last executing test programs: 3m39.997419954s ago: executing program 2 (id=258): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1d8) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x2200c12, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@map_acorn}, {@map_normal}, {@map_off}, {@hide}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@hide}, {@overriderock}, {@unhide}, {@cruft}]}, 0x5, 0xa42, &(0x7f0000001180)="$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") mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1000010, &(0x7f00000010c0)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8) io_setup(0x2, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000280)="cf5216361ce30d9e07c65bbee122f724dcf9dc0045d27919a1d47d3378ac9296db164cdf1159132a51b494bd14d910a5a008ddbbfbe99a3b8218cdcffdea1c9bded42b2929d52348463d02917eecb14c00b595a1f9fcdbe9872d1992e476b7fb497a0c0f2875a20c942fadb0af372d4d0f82530718bc9b7f851f511ff6d7c212c4650c9e8a674160eff73d06835505e011760e6ed4f4bb00e583e55d3a5d5cc72c35e7f15f93c4adf35dc6ba0b5af27bd20cfa1f4bd6069629afe21090500c2387392caa34dba8ed5c4846b6", 0xcc, 0x2, 0x0, 0x2}, &(0x7f0000000400)) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f00000046c0), 0x0, 0x12020, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x800001c) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) 3m30.978860747s ago: executing program 2 (id=272): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30, 0x180}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2) r2 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x2, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4) truncate(0x0, 0x3000000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000001c0)='./bus\x00', r2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x0, 0x2bc, &(0x7f00000015c0)="$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") open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1) 3m22.160043021s ago: executing program 2 (id=285): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x9, 0x2) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021880000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000005c000380580000800400018050000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003"], 0x10c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpgrp(0x0) 3m17.395394612s ago: executing program 2 (id=292): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) eventfd(0x9) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d", 0x17}], 0x1}], 0x1, 0x40800) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) 3m9.933067238s ago: executing program 2 (id=303): io_setup(0x42, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x1000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0xfc30) r6 = fsopen(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd05000000df2502000000000000001e000000080017004e266b69"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @p_u32=0x0}}) fchown(r3, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) 2m56.581188538s ago: executing program 2 (id=317): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x0, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) socket$kcm(0x2a, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmad\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x7, 0x4, 0x6, 0x9, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x1, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x412540) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x2c, 0x62, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) 2m39.673344608s ago: executing program 32 (id=317): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x0, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) socket$kcm(0x2a, 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcmad\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x0, 0x5, 0x3ff, 0x802, 0x1600, 0x7, 0x4, 0x6, 0x9, 0x12d, 0x4, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x1, 0x3c, 0xa, 0x4, 0x8000000, 0xdffffffa]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) syz_open_dev$loop(&(0x7f0000000200), 0x2, 0x412540) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x2c, 0x62, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) 14.012810932s ago: executing program 6 (id=731): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.042645428s ago: executing program 4 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9.040655032s ago: executing program 6 (id=750): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x215882f, 0x0, 0x3, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 8.757638485s ago: executing program 4 (id=751): eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r5, 0x40186e8d, &(0x7f00000002c0)={&(0x7f0000000240)=[{0x10, 0x2, 0x0, {0x1, 0xbe7d}}], 0x1, 0x20, 0x9}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r8 = accept4(r7, 0x0, 0x0, 0x80800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$vhost_msg(r10, &(0x7f0000000580)={0x1, {0x0, 0x0, &(0x7f00000004c0)=""/183, 0x3, 0x1}}, 0x48) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r9, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r3, 0xffffffffffffffff, 0x0) 8.450117375s ago: executing program 5 (id=753): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 7.933757951s ago: executing program 6 (id=754): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x1, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 7.597430761s ago: executing program 0 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) 7.561647184s ago: executing program 4 (id=757): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x8005b1, 0x4) 7.085495513s ago: executing program 0 (id=758): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x50, 0x0, 0xe}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 6.333969761s ago: executing program 1 (id=759): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) 6.194475875s ago: executing program 0 (id=760): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./bus\x00', 0x2, &(0x7f00000012c0), 0xf6, 0x24d, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4000) 6.076921062s ago: executing program 1 (id=761): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xfffffffe}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x58d, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c) 6.048192553s ago: executing program 5 (id=762): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.878083265s ago: executing program 1 (id=763): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") 5.768596555s ago: executing program 5 (id=764): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) open(0x0, 0x8000, 0x112) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1532, &(0x7f0000000780)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 4.681984159s ago: executing program 6 (id=765): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040"], 0xcc}}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 4.646128789s ago: executing program 5 (id=767): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x1000}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x1c, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0x8, 0x144, 0x0, 0x1, [@nested={0x4, 0xf3}]}]}, 0x1c}}, 0x4000080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x578410eb) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000178c61100000500000a44080000090a010400000000000000000a0000040900010073797a310000000008000540000000240900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a00000609d6780073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000020a01020000000000160000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) landlock_restrict_self(r4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000077b116000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b703000007000000850000000600000095007400000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x94) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) epoll_create(0x1ff) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) shutdown(r7, 0x1) 4.592519316s ago: executing program 0 (id=768): syz_open_dev$video(0x0, 0x101, 0xab02) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000400), &(0x7f0000012500)='./file0\x00', 0x210401, &(0x7f0000000540)={[{@data_writeback}, {@quota_off}, {@data_ordered}, {@suiddir}, {@data_writeback}, {@quota_on}, {@ignore_local_fs}, {}, {@noacl}, {@acl}, {@upgrade}, {@noloccookie}, {@barrier}, {@upgrade}, {@localflocks}]}, 0x1, 0x125d8, &(0x7f0000012540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) 4.066997391s ago: executing program 6 (id=771): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) open(0x0, 0x8000, 0x112) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1532, &(0x7f0000000780)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3.965634439s ago: executing program 4 (id=772): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], 0x0, 0x0, 0x0, 0x0, 0x300}) 2.909444409s ago: executing program 5 (id=774): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 2.874994699s ago: executing program 4 (id=775): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.873604858s ago: executing program 6 (id=776): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IdggTrGBa/XdniopWKdpioKpaxLSlQhio29Dos32NhOwRFQxwalKIKmJRL8URRHCNX8kdQiQUADihsJo6h5oFSNSKJEpHWCiELTAAqFSLiavffM3jl352F71/G6n4/knTPzPc87D8+59865AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf8Oxz378b1rF7/3t5Y8+cdXkRw5uuurZT11+4YMhTM09XsnClYEbvjL589suu/3gXRtuufPEFW/sy8vl8TBY+9OV3/lMrPXEyhC+VQmhJw2sHcoCvfn9oVjfq4ZCuCDMB+olpgeyEmnD4fv9IRwO84F6Vd/pD2GoELjyoXvu/nwtcXN/CKtCCNW0jcerWRv9aeCSviwwkAZ29WSBX53M1APf7soCcMbim6H+oj861ZhhdOFyTV5/vYvWsZdWOrzumBhtnu9nm5a4UwV96QNTZ/S0lapjSZTeHse825bBu620nW/ytBW/SOXfUE7Oh6qha/v0jq3Xzu6Lj3SF8fHuZjUt0fP8yPOf3HYq6WXzOowdGF2U1+EXHlh1W/ead99/59pVTx9506FnzrSbPyps0mJ6qVVD/ppbNs9jNOnzZBm8/UrfksZ86Qoh7Pjw77ynVbw0/x9tPf+PL+d429WQO9b64nA2N4+PDMXEc8PZ3BwAAACWjeWw13TX+PfeVig+Uk3qK83/xzo7/h8P+eeT+Wy0x0KYnEscGgnhornHs8DXY3MfGgnhtXOpqcbApiRwLIRXziXW1KtKSqyIJcaSwE+G88BkEjgeA1NJ4GsxcFMS+EwMHE0C22LgWBK4LAbCTOM4fnc4H0fHgf4Y2JJtxKPxLIRfDMfWkm31WL0qAACARZLPDnsb7xbOdTjTDHF6ebS/XYZ4BnbTDNWkhnQGW59WNa2hp10NXe1qqI/7QOvhl2qutKu5dBpGpTHDV375V+8NLZTm/xOt5//VBTpSKR3/D2Hz3N+YuyuPzNbjW6YaMgAAAABnYPB/nvxqq3hp/j/Z2fn/cZ9IdyFzuC/uhtg5EsJEYyCr9vfLgeyo92AeAAAAgOWgfjy+fix8Jr/NTtFO59Pl/FOnmD8e+J9cMH/fse9uadXf0vx/qrPz/wcab7NOHI+9+OJICCsKgR/EXtYCc8Zi4MfvaAzk4z8eN8CNsar8xIR6VTfGEltiYCIJHG5W4of1Ehc1BvInq974ofo4ZvIShQAAAACcdXF3QDwuH8//f91vNny8VbnS/H/LqZ3/PzcPLp3ePzsYwrqeELrTHwbcN5AtDBgDQ5U88b2BrK7upKq/jiV70qqezNf/70nXGHyoP6sqBi563ZHnL6klvtofwrpi4OH33/rmWmJfEqiP48/7Q3hNbbRp499ckTXemzb+pRUhvLoQqFf1oRUh1BrrS6u6p5pfxyCt6p+qIbysEKhX9ZZqCPsDAMtU/K90e/HBvfuv27l1dnZ6zxIm4j78/rBjZnZ6fNuu2e3VJn3anvS5YRmj68tj6vTKN4/lSxS9747NQ+V0b+nx+u8EJ4pt5fvxSycO5vfjd6HeuXFu6G24uzEd8hteX24iFL5JNRty16IMuZyO/RooVjL/JJbqj/n7wmBYce3e6T3jn9i6b9+e9dnfTrNvyP7Gw0zZtlqfbquBhfrWwcuj6WpZidPdVquLlazbd83udXv3X7d25pqtV09fPf3R9W/ZMHHpxMaJt166rjaqiexvm6GuXqjqZKgnb+1wXIs41It7CpWcjU8NCQmJ5ZbYNbi65f/Jpfn/7tbz//ipEz/58/UZmh3/H42H+bPH5w/zb4mBw50e/x9tdjS/fmLAWBI4EAMHHOYHAADg/BAn+XFvZtwr/dM133y6VbnS/P9AZ7//X6T1/+tL11/RbJn/NbHERLP1/9Nl/uvr/x9otv5/usx/ff3/wy/B+v/X1gPJJvmF9f8BAIDzwdlb/7/t8v7pBQJKGdou759eIKCUoe0y/p1eIOCU1/9//D/+4r9CC6X5/02dzf8t3A8AAADnjk//ycf/X6t4af5/uLP5/9lf/y80O/9/rFlgqtnCgNb/AwAAYJlqtv7f6A0DH2xVrjT/P9rZ/D+edtHVkDvW+uJwtqZdSNe0e264/pMBAAAAWB66wvh4b4d5G1ZG3XT6bT6SLwXaKl305B+dOLXz/491Nv9v+F3GFx5YdVv3mnff/+Kda1c9feRNh56ZP/4PAAAALJ1O90sAAAAAAAAAAAAAAAAvvSf//eDGVvHS7//D5rnHm/3+P173L/6+4OUNuWOt7df/y+9f+a7b988tWXjfcAivLwZ2Htx5Qcivzb+6GLj7A2teUUscTEt894nLnqolPpgG3rn2whdqibcngS1xkcRXpoF4VcUXViaBuLziv6WBuD2OpoG+PPC5ldk4Kum2+ulQtq0q6bZ6dCiEkUKgvq2+NZS1UUkHeHMSqA/wY2kgDvBP80BX2qvbB7NexcBQLHrLYNYrAADOWfFbYG/YMTM7PRG/wsfbi3sab6OGJcuuL1db6bD5x/Klyd53x+ahTtLd6XfR+WuN94ZqbQjrS19Xi1kqc6NcnFrabLqXNxlyu9XeupqUS53qputrPqL+bETj23bNbu9tO/CN7bNs6GmbZX1pslPM0jW3SdvVUthULfrSwYg63DYddDne7wrj491Jrt+LwdHQoN0rotPf6xfX+Wv2Kijm+eiJQ79qVV9p/j/a2fy/WhzXC/nFAA7EK+v97Yhl/gEAAGBpfW7Tr78c/733hnsfbpW3NP8f62z+H3fL5IeCs70dx+L1/w+NhDB3af3RLPD12NyHRkJ47VxqKpbILqh/RSwxkQW+HneYrIkltkw1VrUiBo4mgZ8M54FjSeB4DOR7KY6EfFfO3w2H8Oa51ObGErtjidEk8J4YGEsC4zEwkQRWxsBkEnh2ZR6YSgL/GgNhpnFb3bEy31YAAACnIp9n9TbeDek872hPuwyVdhkG2mXoapeh2jJDbzjabBTx/jdiht5KeSvEh3rTZvuTWkoZ4sXwm3a87datH/7/YWPOtGCp6Xj+Qf18g0pjhrve1lMNLZTm/xOdzf8HGm+z1o/H+f/89f+ywA9i974YTx0fi4Efv6MxkO8YOB4nuzfWq5rKS+ST9htjickYGEsCu2NgMgls2ZwHDr+iMZDPtOuNH6o3PpOXKAQAAADgrIs7COJumjj/v2XvZwdblSvN/yc7m//H9gaLjX0m1npiZQjfqsz3ph5YO5QF4n6Mofjz+FcNhXBBYQdHvcT0QFaiL2k4fL8/+4V6X1rVd/qzHx/E+1c+dM/dn68lbu4PYVVh70u9jcerWRv9aeCSviwwkAZ29WSBuOenHvh2VxaAM1bfKxhfUPmpLnWjC5dr8vo7X64Jmg6vtA90gXwL/eZqqZR2uOb7VOtO7Wlruf+WRVN6exzzbluO77ZR77biF6n8G8rJ+VA1dG2f3rH12tl98ZHiL1lLluh5Lv5KtZP0IrwOD5x+b9urv3DW5bcTycfHxMLlFn4dVmJ1X3hg1W3da959/51rVz195E2Hnum4G03EHwrf86l/GfpRYfMutWrIX3PL7vNkyufJsvhvIHl3j3naQgibn/3Sja3ipfn/VGfz/57kds6v48bcOxLCGwob9764+f9wJPscLASyT8mXlQPZIff/HG76yQkAAACLrb67o76/YCa/zU4IT+fJ5fxTIZwcOYX8cX/F5IL5O+33wF9+YFWreGn+v6X1/H9F0k3H/x3/Z4k4/r+gOLzu5PZc2RW9In3gwBntii5Vx5Jw/H9B5/6Bn4Tj/8Hx/wX7d3aO/8cOOP5fdB4f/+85peqWqXP9aSt9S9rtS1cI4ek/+N6jreKl+f/uzub/1v9beNG++vp/W5qt/7e72fp/B6z/BwAALKkmC82l87zS6n2lDOnqfaUMbRcIbLvEYOv1/1qss3ferP9X2qjt1v976uLHfxNaKM3/D3Q2/48vh8Fi68tl/b+xzU2quikGdlsYEAAAgHNRs30TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvLTu+vv/3t4qfu9vL3/0iasmP3Jw01XPfuryCx8MYWbu8UoWrgzc8JXJn9922e0H79pwy50nrnhjNS/Xm9/+/4bcsdYXh0M4XHhkKCaeG67dmQ9c+a7b9/fUEvcNh/D6YmDnwZ0X1BJfGw5hdTFw9wfWvKKWOJiW+O4Tlz1VS3wwDbxz7YUv1BJvzwOVtLv/sDLrbiXt7udXhjBSCNS7+5GVjVXV2/jjPNCVtvGPQ1kbMTAUi355KGsjBmZjiZkVIazrCaE7rerealZVd1rVP1ezqrrTqj5dDeHtIYSetKon+rKqetKRP9iXVRUDF73uyPOX1BKH+0JYVww8/P5b31xLfCwJ1Bv/s74QXlN7yaSNf6M3a7w3bfzm3hBeHULoS0v8sicr0ZeWeLInhJcVAvXGP9wTwv7AeSF++DR8ou3df93OrbOz03uWMNGXt9UfdszMTo9v2zW7vZr0qZlKIX3y+tMf+2PPf3Jb7fZ9d2we6iTdk5frnevyht6GuxvP9d7Hfg0UK5l/Pkr1x/x9YTCsuHbv9J7xT2zdt2/P+uxvp9k3ZH+782i2rdYvl221uljJun3X7F63d/91a2eu2Xr19NXTH13/lg0Tl05snHjrpetqo5rI/i7GUG89+0O9uKdQydn4AJCQkFhuia6GT7eJc/2DvPRFf76jvaE69wFdmlYUs1TmRrkYg950miM+ne8pbUe0vjRxKGXZsECW6xuzbCxNJuZr6c+yzH2vK00Oi411zW3SeL8rjI93N9sOo413i5v3Z2eweR/JN13LdCWEA6ffBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yQ6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBFAQAA//8SOCLS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x1ad941, 0x176) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2.549402761s ago: executing program 3 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) 2.548772905s ago: executing program 4 (id=778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x4, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 2.312458186s ago: executing program 3 (id=779): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000021c0)=[{0x0}, {&(0x7f00000011c0)="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", 0xb2f}], 0x2}}], 0x1, 0x40080) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000600)=0xdfa, 0x4) 2.181370174s ago: executing program 1 (id=780): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x402) ioctl$I2C_FUNCS(r1, 0x705, &(0x7f0000000040)=0xfffffffffffffffc) 2.020930294s ago: executing program 3 (id=781): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0xf9, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r1, @in6={{0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2f2}}, [0x7, 0x2, 0x8005, 0x73, 0x2, 0x793, 0xc5, 0x8, 0x4, 0x0, 0x4000000000d, 0x1, 0x4, 0x40]}, &(0x7f0000000040)=0x100) 1.832162857s ago: executing program 3 (id=782): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40008001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="36d34bc0933fb0", 0x7}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) 1.424989368s ago: executing program 0 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 1.011129633s ago: executing program 5 (id=784): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) socket(0x80000000000000a, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 876.855424ms ago: executing program 0 (id=785): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@private=0xa010101, @local}, 0x8) 541.892831ms ago: executing program 3 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x20008000) 315.510774ms ago: executing program 1 (id=787): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) close(0x3) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 176.729963ms ago: executing program 3 (id=788): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) open(0x0, 0x8000, 0x112) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001cc0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c6e616d65636173653d312c6b6565705f6c6173745f646f74732c756d61736b3d30303030303030303030303030303030303033323030332c646d61736b3d30303030303030303030303030303030303030303430302c696f636861727365743d63703836332c74696d655f6f66667365743d3078303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030332c7379735f747a2c74696d655f6f66667365743d3078303030303030303030303030303030312c757466382c646973636172642c648beb7318c12d146973636172642c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1532, &(0x7f0000000780)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 1 (id=789): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0x10002}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x14, 0x0, 0x1, @local, @local, {[@routing={0x84}], "223427d5c9a46b9fa1417217"}}}}}, 0x0) kernel console output (not intermixed with test programs): Bus Busy Wait 00 [ 331.748327][ T5760] gspca_vc032x: Unknown sensor... [ 331.753657][ T5760] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 332.402714][ T5760] usb 5-1: USB disconnect, device number 8 [ 332.909420][ T7717] netlink: 'syz.0.366': attribute type 4 has an invalid length. [ 333.642233][ T7717] loop0: detected capacity change from 0 to 32768 [ 333.679198][ T7717] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.366 (7717) [ 333.714117][ T5760] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 333.776865][ T7717] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 333.788810][ T7717] BTRFS info (device loop0): using crc32c checksum algorithm [ 333.796386][ T7717] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 334.031532][ T5760] usb 5-1: Using ep0 maxpacket: 16 [ 334.646505][ T5767] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 334.794766][ T7732] loop5: detected capacity change from 0 to 32768 [ 334.865406][ T7732] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 334.912763][ T7717] BTRFS error (device loop0): open_ctree failed: -4 [ 334.943736][ T5767] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.971450][ T5767] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.023236][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.048633][ T7732] XFS (loop5): Ending clean mount [ 335.058617][ T7732] XFS (loop5): Quotacheck needed: Please wait. [ 335.138222][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.150150][ T5767] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.167224][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.264356][ T7732] XFS (loop5): Quotacheck: Done. [ 335.287100][ T7724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 335.500579][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 336.181580][ T30] audit: type=1800 audit(1782834240.363:27): pid=7753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.369" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 336.388325][ T5767] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.456061][ T7724] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 336.549570][ T5640] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.530786][ T7763] loop3: detected capacity change from 0 to 512 [ 337.582766][ T7763] EXT4-fs (loop3): Test dummy encryption mode enabled [ 337.590370][ T7763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 337.642770][ T7763] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.374: bad orphan inode 131083 [ 337.672569][ T7763] loop3: lost filesystem error report for type 5 error -117 [ 337.719571][ T7763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.912889][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.939361][ T7763] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 337.976458][ T5760] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 338.022412][ T5760] usb 5-1: can't read configurations, error -71 [ 338.100926][ T5767] usb 2-1: USB disconnect, device number 10 [ 339.019538][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.755061][ T7780] loop5: detected capacity change from 0 to 40427 [ 339.781502][ T7780] F2FS-fs (loop5): Zoned block device path is missing [ 339.788320][ T7780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 339.803757][ T7780] F2FS-fs (loop5): invalid crc value [ 339.925971][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.939447][ T7780] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 339.970697][ T7780] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 339.977884][ T7780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 339.994225][ T7778] netlink: 'syz.5.373': attribute type 1 has an invalid length. [ 339.998056][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.002753][ T7778] netlink: 'syz.5.373': attribute type 2 has an invalid length. [ 340.100636][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.249706][ T7598] bridge_slave_0: entered allmulticast mode [ 340.528649][ T7598] bridge_slave_0: entered promiscuous mode [ 340.662475][ T7788] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 340.861130][ T7774] bridge0: port 1(syz_tun) entered blocking state [ 340.906632][ T7774] bridge0: port 1(syz_tun) entered disabled state [ 340.942348][ T7774] syz_tun: entered allmulticast mode [ 341.246419][ T7774] syz_tun: entered promiscuous mode [ 341.936868][ T7774] bridge0: port 1(syz_tun) entered blocking state [ 341.943501][ T7774] bridge0: port 1(syz_tun) entered forwarding state [ 342.129581][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.345926][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.390342][ T7598] bridge_slave_1: entered allmulticast mode [ 343.308401][ T7598] bridge_slave_1: entered promiscuous mode [ 346.031133][ T30] audit: type=1326 audit(1782834250.613:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 346.211145][ T7801] loop1: detected capacity change from 0 to 256 [ 346.718997][ T30] audit: type=1326 audit(1782834250.613:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 347.034629][ T7801] FAT-fs (loop1): data area starts beyond volume (32 > 0) [ 347.056617][ T7797] loop0: detected capacity change from 0 to 32768 [ 347.192632][ T7801] FAT-fs (loop1): Can't find a valid FAT filesystem [ 347.226651][ T30] audit: type=1326 audit(1782834250.613:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 347.608430][ T7797] read_mapping_page failed! [ 347.638039][ T30] audit: type=1326 audit(1782834250.613:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 347.663731][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.746226][ T30] audit: type=1326 audit(1782834250.613:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 347.831835][ T7797] jfs_mount: diMount(ipaimap2) failed, rc = -5 [ 347.935040][ T30] audit: type=1326 audit(1782834250.613:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 348.035741][ T7797] Mount JFS Failure: -5 [ 348.353016][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.387'. [ 348.387179][ T7820] misc userio: Invalid payload size [ 348.396915][ T7820] misc userio: No port type given on /dev/userio [ 348.412319][ T7820] misc userio: Invalid payload size [ 349.007213][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.106151][ T7797] jfs_mount failed w/return code = -5 [ 349.115666][ T7821] loop5: detected capacity change from 0 to 256 [ 349.135537][ T7821] exfat: Deprecated parameter 'utf8' [ 349.141113][ T7821] exfat: Deprecated parameter 'namecase' [ 349.467343][ T7821] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 349.731923][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.734214][ T30] audit: type=1326 audit(1782834250.613:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 349.781269][ T30] audit: type=1326 audit(1782834250.613:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 349.868606][ T7823] loop1: detected capacity change from 0 to 256 [ 349.885670][ T30] audit: type=1326 audit(1782834250.613:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 349.956491][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.975389][ T7823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 350.051662][ T30] audit: type=1326 audit(1782834250.613:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 350.101960][ T7828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.621122][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 352.470340][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 352.470361][ T30] audit: type=1326 audit(1782834257.203:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f4a33e1d9 code=0x7ffc0000 [ 352.513053][ T7598] team0: Port device team_slave_0 added [ 352.521044][ T7598] team0: Port device team_slave_1 added [ 352.767970][ T30] audit: type=1326 audit(1782834257.203:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 352.834027][ T30] audit: type=1326 audit(1782834257.553:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7803 comm="syz.3.385" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4a39ce59 code=0x7ffc0000 [ 353.174651][ T7840] loop5: detected capacity change from 0 to 40427 [ 353.191667][ T7840] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 353.199442][ T7840] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 353.214286][ T7840] F2FS-fs (loop5): invalid crc value [ 353.246440][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 353.310930][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 354.098310][ T7840] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 354.168288][ T7840] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 354.175655][ T7840] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 355.150796][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.581600][ T7868] Cannot find add_set index 0 as target [ 356.248009][ T7862] loop4: detected capacity change from 0 to 32768 [ 356.260610][ T7862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.396 (7862) [ 356.284896][ T7862] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 356.296096][ T7862] BTRFS info (device loop4): using sha256 checksum algorithm [ 356.477437][ T7852] bridge0: port 3(syz_tun) entered disabled state [ 356.494099][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.501742][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.540860][ T7862] BTRFS info (device loop4): enabling ssd optimizations [ 356.549149][ T7862] BTRFS info (device loop4): turning on sync discard [ 356.555953][ T7862] BTRFS info (device loop4): enabling free space tree [ 356.635983][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.647820][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.938066][ T7862] netlink: 'syz.4.396': attribute type 29 has an invalid length. [ 356.946091][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 357.966230][ T7888] loop3: detected capacity change from 0 to 32768 [ 357.973682][ T7888] ocfs2: Unknown parameter 'conoacl' [ 358.024220][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.126923][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.406398][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.767022][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.802989][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.919178][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.044379][ T157] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.068397][ T157] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.124555][ T157] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.164955][ T157] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.261157][ T5641] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.371175][ T7896] loop1: detected capacity change from 0 to 256 [ 359.390790][ T7896] exfat: Deprecated parameter 'utf8' [ 359.396405][ T7896] exfat: Deprecated parameter 'namecase' [ 359.886412][ T7896] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 360.185362][ T7598] hsr_slave_0: entered promiscuous mode [ 360.229223][ T7598] hsr_slave_1: entered promiscuous mode [ 360.273103][ T7598] debugfs: 'hsr0' already exists in 'hsr' [ 360.309277][ T7598] Cannot create hsr debugfs directory [ 360.316688][ T7898] loop3: detected capacity change from 0 to 64 [ 360.448113][ T7898] syz.3.403: attempt to access beyond end of device [ 360.448113][ T7898] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 360.743681][ T7898] Buffer I/O error on dev loop3, logical block 512, async page read [ 361.748889][ T7898] syz.3.403: attempt to access beyond end of device [ 361.748889][ T7898] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 361.784878][ T7912] No such timeout policy "syz1" [ 361.803251][ T7898] Buffer I/O error on dev loop3, logical block 56576, async page read [ 361.819212][ T30] audit: type=1800 audit(1782834266.553:97): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="bus" dev="loop3" ino=8 res=0 errno=0 [ 362.598553][ T7917] netlink: 'syz.5.397': attribute type 4 has an invalid length. [ 363.191942][ T36] bridge_slave_1: left allmulticast mode [ 363.225141][ T36] bridge_slave_1: left promiscuous mode [ 363.251442][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.317588][ T7929] netlink: 'syz.5.408': attribute type 1 has an invalid length. [ 363.327876][ T36] bridge_slave_0: left allmulticast mode [ 363.337417][ T36] bridge_slave_0: left promiscuous mode [ 363.351312][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.361796][ T5735] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 363.369901][ T7929] netlink: 211 bytes leftover after parsing attributes in process `syz.5.408'. [ 363.641626][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 364.305166][ T7935] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 364.305537][ T7938] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 364.343708][ T5735] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 364.455672][ T5735] usb 5-1: config 179 has no interface number 0 [ 364.579656][ T5735] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 364.616720][ T5735] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 364.915774][ T5735] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 365.278637][ T7944] loop1: detected capacity change from 0 to 16 [ 365.290767][ T5735] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 365.394376][ T7944] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿ0x000000000000000300000000000000000007' [ 365.504457][ T5735] usb 5-1: config 179 interface 65 has no altsetting 0 [ 365.511454][ T5735] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 365.520616][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.660557][ T7947] loop3: detected capacity change from 0 to 4096 [ 365.680048][ T5735] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 365.681105][ T7947] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 365.729436][ T7947] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096) [ 365.757036][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.805788][ T7947] NILFS (loop3): mounting unchecked fs [ 365.833130][ T4974] input input7: unable to receive magic message: -110 [ 365.863308][ T7947] NILFS (loop3): invalid segment: Checksum error in segment payload [ 365.866671][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.900229][ T7947] NILFS (loop3): unable to fall back to spare super block [ 365.903686][ T4974] input input7: unable to receive magic message: -32 [ 365.930657][ T7947] NILFS (loop3): error -22 while searching super root [ 365.959284][ T4974] input input7: unable to receive magic message: -32 [ 366.303421][ T7950] usb usb7: usbfs: process 7950 (syz.1.412) did not claim interface 0 before use [ 366.430433][ T7920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.551003][ T4974] input input7: unable to receive magic message: -32 [ 366.560625][ T7920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.596517][ T4974] input input7: unable to receive magic message: -32 [ 366.607618][ T7952] fuse: Unknown parameter 'f€' [ 366.671900][ T6076] input input7: unable to receive magic message: -32 [ 366.710371][ T7949] SET target dimension over the limit! [ 366.734305][ T4974] input input7: unable to receive magic message: -32 [ 366.735612][ T4974] input input7: unable to receive magic message: -32 [ 366.880881][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.899750][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.912591][ T36] bond0 (unregistering): Released all slaves [ 367.316320][ T7955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 367.326742][ T7955] block device autoloading is deprecated and will be removed. [ 368.177207][ T5637] usb 5-1: USB disconnect, device number 11 [ 368.997279][ T7967] loop1: detected capacity change from 0 to 512 [ 369.067964][ T7967] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 369.092335][ T7967] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 369.450629][ T7976] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.415'. [ 369.486830][ T7972] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.415'. [ 369.731033][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.416'. [ 369.868959][ T36] batman_adv: batadv0: Interface deactivated: wlan0 [ 370.145606][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 370.225380][ T7991] loop1: detected capacity change from 0 to 2048 [ 370.478079][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 370.491833][ T5646] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 370.520829][ T5781] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 370.536791][ T36] batman_adv: batadv0: Removing interface: wlan0 [ 370.587311][ T29] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 370.679552][ T29] usb 6-1: config 0 has no interface number 0 [ 370.738753][ T5646] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 370.758406][ T29] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 370.889064][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.919729][ T5646] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.973295][ T7992] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 371.088039][ T5646] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 371.200195][ T29] usb 6-1: config 0 descriptor?? [ 371.228040][ T5646] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 371.417155][ T5646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.951051][ T7991] syz.1.420 (7991) used greatest stack depth: 18968 bytes left [ 371.985482][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 372.003562][ T5646] usb 5-1: config 0 descriptor?? [ 372.011269][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 372.037400][ T7996] loop0: detected capacity change from 0 to 22 [ 372.045032][ T7996] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 372.086405][ T5646] usb-storage 5-1:0.0: USB Mass Storage device detected [ 372.109349][ T29] viperboard 6-1:0.143: version 0.00 found at bus 006 address 003 [ 372.120293][ T7996] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 372.144234][ T5781] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 372.157291][ T5646] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 372.213447][ T29] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 372.223573][ T29] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 372.246283][ T5781] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 372.305464][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 372.330372][ T5781] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 372.364301][ T5781] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 372.372076][ T7992] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 372.373863][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.409683][ T29] usb 6-1: USB disconnect, device number 3 [ 372.441292][ T7992] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 372.493801][ T7986] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 372.495267][ T5646] usb 5-1: USB disconnect, device number 12 [ 372.523781][ T7992] Remounting filesystem read-only [ 372.559429][ T5630] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 373.332918][ T8005] input: syz1 as /devices/virtual/input/input8 [ 373.366981][ T5781] usb 4-1: string descriptor 0 read error: -71 [ 373.531807][ T5767] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 373.735491][ T5767] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 373.763289][ T5767] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.788529][ T5767] usb 2-1: config 2 interface 0 has no altsetting 0 [ 373.797196][ T5781] usb 4-1: USB disconnect, device number 2 [ 373.811052][ T5767] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 373.829688][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.062974][ T8022] loop5: detected capacity change from 0 to 32768 [ 374.077594][ T8022] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 374.102436][ T5767] usb 2-1: Product: syz [ 374.142469][ T5767] usb 2-1: Manufacturer: syz [ 374.159521][ T8022] XFS (loop5): Ending clean mount [ 374.173249][ T8022] XFS (loop5): Quotacheck needed: Please wait. [ 374.183599][ T5767] usb 2-1: SerialNumber: syz [ 374.517209][ T8022] XFS (loop5): Quotacheck: Done. [ 374.613488][ T5656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.629503][ T5656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.639134][ T5656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.647648][ T5656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.659697][ T5656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.761315][ T8019] bond1: (slave ip6gretap1): making interface the new active one [ 374.922020][ T8019] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 375.256632][ T5767] usb 2-1: USB disconnect, device number 11 [ 375.823857][ T3340] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 375.909905][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.941651][ T5781] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 376.193990][ T5781] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.274638][ T5781] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 376.304371][ T5781] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 376.316943][ T36] hsr_slave_0: left promiscuous mode [ 376.354419][ T36] hsr_slave_1: left promiscuous mode [ 376.363871][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.381550][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.389326][ T5781] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.399974][ T5640] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 376.416494][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.467636][ T5781] usb 4-1: Product: syz [ 376.471860][ T5646] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 376.519349][ T5781] usb 4-1: Manufacturer: 暋黷Ƌz [ 376.529794][ T5781] usb 4-1: SerialNumber: syz [ 376.578866][ T36] veth1_macvtap: left promiscuous mode [ 376.597639][ T36] veth0_macvtap: left promiscuous mode [ 376.606732][ T36] veth1_vlan: left promiscuous mode [ 376.627252][ T5646] usb 2-1: Using ep0 maxpacket: 32 [ 376.628146][ T5781] usb 4-1: can't set config #1, error -71 [ 376.638627][ T36] veth0_vlan: left promiscuous mode [ 376.657394][ T5646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 376.661562][ T8056] loop4: detected capacity change from 0 to 128 [ 376.699358][ T5781] usb 4-1: USB disconnect, device number 3 [ 376.712265][ T5646] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 376.739766][ T5643] Bluetooth: hci2: command tx timeout [ 376.765100][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.774392][ T5646] usb 2-1: Product: syz [ 376.778714][ T5646] usb 2-1: Manufacturer: syz [ 376.784450][ T5646] usb 2-1: SerialNumber: syz [ 377.039085][ T5646] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 377.150538][ T8064] loop4: detected capacity change from 0 to 128 [ 377.175358][ T8064] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 377.194972][ T8064] FAT-fs (loop4): data area starts beyond volume (33 > 0) [ 377.214245][ T8064] FAT-fs (loop4): Can't find a valid FAT filesystem [ 377.491449][ T5656] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 377.500231][ T5643] Bluetooth: hci7: command 0x1003 tx timeout [ 378.200958][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.563995][ T8070] input: syz1 as /devices/virtual/input/input9 [ 378.886647][ T5646] usb 2-1: invalid MIDI EP [ 378.891494][ T5646] usb 2-1: snd-bcd2000: error during probing [ 378.901023][ T5646] snd-bcd2000 2-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 378.916058][ T5656] Bluetooth: hci2: command tx timeout [ 378.924641][ T30] audit: type=1400 audit(1782834283.593:98): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8065 comm="syz.5.428" [ 378.953993][ T30] audit: type=1326 audit(1782834283.663:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.4.433" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb5739ce59 code=0x0 [ 379.133687][ T5646] usb 2-1: USB disconnect, device number 12 [ 380.524955][ T8088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.001547][ T5656] Bluetooth: hci2: command tx timeout [ 381.886269][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.016726][ T8103] loop5: detected capacity change from 0 to 64 [ 382.566005][ T8103] hfs: bad catalog namelength [ 382.572206][ T8103] hfs: get root inode failed [ 382.765508][ T5646] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 382.971693][ T5656] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 382.984863][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: kworker/u9:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.984903][ T5656] Tainted: [L]=SOFTLOCKUP [ 382.984912][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.984929][ T5656] Workqueue: hci5 hci_rx_work [ 382.984965][ T5656] Call Trace: [ 382.984981][ T5656] [ 382.984992][ T5656] dump_stack_lvl+0xe8/0x150 [ 382.985026][ T5656] sysfs_create_dir_ns+0x271/0x2a0 [ 382.985071][ T5656] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 382.985116][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985146][ T5656] ? do_raw_spin_unlock+0xf5/0x210 [ 382.985189][ T5656] kobject_add_internal+0x622/0xcd0 [ 382.985235][ T5656] kobject_add+0x163/0x240 [ 382.985271][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985300][ T5656] ? preempt_schedule_thunk+0x16/0x40 [ 382.985341][ T5656] ? __pfx_kobject_add+0x10/0x10 [ 382.985373][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985405][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985439][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985468][ T5656] ? get_device_parent+0x366/0x3a0 [ 382.985511][ T5656] device_add+0x3fa/0xb80 [ 382.985552][ T5656] hci_conn_add_sysfs+0xd5/0x210 [ 382.985587][ T5656] le_conn_complete_evt+0xfef/0x1580 [ 382.985639][ T5656] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 382.985681][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985710][ T5656] ? __mutex_unlock_slowpath+0x731/0x900 [ 382.985745][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985774][ T5656] ? skb_pull_data+0xf0/0x200 [ 382.985819][ T5656] hci_le_conn_complete_evt+0x187/0x470 [ 382.985866][ T5656] hci_event_packet+0x67a/0xf10 [ 382.985899][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.985935][ T5656] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 382.985993][ T5656] ? __pfx_hci_event_packet+0x10/0x10 [ 382.986028][ T5656] ? hci_send_to_monitor+0x1a/0x590 [ 382.986060][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.986089][ T5656] ? hci_send_to_monitor+0xe2/0x590 [ 382.986118][ T5656] hci_rx_work+0x3ee/0x1020 [ 382.986161][ T5656] ? process_scheduled_works+0xa20/0x14e0 [ 382.986199][ T5656] process_scheduled_works+0xa8e/0x14e0 [ 382.986270][ T5656] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.986314][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.986344][ T5656] ? assign_work+0x3cf/0x5d0 [ 382.986387][ T5656] worker_thread+0xa47/0xfb0 [ 382.986427][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.986469][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.986498][ T5656] ? __kthread_parkme+0x71/0x1f0 [ 382.986550][ T5656] kthread+0x388/0x470 [ 382.986579][ T5656] ? __pfx_worker_thread+0x10/0x10 [ 382.986614][ T5656] ? __pfx_kthread+0x10/0x10 [ 382.986644][ T5656] ret_from_fork+0x514/0xb70 [ 382.986677][ T5656] ? __pfx_ret_from_fork+0x10/0x10 [ 382.986705][ T5656] ? srso_alias_return_thunk+0x5/0xfbef5 [ 382.986734][ T5656] ? __switch_to+0xc89/0x1420 [ 382.986777][ T5656] ? __pfx_kthread+0x10/0x10 [ 382.986807][ T5656] ret_from_fork_asm+0x1a/0x30 [ 382.986859][ T5656] [ 382.987149][ T5656] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 383.300238][ T5643] Bluetooth: hci2: command tx timeout [ 383.308128][ T5656] Bluetooth: hci5: failed to register connection device [ 383.364919][ T5646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 383.512838][ T5646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 383.523629][ T5646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 383.534709][ T5646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 383.635196][ T5646] usb 2-1: string descriptor 0 read error: -71 [ 383.665097][ T5646] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 383.685138][ T36] team0 (unregistering): Port device team_slave_1 removed [ 383.685148][ T5646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.699025][ T5646] usb 2-1: config 0 descriptor?? [ 383.717453][ T5646] usb 2-1: can't set config #0, error -71 [ 383.753191][ T5646] usb 2-1: USB disconnect, device number 13 [ 383.783612][ T8114] loop1: detected capacity change from 0 to 1024 [ 383.812390][ T36] team0 (unregistering): Port device team_slave_0 removed [ 383.818961][ T8114] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 383.832030][ T8114] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 383.862077][ T8114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.950261][ T8116] loop4: detected capacity change from 0 to 4096 [ 383.990071][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.038563][ T8116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.181161][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.338347][ T5735] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 384.501902][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 384.517102][ T5735] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 384.531676][ T8125] loop4: detected capacity change from 0 to 4096 [ 384.542997][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.559796][ T8125] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 384.582574][ T5735] usb 2-1: Product: syz [ 384.606408][ T5735] usb 2-1: Manufacturer: syz [ 384.630697][ T5735] usb 2-1: SerialNumber: syz [ 384.672200][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 384.714930][ T8098] pim6reg: entered allmulticast mode [ 384.735674][ T5735] usb 2-1: config 0 descriptor?? [ 384.805525][ T5735] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 384.902118][ T8107] pim6reg: left allmulticast mode [ 384.979096][ T5735] pwc: send_video_command error -71 [ 384.998984][ T5735] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 385.015351][ T5735] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 385.149145][ T5735] usb 2-1: USB disconnect, device number 14 [ 386.473446][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 386.482384][ T8143] netlink: 348 bytes leftover after parsing attributes in process `syz.0.449'. [ 386.492022][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 386.500876][ T8143] netlink: 348 bytes leftover after parsing attributes in process `syz.0.449'. [ 386.510988][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 387.115755][ T5781] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 387.331820][ T5781] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.160464][ T5781] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 388.179422][ T5781] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.188899][ T5781] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 388.200999][ T5781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 388.213045][ T5781] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 388.232435][ T5781] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 388.243006][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 388.255751][ T5781] usb 6-1: Product: syz [ 388.259953][ T5781] usb 6-1: Manufacturer: syz [ 388.279518][ T8137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 388.297734][ T5781] cdc_wdm 6-1:1.0: skipping garbage [ 388.320320][ T5781] cdc_wdm 6-1:1.0: skipping garbage [ 388.612399][ T5781] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 388.626107][ T5781] cdc_wdm 6-1:1.0: Unknown control protocol [ 388.854764][ T5646] IPVS: starting estimator thread 0... [ 388.880178][ T5781] usb 6-1: USB disconnect, device number 4 [ 388.893763][ T8167] fuse: Unknown parameter 'use00000000000000000000' [ 388.914859][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 388.981519][ T8168] IPVS: using max 26 ests per chain, 62400 per kthread [ 389.368047][ T36] bridge_slave_1: left allmulticast mode [ 389.399642][ T36] bridge_slave_1: left promiscuous mode [ 389.428809][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.445114][ T8182] loop1: detected capacity change from 0 to 1024 [ 389.454438][ T8178] loop3: detected capacity change from 0 to 512 [ 389.505883][ T8182] EXT4-fs: test_dummy_encryption requires encrypt feature [ 389.519404][ T36] bridge_slave_0: left allmulticast mode [ 389.546945][ T8178] vfat: Unknown parameter '00000000000000000000000' [ 389.577843][ T36] bridge_slave_0: left promiscuous mode [ 389.608139][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.702914][ T5643] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 390.276522][ T5656] Bluetooth: hci5: command 0x0406 tx timeout [ 390.729313][ T8192] loop1: detected capacity change from 0 to 512 [ 390.828282][ T8192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 390.980010][ T8192] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.461: orphan file block 0: bad magic [ 391.022676][ T8191] netlink: 'syz.4.460': attribute type 10 has an invalid length. [ 391.113458][ T8192] loop1: lost filesystem error report for type 5 error -117 [ 391.114510][ T8192] EXT4-fs (loop1): mount failed [ 391.121948][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 391.121990][ C0] EXT4-fs (loop1): initial error at time 1782834295: ext4_init_orphan_info:618 [ 391.122019][ C0] EXT4-fs (loop1): last error at time 1782834295: ext4_init_orphan_info:618 [ 391.460805][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.592386][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.896901][ T36] bond0 (unregistering): Released all slaves [ 393.404549][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.423397][ T8191] bond0: (slave team0): Enslaving as an active interface with an up link [ 393.504751][ T8229] loop3: detected capacity change from 0 to 512 [ 393.512984][ T8229] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 393.560938][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 393.589244][ T8229] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 393.607554][ T8229] EXT4-fs (loop3): 1 truncate cleaned up [ 393.615403][ T8229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.853369][ T30] audit: type=1800 audit(1782834298.583:100): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.468" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 396.178351][ T36] hsr_slave_0: left promiscuous mode [ 396.189573][ T36] hsr_slave_1: left promiscuous mode [ 396.190457][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.197086][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.490448][ T8254] loop1: detected capacity change from 0 to 128 [ 396.534454][ T8254] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.556780][ T8254] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.630719][ T8254] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.477: No space for directory leaf checksum. Please run e2fsck -D. [ 396.649157][ T36] team0 (unregistering): Port device team_slave_1 removed [ 396.649264][ T8254] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.477: checksumming directory block 0 [ 396.680871][ T36] team0 (unregistering): Port device team_slave_0 removed [ 396.714564][ T5630] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.856112][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.950699][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.984757][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.042201][ T8036] bridge_slave_0: entered allmulticast mode [ 399.050264][ T8036] bridge_slave_0: entered promiscuous mode [ 399.065138][ T8279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 399.065666][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.082143][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.091551][ T8036] bridge_slave_1: entered allmulticast mode [ 399.200306][ T8036] bridge_slave_1: entered promiscuous mode [ 399.515792][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.569919][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.608885][ T8303] loop4: detected capacity change from 0 to 512 [ 400.624154][ T8303] EXT4-fs: Ignoring removed oldalloc option [ 400.648314][ T8303] EXT4-fs (loop4): Test dummy encryption mode enabled [ 400.780819][ T8303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.862059][ T8281] loop1: detected capacity change from 0 to 32768 [ 400.930855][ T8281] [ 400.930855][ T8281] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 400.930855][ T8281] [ 400.987397][ T8304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.994937][ T8303] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 401.058864][ T8036] team0: Port device team_slave_0 added [ 401.119307][ T8036] team0: Port device team_slave_1 added [ 401.238723][ T8281] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 401.238723][ T8281] [ 401.319455][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.364225][ T8281] ERROR: (device loop1): remounting filesystem as read-only [ 401.450046][ T8323] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 401.458937][ T8323] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 401.467758][ T8323] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 401.619320][ T8326] netlink: 'syz.3.495': attribute type 4 has an invalid length. [ 401.920228][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.997916][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.132729][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.193642][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.214697][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.350527][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.448048][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 402.485220][ T8331] loop3: detected capacity change from 0 to 256 [ 402.518566][ T8331] exfat: Deprecated parameter 'utf8' [ 402.557856][ T8331] exFAT-fs (loop3): bogus number of FAT structure [ 402.586756][ T8331] exFAT-fs (loop3): failed to read boot sector [ 402.616753][ T8331] exFAT-fs (loop3): failed to recognize exfat type [ 402.657284][ T8337] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 402.657284][ T8337] Please contact the netfilter-devel mailing list or update your nftables rules. [ 402.945500][ T8036] hsr_slave_0: entered promiscuous mode [ 402.948311][ T8341] loop4: detected capacity change from 0 to 2048 [ 403.621575][ T8036] hsr_slave_1: entered promiscuous mode [ 403.650791][ T8036] debugfs: 'hsr0' already exists in 'hsr' [ 403.678652][ T8036] Cannot create hsr debugfs directory [ 403.703137][ T8341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.800020][ T8341] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.349333][ T8361] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 404.359638][ T8361] overlayfs: failed to verify index dir 'upper' xattr [ 404.366511][ T8361] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 405.866590][ T8382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 405.875663][ T8382] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 405.884476][ T8382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 406.039356][ T8384] netlink: 'syz.3.511': attribute type 4 has an invalid length. [ 406.642294][ T8036] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 406.695554][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.705527][ T8036] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 406.727243][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.742897][ T8036] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 406.778732][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.946755][ T8393] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 406.964611][ T8397] loop1: detected capacity change from 0 to 64 [ 407.005932][ T8036] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 407.081235][ T8036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.149435][ T8398] loop0: detected capacity change from 0 to 4096 [ 407.178545][ T8398] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 407.256430][ T8398] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 407.287967][ T8398] ntfs3(loop0): Inode r=b is not in use! [ 407.314286][ T8398] ntfs3(loop0): Failed to load $Extend (-116). [ 407.351070][ T8398] ntfs3(loop0): Failed to initialize $Extend. [ 407.368623][ T8410] /dev/loop0: Can't open blockdev [ 407.578813][ T8398] ntfs3(loop0): ino=1b, mi_enum_attr [ 407.593394][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.678042][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.716754][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.724021][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.803350][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.810547][ T6521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.844665][ T8414] loop3: detected capacity change from 0 to 4096 [ 407.866253][ T8414] EXT4-fs: Ignoring removed orlov option [ 407.928607][ T8414] EXT4-fs (loop3): Test dummy encryption mode enabled [ 408.016150][ T8036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.033460][ T5641] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.041689][ T8414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.056569][ T8417] netlink: 7 bytes leftover after parsing attributes in process `syz.0.523'. [ 408.313152][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.639780][ T8412] loop1: detected capacity change from 0 to 32768 [ 408.747106][ T8412] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.519 (8412) [ 408.868630][ T8409] loop5: detected capacity change from 0 to 40427 [ 408.940671][ T8409] F2FS-fs (loop5): invalid crc value [ 409.049970][ T8412] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 409.128750][ T8412] BTRFS info (device loop1): using blake2b checksum algorithm [ 409.416918][ T8412] BTRFS info (device loop1): enabling ssd optimizations [ 409.463699][ T8412] BTRFS info (device loop1): turning on async discard [ 409.489081][ T8412] BTRFS info (device loop1): enabling free space tree [ 409.505300][ T8409] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 409.522267][ T8412] BTRFS info (device loop1): use zlib compression, level 3 [ 409.654862][ T8409] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 409.827379][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.851796][ T5630] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 409.893480][ T8430] loop3: detected capacity change from 0 to 40427 [ 409.939376][ T8430] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 409.960606][ T8430] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 409.984815][ T5640] syz-executor: attempt to access beyond end of device [ 409.984815][ T5640] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 409.992255][ T8468] loop0: detected capacity change from 0 to 1024 [ 410.008163][ T8430] F2FS-fs (loop3): invalid crc value [ 410.074357][ T5640] CPU: 0 UID: 0 PID: 5640 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 410.074396][ T5640] Tainted: [L]=SOFTLOCKUP [ 410.074405][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.074419][ T5640] Call Trace: [ 410.074429][ T5640] [ 410.074439][ T5640] dump_stack_lvl+0xe8/0x150 [ 410.074474][ T5640] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 410.074521][ T5640] f2fs_write_end_io+0x124b/0x1710 [ 410.074577][ T5640] __submit_merged_bio+0x258/0x6a0 [ 410.074602][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.074631][ T5640] ? rcu_is_watching+0x15/0xb0 [ 410.074667][ T5640] __submit_merged_write_cond+0x3c9/0x4e0 [ 410.074719][ T5640] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 410.074773][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.074816][ T5640] f2fs_write_data_pages+0x2a27/0x36f0 [ 410.074845][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.074874][ T5640] ? __lock_acquire+0x683/0x2cf0 [ 410.074940][ T5640] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 410.074969][ T5640] ? is_bpf_text_address+0x26/0x2b0 [ 410.075010][ T5640] ? arch_stack_walk+0xfb/0x150 [ 410.075083][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075112][ T5640] ? add_lock_to_list+0xc7/0x100 [ 410.075145][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075174][ T5640] ? __lock_acquire+0x13e8/0x2cf0 [ 410.075231][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075259][ T5640] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.075299][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075333][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075361][ T5640] ? do_raw_spin_unlock+0xf5/0x210 [ 410.075397][ T5640] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 410.075429][ T5640] do_writepages+0x338/0x560 [ 410.075458][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075489][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075522][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075551][ T5640] ? do_raw_spin_unlock+0xf5/0x210 [ 410.075590][ T5640] filemap_fdatawrite+0x1e9/0x2f0 [ 410.075623][ T5640] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 410.075693][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075725][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.075758][ T5640] ? do_raw_spin_unlock+0xf5/0x210 [ 410.075798][ T5640] f2fs_sync_dirty_inodes+0x30e/0x830 [ 410.075847][ T5640] f2fs_write_checkpoint+0xa3d/0x2710 [ 410.075878][ T5640] ? __lock_acquire+0x683/0x2cf0 [ 410.075939][ T5640] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 410.075969][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.076069][ T5640] kill_f2fs_super+0x2f6/0x700 [ 410.076109][ T5640] ? __pfx_kill_f2fs_super+0x10/0x10 [ 410.076154][ T5640] ? call_rcu+0x64b/0x8b0 [ 410.076184][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.076213][ T5640] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.076241][ T5640] ? srso_alias_return_thunk+0x5/0xfbef5 [ 410.076285][ T5640] deactivate_locked_super+0xbc/0x130 [ 410.076317][ T5640] cleanup_mnt+0x3d3/0x460 [ 410.076352][ T5640] task_work_run+0x1d9/0x270 [ 410.076387][ T5640] ? __pfx_task_work_run+0x10/0x10 [ 410.076430][ T5640] exit_to_user_mode_loop+0x1fa/0x730 [ 410.076454][ T5640] ? rcu_is_watching+0x15/0xb0 [ 410.076485][ T5640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.076512][ T5640] do_syscall_64+0x353/0x580 [ 410.076541][ T5640] ? trace_irq_disable+0x3b/0x140 [ 410.076587][ T5640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.076612][ T5640] RIP: 0033:0x7f554559e097 [ 410.076634][ T5640] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 410.076654][ T5640] RSP: 002b:00007ffdcb8573b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 410.076680][ T5640] RAX: 0000000000000000 RBX: 00007f55456322ca RCX: 00007f554559e097 [ 410.076697][ T5640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcb857470 [ 410.076713][ T5640] RBP: 00007ffdcb857470 R08: 00007ffdcb858470 R09: 00000000ffffffff [ 410.076730][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcb858500 [ 410.076746][ T5640] R13: 00007f55456322ca R14: 0000000000064102 R15: 00007ffdcb858540 [ 410.076786][ T5640] [ 410.094295][ T5640] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 410.178094][ T8434] loop4: detected capacity change from 0 to 32768 [ 410.576840][ T8468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 410.601096][ T8468] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.628251][ T8468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.530: bg 0: block 112: padding at end of block bitmap is not set [ 410.686590][ T8430] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 410.795309][ T8430] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 410.844846][ T8430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 410.852574][ T5632] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 411.072114][ T11] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 411.181010][ T5629] syz-executor: attempt to access beyond end of device [ 411.181010][ T5629] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 411.299555][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 411.299595][ T5629] Tainted: [L]=SOFTLOCKUP [ 411.299604][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.299618][ T5629] Call Trace: [ 411.299627][ T5629] [ 411.299638][ T5629] dump_stack_lvl+0xe8/0x150 [ 411.299673][ T5629] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 411.299721][ T5629] f2fs_write_end_io+0x124b/0x1710 [ 411.299776][ T5629] __submit_merged_bio+0x258/0x6a0 [ 411.299799][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.299828][ T5629] ? rcu_is_watching+0x15/0xb0 [ 411.299865][ T5629] __submit_merged_write_cond+0x3c9/0x4e0 [ 411.299916][ T5629] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 411.299971][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300015][ T5629] f2fs_write_data_pages+0x2a27/0x36f0 [ 411.300046][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300074][ T5629] ? __lock_acquire+0x683/0x2cf0 [ 411.300140][ T5629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 411.300220][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300249][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300277][ T5629] ? __bfs+0x153/0x290 [ 411.300301][ T5629] ? __pfx_hlock_conflict+0x10/0x10 [ 411.300338][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300379][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300408][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300436][ T5629] ? __lock_acquire+0x13e8/0x2cf0 [ 411.300492][ T5629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 411.300524][ T5629] do_writepages+0x338/0x560 [ 411.300553][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300584][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300617][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300645][ T5629] ? do_raw_spin_unlock+0xf5/0x210 [ 411.300686][ T5629] filemap_fdatawrite+0x1e9/0x2f0 [ 411.300718][ T5629] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 411.300788][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300819][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.300853][ T5629] ? do_raw_spin_unlock+0xf5/0x210 [ 411.300893][ T5629] f2fs_sync_dirty_inodes+0x30e/0x830 [ 411.300944][ T5629] f2fs_write_checkpoint+0xa3d/0x2710 [ 411.300975][ T5629] ? __lock_acquire+0x683/0x2cf0 [ 411.301041][ T5629] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 411.301072][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.301162][ T5629] kill_f2fs_super+0x2f6/0x700 [ 411.301201][ T5629] ? __pfx_kill_f2fs_super+0x10/0x10 [ 411.301247][ T5629] ? call_rcu+0x64b/0x8b0 [ 411.301276][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.301304][ T5629] ? lockdep_hardirqs_on+0x7a/0x110 [ 411.301332][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 411.301375][ T5629] deactivate_locked_super+0xbc/0x130 [ 411.301405][ T5629] cleanup_mnt+0x3d3/0x460 [ 411.301440][ T5629] task_work_run+0x1d9/0x270 [ 411.301473][ T5629] ? __pfx_task_work_run+0x10/0x10 [ 411.301513][ T5629] exit_to_user_mode_loop+0x1fa/0x730 [ 411.301541][ T5629] ? rcu_is_watching+0x15/0xb0 [ 411.301572][ T5629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.301598][ T5629] do_syscall_64+0x353/0x580 [ 411.301626][ T5629] ? trace_irq_disable+0x3b/0x140 [ 411.301670][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.301695][ T5629] RIP: 0033:0x7f7f4a39e097 [ 411.301718][ T5629] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 411.301737][ T5629] RSP: 002b:00007ffc7902b2b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 411.301762][ T5629] RAX: 0000000000000000 RBX: 00007f7f4a4322ca RCX: 00007f7f4a39e097 [ 411.301780][ T5629] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7902b370 [ 411.301795][ T5629] RBP: 00007ffc7902b370 R08: 00007ffc7902c370 R09: 00000000ffffffff [ 411.301812][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7902c400 [ 411.301829][ T5629] R13: 00007f7f4a4322ca R14: 000000000006454f R15: 00007ffc7902c440 [ 411.301868][ T5629] [ 411.725234][ T5629] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 411.751851][ T8036] veth0_vlan: entered promiscuous mode [ 411.824438][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 411.838809][ T11] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.846321][ T11] usb 2-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 411.855589][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.866652][ T11] usb 2-1: config 0 descriptor?? [ 411.868302][ T8036] veth1_vlan: entered promiscuous mode [ 412.120124][ T8036] veth0_macvtap: entered promiscuous mode [ 412.151247][ T8036] veth1_macvtap: entered promiscuous mode [ 412.179155][ T8494] loop0: detected capacity change from 0 to 256 [ 412.186596][ T8494] exfat: Deprecated parameter 'utf8' [ 412.192425][ T8494] exfat: Deprecated parameter 'namecase' [ 412.208045][ T8494] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 412.337752][ T11] hid_parser_main: 227 callbacks suppressed [ 412.337779][ T11] apple 0003:05AC:026C.0002: unknown main item tag 0x7 [ 412.378077][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.387159][ T11] apple 0003:05AC:026C.0002: unknown main item tag 0x0 [ 412.414311][ T11] apple 0003:05AC:026C.0002: unknown main item tag 0x1 [ 412.454462][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.484000][ T11] apple 0003:05AC:026C.0002: reserved main item tag 0xd [ 412.525432][ T8502] loop4: detected capacity change from 0 to 2048 [ 412.543634][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.568253][ T8501] loop0: detected capacity change from 0 to 4096 [ 412.589490][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.613945][ T8503] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.635019][ T8501] ntfs3(loop0): ino=0, mi_enum_attr [ 412.655223][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.668735][ T8501] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 412.691279][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.709537][ T11] apple 0003:05AC:026C.0002: hidraw0: USB HID v0.77 Device [HID 05ac:026c] on usb-dummy_hcd.1-1/input0 [ 412.729328][ T8501] ntfs3(loop0): volume is dirty and "force" flag is not set! [ 412.804980][ T11] usb 2-1: USB disconnect, device number 15 [ 413.068904][ T8505] loop5: detected capacity change from 0 to 32768 [ 413.135461][ T8505] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 413.217494][ T8505] XFS (loop5): Ending clean mount [ 413.232525][ T8505] XFS (loop5): Quotacheck needed: Please wait. [ 414.231834][ T6521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.548853][ T5760] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 414.617894][ T6521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.772918][ T8527] loop0: detected capacity change from 0 to 512 [ 414.784442][ T8518] fido_id[8518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 414.801517][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 414.803917][ T8527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.817921][ T5760] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.844147][ T8527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 414.869418][ T5760] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 414.869453][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.871965][ T8505] XFS (loop5): Quotacheck: Done. [ 414.919606][ T5760] usb 2-1: config 0 descriptor?? [ 415.033349][ T8527] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 415.121986][ T3364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.136543][ T3364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.138702][ T8527] EXT4-fs (loop0): 1 truncate cleaned up [ 415.158233][ T8527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.478551][ T30] audit: type=1800 audit(1782834319.973:101): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.540" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=4430 res=0 errno=0 [ 415.928343][ T5640] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.004331][ T5760] kone 0003:1E7D:2CED.0003: reserved main item tag 0xd [ 416.025014][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.073207][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.083914][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.130543][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.159532][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.197898][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.228464][ T5760] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 416.330720][ T5760] kone 0003:1E7D:2CED.0003: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 416.442955][ T5760] kone 0003:1E7D:2CED.0003: couldn't init struct kone_device [ 416.467377][ T8549] loop4: detected capacity change from 0 to 32768 [ 416.529882][ T8549] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 416.530840][ T5760] kone 0003:1E7D:2CED.0003: couldn't install mouse [ 416.636476][ T5760] kone 0003:1E7D:2CED.0003: probe with driver kone failed with error -5 [ 416.653602][ T5781] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 416.920804][ T5781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 417.206433][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.442569][ T8549] XFS (loop4): Ending clean mount [ 417.453136][ T8549] XFS (loop4): Quotacheck needed: Please wait. [ 417.499798][ T5760] usb 2-1: USB disconnect, device number 16 [ 417.563542][ T5781] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 417.651749][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.662031][ T8549] XFS (loop4): Quotacheck: Done. [ 417.885514][ T5781] usb 4-1: Product: syz [ 417.899152][ T5781] usb 4-1: Manufacturer: syz [ 417.906398][ T5781] usb 4-1: SerialNumber: syz [ 418.092335][ T30] audit: type=1800 audit(1782834322.743:102): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.549" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 418.358963][ T5632] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.521152][ T8586] loop5: detected capacity change from 0 to 256 [ 418.549812][ T5781] usb 4-1: USB disconnect, device number 4 [ 418.608325][ T8586] exfat: Deprecated parameter 'utf8' [ 418.628634][ T5641] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 418.645718][ T8586] exfat: Deprecated parameter 'namecase' [ 418.778486][ T8575] fido_id[8575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 418.856877][ T8591] loop6: detected capacity change from 0 to 512 [ 419.074497][ T8586] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 419.388432][ T8593] loop0: detected capacity change from 0 to 32768 [ 419.464960][ T8591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.486938][ T8593] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 419.632451][ T30] audit: type=1800 audit(1782834324.353:103): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.557" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 419.655173][ T8593] XFS (loop0): Ending clean mount [ 419.668309][ T8593] XFS (loop0): Quotacheck needed: Please wait. [ 419.835679][ T8593] XFS (loop0): Quotacheck: Done. [ 420.325341][ T30] audit: type=1800 audit(1782834324.933:104): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.554" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 420.750103][ T5632] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 420.854708][ T8036] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.208884][ T5643] Bluetooth: hci2: Malformed LE Event: 0x0d [ 422.686191][ T8668] loop1: detected capacity change from 0 to 256 [ 422.761762][ T8668] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 422.824074][ T8668] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 422.941497][ T5760] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 423.042130][ T30] audit: type=1800 audit(1782834327.783:105): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.577" name="file1" dev="loop1" ino=1048664 res=0 errno=0 [ 423.142580][ T5760] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 423.175204][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.233428][ T8657] loop6: detected capacity change from 0 to 32768 [ 423.245543][ T5760] usb 4-1: config 0 descriptor?? [ 423.303345][ T5760] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 423.378160][ T8684] tipc: Started in network mode [ 423.411533][ T8684] tipc: Node identity e6e58c6d3c37, cluster identity 4711 [ 423.439939][ T8684] tipc: Enabled bearer , priority 18 [ 423.625701][ T8661] loop5: detected capacity change from 0 to 32768 [ 423.754045][ T8661] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 423.903329][ T5760] gspca_sunplus: reg_w_riv err -71 [ 423.912277][ T5760] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 423.935379][ T5760] usb 4-1: USB disconnect, device number 5 [ 424.043892][ T8661] XFS (loop5): Ending clean mount [ 424.108504][ T8661] XFS (loop5): Quotacheck needed: Please wait. [ 424.319347][ T8661] XFS (loop5): Quotacheck: Done. [ 424.547012][ T5640] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.564943][ T5760] tipc: Node number set to 3671231597 [ 424.906195][ T8719] loop3: detected capacity change from 0 to 4096 [ 425.161803][ T8719] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 425.175436][ T8727] netlink: 36 bytes leftover after parsing attributes in process `syz.1.591'. [ 425.290598][ T8719] ntfs3(loop3): Failed to load $Extend (-22). [ 425.320960][ T8719] ntfs3(loop3): Failed to initialize $Extend. [ 425.681623][ T5735] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 425.717870][ T5646] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 425.881431][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 425.891048][ T5735] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.907369][ T5646] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 425.912634][ T5735] usb 2-1: config 179 has no interface number 0 [ 425.954208][ T5646] usb 6-1: config 0 has no interface number 0 [ 425.963928][ T5735] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 426.002606][ T5646] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 426.026861][ T5735] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 426.079267][ T5735] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 426.121502][ T5646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.137752][ T5646] usb 6-1: Product: syz [ 426.156199][ T5646] usb 6-1: Manufacturer: syz [ 426.166760][ T5646] usb 6-1: SerialNumber: syz [ 426.192581][ T5646] usb 6-1: config 0 descriptor?? [ 426.229736][ T5735] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 426.287884][ T5735] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 426.396635][ T8752] overlayfs: missing 'workdir' [ 426.658479][ T8756] netlink: 'syz.6.596': attribute type 4 has an invalid length. [ 427.238759][ T5735] usb 2-1: config 179 interface 65 has no altsetting 0 [ 427.258842][ T5735] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 427.492413][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.659485][ T5735] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 427.704326][ T5646] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 427.733696][ T5646] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 427.760118][ T5646] asix 6-1:0.251: probe with driver asix failed with error -5 [ 427.811935][ T4974] input input10: unable to receive magic message: -110 [ 427.826051][ T5646] usb 6-1: USB disconnect, device number 5 [ 427.892338][ T4974] input input10: unable to receive magic message: -32 [ 428.276157][ T8742] loop4: detected capacity change from 0 to 32768 [ 428.293816][ T8742] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.594 (8742) [ 428.360236][ T4974] input input10: unable to receive magic message: -71 [ 428.406323][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 428.416846][ T4974] input input10: unable to receive magic message: -71 [ 428.446559][ T8765] loop6: detected capacity change from 0 to 32768 [ 428.479538][ T4974] input input10: unable to receive magic message: -71 [ 428.526737][ T8765] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 428.574703][ T8742] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 428.603466][ T8742] BTRFS info (device loop4): using blake2b checksum algorithm [ 428.631212][ T4974] input input10: unable to receive magic message: -71 [ 428.676146][ T8765] XFS (loop6): Ending clean mount [ 428.688723][ T8765] XFS (loop6): Quotacheck needed: Please wait. [ 428.825090][ T5646] hid-generic 0005:0C45:1010.0004: item fetching failed at offset 0/1 [ 428.878436][ T5646] hid-generic 0005:0C45:1010.0004: probe with driver hid-generic failed with error -22 [ 429.228337][ T8765] XFS (loop6): Quotacheck: Done. [ 430.220986][ T30] audit: type=1800 audit(1782834334.343:106): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.599" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4430 res=0 errno=0 [ 430.331483][ T5735] usb 2-1: USB disconnect, device number 17 [ 430.331893][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 430.399847][ T8036] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.630391][ T8742] BTRFS error (device loop4): open_ctree failed: -4 [ 431.173677][ T5656] Bluetooth: hci5: command 0x0406 tx timeout [ 432.119943][ T8826] overlayfs: missing 'workdir' [ 432.401736][ T8827] netlink: 'syz.6.611': attribute type 4 has an invalid length. [ 433.102297][ T5646] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 433.306004][ T5646] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 433.327461][ T5646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.362025][ T5646] usb 5-1: Product: syz [ 433.370829][ T5646] usb 5-1: Manufacturer: syz [ 433.414733][ T5646] usb 5-1: SerialNumber: syz [ 433.432215][ T5646] usb 5-1: config 0 descriptor?? [ 433.457660][ T8808] loop1: detected capacity change from 0 to 32768 [ 433.467783][ T8810] loop5: detected capacity change from 0 to 32768 [ 433.498738][ T8808] btrfs: Deprecated parameter 'usebackuproot' [ 433.513511][ T8810] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.609 (8810) [ 433.545169][ T8808] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 433.564728][ T8808] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.608 (8808) [ 433.632898][ T8808] BTRFS error (device loop1): open_ctree failed: -4 [ 433.649744][ T8810] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 433.707771][ T8810] BTRFS info (device loop5): using sha256 checksum algorithm [ 433.769579][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 433.784471][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 433.786162][ T8846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.819673][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 433.820041][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 433.860718][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 433.895511][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 433.907769][ T8846] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 433.927334][ T5646] usb 5-1: USB disconnect, device number 13 [ 433.981823][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 433.982179][ T8810] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 434.142517][ T8846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.193890][ T8810] BTRFS error (device loop5): open_ctree failed: -12 [ 434.202478][ T8846] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 434.393792][ T8846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.439266][ T8846] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 434.489758][ T8846] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 434.526614][ T8846] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 434.682736][ T8846] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 434.758189][ T8846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.768215][ T8846] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 434.882312][ T8846] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 435.365018][ T8892] loop4: detected capacity change from 0 to 32768 [ 435.646682][ T8892] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 435.801510][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 435.930757][ T8892] XFS (loop4): Ending clean mount [ 435.944841][ T5646] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 435.964844][ T8892] XFS (loop4): Quotacheck needed: Please wait. [ 436.172975][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 436.179457][ T5646] usb 4-1: Using ep0 maxpacket: 16 [ 436.337355][ T8915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.431454][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 436.502494][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 436.888414][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 436.901302][ T5646] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.902220][ T8892] XFS (loop4): Quotacheck: Done. [ 437.129261][ T5646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 437.199672][ T5646] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 437.247794][ T5646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.572811][ T5646] usb 4-1: config 0 descriptor?? [ 437.835172][ T5641] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 437.851595][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 438.078231][ T5646] hid_parser_main: 7 callbacks suppressed [ 438.078258][ T5646] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 438.137854][ T5646] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 438.161125][ T5646] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 438.260624][ T5643] Bluetooth: hci3: command 0x0406 tx timeout [ 438.480976][ T5646] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 438.513027][ T5643] Bluetooth: hci4: command 0x0406 tx timeout [ 438.591949][ T5643] Bluetooth: hci5: command 0x0406 tx timeout [ 438.853663][ T5646] usb 4-1: USB disconnect, device number 6 [ 438.971438][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.310904][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.450091][ T8939] loop1: detected capacity change from 0 to 32768 [ 439.480369][ T8939] btrfs: Deprecated parameter 'usebackuproot' [ 439.515580][ T8939] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 439.568860][ T8939] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.647 (8939) [ 439.642658][ T8951] loop6: detected capacity change from 0 to 256 [ 439.655498][ T8936] loop4: detected capacity change from 0 to 32768 [ 439.677293][ T8951] exfat: Deprecated parameter 'utf8' [ 439.679760][ T8939] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 439.707873][ T8939] BTRFS info (device loop1): using crc32c checksum algorithm [ 439.729072][ T8951] exFAT-fs (loop6): bogus number of FAT structure [ 439.757200][ T8958] loop5: detected capacity change from 0 to 64 [ 439.766114][ T8951] exFAT-fs (loop6): failed to read boot sector [ 439.773284][ T8951] exFAT-fs (loop6): failed to recognize exfat type [ 439.826234][ T8936] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 439.981683][ T5735] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 440.296472][ T30] audit: type=1800 audit(1782834345.023:107): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.654" name="file1" dev="loop5" ino=21 res=0 errno=0 [ 440.733985][ T5656] Bluetooth: hci5: command 0x0406 tx timeout [ 440.745176][ T3364] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 440.789664][ T5735] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 440.808060][ T8936] XFS (loop4): Ending clean mount [ 440.865648][ T8939] BTRFS error (device loop1): failed to load root extent [ 440.883077][ T5735] usb 4-1: config 0 has no interface number 0 [ 440.895950][ T8939] BTRFS warning (device loop1): try to load backup roots slot 1 [ 440.929462][ T57] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x0d7f73a8 level 0 [ 440.945191][ T8936] XFS (loop4): Quotacheck needed: Please wait. [ 440.953574][ T5735] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 440.979542][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.999753][ T8939] BTRFS warning (device loop1): couldn't read tree root [ 441.012427][ T5735] usb 4-1: Product: syz [ 441.027620][ T8939] BTRFS warning (device loop1): try to load backup roots slot 2 [ 441.033875][ T5735] usb 4-1: Manufacturer: syz [ 441.054931][ T5656] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.101650][ T36] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 441.126552][ T8939] BTRFS warning (device loop1): couldn't read tree root [ 441.142430][ T8939] BTRFS warning (device loop1): try to load backup roots slot 3 [ 441.167153][ T48] BTRFS warning (device loop1): checksum verify failed on logical 5251072 mirror 1 wanted 0x6f2ebd38 found 0x30f47726 level 0 [ 441.192390][ T8939] BTRFS error (device loop1): failed to load root extent [ 441.346549][ T8986] loop6: detected capacity change from 0 to 32768 [ 441.358611][ T5735] usb 4-1: SerialNumber: syz [ 441.379429][ T5735] usb 4-1: config 0 descriptor?? [ 441.426601][ T8939] BTRFS error (device loop1): open_ctree failed: -5 [ 441.435478][ T8986] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 441.530861][ T8986] XFS (loop6): Ending clean mount [ 441.542014][ T8986] XFS (loop6): Quotacheck needed: Please wait. [ 441.607246][ T8936] XFS (loop4): Quotacheck: Done. [ 441.650048][ T8986] XFS (loop6): Quotacheck: Done. [ 441.656190][ T5735] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 441.781591][ T5656] Bluetooth: hci4: command 0x0406 tx timeout [ 441.896654][ T5641] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 441.899580][ T5735] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 442.245412][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.467691][ T29] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 442.499904][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.524898][ T5735] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 442.533405][ T5735] usb 4-1: media controller created [ 442.552127][ T5735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.563035][ T8036] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 442.587273][ T29] usb 6-1: Product: syz [ 442.617874][ T29] usb 6-1: Manufacturer: syz [ 442.630601][ T5735] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 442.654047][ T29] usb 6-1: SerialNumber: syz [ 442.706449][ T29] usb 6-1: config 0 descriptor?? [ 442.954445][ T5735] usb 4-1: USB disconnect, device number 7 [ 443.381675][ T29] usb 6-1: Firmware version (0.0) predates our first public release. [ 443.420565][ T29] usb 6-1: Please update to version 0.2 or newer [ 443.489331][ T9023] loop4: detected capacity change from 0 to 32768 [ 443.496912][ T9023] btrfs: Deprecated parameter 'usebackuproot' [ 443.503025][ T9023] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 443.529442][ T9031] loop1: detected capacity change from 0 to 512 [ 443.546442][ T9023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.660 (9023) [ 443.564306][ T9031] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 443.646975][ T9031] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.680: bad orphan inode 13 [ 443.657383][ T5735] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 443.685205][ T9031] loop1: lost filesystem error report for type 5 error -117 [ 443.685678][ T9031] ext4_test_bit(bit=12, block=18) = 1 [ 443.693092][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 443.693116][ C0] EXT4-fs (loop1): last error at time 1782834348: ext4_orphan_get:1425 [ 443.728431][ T9031] is_bad_inode(inode)=0 [ 443.737005][ T9023] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 443.746024][ T9031] NEXT_ORPHAN(inode)=0 [ 443.750240][ T29] usb 6-1: USB disconnect, device number 6 [ 443.757423][ T9023] BTRFS info (device loop4): using crc32c checksum algorithm [ 443.884252][ T9031] max_ino=32 [ 443.889891][ T9031] i_nlink=1 [ 444.473965][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 444.493930][ T14] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 444.506275][ T9031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 444.515861][ T5735] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 444.532273][ T9023] BTRFS error (device loop4): failed to load root extent [ 444.539413][ T9023] BTRFS warning (device loop4): try to load backup roots slot 1 [ 444.549007][ T48] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 444.568798][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.577865][ T9023] BTRFS warning (device loop4): couldn't read tree root [ 444.584957][ T9023] BTRFS warning (device loop4): try to load backup roots slot 2 [ 444.593490][ T14] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 444.612120][ T9023] BTRFS warning (device loop4): couldn't read tree root [ 444.619159][ T9023] BTRFS warning (device loop4): try to load backup roots slot 3 [ 444.628183][ T9031] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 444.668044][ T5735] usb 4-1: config 0 descriptor?? [ 444.677845][ T9023] BTRFS info (device loop4): rebuilding free space tree [ 444.699028][ T9023] BTRFS info (device loop4): checking UUID tree [ 444.708779][ T9023] BTRFS info (device loop4): enabling ssd optimizations [ 444.719336][ T9023] BTRFS info (device loop4): turning on async discard [ 444.720644][ T9031] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.680: bg 0: block 248: padding at end of block bitmap is not set [ 444.726882][ T9023] BTRFS info (device loop4): enabling free space tree [ 444.747914][ T9023] BTRFS info (device loop4): force clearing of disk cache [ 444.755480][ T9023] BTRFS info (device loop4): enabling auto defrag [ 444.761979][ T9023] BTRFS info (device loop4): trying to use backup root at mount time [ 444.770046][ T9023] BTRFS info (device loop4): use zstd compression, level 3 [ 444.798656][ T9031] Quota error (device loop1): write_blk: dquota write failed [ 444.810904][ T9031] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 444.821593][ T9031] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.680: Failed to acquire dquot type 1 [ 444.853847][ T9052] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 444.883103][ T9052] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 444.916452][ T9052] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.680: Failed to acquire dquot type 1 [ 445.837503][ T29] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 445.903606][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 445.962552][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 445.971023][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 445.971413][ T36] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 445.978121][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 445.995657][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.002780][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.009723][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.016921][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.022417][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 446.023910][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.042538][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.049505][ T5735] hid_mf 0003:0079:1801.0006: unknown main item tag 0x0 [ 446.052941][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 446.067386][ T36] loop1: lost filesystem error report for type 5 error -117 [ 446.071146][ T5735] hid_mf 0003:0079:1801.0006: hidraw0: USB HID v7e.ff Device [HID 0079:1801] on usb-dummy_hcd.3-1/input0 [ 446.078816][ T5641] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 446.101192][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 446.116579][ T29] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 446.150993][ T5735] hid_mf 0003:0079:1801.0006: Invalid report, this should never happen! [ 446.159181][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.187030][ T5735] hid_mf 0003:0079:1801.0006: Force feedback init failed. [ 446.231148][ T29] usb 6-1: config 0 descriptor?? [ 446.257094][ T9056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 446.263109][ T5735] usb 4-1: USB disconnect, device number 8 [ 446.372418][ T9064] netlink: 'syz.0.672': attribute type 11 has an invalid length. [ 446.380216][ T9060] fido_id[9060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 446.585585][ T5781] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 446.753020][ T5781] usb 2-1: Using ep0 maxpacket: 32 [ 446.768139][ T5781] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 446.787303][ T5781] usb 2-1: config 0 has no interface number 0 [ 446.799551][ T9070] loop4: detected capacity change from 0 to 128 [ 446.811133][ T5781] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.852478][ T29] hid-corsair-void 0003:1B1C:1B29.0007: hidraw0: USB HID v0.09 Device [HID 1b1c:1b29] on usb-dummy_hcd.5-1/input0 [ 446.886246][ T5781] usb 2-1: config 0 interface 85 has no altsetting 0 [ 447.013023][ T5797] hid-corsair-void 0003:1B1C:1B29.0007: failed to request firmware (reason: -71) [ 447.029430][ T29] usb 6-1: USB disconnect, device number 7 [ 447.089191][ T5646] hid-corsair-void 0003:1B1C:1B29.0007: failed to request battery (reason: -19) [ 447.515486][ T5781] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 447.541457][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.610147][ T5781] usb 2-1: Product: syz [ 447.660730][ T5781] usb 2-1: Manufacturer: syz [ 447.694706][ T5781] usb 2-1: SerialNumber: syz [ 447.728060][ T5781] usb 2-1: config 0 descriptor?? [ 447.812374][ T9074] fido_id[9074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 448.067799][ T9083] loop3: detected capacity change from 0 to 256 [ 448.157947][ T5643] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 448.364479][ T5781] appletouch 2-1:0.85: Geyser mode initialized. [ 448.398650][ T5781] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input11 [ 448.544025][ T9076] loop6: detected capacity change from 0 to 32768 [ 448.561461][ T9090] loop3: detected capacity change from 0 to 1024 [ 448.603663][ T9090] EXT4-fs: Ignoring removed oldalloc option [ 448.617888][ T9090] EXT4-fs: Ignoring removed oldalloc option [ 448.655309][ T9076] jfs_mkdir: dtInsert returned -EIO [ 448.662408][ T9090] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 448.678200][ T9094] loop5: detected capacity change from 0 to 512 [ 448.679537][ T9076] ERROR: (device loop6): jfs_mkdir: [ 448.679537][ T9076] [ 448.689729][ T5781] usb 2-1: USB disconnect, device number 18 [ 448.710147][ T9076] ERROR: (device loop6): remounting filesystem as read-only [ 448.738488][ T9076] jfs_mkdir: dtInsert returned -EIO [ 448.745335][ T9076] ERROR: (device loop6): jfs_mkdir: [ 448.745335][ T9076] [ 448.754645][ T9076] ERROR: (device loop6): remounting filesystem as read-only [ 448.782359][ T9090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.828409][ T9094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 448.877313][ T9094] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.918036][ T5781] appletouch 2-1:0.85: input: appletouch disconnected [ 448.942570][ T5646] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 448.990246][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.065293][ T9094] loop5: detected capacity change from 0 to 128 [ 449.111710][ T5646] usb 5-1: Using ep0 maxpacket: 16 [ 449.133867][ T5646] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.148867][ T9094] befs: (loop5): No write support. Marking filesystem read-only [ 449.180348][ T5646] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.226326][ T5646] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.239425][ T9094] befs: (loop5): invalid magic header [ 449.259299][ T5646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.291603][ T5646] usb 5-1: Product: syz [ 449.304920][ T5646] usb 5-1: Manufacturer: syz [ 449.319832][ T5646] usb 5-1: SerialNumber: syz [ 449.390720][ T5646] usb 5-1: 0:2 : does not exist [ 449.793684][ T5646] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 449.884493][ T9126] loop1: detected capacity change from 0 to 256 [ 449.907001][ T9126] exfat: Deprecated parameter 'utf8' [ 449.940824][ T9126] exFAT-fs (loop1): bogus number of FAT structure [ 449.979624][ T9126] exFAT-fs (loop1): failed to read boot sector [ 450.006963][ T9126] exFAT-fs (loop1): failed to recognize exfat type [ 450.062380][ T5781] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 450.241607][ T5781] usb 4-1: Using ep0 maxpacket: 8 [ 450.262480][ T5781] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.286547][ T9130] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 450.302838][ T5646] usb 5-1: USB disconnect, device number 14 [ 450.348266][ T5781] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.367293][ T5781] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.066146][ T5650] udevd[5650]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.136656][ T5781] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.150569][ T5781] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 451.159769][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.261951][ T5767] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 451.393570][ T5781] usb 4-1: GET_CAPABILITIES returned 0 [ 451.415814][ T5781] usbtmc 4-1:16.0: can't read capabilities [ 451.441822][ T5767] usb 7-1: Using ep0 maxpacket: 16 [ 451.449979][ T5767] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.472194][ T5767] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 451.493897][ T5767] usb 7-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 451.504850][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.513568][ T5767] usb 7-1: Product: syz [ 451.517805][ T5767] usb 7-1: Manufacturer: syz [ 451.522805][ T5767] usb 7-1: SerialNumber: syz [ 451.538282][ T5767] usb 7-1: config 0 descriptor?? [ 451.543508][ T5735] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 451.609606][ T5767] usb 4-1: USB disconnect, device number 9 [ 451.722556][ T5735] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 451.732184][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.741222][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.742308][ T9145] loop4: detected capacity change from 0 to 32768 [ 451.753189][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.795904][ T9132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.799297][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.807697][ T9145] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 451.823442][ T5797] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 451.825443][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.838687][ T9132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.844934][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.856529][ T5895] usb 7-1: USB disconnect, device number 2 [ 451.878020][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.887680][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.904959][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.914922][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.925025][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.936769][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.946082][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.955842][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.970251][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 451.979847][ T9145] XFS (loop4): Ending clean mount [ 451.979945][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.988306][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 451.994940][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.015710][ T5797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.017575][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 452.029310][ T9145] XFS (loop4): Quotacheck needed: Please wait. [ 452.044992][ T5797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.055155][ T5797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.062791][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.078805][ T5797] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.093758][ T9145] XFS (loop4): Quotacheck: Done. [ 452.094352][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.104105][ T5797] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.115906][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 452.127843][ T5735] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.137078][ T5735] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.148517][ T5735] usb 6-1: config 0 interface 0 has no altsetting 0 [ 452.170552][ T5735] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 452.186187][ T5735] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 452.210391][ T5735] usb 6-1: Product: syz [ 452.222278][ T5735] usb 6-1: Manufacturer: syz [ 452.240337][ T5735] usb 6-1: SerialNumber: syz [ 452.250517][ T5735] usb 6-1: config 0 descriptor?? [ 452.312290][ T5735] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 452.331722][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.809153][ T9156] loop3: detected capacity change from 0 to 32768 [ 452.865052][ T30] audit: type=1800 audit(1782834357.583:108): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.702" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0 [ 452.914441][ T5797] usb 2-1: GET_CAPABILITIES returned 0 [ 452.929848][ T9156] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 452.938290][ T9156] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 452.962907][ T5895] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 452.972515][ T5797] usbtmc 2-1:16.0: can't read capabilities [ 453.007621][ T9156] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 453.024228][ T5646] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 453.033973][ T5646] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 453.090567][ T5646] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 453.099165][ T5646] gfs2: fsid=syz:syz.0: jid=0: Done [ 453.105585][ T9156] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 453.196813][ T9161] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 453.219678][ T5641] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 453.219813][ T9161] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 453.239577][ T5895] usb 7-1: config 0 has an invalid interface number: 229 but max is 0 [ 453.248765][ T5895] usb 7-1: config 0 has no interface number 0 [ 453.264251][ T9156] gfs2: fsid=syz:syz.0: found 1 quota changes [ 453.277619][ T9161] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9161 [gfs2_quotad/syz] gfs2_quota_sync+0x353/0x450 [ 453.295090][ T5895] usb 7-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.310902][ T9161] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 453.319504][ T9161] CPU: 1 UID: 0 PID: 9161 Comm: gfs2_quotad/syz Tainted: G L syzkaller #0 PREEMPT(full) [ 453.319541][ T9161] Tainted: [L]=SOFTLOCKUP [ 453.319550][ T9161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.319565][ T9161] Call Trace: [ 453.319574][ T9161] [ 453.319585][ T9161] dump_stack_lvl+0xe8/0x150 [ 453.319618][ T9161] gfs2_withdraw+0xc3/0x1b0 [ 453.319656][ T9161] inode_go_instantiate+0xbc7/0x12c0 [ 453.319690][ T9161] ? preempt_schedule_thunk+0x16/0x40 [ 453.319733][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.319765][ T9161] ? __pfx_inode_go_instantiate+0x10/0x10 [ 453.319803][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.319842][ T9161] gfs2_instantiate+0x168/0x220 [ 453.319881][ T9161] gfs2_glock_wait+0x1d4/0x2a0 [ 453.319922][ T9161] do_sync+0x49c/0xbb0 [ 453.319949][ T9161] ? gfs2_quota_sync+0x353/0x450 [ 453.319987][ T9161] ? __pfx_do_sync+0x10/0x10 [ 453.320011][ T9161] ? do_raw_spin_lock+0x12b/0x2f0 [ 453.320064][ T9161] ? gfs2_quota_sync+0x353/0x450 [ 453.320092][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.320125][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.320154][ T9161] ? do_raw_spin_unlock+0xf5/0x210 [ 453.320194][ T9161] gfs2_quota_sync+0x353/0x450 [ 453.320235][ T9161] gfs2_quotad+0x2ab/0x6f0 [ 453.320280][ T9161] ? __pfx_gfs2_quotad+0x10/0x10 [ 453.320307][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.320339][ T9161] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 453.320366][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.320393][ T9161] ? __kthread_parkme+0x71/0x1f0 [ 453.320435][ T9161] ? __kthread_parkme+0x196/0x1f0 [ 453.320480][ T9161] kthread+0x388/0x470 [ 453.320509][ T9161] ? __pfx_gfs2_quotad+0x10/0x10 [ 453.320537][ T9161] ? __pfx_kthread+0x10/0x10 [ 453.320567][ T9161] ret_from_fork+0x514/0xb70 [ 453.320598][ T9161] ? __pfx_ret_from_fork+0x10/0x10 [ 453.320626][ T9161] ? srso_alias_return_thunk+0x5/0xfbef5 [ 453.320655][ T9161] ? __switch_to+0xc89/0x1420 [ 453.320697][ T9161] ? __pfx_kthread+0x10/0x10 [ 453.320727][ T9161] ret_from_fork_asm+0x1a/0x30 [ 453.320778][ T9161] [ 453.320807][ T9161] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 453.365224][ T5735] usb 2-1: USB disconnect, device number 19 [ 453.401879][ T5895] usb 7-1: string descriptor 0 read error: -71 [ 453.458485][ T5760] usb 6-1: USB disconnect, device number 8 [ 453.546790][ T5797] gfs2: fsid=syz:syz.0: file system withdrawn [ 453.669709][ T5895] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 453.752187][ T5760] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 453.793403][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.884115][ T9169] loop6: detected capacity change from 0 to 1024 [ 453.916697][ T9169] hfsplus: request for non-existent node 33423360 in B*Tree [ 453.924481][ T9169] hfsplus: request for non-existent node 33423360 in B*Tree [ 453.999516][ T5895] usb 7-1: config 0 descriptor?? [ 454.045375][ T5895] usb 7-1: can't set config #0, error -71 [ 454.076195][ T5895] usb 7-1: USB disconnect, device number 3 [ 454.681572][ T5735] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 454.844828][ T5735] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 454.879522][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 454.908499][ T5735] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 455.007685][ T9198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.679481][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.690652][ T5735] usb 5-1: Product: syz [ 455.695034][ T5735] usb 5-1: Manufacturer: syz [ 455.699660][ T5735] usb 5-1: SerialNumber: syz [ 455.722852][ T5735] usb 5-1: config 0 descriptor?? [ 455.807730][ T9204] netlink: 268 bytes leftover after parsing attributes in process `syz.5.721'. [ 455.817916][ T9204] netlink: 96 bytes leftover after parsing attributes in process `syz.5.721'. [ 456.010583][ T9190] loop1: detected capacity change from 0 to 32768 [ 456.055489][ T9190] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 456.254166][ T9190] XFS (loop1): Ending clean mount [ 457.130093][ T5895] usb 5-1: USB disconnect, device number 15 [ 457.168653][ T30] audit: type=1800 audit(1782834361.903:109): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.717" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 457.303953][ T5630] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 457.547166][ T9206] loop6: detected capacity change from 0 to 32768 [ 457.892794][ T9208] loop5: detected capacity change from 0 to 32768 [ 458.112439][ T9208] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 458.327382][ T9210] loop3: detected capacity change from 0 to 32768 [ 458.402008][ T9210] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 458.647677][ T9210] XFS (loop3): Ending clean mount [ 458.717230][ T9210] XFS (loop3): Quotacheck needed: Please wait. [ 458.845435][ T5640] ocfs2: Unmounting device (7,5) on (node local) [ 458.911267][ T9210] XFS (loop3): Quotacheck: Done. [ 459.135256][ T5629] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.452687][ T5767] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 459.543252][ T9259] loop5: detected capacity change from 0 to 64 [ 459.653638][ T5767] usb 7-1: Using ep0 maxpacket: 32 [ 459.681260][ T5767] usb 7-1: unable to get BOS descriptor or descriptor too short [ 459.760345][ T5767] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 459.949087][ T5767] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 459.981933][ T5767] usb 7-1: config 14 has no interface number 0 [ 460.001812][ T5767] usb 7-1: config 14 has no interface number 1 [ 460.016878][ T5767] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 460.044964][ T5767] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 460.088879][ T5767] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 460.408556][ T5767] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 460.430521][ T5767] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 460.477697][ T5767] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.510381][ T5767] usb 7-1: config 14 interface 57 has no altsetting 0 [ 460.529429][ T5767] usb 7-1: config 14 interface 228 has no altsetting 0 [ 460.554824][ T5767] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 460.572697][ T5767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.606215][ T5767] usb 7-1: Product: syz [ 460.619765][ T5767] usb 7-1: Manufacturer: syz [ 460.644144][ T5767] usb 7-1: SerialNumber: syz [ 461.983276][ T9274] loop3: detected capacity change from 0 to 131072 [ 461.995593][ T5767] legousbtower 7-1:14.57: interrupt endpoints not found [ 462.013592][ T9274] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 462.022025][ T9274] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 462.039200][ T5767] legousbtower 7-1:14.228: get version request failed: -121 [ 462.049082][ T5767] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -121 [ 462.059224][ T9274] F2FS-fs (loop3): invalid crc value [ 462.176965][ T9274] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 462.327649][ T9274] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 462.334830][ T9274] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 462.440638][ T5767] usb 7-1: USB disconnect, device number 4 [ 462.847535][ T9292] loop4: detected capacity change from 0 to 256 [ 462.891793][ T9292] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0aa1d72f, utbl_chksum : 0xe619d30d) [ 462.957931][ T9292] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 463.024414][ T30] audit: type=1800 audit(1782834367.763:110): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.747" name="file1" dev="loop4" ino=1048668 res=0 errno=0 [ 463.129921][ T9272] loop5: detected capacity change from 0 to 32768 [ 463.191866][ T9272] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 463.273901][ T9272] XFS (loop5): Ending clean mount [ 463.318122][ T9308] loop6: detected capacity change from 0 to 128 [ 463.336417][ T9308] EXT4-fs (loop6): Test dummy encryption mode enabled [ 463.360767][ T9308] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.380014][ T9308] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.782695][ T5640] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 463.975521][ T9319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.570694][ T8036] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.990736][ T9330] loop1: detected capacity change from 0 to 256 [ 465.004819][ T9330] exfat: Deprecated parameter 'utf8' [ 465.010401][ T9330] exfat: Deprecated parameter 'namecase' [ 465.151519][ T5895] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 465.176531][ T9330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 465.512997][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.708870][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.840060][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.946260][ T5895] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.989139][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.046478][ T5895] usb 7-1: config 0 descriptor?? [ 466.635312][ T9351] loop5: detected capacity change from 0 to 256 [ 466.651407][ T9351] exfat: Deprecated parameter 'utf8' [ 466.656981][ T9351] exfat: Deprecated parameter 'namecase' [ 466.890297][ T9351] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 467.413370][ T5895] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 467.505574][ T5895] usb 7-1: USB disconnect, device number 5 [ 467.723729][ T9361] loop5: detected capacity change from 0 to 7 [ 467.761090][ T9355] fido_id[9355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 467.761180][ T9361] Dev loop5: unable to read RDB block 7 [ 467.841186][ T9361] loop5: unable to read partition table [ 467.874784][ T9361] loop5: partition table beyond EOD, truncated [ 467.902684][ T9361] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.400270][ T9375] loop6: detected capacity change from 0 to 256 [ 468.414404][ T9375] exfat: Deprecated parameter 'utf8' [ 468.419989][ T9375] exfat: Deprecated parameter 'namecase' [ 468.727445][ T9375] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 469.992387][ T5646] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 470.174476][ T5646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.207650][ T5646] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.216021][ T9385] loop6: detected capacity change from 0 to 32768 [ 470.247062][ T5646] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.289382][ T9385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.776 (9385) [ 470.289913][ T5646] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.326266][ T9383] loop5: detected capacity change from 0 to 32768 [ 470.349501][ T5646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.381996][ T9385] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 470.397471][ T5646] usb 5-1: config 0 descriptor?? [ 470.411064][ T9385] BTRFS info (device loop6): using crc32c checksum algorithm [ 470.411625][ T5781] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 470.435634][ T9383] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 470.517134][ T9383] XFS (loop5): Ending clean mount [ 470.554249][ T57] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 470.604271][ T9385] BTRFS warning (device loop6): couldn't read tree root [ 470.611479][ T9385] BTRFS warning (device loop6): try to load backup roots slot 1 [ 470.621925][ T5781] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 470.627994][ T9383] XFS (loop5): Quotacheck needed: Please wait. [ 470.631367][ T142] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 470.695240][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.733716][ T5781] usb 2-1: Product: syz [ 470.751367][ T5781] usb 2-1: Manufacturer: syz [ 470.781443][ T5781] usb 2-1: SerialNumber: syz [ 470.798642][ T9385] BTRFS warning (device loop6): couldn't read tree root [ 470.819297][ T5781] usb 2-1: config 0 descriptor?? [ 470.846748][ T9385] BTRFS warning (device loop6): try to load backup roots slot 2 [ 470.872288][ T5781] hub 2-1:0.0: bad descriptor, ignoring hub [ 470.915946][ T1172] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 470.928480][ T5781] hub 2-1:0.0: probe with driver hub failed with error -5 [ 470.960792][ T9383] XFS (loop5): Quotacheck: Done. [ 470.977857][ T9385] BTRFS warning (device loop6): couldn't read tree root [ 470.989556][ T9385] BTRFS warning (device loop6): try to load backup roots slot 3 [ 471.001954][ T5646] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 471.067624][ T5781] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 471.089768][ T9385] BTRFS info (device loop6): checking UUID tree [ 471.112140][ T9385] BTRFS info (device loop6): setting nodatasum [ 471.136932][ T9385] BTRFS info (device loop6): enabling ssd optimizations [ 471.155040][ T5781] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.166264][ T9385] BTRFS info (device loop6): turning on flush-on-commit [ 471.171069][ T5640] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 471.180486][ T9385] BTRFS info (device loop6): turning on async discard [ 471.191065][ T5781] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 471.212353][ T9385] BTRFS info (device loop6): enabling free space tree [ 471.226234][ T5781] usb 2-1: media controller created [ 471.255293][ T9385] BTRFS info (device loop6): trying to use backup root at mount time [ 471.286184][ T9385] BTRFS info (device loop6): max_inline set to 0 [ 471.518834][ T5781] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.828612][ T5781] DVB: Unable to find symbol dib7000p_attach() [ 471.866599][ T5781] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 472.102468][ T5781] rc_core: IR keymap rc-dib0700-rc5 not found [ 472.131762][ T5781] Registered IR keymap rc-empty [ 472.161789][ T5781] dvb-usb: could not initialize remote control. [ 472.189971][ T5781] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 472.341515][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 472.366831][ T9442] loop3: detected capacity change from 0 to 256 [ 472.387861][ T9442] exfat: Deprecated parameter 'utf8' [ 472.393464][ T9442] exfat: Deprecated parameter 'namecase' [ 472.498265][ T9432] BTRFS critical (device loop6): panic in insert_ordered_extent:264: overlapping ordered extents, existing oe file_offset 114688 num_bytes 348160 flags 0x1089, new oe file_offset 114688 num_bytes 147456 flags 0x80 (errno=-17 Object already exists) [ 472.523762][ T9432] ------------[ cut here ]------------ [ 472.529827][ T9432] kernel BUG at fs/btrfs/ordered-data.c:264! [ 472.536012][ T9432] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 472.542449][ T9432] CPU: 1 UID: 0 PID: 9432 Comm: syz.6.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.553229][ T9432] Tainted: [L]=SOFTLOCKUP [ 472.557552][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 472.567613][ T9432] RIP: 0010:btrfs_alloc_ordered_extent+0x943/0xad0 [ 472.574155][ T9432] Code: fd 8d ba 08 01 00 00 b9 ef ff ff ff 49 c7 c0 20 b1 17 8c 4d 89 f9 ff 75 00 41 54 41 55 41 56 53 e8 b2 5c 2d fd 48 83 c4 28 90 <0f> 0b e8 16 36 c9 fd 48 c7 c7 80 a8 17 8c 48 c7 c6 e0 a8 17 8c 48 [ 472.593782][ T9432] RSP: 0018:ffffc90007406c10 EFLAGS: 00010292 [ 472.599864][ T9432] RAX: c72b8c64861aa500 RBX: 0000000000055000 RCX: 1ffff92000e80d60 [ 472.607850][ T9432] RDX: 0000000000000002 RSI: ffffffff8e25db1e RDI: ffff888077f0dd00 [ 472.615838][ T9432] RBP: ffff8880437c7400 R08: ffffc90007406687 R09: 1ffff92000e80cd0 [ 472.623826][ T9432] R10: dffffc0000000000 R11: fffff52000e80cd1 R12: 0000000000024000 [ 472.631809][ T9432] R13: 000000000001c000 R14: 0000000000001089 R15: 000000000001c000 [ 472.639795][ T9432] FS: 00007f3cf76926c0(0000) GS:ffff888125320000(0000) knlGS:0000000000000000 [ 472.648738][ T9432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.655328][ T9432] CR2: 0000200000069000 CR3: 0000000054319000 CR4: 0000000000350ef0 [ 472.663305][ T9432] Call Trace: [ 472.666586][ T9432] [ 472.669518][ T9432] cow_file_range+0x744/0x12a0 [ 472.674311][ T9432] ? __pfx_cow_file_range+0x10/0x10 [ 472.679515][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.685175][ T9432] ? _raw_spin_unlock+0x28/0x50 [ 472.690041][ T9432] btrfs_run_delalloc_range+0x156b/0x1c20 [ 472.695782][ T9432] ? __pfx_find_lock_delalloc_range+0x10/0x10 [ 472.701876][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.707525][ T9432] ? __pfx_btrfs_run_delalloc_range+0x10/0x10 [ 472.713613][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.719262][ T9432] ? __bitmap_set+0x12f/0x170 [ 472.723963][ T9432] writepage_delalloc+0x104d/0x1ba0 [ 472.729192][ T9432] ? filemap_get_folios_tag+0x118/0x720 [ 472.734781][ T9432] ? __pfx_writepage_delalloc+0x10/0x10 [ 472.740357][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.746025][ T9432] ? set_folio_extent_mapped+0x18b/0x4a0 [ 472.751675][ T9432] btrfs_writepages+0x1667/0x28b0 [ 472.756717][ T9432] ? do_iter_readv_writev+0x612/0x8c0 [ 472.762133][ T9432] ? __pfx_btrfs_writepages+0x10/0x10 [ 472.767540][ T9432] ? __lock_acquire+0x683/0x2cf0 [ 472.772492][ T9432] ? btrfs_clear_extent_bit_changeset+0xe98/0x1790 [ 472.779023][ T9432] ? __pfx_btrfs_writepages+0x10/0x10 [ 472.784407][ T9432] do_writepages+0x338/0x560 [ 472.789095][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.794746][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.800411][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.806071][ T9432] ? do_raw_spin_unlock+0xf5/0x210 [ 472.811212][ T9432] filemap_fdatawrite_range+0x1ef/0x2f0 [ 472.816784][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.822450][ T9432] ? __pfx_filemap_fdatawrite_range+0x10/0x10 [ 472.828540][ T9432] ? btrfs_buffered_write+0x1516/0x1690 [ 472.834133][ T9432] ? __pfx_btrfs_buffered_write+0x10/0x10 [ 472.839875][ T9432] ? btrfs_direct_write+0xab3/0xc20 [ 472.845102][ T9432] btrfs_fdatawrite_range+0x54/0xf0 [ 472.850330][ T9432] btrfs_direct_write+0x69d/0xc20 [ 472.855382][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.861043][ T9432] ? __pfx_btrfs_direct_write+0x10/0x10 [ 472.866618][ T9432] ? aa_file_perm+0x18b/0x15f0 [ 472.871416][ T9432] btrfs_do_write_iter+0x325/0x790 [ 472.876543][ T9432] ? trace_irq_disable+0x3b/0x140 [ 472.881598][ T9432] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 472.887249][ T9432] do_iter_readv_writev+0x612/0x8c0 [ 472.892464][ T9432] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 472.898204][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.903852][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.909500][ T9432] vfs_writev+0x343/0x990 [ 472.913862][ T9432] ? __pfx_vfs_writev+0x10/0x10 [ 472.918742][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.924396][ T9432] ? __fget_files+0x2a/0x420 [ 472.929001][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.934659][ T9432] ? __fget_files+0x3a2/0x420 [ 472.939351][ T9432] ? __fget_files+0x2a/0x420 [ 472.943949][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.949604][ T9432] __se_sys_pwritev2+0x177/0x2a0 [ 472.954562][ T9432] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 472.959625][ T5781] usb 2-1: USB disconnect, device number 20 [ 472.960037][ T9432] ? srso_alias_return_thunk+0x5/0xfbef5 [ 472.971542][ T9432] ? __x64_sys_pwritev2+0x20/0xc0 [ 472.976591][ T9432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.982675][ T9432] do_syscall_64+0x174/0x580 [ 472.987284][ T9432] ? trace_irq_disable+0x3b/0x140 [ 472.992334][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.998238][ T9432] RIP: 0033:0x7f3cf679ce59 [ 473.002657][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.022276][ T9432] RSP: 002b:00007f3cf7692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 473.030705][ T9432] RAX: ffffffffffffffda RBX: 00007f3cf6a16090 RCX: 00007f3cf679ce59 [ 473.038683][ T9432] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 473.046655][ T9432] RBP: 00007f3cf6832e6f R08: 0000000000000000 R09: 0000000000000003 [ 473.054631][ T9432] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000000 [ 473.062604][ T9432] R13: 00007f3cf6a16128 R14: 00007f3cf6a16090 R15: 00007ffe2bc99f08 [ 473.070592][ T9432] [ 473.073605][ T9432] Modules linked in: [ 473.078529][ T9432] ---[ end trace 0000000000000000 ]--- [ 473.084156][ T9432] RIP: 0010:btrfs_alloc_ordered_extent+0x943/0xad0 [ 473.090689][ T9432] Code: fd 8d ba 08 01 00 00 b9 ef ff ff ff 49 c7 c0 20 b1 17 8c 4d 89 f9 ff 75 00 41 54 41 55 41 56 53 e8 b2 5c 2d fd 48 83 c4 28 90 <0f> 0b e8 16 36 c9 fd 48 c7 c7 80 a8 17 8c 48 c7 c6 e0 a8 17 8c 48 [ 473.110393][ T9432] RSP: 0018:ffffc90007406c10 EFLAGS: 00010292 [ 473.116508][ T9432] RAX: c72b8c64861aa500 RBX: 0000000000055000 RCX: 1ffff92000e80d60 [ 473.124781][ T9432] RDX: 0000000000000002 RSI: ffffffff8e25db1e RDI: ffff888077f0dd00 [ 473.133291][ T9432] RBP: ffff8880437c7400 R08: ffffc90007406687 R09: 1ffff92000e80cd0 [ 473.141280][ T9432] R10: dffffc0000000000 R11: fffff52000e80cd1 R12: 0000000000024000 [ 473.149306][ T9432] R13: 000000000001c000 R14: 0000000000001089 R15: 000000000001c000 [ 473.157341][ T9432] FS: 00007f3cf76926c0(0000) GS:ffff888125320000(0000) knlGS:0000000000000000 [ 473.166375][ T9432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.173022][ T9432] CR2: 0000200000069000 CR3: 0000000054319000 CR4: 0000000000350ef0 [ 473.181004][ T9432] Kernel panic - not syncing: Fatal exception [ 473.187301][ T9432] Kernel Offset: disabled [ 473.191608][ T9432] Rebooting in 86400 seconds..