [ 296.556975][ T9] usb 8-1: USB disconnect, device number 4 [ 296.589597][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 297.118251][ T5896] em28xx 8-1:0.0: Registering input extension [ 297.152674][ T9] em28xx 8-1:0.0: Closing input extension [ 297.488599][ T9] em28xx 8-1:0.0: Freeing device [ 298.557944][ T9143] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 298.604672][ T9143] netlink: 'syz.2.821': attribute type 4 has an invalid length. [ 298.638474][ T9143] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.821'. [ 298.682805][ T9150] netlink: 'syz.2.821': attribute type 1 has an invalid length. [ 298.749076][ T9150] netlink: 'syz.2.821': attribute type 4 has an invalid length. [ 299.125877][ T9150] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.821'. [ 299.226255][ T9151] loop7: detected capacity change from 0 to 2048 [ 299.317585][ T9151] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.908346][ T9217] loop6: detected capacity change from 0 to 32768 [ 304.194411][ T9217] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 304.253029][ T9217] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,nocow [ 304.253029][ T9217] allowing incompatible features above 0.0: (unknown version) [ 304.278908][ T9217] bcachefs (loop6): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 304.278954][ T9217] invalid key type for btree extents (btree_ptr_v2), deleting [ 304.306618][ T9217] bcachefs (loop6): invalid bkey in superblock btree=dirents level=1: u64s 11 type extent SPOS_MAX len 0 ver 281474976710656: durability: 0 (invalid extent entry 0000000000000000) [ 304.306661][ T9217] invalid key type for btree internal btree node (extent), deleting [ 304.334808][ T9217] bcachefs (loop6): invalid bkey in superblock btree=snapshots level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 255 ver 18446462598732840960: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 304.334858][ T9217] size != 0, deleting [ 304.361710][ T9217] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 304.370663][ T9217] bcachefs (loop6): Version upgrade required: [ 304.370663][ T9217] Version upgrade from 0.12: snapshot to 1.7: mi_btree_bitmap incomplete [ 304.370663][ T9217] Doing incompatible version upgrade from 0.12: snapshot to 1.25: extent_flags [ 304.370663][ T9217] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 304.441878][ T9217] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree inodes level 0/0 [ 304.441910][ T9217] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 304.441941][ T9217] node offset 16/24 bset u64s 110 bset byte offset 792: keys out of order: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0, fixing [ 304.490646][ T9217] bcachefs (loop6): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 7696581394432:536870913:U32_MAX len 0 ver 0: (unpack error) [ 304.490686][ T9217] nonzero k.p.inode, deleting [ 304.513660][ T9217] bcachefs (loop6): btree_node_read_work: rewriting btree node at due to error [ 304.513660][ T9217] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 304.544724][ T9217] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree alloc level 0/0 [ 304.544756][ T9217] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 304.544787][ T9217] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 304.587120][ T9217] bcachefs (loop6): bcachefs (loop6): error validating btree node on loop6 at btree alloc level 0/0 [ 304.587154][ T9217] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 304.587186][ T9217] node offset 16/24 bset u64s 0: unsupported bset version 3.519 [ 304.619719][ T9217] bcachefs (loop6): flagging btree alloc lost data [ 304.626509][ T9217] bcachefs (loop6): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 304.638618][ T9217] bcachefs (loop6): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 304.662500][ T9217] bcachefs (loop6): bcachefs (loop6): error validating btree node on loop6 at btree freespace level 0/0 [ 304.662532][ T9217] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 304.662565][ T9217] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 304.662590][ T9217] error not marked as autofix and not in fsck [ 304.662611][ T9217] run fsck, and forward to devs so error can be marked for self-healing [ 304.662635][ T9217] inconsistency detected - emergency read only at journal seq 10 [ 304.721590][ T9217] bcachefs (loop6): flagging btree freespace lost data [ 304.729094][ T9217] bcachefs (loop6): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 304.741787][ T9217] bcachefs (loop6): bcachefs (loop6): error validating btree node at btree backpointers level 0/0 [ 304.741818][ T9217] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 304.741849][ T9217] node offset 8/24 bset u64s 42 bset byte offset 264: key extends past end of bset, shutting down [ 304.741876][ T9217] error not marked as autofix and not in fsck [ 304.741896][ T9217] run fsck, and forward to devs so error can be marked for self-healing [ 304.793354][ T9217] bcachefs (loop6): flagging btree backpointers lost data [ 304.801070][ T9217] bcachefs (loop6): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 304.815176][ T9217] bcachefs (loop6): check_topology... done [ 304.821179][ T9217] bcachefs (loop6): accounting_read... done [ 304.859669][ T9217] bcachefs (loop6): alloc_read... done [ 304.865294][ T9217] bcachefs (loop6): snapshots_read... done [ 304.872399][ T9217] bcachefs (loop6): done starting filesystem [ 305.043355][ T9215] bcachefs (loop6): shutdown by ioctl type 0 [ 305.313804][ T7403] bcachefs (loop6): shutting down [ 305.617576][ T7403] bcachefs (loop6): shutdown complete [ 307.959945][ T9318] loop3: detected capacity change from 0 to 2048 [ 308.089124][ T9318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.469887][ T5844] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 309.480681][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: kworker/u9:10 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 309.480732][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.480758][ T5844] Workqueue: hci2 hci_rx_work [ 309.480800][ T5844] Call Trace: [ 309.480812][ T5844] [ 309.480826][ T5844] dump_stack_lvl+0x16c/0x1f0 [ 309.480889][ T5844] sysfs_warn_dup+0x7f/0xa0 [ 309.480946][ T5844] sysfs_create_dir_ns+0x24b/0x2b0 [ 309.481032][ T5844] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 309.481087][ T5844] ? find_held_lock+0x2b/0x80 [ 309.481143][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.481190][ T5844] ? do_raw_spin_unlock+0x172/0x230 [ 309.481235][ T5844] kobject_add_internal+0x2c4/0x9b0 [ 309.481284][ T5844] kobject_add+0x16e/0x240 [ 309.481323][ T5844] ? __pfx_kobject_add+0x10/0x10 [ 309.481363][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.481409][ T5844] ? do_raw_spin_unlock+0x172/0x230 [ 309.481452][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.481497][ T5844] ? kobject_put+0xab/0x5a0 [ 309.481535][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.481591][ T5844] device_add+0x288/0x1a70 [ 309.481644][ T5844] ? __pfx_dev_set_name+0x10/0x10 [ 309.481698][ T5844] ? __pfx_device_add+0x10/0x10 [ 309.481746][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.481785][ T5844] ? mgmt_send_event_skb+0x2fb/0x460 [ 309.481831][ T5844] hci_conn_add_sysfs+0x17e/0x230 [ 309.481874][ T5844] le_conn_complete_evt+0x1075/0x1d70 [ 309.481952][ T5844] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 309.482034][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.482098][ T5844] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 309.482177][ T5844] ? skb_pull_data+0x166/0x210 [ 309.482228][ T5844] hci_le_meta_evt+0x2f6/0x5e0 [ 309.482268][ T5844] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 309.482344][ T5844] hci_event_packet+0x66c/0x1190 [ 309.482410][ T5844] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 309.482454][ T5844] ? __pfx_hci_event_packet+0x10/0x10 [ 309.482520][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.482570][ T5844] ? kcov_remote_start+0x3c9/0x6d0 [ 309.482606][ T5844] ? lockdep_hardirqs_on+0x7c/0x110 [ 309.482663][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.482714][ T5844] hci_rx_work+0x2c5/0x16b0 [ 309.482752][ T5844] ? rcu_is_watching+0x12/0xc0 [ 309.482800][ T5844] process_one_work+0x9cf/0x1b70 [ 309.482856][ T5844] ? __pfx_process_one_work+0x10/0x10 [ 309.482894][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.482947][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.482997][ T5844] ? assign_work+0x1a0/0x250 [ 309.483036][ T5844] worker_thread+0x6c8/0xf10 [ 309.483084][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.483127][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.483168][ T5844] ? __kthread_parkme+0x19e/0x250 [ 309.483217][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.483260][ T5844] ? __pfx_worker_thread+0x10/0x10 [ 309.483299][ T5844] kthread+0x3c5/0x780 [ 309.483333][ T5844] ? __pfx_kthread+0x10/0x10 [ 309.483363][ T5844] ? __pfx_kthread+0x10/0x10 [ 309.483394][ T5844] ? __pfx_kthread+0x10/0x10 [ 309.483426][ T5844] ? __pfx_kthread+0x10/0x10 [ 309.483455][ T5844] ? srso_alias_return_thunk+0x5/0xfbef5 [ 309.483496][ T5844] ? rcu_is_watching+0x12/0xc0 [ 309.483538][ T5844] ? __pfx_kthread+0x10/0x10 [ 309.483573][ T5844] ret_from_fork+0x48/0x80 [ 309.483606][ T5844] ? __pfx_kthread+0x10/0x10 [ 309.483641][ T5844] ret_from_fork_asm+0x1a/0x30 [ 309.483716][ T5844] [ 309.886375][ T5844] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 309.900630][ T5844] Bluetooth: hci2: failed to register connection device [ 312.213187][ T9415] loop6: detected capacity change from 0 to 1024 [ 312.263439][ T9415] EXT4-fs: Ignoring removed orlov option [ 312.269182][ T9415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 312.457942][ T9415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.137718][ T7403] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.101589][ T5844] block nbd3: Receive control failed (result -107) [ 315.232520][ T9471] nbd3: detected capacity change from 0 to 67108884 [ 315.243199][ T9466] syzkaller0: entered promiscuous mode [ 315.251620][ T6122] block nbd3: Dead connection, failed to find a fallback [ 315.274739][ T9466] syzkaller0: entered allmulticast mode [ 315.290887][ T6122] block nbd3: shutting down sockets [ 315.308799][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.384190][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.443971][ T9473] nbd3: detected capacity change from 67108884 to 2 [ 315.454255][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.500117][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.535750][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.570054][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.616289][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.647706][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.699341][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.728209][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.740347][ T6122] ldm_validate_partition_table(): Disk read failed. [ 315.799410][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.862199][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.875885][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 315.886584][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.913432][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.122795][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 316.130862][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.192462][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 316.200499][ T6122] Dev nbd3: unable to read RDB block 0 [ 316.280705][ T6122] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.347715][ T6122] Buffer I/O error on dev nbd3, logical block 0, async page read [ 316.367414][ T6122] nbd3: unable to read partition table [ 316.386333][ T6122] nbd3: partition table beyond EOD, truncated [ 316.443721][ T6122] ldm_validate_partition_table(): Disk read failed. [ 316.470988][ T6122] Dev nbd3: unable to read RDB block 0 [ 316.485728][ T9496] netlink: 88 bytes leftover after parsing attributes in process `syz.0.922'. [ 316.502815][ T6122] nbd3: unable to read partition table [ 316.525627][ T9496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.922'. [ 316.547031][ T6122] nbd3: partition table beyond EOD, truncated [ 318.602271][ T5156] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 318.808721][ T5156] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 318.829612][ T5156] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.837894][ T5156] usb 8-1: Product: syz [ 318.842449][ T5156] usb 8-1: Manufacturer: syz [ 318.847194][ T5156] usb 8-1: SerialNumber: syz [ 318.877204][ T5156] usb 8-1: config 0 descriptor?? [ 318.909849][ T5156] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 319.141856][ T9528] cgroup: fork rejected by pids controller in /syz7 [ 319.397934][ T5889] usb 8-1: USB disconnect, device number 5 [ 320.952499][ T9549] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 321.256425][ T62] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.498947][ T62] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.756727][ T9566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.944'. [ 321.783406][ T62] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.159114][ T62] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.902635][ T62] bridge_slave_1: left allmulticast mode [ 322.923885][ T62] bridge_slave_1: left promiscuous mode [ 322.950437][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.975068][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.004734][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.017957][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.040413][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.049831][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.070553][ T62] bridge_slave_0: left allmulticast mode [ 323.088025][ T62] bridge_slave_0: left promiscuous mode [ 323.182632][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.438655][ T9606] netlink: 88 bytes leftover after parsing attributes in process `syz.1.954'. [ 323.482411][ T9606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.954'. [ 324.235878][ T9621] loop3: detected capacity change from 0 to 1024 [ 324.255859][ T9621] ext4: Unknown parameter 'nouser_xattr' [ 324.326017][ T9626] input: syz1 as /devices/virtual/input/input18 [ 325.182363][ T5841] Bluetooth: hci4: command tx timeout [ 325.657806][ T62] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 326.289791][ T9640] overlayfs: failed to clone upperpath [ 326.797842][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.807715][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.849786][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.912248][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.955690][ T62] bond0 (unregistering): Released all slaves [ 327.091599][ T9642] batadv_slave_1: entered promiscuous mode [ 327.264842][ T5844] Bluetooth: hci4: command tx timeout [ 327.331129][ T9641] batadv_slave_1: left promiscuous mode [ 328.865107][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 328.942444][ T62] hsr_slave_0: left promiscuous mode [ 329.055436][ T62] hsr_slave_1: left promiscuous mode [ 329.067414][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.122335][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.285531][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.342319][ T5841] Bluetooth: hci4: command tx timeout [ 329.351707][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.501824][ T62] veth1_macvtap: left promiscuous mode [ 329.523496][ T62] veth0_macvtap: left promiscuous mode [ 329.552355][ T62] veth1_vlan: left promiscuous mode [ 329.557744][ T62] veth0_vlan: left promiscuous mode [ 331.422340][ T5841] Bluetooth: hci4: command tx timeout [ 332.300227][ T9759] 9pnet_fd: Insufficient options for proto=fd [ 332.484177][ T62] team0 (unregistering): Port device team_slave_1 removed [ 332.532620][ T62] team0 (unregistering): Port device team_slave_0 removed [ 333.542248][ T5894] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 333.722599][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 333.761001][ T5894] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 333.805781][ T5894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.842259][ T5894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.884620][ T5894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.937450][ T5894] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.982252][ T5894] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.009743][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.287267][ T5894] usb 7-1: GET_CAPABILITIES returned 0 [ 334.330073][ T5894] usbtmc 7-1:16.0: can't read capabilities [ 334.556936][ T5889] usb 7-1: USB disconnect, device number 6 [ 338.042432][ T9797] loop6: detected capacity change from 0 to 131072 [ 338.075348][ T9797] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 338.083638][ T9797] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 338.114357][ T9797] F2FS-fs (loop6): invalid crc value [ 338.243226][ T9797] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 338.250343][ T9797] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 338.333027][ T9797] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 338.514235][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1036'. [ 338.545758][ T9815] netlink: 'syz.1.1036': attribute type 7 has an invalid length. [ 338.556453][ T9815] netlink: 'syz.1.1036': attribute type 8 has an invalid length. [ 338.572009][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 338.979330][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 339.637240][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.652271][ T5890] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 339.691152][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.712408][ T9594] bridge_slave_0: entered allmulticast mode [ 339.751670][ T9594] bridge_slave_0: entered promiscuous mode [ 339.777181][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.802298][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.816390][ T9594] bridge_slave_1: entered allmulticast mode [ 339.854802][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 339.864160][ T9594] bridge_slave_1: entered promiscuous mode [ 339.886050][ T5890] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 339.908908][ T5890] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.952705][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.012816][ T5890] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.048621][ T5890] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.104141][ T5890] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 340.122178][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.181967][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.264836][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.420636][ T5890] usb 4-1: GET_CAPABILITIES returned 0 [ 340.442341][ T5890] usbtmc 4-1:16.0: can't read capabilities [ 340.629324][ T9594] team0: Port device team_slave_0 added [ 340.689383][ T9594] team0: Port device team_slave_1 added [ 340.693972][ T5894] usb 4-1: USB disconnect, device number 13 [ 341.026986][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.056155][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.169533][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.236115][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.268794][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.314882][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.809318][ T9594] hsr_slave_0: entered promiscuous mode [ 341.850500][ T9594] hsr_slave_1: entered promiscuous mode [ 341.894942][ T9594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.941337][ T9594] Cannot create hsr debugfs directory [ 342.034738][ T9891] 9pnet_fd: Insufficient options for proto=fd [ 343.137947][ T9904] loop6: detected capacity change from 0 to 256 [ 343.411857][ T9904] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 343.475298][ T9904] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00000005) bogus content (0xffffff05) [ 343.589049][ T9904] exFAT-fs (loop6): failed to initialize root inode [ 345.327602][ T9594] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 345.381481][ T9594] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 345.412310][ T5888] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 345.429084][ T9594] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 345.455812][ T9594] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 345.582950][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 345.602994][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.632254][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 345.647072][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.693471][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.757116][ T5888] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 345.794763][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.833394][ T5888] usb 7-1: Product: syz [ 345.860641][ T5888] usb 7-1: Manufacturer: syz [ 345.870539][ T5888] usb 7-1: SerialNumber: syz [ 345.919172][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.922492][ T5888] usb 7-1: config 0 descriptor?? [ 346.034227][ T5888] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input19 [ 346.047602][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.135706][ T8595] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.142955][ T8595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.212021][ T5888] imon:send_packet: packet tx failed (-71) [ 346.252393][ T5888] imon 7-1:0.0: panel buttons/knobs setup failed [ 346.273895][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.281082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.472325][ T5888] rc_core: IR keymap rc-imon-pad not found [ 347.277088][ T5888] Registered IR keymap rc-empty [ 347.292347][ T5888] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 347.332283][ T5888] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 347.372210][ T5888] imon:send_packet: packet tx failed (-71) [ 347.392371][ T5888] imon 7-1:0.0: remote input dev register failed [ 347.399272][ T5888] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 347.510333][ T9594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.543176][ T5888] imon 7-1:0.0: unable to initialize intf0, err 0 [ 347.626408][ T5888] imon:imon_probe: failed to initialize context! [ 347.633608][ T9594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.682219][ T5888] imon 7-1:0.0: unable to register, err -19 [ 347.765321][ T5888] usb 7-1: USB disconnect, device number 7 [ 347.823480][ T9982] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 347.903294][ T9982] syz_tun: entered promiscuous mode [ 348.101685][ T9982] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 348.493222][ T9989] loop6: detected capacity change from 0 to 32768 [ 348.500726][ T9989] XFS: noikeep mount option is deprecated. [ 348.617848][ T9989] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 348.712950][ T9989] XFS (loop6): Ending clean mount [ 348.723982][ T9989] XFS (loop6): Quotacheck needed: Please wait. [ 348.859348][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.925717][ T9989] XFS (loop6): Quotacheck: Done. [ 349.148034][ T7403] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 349.715173][T10016] overlayfs: failed to clone upperpath [ 350.667723][ T9594] veth0_vlan: entered promiscuous mode [ 350.703877][ T9594] veth1_vlan: entered promiscuous mode [ 350.770892][ T9594] veth0_macvtap: entered promiscuous mode [ 350.809436][ T9594] veth1_macvtap: entered promiscuous mode [ 350.839233][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.855661][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.868920][ T9594] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.878188][ T9594] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.888276][ T9594] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.898152][ T9594] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.097627][ T7459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.131824][ T7459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.196392][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.214913][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.563378][T10052] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 352.069415][T10064] gretap1: entered allmulticast mode [ 352.149451][T10064] bond1: (slave gretap1): making interface the new active one [ 352.187175][T10064] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 354.506083][T10101] loop3: detected capacity change from 0 to 131072 [ 354.707840][T10101] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 357.332725][T10159] geneve2: entered promiscuous mode [ 357.339598][T10159] geneve2: entered allmulticast mode [ 358.072608][T10169] syz_tun: entered allmulticast mode [ 358.153830][T10166] syz_tun: left allmulticast mode [ 359.274059][T10190] overlayfs: failed to clone upperpath [ 360.085367][ T5975] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 360.242404][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 360.271049][ T5975] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 360.299472][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 360.350551][ T5975] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.411769][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.446950][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.506432][ T5975] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 360.523321][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 360.572219][ T5975] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.606512][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.681624][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.726264][ T5975] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 360.751984][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 360.811949][ T5975] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.881980][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 360.915218][ T5975] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.967964][ T5975] usb 4-1: string descriptor 0 read error: -22 [ 360.989302][ T5975] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 361.012442][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.076467][ T5975] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 361.705234][T10226] loop7: detected capacity change from 0 to 1024 [ 361.706720][ T5975] usb 4-1: USB disconnect, device number 14 [ 363.496930][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 363.911540][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'. [ 364.293569][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 364.345677][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 364.502641][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 364.520811][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.545184][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.561008][ T9] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 364.576023][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.610407][ T9] usb 4-1: config 0 descriptor?? [ 365.088472][ T9] waterforce 0003:1044:7A4D.000D: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 365.202777][ T9] waterforce 0003:1044:7A4D.000D: fw version request failed with -38 [ 365.276224][ T5888] usb 4-1: USB disconnect, device number 15 [ 365.562541][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 365.562568][ T30] audit: type=1800 audit(1748026372.265:62): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1170" name="bus" dev="tmpfs" ino=1147 res=0 errno=0 [ 365.792784][T10306] mmap: syz.6.1172 (10306) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 366.250049][ T30] audit: type=1326 audit(1748026372.955:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.2.1176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0dbf8e969 code=0x0 [ 366.488870][T10315] loop3: detected capacity change from 0 to 32768 [ 366.502472][T10315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1177 (10315) [ 366.538031][T10315] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.548389][T10315] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 366.557370][T10315] BTRFS info (device loop3): using free-space-tree [ 366.984975][T10343] BTRFS info (device loop3): space_info DATA+METADATA has 94208 free, is not full [ 366.995631][T10343] BTRFS info (device loop3): space_info total=3276800, used=53248, pinned=0, reserved=16384, may_use=3112960, readonly=0 zone_unusable=0 [ 367.010032][T10343] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 367.020629][T10343] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 367.029182][T10343] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 367.037037][T10343] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 367.045184][T10343] BTRFS info (device loop3): delayed_refs_rsv: size 786432 reserved 782336 [ 367.759929][ T5826] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.105453][ T30] audit: type=1326 audit(1748026375.815:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10377 comm="syz.0.1197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f788a38e969 code=0x0 [ 369.181771][T10349] loop7: detected capacity change from 0 to 32768 [ 369.240619][T10349] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1183 (10349) [ 369.423502][T10349] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 369.458812][T10349] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm [ 369.491696][T10349] BTRFS info (device loop7): using free-space-tree [ 370.261389][ T9594] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 370.813016][ T30] audit: type=1326 audit(1748026377.515:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc316b8e969 code=0x7ffc0000 [ 370.972224][ T30] audit: type=1326 audit(1748026377.515:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc316b8e969 code=0x7ffc0000 [ 371.102487][ T30] audit: type=1326 audit(1748026377.535:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fc316b8e969 code=0x7ffc0000 [ 371.214521][ T30] audit: type=1326 audit(1748026377.535:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc316b8e969 code=0x7ffc0000 [ 371.309441][ T30] audit: type=1326 audit(1748026377.545:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc316b8e969 code=0x7ffc0000 [ 371.402226][ T30] audit: type=1326 audit(1748026377.545:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.7.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc316b8e969 code=0x7ffc0000 [ 371.644212][T10435] @: renamed from vlan0 (while UP) [ 371.758789][T10438] loop3: detected capacity change from 0 to 1024 [ 371.864625][T10438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.044557][T10438] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm +}[@: bg 0: block 88: padding at end of block bitmap is not set [ 372.364036][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.701710][ T30] audit: type=1804 audit(1748026379.405:71): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1219" name="/newroot/190/file0" dev="tmpfs" ino=1066 res=1 errno=0 [ 374.141857][T10491] loop3: detected capacity change from 0 to 64 [ 374.392808][ T30] audit: type=1804 audit(1748026381.075:72): pid=10491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1232" name="/newroot/193/file0/file0" dev="loop3" ino=3 res=1 errno=0 [ 375.191540][T10502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 377.629739][T10558] loop7: detected capacity change from 0 to 64 [ 379.755096][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.196316][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.591209][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.749215][ T30] audit: type=1326 audit(1748026387.445:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 380.912630][ T30] audit: type=1326 audit(1748026387.445:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.072242][ T30] audit: type=1326 audit(1748026387.485:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.198366][ T30] audit: type=1326 audit(1748026387.485:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.362366][ T30] audit: type=1326 audit(1748026387.485:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.387433][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.482200][ T30] audit: type=1326 audit(1748026387.485:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.607718][ T30] audit: type=1326 audit(1748026387.485:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.731496][ T30] audit: type=1326 audit(1748026387.485:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 381.872257][ T30] audit: type=1800 audit(1748026387.495:81): pid=10622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1274" name="bus" dev="tmpfs" ino=1337 res=0 errno=0 [ 381.972215][ T30] audit: type=1326 audit(1748026387.495:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10621 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a30d8e969 code=0x7ffc0000 [ 382.412051][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.423785][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.433287][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.442331][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.450678][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.460998][ T12] bridge_slave_1: left allmulticast mode [ 382.478857][ T12] bridge_slave_1: left promiscuous mode [ 382.558304][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.677144][ T12] bridge_slave_0: left allmulticast mode [ 382.694796][ T12] bridge_slave_0: left promiscuous mode [ 382.721654][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.248702][T10655] overlayfs: failed to clone upperpath [ 384.344860][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.371956][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.392740][ T12] bond0 (unregistering): Released all slaves [ 384.551574][ T5844] Bluetooth: hci4: command tx timeout [ 385.005453][ T12] hsr_slave_0: left promiscuous mode [ 385.011747][ T12] hsr_slave_1: left promiscuous mode [ 385.020594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.028930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.041423][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.049368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.097039][ T12] veth1_macvtap: left promiscuous mode [ 385.103327][ T12] veth0_macvtap: left promiscuous mode [ 385.109054][ T12] veth1_vlan: left promiscuous mode [ 385.115210][ T12] veth0_vlan: left promiscuous mode [ 386.225341][ T12] team0 (unregistering): Port device team_slave_1 removed [ 386.271415][ T12] team0 (unregistering): Port device team_slave_0 removed [ 386.623158][ T5844] Bluetooth: hci4: command tx timeout [ 387.078141][T10643] chnl_net:caif_netlink_parms(): no params data found [ 387.332431][T10643] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.339732][T10643] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.366585][T10643] bridge_slave_0: entered allmulticast mode [ 387.378541][T10643] bridge_slave_0: entered promiscuous mode [ 387.454687][T10643] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.462025][T10643] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.480832][T10643] bridge_slave_1: entered allmulticast mode [ 387.490637][T10643] bridge_slave_1: entered promiscuous mode [ 387.567429][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.581196][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.663504][T10643] team0: Port device team_slave_0 added [ 387.681273][T10643] team0: Port device team_slave_1 added [ 387.772922][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.780137][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.808822][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.826526][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.834903][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.861624][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.965835][T10643] hsr_slave_0: entered promiscuous mode [ 387.977833][T10643] hsr_slave_1: entered promiscuous mode [ 387.986638][T10643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.001370][T10643] Cannot create hsr debugfs directory [ 388.238656][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.245319][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.353005][T10643] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.378973][T10643] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.408519][T10643] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.436793][T10643] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.581860][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.629600][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.645179][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.652394][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.676563][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.683767][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.714677][ T5844] Bluetooth: hci4: command tx timeout [ 389.180199][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.739387][T10643] veth0_vlan: entered promiscuous mode [ 389.771047][T10643] veth1_vlan: entered promiscuous mode [ 389.855910][T10643] veth0_macvtap: entered promiscuous mode [ 389.881670][T10643] veth1_macvtap: entered promiscuous mode [ 389.947986][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.995093][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.013707][T10643] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.023485][T10643] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.034436][T10643] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.050236][T10643] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.187520][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.215516][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.278745][ T8595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.291124][ T8595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.796684][ T5844] Bluetooth: hci4: command tx timeout [ 391.426924][T10763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 391.511955][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 391.511982][ T30] audit: type=1326 audit(1748026398.215:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10764 comm="syz.1.1292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c0f8e969 code=0x0 [ 392.292726][ T5975] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 392.493800][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 392.517564][ T5975] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.541957][ T5975] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.579432][ T5975] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.599632][ T5975] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.623299][ T5975] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.637974][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.893968][ T5975] usb 4-1: GET_CAPABILITIES returned 0 [ 392.911550][ T5975] usbtmc 4-1:16.0: can't read capabilities [ 393.128294][T10780] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 393.152399][ T5975] usb 4-1: USB disconnect, device number 16 [ 393.972637][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1313'. [ 394.708026][T10848] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.1322'. [ 394.739164][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1322'. [ 394.887977][T10851] bond0: (slave team0): Releasing backup interface [ 394.974013][T10851] bridge_slave_0: left allmulticast mode [ 394.991958][T10854] loop8: detected capacity change from 0 to 512 [ 395.002256][T10851] bridge_slave_0: left promiscuous mode [ 395.032348][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.084082][T10854] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.1324: casefold flag without casefold feature [ 395.183465][T10854] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1324: couldn't read orphan inode 15 (err -117) [ 395.183707][T10851] bridge_slave_1: left allmulticast mode [ 395.224399][T10854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.230890][T10851] bridge_slave_1: left promiscuous mode [ 395.270952][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.373244][T10851] bond0: (slave bond_slave_0): Releasing backup interface [ 395.522011][T10851] bond0: (slave bond_slave_1): Releasing backup interface [ 395.793395][T10851] team0: Port device team_slave_0 removed [ 395.888422][T10851] team0: Port device team_slave_1 removed [ 395.933520][T10851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.956475][T10643] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.972787][T10851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.021675][T10851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.072370][T10851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.337664][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1340'. [ 398.362040][T10899] loop3: detected capacity change from 0 to 32768 [ 398.745605][T10899] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 398.991471][T10899] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 398.991471][T10899] allowing incompatible features above 0.0: (unknown version) [ 399.135045][T10899] bcachefs (loop3): initializing new filesystem [ 399.173558][T10899] bcachefs (loop3): going read-write [ 399.252894][T10899] bcachefs (loop3): marking superblocks [ 399.361157][T10899] bcachefs (loop3): initializing freespace [ 399.400691][T10899] bcachefs (loop3): done initializing freespace [ 399.446530][T10899] bcachefs (loop3): reading snapshots table [ 399.477856][T10899] bcachefs (loop3): reading snapshots done [ 399.587997][T10899] bcachefs (loop3): done starting filesystem [ 400.408386][ T5826] bcachefs (loop3): shutting down [ 400.414815][ T5826] bcachefs (loop3): going read-only [ 400.420087][ T5826] bcachefs (loop3): finished waiting for writes to stop [ 400.482910][ T30] audit: type=1326 audit(1748026407.185:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10976 comm="syz.6.1357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feacdf8e969 code=0x0 [ 400.537303][ T5826] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 400.729051][ T5826] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 400.779723][ T5826] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 400.903832][ T5826] bcachefs (loop3): marking filesystem clean [ 401.129533][ T5826] bcachefs (loop3): shutdown complete [ 401.629662][T11008] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1364'. [ 401.882208][T11012] overlayfs: failed to clone upperpath [ 405.102766][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 405.670281][T11070] [ 405.672691][T11070] ====================================================== [ 405.679739][T11070] WARNING: possible circular locking dependency detected [ 405.686780][T11070] 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 Not tainted [ 405.693906][T11070] ------------------------------------------------------ [ 405.700940][T11070] syz.3.1359/11070 is trying to acquire lock: [ 405.707022][T11070] ffff888028962058 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 405.718665][T11070] [ 405.718665][T11070] but task is already holding lock: [ 405.726036][T11070] ffff888028960dd8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 405.735087][T11070] [ 405.735087][T11070] which lock already depends on the new lock. [ 405.735087][T11070] [ 405.745492][T11070] [ 405.745492][T11070] the existing dependency chain (in reverse order) is: [ 405.754507][T11070] [ 405.754507][T11070] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 405.762292][T11070] lock_sock_nested+0x41/0xf0 [ 405.767527][T11070] smc_listen_out+0x202/0x4a0 [ 405.772752][T11070] smc_listen_work+0x5a3/0x50e0 [ 405.778150][T11070] process_one_work+0x9cf/0x1b70 [ 405.783659][T11070] worker_thread+0x6c8/0xf10 [ 405.788811][T11070] kthread+0x3c5/0x780 [ 405.793421][T11070] ret_from_fork+0x48/0x80 [ 405.798441][T11070] ret_from_fork_asm+0x1a/0x30 [ 405.803761][T11070] [ 405.803761][T11070] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 405.813967][T11070] __lock_acquire+0x1173/0x1ba0 [ 405.819377][T11070] lock_acquire+0x179/0x350 [ 405.824439][T11070] __flush_work+0x4e4/0xcc0 [ 405.829489][T11070] __cancel_work_sync+0x10c/0x130 [ 405.835059][T11070] smc_clcsock_release+0x5f/0xe0 [ 405.840547][T11070] __smc_release+0x5c2/0x880 [ 405.845682][T11070] smc_close_non_accepted+0xda/0x200 [ 405.851519][T11070] smc_close_active+0xc3c/0x1070 [ 405.857015][T11070] __smc_release+0x634/0x880 [ 405.862153][T11070] smc_release+0x1fc/0x5f0 [ 405.867118][T11070] __sock_release+0xb3/0x270 [ 405.872258][T11070] sock_close+0x1c/0x30 [ 405.876962][T11070] __fput+0x402/0xb70 [ 405.881478][T11070] task_work_run+0x150/0x240 [ 405.886609][T11070] syscall_exit_to_user_mode+0x27b/0x2a0 [ 405.892812][T11070] do_syscall_64+0xda/0x260 [ 405.897882][T11070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.904323][T11070] [ 405.904323][T11070] other info that might help us debug this: [ 405.904323][T11070] [ 405.914554][T11070] Possible unsafe locking scenario: [ 405.914554][T11070] [ 405.922013][T11070] CPU0 CPU1 [ 405.927380][T11070] ---- ---- [ 405.932753][T11070] lock(sk_lock-AF_SMC/1); [ 405.937313][T11070] lock((work_completion)(&new_smc->smc_listen_work)); [ 405.946788][T11070] lock(sk_lock-AF_SMC/1); [ 405.953967][T11070] lock((work_completion)(&new_smc->smc_listen_work)); [ 405.960919][T11070] [ 405.960919][T11070] *** DEADLOCK *** [ 405.960919][T11070] [ 405.969063][T11070] 3 locks held by syz.3.1359/11070: [ 405.974274][T11070] #0: ffff88807d3d8208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 405.984898][T11070] #1: ffff888028960dd8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x378/0x5f0 [ 405.994479][T11070] #2: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 406.003688][T11070] [ 406.003688][T11070] stack backtrace: [ 406.009591][T11070] CPU: 0 UID: 0 PID: 11070 Comm: syz.3.1359 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 406.009635][T11070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.009656][T11070] Call Trace: [ 406.009668][T11070] [ 406.009681][T11070] dump_stack_lvl+0x116/0x1f0 [ 406.009738][T11070] print_circular_bug+0x275/0x350 [ 406.009792][T11070] check_noncircular+0x14c/0x170 [ 406.009851][T11070] __lock_acquire+0x1173/0x1ba0 [ 406.009913][T11070] lock_acquire+0x179/0x350 [ 406.009965][T11070] ? __flush_work+0x4d0/0xcc0 [ 406.010008][T11070] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.010050][T11070] ? mark_held_locks+0x49/0x80 [ 406.010102][T11070] ? __flush_work+0x4d0/0xcc0 [ 406.010147][T11070] __flush_work+0x4e4/0xcc0 [ 406.010185][T11070] ? __flush_work+0x4d0/0xcc0 [ 406.010228][T11070] ? __pfx___flush_work+0x10/0x10 [ 406.010268][T11070] ? __lock_acquire+0xaa4/0x1ba0 [ 406.010321][T11070] ? __pfx_wq_barrier_func+0x10/0x10 [ 406.010377][T11070] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.010419][T11070] ? do_raw_spin_lock+0x12c/0x2b0 [ 406.010454][T11070] ? __pfx___might_resched+0x10/0x10 [ 406.010506][T11070] __cancel_work_sync+0x10c/0x130 [ 406.010549][T11070] smc_clcsock_release+0x5f/0xe0 [ 406.010596][T11070] __smc_release+0x5c2/0x880 [ 406.010635][T11070] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.010679][T11070] ? __pfx_sock_def_readable+0x10/0x10 [ 406.010717][T11070] smc_close_non_accepted+0xda/0x200 [ 406.010764][T11070] smc_close_active+0xc3c/0x1070 [ 406.010813][T11070] __smc_release+0x634/0x880 [ 406.010852][T11070] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.010896][T11070] smc_release+0x1fc/0x5f0 [ 406.010934][T11070] ? srso_alias_safe_ret+0x6/0x7 [ 406.010976][T11070] __sock_release+0xb3/0x270 [ 406.011022][T11070] ? __pfx_sock_close+0x10/0x10 [ 406.011064][T11070] sock_close+0x1c/0x30 [ 406.011106][T11070] __fput+0x402/0xb70 [ 406.011143][T11070] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.011196][T11070] task_work_run+0x150/0x240 [ 406.011234][T11070] ? __pfx_task_work_run+0x10/0x10 [ 406.011270][T11070] ? __pfx___do_sys_close_range+0x10/0x10 [ 406.011326][T11070] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.011372][T11070] syscall_exit_to_user_mode+0x27b/0x2a0 [ 406.011430][T11070] do_syscall_64+0xda/0x260 [ 406.011488][T11070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.011523][T11070] RIP: 0033:0x7f9a30d8e969 [ 406.011550][T11070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.011584][T11070] RSP: 002b:00007ffcfd3d1218 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 406.011615][T11070] RAX: 0000000000000000 RBX: 0000000000063033 RCX: 00007f9a30d8e969 [ 406.011637][T11070] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 406.011658][T11070] RBP: 00007f9a30fb7ba0 R08: 0000000000000001 R09: 00000008fd3d150f [ 406.011680][T11070] R10: 00007f9a30c00000 R11: 0000000000000246 R12: 00007f9a30fb5fac [ 406.011703][T11070] R13: 00007f9a30fb5fa0 R14: ffffffffffffffff R15: 00007ffcfd3d1330 [ 406.011736][T11070]