last executing test programs: 5m36.27643566s ago: executing program 2 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48000480440001800b000100657874686472000034000280050002009400000008000340000000f508000440000000200800064000000002080001400000001308000520000000010900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 5m35.922381168s ago: executing program 2 (id=48): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200888b, &(0x7f0000000040), 0x0, 0x571, &(0x7f0000000c00)="$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") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 5m35.092336989s ago: executing program 2 (id=54): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40042) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qpsk={0x8, 0x7}}) 5m34.577493681s ago: executing program 2 (id=57): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x61a4, &(0x7f000000c4c0)="$eJzs3c1vHGcdB/Df7JtfSlurh6pECLlpeSmlSZyUECjQ9gAHLj2gXFEi160iUkBJQGllEVe+cODEXwBC4ogQR8SBP6AHrtw4cSKSjQTqiUFjP088u9ntOnW8s/Z8PpIz85tn1vuMvzv7kpnZJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA+P73frBWRMS1n6cFKxGfiW5EJ2KpqlcjYml1Ja/fi4jnYq85no2I/kJEdfu9f56OeDUiPnoqYmd3c71afPGQ/fjuH//+ux8+8dbf/tA//98/3em+Nmm9u3d/9Z8/3zvaNgMAAEDblGVZFulj/pn0+b7TdKcAgJnIr/9lkpef+vrX/3zrL/PUH7VarVarZ1DXlePdqxcRsVW/TfWeweF4ADhhtuLjprtAg+Tfar2IeKLpTgBzrWi6AxyLnd3N9SLlW9RfD1b32/O5IEP5bxUPru+YNJ1m9ByTWT2+tqMbz0zoz9KM+jBPcv6d0fyv7bcP0npFPbFjyH9WJuU/2L/0qXVy/t3R/Ecc9/4/K9vRGZt/W+X8e4+Uf1f+AAAAAAAwx/L//680fPx34eibciifdPx3dUZ9AAAAAAAAAIDH7ajj/z1g/D8AAACYW9Vn9cpvnjpYNum72KrlV4uIJ0fWB1omXSyz3HQ/AAAAAAAAAAAAAKBNevvn8F4tIvoR8eTyclmW1U/daP2ojnr7k67t2w9t1vSTPAAA7PvoqZFr+YuIxYi4mr7rr7+8vFyWi0vL5XK5tJDfzw4WFsul2ufaPK2WLQwO8Ya4NyirX7ZYu13dtM/L09pHf191X4Oye4iOPSb99Nec0NxQ2ACQ7L8a7XhFOmXK8ulJbz5giP3/FFqJlaYfV8y/ph+mAAAAwPEry7Is0td5n0nH/DtNdwoAmIn8+j96XOBIdWdCe8Tj+f1qtVqtVqs/VV1XjnevXkTEVv021XsGw/EDwAmzFR833QUaJP9W60XEc013AphrRdMd4Fjs7G6uFynfov56kMZ3z+eCDOW/VezdLt9+3HSa0XNMZvX42o5uPDOhP8/OqA/zJOffGc3/2n77IK133PnPyqT8B3uXzLVPzr87mv+I05N/Z2z+bZXz7z1S/l35AwAAAADAHMv//7/i+G/eZAAAAAAAAAA4cXZ2N9fzda/5+P/nxqzn+s/TKedfPGr+S2le/idazr8zkv+XR9br1ubvv3mw//97d3P993f+9dk8PWz+C3mmSI+sIj0iinRPRS9Nj7J1D9vudwfVPfWLTreXzvkp++/EjbgZG3FhaN1O+nsctK8NtVc97Q+1Xxxq7z3UfmmovZ++d6Bcyu3nYj1+Ejfj7b32qm1hyvYvTmkvp7Tn/Lue/1sp59+r/VT5L6f2YmRauf9h56H9vj4ddz9v3Pj8Ly8c/+ZMtR3dB9tWV23f2Qb6s/c3eWIQP7u9cevc3et37txaizQZWnox0uQxy/n3934WDp7/X9hvz8/79f31/oeDR85/XmxHb2L+L9Tmq+19acZ9a0LOf5B+cv5vp/bx+/9Jzn/y/v9yA/0BAAAAAAAAAAAAAACAT1KW5d4lom9ExOV0/U9T12YCALOVX//LJC9Xq9VqtVp9+uq6crzX60VE/LV+m+o9wy/G/TIAYJ79LyL+0XQnaIz8Wyx/3181fbHpzgAzdfv9D350/ebNjVu3m+4JAAAAAAAAAPBp5fE/V2vjP78YESsj6w2N//pmrB51/M9ennkwwOhjHuh7gu3OoNupDTf+fOyNz31u0vjfZ+Ph8b/zmLjd+nZM0J/SPpjSvjClfXHs0oO0xl7oUZPzf7423nmV/5mR4dfbMP7r6Jj3bZDzP1t7PFf5f2lkvXr+5W/nLv+tw664HZ2h/M/fee+n52+//8ErN967/u7Guxs/vrS2duHS5ctXrlw5/86NmxsX9v89nl7PgZx/HvvaeaDtkvPPmcu/XXL+X0i1/Nsl5//FVMu/XXL++f2e/Nsl558/+8i/XXL+L6Va/u2S8/9KquXfLju7mwtV/i+nWv7tkvf/r6Za/u2S838l1fJvl5z/uVTLv11y/udTfYj8fT38KZLzz0e47P/tkvNfS7X82yXnfzHV8m+XnP+lVMu/XXL+r6Za/u2S8/9aquXfLjn/y6mWf7vk/L+eavm3S87/Sqrl3y45/2+kWv7tkvP/Zqrl3y45/9dSLf92yfl/K9Xyb5ec/7dTLf92yfl/J9Xyb5ec/+upln+7HHz/vxkzZszkmaafmQAAAAAAAAAAAACAUbM4nbjpbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt7dxch11vcDP7NvXjuEGAjByd/AJjEhJEt2bSd+4d8UE14boBRIKPQFx/WuzYLf8NolUCSbBkokjIoqqqYXbQGhNlJVEVVcUERpLqq+XJX2gt5UVJWQGlUBBVSktqLZauY8z+OZ2dk5u97xevY8n48U/7w7Z+acOfPM7H7X+e4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALS79Y3zn20URdH8r/XH9qJ4QfPvW6e+MNacr7vWRwgAAACs1/+2/nzuhvSJQ6u4Uts2f/uKf/j60tLSUvH+0d8d/+LSUrpgqijGtxRF67LoqX/7QKN9m+CxYrIx0vbxSMXuRysuH6u4fLzi8omKy7dUXD5ZcfmyE7DM1vLnMa0b29X66/bylBY3FuOty3b1uNZjjS0jI/FnOS2N1nWWxo8VC8WJYr6Y7di+3LbR2v5btzb39bYi7mukbV87myvkR588Go+hEc7xro59Xb7N6AdvKKZ+/KNPHv3jc8/e3GtWnoaO2yuP887bmsf56fCZ8lgbxZZ0TuJxjrQd584ej8lox3E2Wtdr/r37OJ9b5XGOXj7MDdX9mE8WI62/f6d1nsbaf6yXztPO8Ln/ur0oiouXD7t7m2X7KkaKbR2fGbn8+EyWK7J5G82l9OJibE3r9NZVrNPmnNvVuU67nxPx8b81XG9shWNof5h+8KmJZY/7Wtdp1LzXKz1XutfgoJ8rw7IG47r4TutOP95zDe4K9/+Td6y8BnuunR5rMN3vtjV4W9UaHJkYbR1zehAaretcXoO7O7Yfbe2p0ZrP3NF/Dc6cO3lmZvHjn3jtwskjx+ePz5/au3v37N59+w4cODBzbOHE/Gz55xWe7eG3rRhJz4HbwrmLz4FXd23bvlSXvjy45+Fkn+fh9q5tB/08HOu+c42NeUIuX9Plc+Oh5kmfvDRSrPAcaz0+d63/eZjud9vzcKztedjza0qP5+HYKp6HzW3O3LW671nG2v7rdQxX62vB9rY12P39SPcaHPT3I8OyBifDuviXu1b+WrAzHO/j02v9fmR02RpMdze89jQ/k77fnzzQGr3W5S3NC66bKM4vzp+959Ej586d3V2EsSFe0rZWutfrtrb7VCxbryNrXq+HFl7x+C09Pr89nKvJ1zb/mFzxsWpuc+89/R+r1le33uez47N7ijAGbKPPZ6+v5s3zmbJkn/PZ3ObTM+v/Xjzl0rbX3/EVXn9j7n++3F+6qcdGx8fK5+9oOjvjHa/HnQ/VWOu1q9Ha93Mzq3s9Hg//bfTr8Y19Xo93dG076Nfj8e47F1+PG1U/7Vif7sdzMqyTE7P9X4+b2+zYs9Y1Odb39fj2MBvh/L8mJIWUi9rWzkrrNu1rbGw83K+xuIfOdbq3Y/vxkM2a+3pyz5Wt0ztvL29rNN27yzZqnU51bTvodZper1Zap42qn75dme7HczKsixv39l+nzW2evnf9r51b41/bXjsnqtbg+OhE85jH0yIsX++XtsY1eE9xtDhdnCjmWpdOtNZTo7Wv6ftWtwYnwn8b/Vq5o88avLNr20GvwfR1bKW11xhbfucHoPvxnAzr4on7+q/B5jZv2j/Y713vDJ9J27R979r987WVfuZ1S9dpupo/82oe51/v7/+z2eY2Jw6sNWf2P093h89c1+M8dT9/V3pOzRUbc552hON89sDK56l5PM1tvnhwlevpUFEUFz76QOvnveHfV/78/He/3vHvLr3+TefCRx/44fXH/mYtxw/A5vd8ObaVX+va/mVqNf/+DwAAAGwKMfePhJnI/wAAAFAbMffH/ys8kf8BAACgNmLuHwszyST/73jTswvPXyhSM38piJen0/BguV3suM6Gj6eWLmt+/oGvzv/kmxdWt++Roih++uBv9Nx+x4PxuEpT4TifenPn55df8cJPvjle/csJH3n4Qtpve3/9S+H24/1Z7TLoVcGdLYriWzd8vrWfqQ9cas2nH3ykNd9z8fHHmts8d7D8OF7/mZeU2/9BOP5Dx450XP+ZcB6+H+bs23ufj3i9r116zc7977u8v3i9xm0vbN3tJz5Y3m78PTlfeKzcPp7nlY7/Lz/35Nea2z/6qt7Hf2Gk9/E/GW73q2H+98vL7dsfg+bH8XqfCccf9xevd89Xvt3z+J/6bLn9mbeU2z0SZtz/neHjXW95dqH9fD3aONJxv4q3ltvF/c9+97dbl8fbi7ffffyThy91nI/u9fH0P5W3M9O1ffx83E/0F137b95O+/qM+3/ytx7pOM9V+3/qPc+8vHm73fu/u2u70a7rd//Gpj/8zOd77i8ez6E/O9Nxfw69OzyPw/6f+GBYj+Hy/3nq8x37jR55d+frT9z+S9svdNyf6G0/Lvf/1OuPt+a/T/3k9697wfUvvPjK5rkriu+8t7y9qv0f/6PTHcf/5Zvuaj0e8fL4MtO9/5XE/Z/92PSp04vnF+bazmrrd+e8ozyeLZNbtzWP94bw2tr98eHT5z40f3Zqdmq2KKbq+yv0rthXwvxhOS6u9fp3PRwez1t+71vb7vjHz8XP//ND5ecvvb38uvXqsN0Xwue3l4/fUmOd+3/i1ptaz+/G0+XHHT32Adi56z8OrGrDcP+7vy+I6/3MSz/UOg/Ny1pfN+Lzep3H/7258na+Ec7rUvjNzLfddHl/7dvH341w6b3l833d5y+8zMXH9U/C4/3O75e3H48r3t/vhe9jvr2j8/Uuro9vXBjpvv3Wb/G4GF5Piovl5XGreL4vPXdTz8OLv4ekuHhz6+PfSbdz85ru5koWP744c2Lh1PlHZ87NL56bWfz4Jw6fPH3+1LnDrd/lefjDVde//Pq0rfX6NDe/795idmtRFKeL2Q14wbo6x9/82+qO/8zDR+f2z94xN3/syPlj5x4+M3/2+NHFxaPzc4t3HDl2bP5jVddfmLt/956De/fvmT6+MHf/gYMH9x6cXjh1unkY5UFV2Df7kelTZw+3rrJ4/70Hd993372z0ydPz83fv392dvp81fVbX5umm9f+9emz8yeOnFs4OT+9uPCJ+ft3H9y3b0/lbwM8eebY4tTM2fOnZs4vzp+dKe/L1LnWp5tf+6quTz0t/mv5/Wy3RvmL+Ip33b0v/X7Wpq9+asWbKjfp+gWiz4bfRfP3LzpzYDUfx9w/HmaSSf4HAACAHMTcPxFmIv8DAABAbcTcvyXMRP4HAACA2oi5fzLMJJP8X8v+/yr2r/+/1v5/ebn+f179/zMfLXulm73/H/vz+v95uMb9/3XvX/9f/79+/f/V9+c3+/Hr/+v/s9yw9f9j7t9aFFnmfwAAAMhBzP3bwkzkfwAAAKiNmPuvCzOR/wEAAKA2Yu5/QZhJJvlf/39V/f89VYWr+vf/vf+//n+xOfv/8cHR/8/Gmvv373uo40P9/0D/X/9f/1//X/+fdRtf8ZJr1f+Puf/6MJNM8j8AAADkIOb+F4aZyP8AAABQGzH33xBmIv8DAABAbcTcvz3MJJP8r//v/f/1//X/a93/X+/7/7cdjP7/5uD9//vT/69wxf3/yY3v/4/r/6/7+McHe/zD3f+vPHz9f66KYXv//5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAAGoj5v6XhJnI/wAAAFAbMfffGGaSSf7X/9f/1//X/9f/773/6vf/L/+m/z9c9P/70/+v4P3/8+r/D/j4h7v/P+j3/x9/c/f19f/pZdj6/zH3vzTMJJP8DwAAADmIuf+mMBP5HwAAAGoj5v6XhZnI/wAAAFAbMffvCDPJJP/r/+v/6//r/+v/995/df+/pP8/XPT/+9P/r6D/r/+v/7+6/n+Pb371/+ll2Pr/MfffHGaSSf4HAACAHMTcf0uYifwPAAAAtRFz//8LM5H/AQAAoDZi7t8ZZpJJ/tf/r0v/f6Jj3/r/+v8r7f/uCf1//f960//vT/+/gv6//r/+/yrf/3+5tfT/t1TdGLUxbP3/mPtfHmaSSf4HAACAHMTc/4owE/kfAAAAaiPm/leGmcj/AAAAUBsx90+FmWSS//X/69L/L/3pXz3xykL/X/+/Yv817f/HZaD/nzn9//70/yvo/+v/6/9vSP+ffAxb/z/m/lvDTDLJ/wAAAJCDmPtvCzOR/wEAAKA2Yu6/PcxE/gcAAIDaiLl/V5hJJvlf/79e/f9I/1//v9/+a9r/T/T/86b/30Pbk1T/v4L+v/5/9v3/+N2v/j+DMWz9/5j7XxVmkkn+BwAAgBzE3H9HmIn8DwAAALURc/+rw0zkfwAAAKiNmPvvDDPJJP/r/+v/6//r/+v/996//v/mpP/f31r7/xP6//r/+v+Z9f+9/z+DNWz9/5j7XxNmkkn+BwAAgBzE3H9XmIn8DwAAALUR///N8v97lf8BAACgjmLunw4zyST/6//r/+fU/2/o/+v/r7P/3/wqof8/3PT/+/P+/xX0//X/9f/1/xmoYev/x9z/2jCTTPI/AAAA5CDm/nvCTOR/AAAAqI2Y+2fCTOR/AAAAqI2Y+2fDTDLJ//r/+v859f+9/7/+v/f/rz/9//70/yvo/+v/163/XxT6/1xTw9b/j7l/d5hJJvkfAAAAchBz/54wE/kfAAAAaiPm/r1hJvI/AAAA1EbM/feGmWSS//X/9f/1//X/9f9771//f3PS/+9P/7+C/r/+f936/97/n2ts2Pr/MfffF2aSSf4HAACAHMTcvy/MRP4HAACA2oi5f3+YScj/vf6/bgAAAGBzibn/QJhJJv/+r/9fk/7/b/5dx771//X/++1/MP3/rfr/Yer/D5ea9v+7nxZXTP+/gv6//r/+v/4/AzVs/f+Y+w+GmWSS/wEAACAHMfe/LsxE/gcAAIDaiLn//4eZyP8AAABQGzH3/0yYSSb5X/+/Jv3/Lvr/+v/99u/9//X/66ym/f+BqVX/f0T/X/9/uI5f/1//n+Wufv8//m11/f+Y++8PM8kk/wMAAEAOYu7/2TAT+R8AAABqI+b+14eZyP8AAABQGzH3HwozyST/6//r/+v/6/9fnf7/64tuw9j/by4e/f960f/vr1b9f+//r/8/ZMev/6//z3LD9v7/Mfe/Icwkk/wPAAAAOYi5/4EwE/kfAAAAaiPm/jeGmcj/AAAAUBsx978pzCST/K//r/+v/6//7/3/e+9f/39z0v/vT/+/gv6//r/+v/4/AzVs/f+Y+98cZpJJ/gcAAIAcxNz/ljAT+R8AAABqI+b+t4aZyP8AAABQGzH3vy3MJJP8r/+v/6//r/+v/997//r/m5P+f3/6/xX0//X/9f/1/xmoYev/x9z/c2EmmeR/AAAAyEHM/Q+Gmcj/AAAAUBsx9789zET+BwAAgNqIuf8dYSaZ5H/9f/1//X/9f/3/3vvX/9+c9P/70/+voP+v/z90/f/mJfr/bF7D1v+Puf+dYSaZ5H8AAADIQcz9Px9mIv8DAABAbcTc/64wE/kfAAAAaiPm/l8IM8kk/+v/6/8PV/9/6UL79fT/9f+LQfX/m1fS/8+C/n9/+v8VevT/t+j/6/97/3/9f67YsPX/Y+5/d5hJJvkfAAAAchBz/3vCTOR/AAAAqI2Y+98bZiL/AwAAQG3E3P9QmEkm+V//P8v+f7rLw9f/9/7/+v/e/1//f330//vT/6/g/f/1//X/9f8ZqGHr/8fc/3CYSSb5HwAAAHIQc//7wkzkfwAAAKiNmPt/McxE/gcAAIDaiLn//WEmmeR//f8s+/9D/P7/dev/j3Wsj5z6/5Ntj2dal/r/+v8bQP+/P/3/Cvr/+v/D3P8Pq3nrCtfX/2cYDVv/P+b+D4SZZJL/AQAAIAcx9/9SmIn8DwAAALURc/8vh5nI/wAAAFAbMff/SphJJvlf/1//X//f+/97///e+9f/35z0//vT/6+g/6//P8z9/wr6/wyjYev/x9z/q2EmKwa/H/7nKu4mAAAAMERi7v9gmEkm//4PAAAAOYi5/3CYifwPAAAAtRFz/yNhJpnkf/3/7v5/fEdV/X/9f/1//X/9/81ocP3/l11fFPr/+v/6//r/+v/6/6zHsPX/Y+4/EmaSSf4HAACAHMTc/2thJvI/AAAA1EbM/UfDTOR/AAAAqI2Y++fCTDLJ/9ew/z8+nP1/7/9/pf3/n+r/6/8H+v+96f9vDO//35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAACgxtKPg2PuPxZmIv8DAABAbcTcfzzMRP4HAACA2oi5/0NhJpnkf+//r//v/f+vRf9/rGN7/f+S/r/+/yDo//en/19B/1//X/9f/5+BWn//P72ODqT/H3P/QphJJvkfAAAAchBz/4fDTOR/AAAAqI2Y+z8SZiL/AwAAQG3E3H8izCST/K//r/+fe/+/URQXvf+//n+v/ev/b076//3p/1fQ/9f/1//X/2eg1t//v3yV1p/r7P/H3H8yzCST/A8AAAA5iLn/VJiJ/M//sXdfP3ad5R7H98lJbA8SCv8BXHPFJUhI4U/gljskriNa6MUJvUPovYTea+gl9N57D73XUAOSUcbP89gze89aHs/K7LXe9/O5eY6t+Mx2MsnR71hfvQAAADQjd/+94xb7HwAAAJqRu/8+cUsn+1//r//vvf9fbeX9/71/vf7/LP2//n8Ka/39pZv/uoOi8AP7/zvd+ap76v/1//r/Qfp//b/+n/3m1v/n7r9v3NLJ/gcAAIAe5O6/X9xi/wMAAEAzcvffP26x/wEAAKAZufuvils62f/6f/2//l//v6f/v0H/r/9fNu//D9P/j9D/6//1//p/JjW3/j93/wPilk72PwAAAPQgd/8D4xb7HwAAAJqRu/9BcYv9DwAAAM3I3f/guKWT/a//1//r/5fS/5/w/v++34/+X/+/if5/mP5/hP5f/6//1/8zqbn1/7n7HxK3dLL/AQAAoAe5+x8at9j/AAAA0Izc/Q+LW+x/AAAAaEbu/ofHLZ3sf/2//l//v5T+/5je/9f/6/8X7rrVuf8m6P/X6f9HjPT/q5X+f8gF9/Obf3vL+fwH0P/r/1k3t/4/d/8j4pa7rVYnLvY3CQAAAMxK7v5Hxi2d/Pk/AAAA9CB3/+m4xf4HAACAZuTuvzpu6WT/6//1//p//b/+f/PX1/8vk/f/hx29/7/j7a68V7/9v/f/h3n/f+r+/5bvDP0/yza3/j93/zVxSyf7HwAAAHqQu/9RcYv9DwAAAM3I3f/ouMX+BwAAgGbk7n9M3NLJ/tf/t9b///+eX3de/79bu+j/9f/6f/1/6/T/w7z/P2L3P3M79UP9v/7f+//6f45mbv1/7v7Hxi2d7H8AAADoQe7+x8Ut9j8AAAA0I3f/4+MW+x8AAACakbv/CXFLJ/tf/99a/7/313n/X/+/6evr//X/LdP/D9P/j2jl/f+L/K7Zdj9/VNv+/Pp//T/r5tb/5+5/YtzSyf4HAACAHuTuf1LcYv8DAABAM3L3Pzlusf8BAACgGbn7nxK3dLL/9f/6/2X0//kV9P/6/1u//0/6/2XS/w/T/49opf+/SNvu55f++fX/+n/Wza3/z93/1Lilk/0PAAAAPcjd/7S4xf4HAACAZuTuf3rcYv8DAABAM3L3PyNu6WT/6//1/8vo/73/r//3/r/+/8Lo/4fp/0fo//X/+n/9P5OaW/+fu//auKWT/Q8AAAA9yN3/zLjF/gcAAIBm5O5/Vtxi/wMAAEAzcvc/O27pZP/r//X/+n/9v/5/89ff0//fXv+/FPr/Yfr/Efp//b/+X//PpGbU/5/3q06tnhO3dLL/AQAAoAe5+58bt9j/AAAA0Izc/c+LW+x/AAAAaEbu/ufHLZ3sf/3/bPr/3Zyvrf5/Z7Va6f9Xnfb/O+f986zvyyX3/97/Xwz9/zD9/wj9v/5f/6//Z1Iz6v93f5y7/wVxSyf7HwAAAHqQu/+FcYv9DwAAAM3I3f+iuMX+BwAAgGbk7n9x3NLJ/tf/z6b/39VW/+/9//3fHz31/829/6//Xwz9/zD9/wj9v/5f/6//Z1Jz6/9z978kbjpx2UX/FgEAAICZyd3/0rilkz//BwAAgB7k7n9Z3GL/AwAAwEJdu/YzuftfHrd0sv/1/9P2/yfO+zn9v/5///eH/l//r/+/9en/04mNP6v/H6H/1//r//X/TGpu/X/u/lfELZ3sfwAAAOhB7v7r4hb7HwAAAJqRu/+VcYv9DwAAAM3I3f+quKWT/a//9/6//l//r//f/PX1/8uk/x+m/x+h/9f/b7f/P3nuf9T/04ZD9P9nzpw5fav3/7n7Xx23dLL/AQAAoAe5+18Tt9j/AAAA0Izc/a+NW+x/AAAAaEbu/tfFLYfZ/7ed+lMdH/1/p/1/fqsvq/+/erXS/+v/9f/6/2H6/2H6/xH6f/2/9//1/0xqbu//5+5/fdziz/8BAACgGbn73xC32P8AAADQjNz9b4xb7H8AAABYuHMtVu7+N8Utnex//X+n/b/3//X/+v/j7v9vXun/j8Ui+v+dg7/+3Pv/a/T/+v8B3fX/d7/Lnh/q//X/rJtb/5+7/81xSyf7HwAAAHqQu/8tcYv9DwAAAM3I3f/WuMX+BwAAgGbk7n9b3HRpJ/tf/6//1//r//X/m7/+Mb//f2K1Wun/J7CI/n/A3Pv/ad7/3/9v+Tn6f/3/kj+//l//z7q59f+5+98et3Sy/wEAAKAHufvfEbfY/wAAANCM3P3vjFvsfwAAAGhG7v53xS2d7H/9v/5f/6//b77/v2YR/b/3/yei/x82j/7/YPp//f+SP7/+X//PhdtW/5+7//q4pZP9DwAAAD3I3f/uuMX+BwAAgGbk7n9P3GL/AwAAQDNy9783bulk/+v/9f+H6f/zc+r/2+r/T86u/z+1539fJ+//6/8nov8fpv8fof/X/+v/r9X/M6W5vf+fu/99cUsn+x8AAAB6kLv//XHr/3Vr/wMAAEAzcvd/IG6x/wEAAKAZufs/GLd0sv/1//p/7//r/5t//1//3xX9/zD9/wj9v/5f/+/9fyY1t/4/d/+H4pZO9j8AAAD0IHf/h+MW+x8AAACakbv/I3GL/Q8AAADNyN1/Q9zSyf7X/+v/9f/6f/3/2X+G+v826P+HHU//v6P/1/9XP/9/8W+B/l//P/bradPc+v/c/R+NWzrZ/wAAANCD3P0fi1vsfwAAAGhG7v6Pxy32PwAAACzSpRt+Lnf/J+KWTva//l//r//X/+v/N399/f8ybaX/z28K/b/3/0M//f8d9vxoae//7/+/X/p//T/Tm1v/n7v/k3FLJ/sfAAAAepC7/1Nxi/0PAAAAzcjd/+m4xf4HAACAZuTu/0zc0sn+1//r//X/+n/9/+avr/9fJu//D9P/j9D/b/X9/KV/fv2//p91c+v/c/d/Nm7pZP8DAABAD3L3fy5usf8BAACgGbn7Px+32P8AAADQjN3dn3FZh/tf/6//1//r//X/m7++/n+Z9P/D9P8jjqX/P33X+rH+f1Lb/vz6f/0/6+bW/39h91edWn0xbulk/wMAAEAPcvd/KW6x/wEAAKAZufu/HLfY/wAAANCM3P1fiVs62f/6f/3/Mvr/M2fOnNb/6//3/n7O9f836v8p+v9h+v8R3v/X/+v/9f9Mam79f+7+r8Ytnex/AAAA6EHu/q/FLfY/AAAANCN3/9fjFvsfAAAAmpG7/xtxSyf7X/8/g/7/lP7f+//6/5X3//X/E9lG/3/L94T+X/8/2/7/1IX/9rfdzx/Vtj+//l//z7q59f+5+78Zt3Sy/wEAAKAHufu/FbfY/wAAANCM3P3fjlvsfwAAAGhG7v7vxC2d7H/9//H1/7f8vevl/f+d1ebPfxz9f34W/f/BX1//r/9vmff/h+n/R7TY/x/Ctvv5pX9+/b/+n3Vz6/9z9383btk7/C473O8SAAAAmJPc/d+LWzr5838AAADoQe7+78ct9j8AAAA0I3f/D+KWTva//n8G7/832P97/3/z94f+f9b9/yX6/zbo/4fp/0fo//X/+v+J+v/8btb/925u/X/u/h/GLZ3sfwAAAOhB7v4fxS32PwAAADQjd/+P4xb7HwAAAJqRu//GuOW8/b+p7W6F/l//r//X/+v/N399/f8y6f+HXWj/f3J1tP4/6f/1//r/Xvt/7/9z1tz6/9z9P4lb/Pk/AAAALM5lB/x87v6fxi32PwAAADQjd//P4hb7HwAAAJqRu//ncctNl2zrIx0r/b/+X/+v/9f/b/76+v9l0v8P8/7/CP3/FP38Ffr/Nvr/1Ur/z9HNrf/P3f+LuMWf/wMAAEAzcvf/Mm6x/wEAAKAZuft/FbfY/wAAANCM3P2/jls62f/6f/3/Efv/3TRT/3/WYfr/2+j/9f/n/V3V/09H/z9M/z9C/+/9f/2/9/+Z1Nz6/9z9v4lbOtn/AAAA0IPc/b+NW+x/AAAAaEbu/t/FLfY/AAAANCN3/+/jlk72/9b6//hbrf9ffP/v/X/v/2+n/7/+cv2//n8j/f8w/f8I/b/+X/+v/2dSc+v/c/f/IW7pZP8DAABAD3L3/zFusf8BAACgGbn7/xS32P8AAADQjNz9f45bOtn/3v/X/+v/9f+L7P+9/6//P4D+f5j+f7P6BzXz/n9H/z/rz6//1/+zbm79f+7+v8Qtnex/AAAA6EHu/r/GLfY/AAAANCN3/01xi/0PAAAAzcjd/7e4pZP9r//X/+v/9f/6/81fX/+/TPr/Ydvs/+9x+fiX9f7/1t//z4+g/9f/6/+ZxNz6/9z9f49bOtn/AAAA0IPc/f+IW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72/0j/f7L+Qv3/IP3/3s+v/9/8/TFV/3+l/n+X/l//v4n+f5j3/0fo/73/r//X/zOpufX/ufv/Hbd0sv8BAACgB7n7b45b7H8AAABoRu7+/8Qt9j8AAAA0I3f/f+OWTva/9/+X1P9fof/X/3v/X/+v/x+h/x+m/x+h/9f/6//1/0xqbv1/7v7/BQAA//9UNFCF") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5m32.735974065s ago: executing program 2 (id=67): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x4b63, 0x1) 5m31.541984534s ago: executing program 2 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000190005002bbd7000fbdbdf2502142004ff02fd02001b000008000f000000000008000100ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x2400c0d5}, 0x10004020) 5m30.90784392s ago: executing program 32 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000190005002bbd7000fbdbdf2502142004ff02fd02001b000008000f000000000008000100ffffffff"], 0x58}, 0x1, 0x0, 0x0, 0x2400c0d5}, 0x10004020) 4m23.117779143s ago: executing program 1 (id=353): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0), 0x3, 0x459, &(0x7f00000008c0)="$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") socket$packet(0x11, 0x3, 0x300) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='.\x00') 4m22.184425975s ago: executing program 1 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4m15.191909935s ago: executing program 1 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 4m14.839700333s ago: executing program 1 (id=374): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c1, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macromanian,errors=continue,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB="006572726f72733d636f6e74696e6e75652c3030303030303030303066662c756d61736b3d3078303030303030303030303030303030342c6572726f72733d636f6e74696e75652c6e6f696e74656772697e74792c726573697a652c71756f74612c66736d616769633d3078303030303030303030303030303030382c736d61636b66736465663d7204d30400652c"], 0x1, 0x61a4, &(0x7f000000c4c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000540)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m13.537929045s ago: executing program 1 (id=380): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a2d42, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 4m12.866176561s ago: executing program 1 (id=382): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d63703836332c666f7263652c003e7dbdb7aff5a49b652e03309f1299a1444e721692cad073f85fc7f0bf1245d20d68200c11aa9111bae9b9a7d37419df20de1b7806d08c83c61965ab219538abb0a392650a107c3d3d7c91ef31372e6184100fcae9221e5a1edf966fb876f02aa0d4"], 0x1, 0x5e6, &(0x7f0000002f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x135) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4m12.126715609s ago: executing program 33 (id=382): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nodecompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d63703836332c666f7263652c003e7dbdb7aff5a49b652e03309f1299a1444e721692cad073f85fc7f0bf1245d20d68200c11aa9111bae9b9a7d37419df20de1b7806d08c83c61965ab219538abb0a392650a107c3d3d7c91ef31372e6184100fcae9221e5a1edf966fb876f02aa0d4"], 0x1, 0x5e6, &(0x7f0000002f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x135) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3m11.656095535s ago: executing program 3 (id=617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x80000008, 0x0, 0x0, 0x0, 0xfffffffc, 0x1000, 0x2}]}) 3m11.383726931s ago: executing program 3 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3m11.115968798s ago: executing program 3 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)) 3m10.648378689s ago: executing program 3 (id=625): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 3m10.059812713s ago: executing program 3 (id=627): r0 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f00000000c0)="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", 0x1d8, 0xfffffffffffffffc) keyctl$restrict_keyring(0x5, 0xfffffffffffffffe, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x80000) 3m8.976659019s ago: executing program 5 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x4084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x5, 0x8, 0x3, 0x3, 0x3e, 0x7, 0x23c, 0x40, 0x2a8, 0x81, 0x7, 0x38, 0x1, 0x5, 0xf800, 0x8}, [{0x5, 0xe244, 0x7fff, 0x9, 0x0, 0x1, 0x8000000000000000, 0xcad}]}, 0x78) 3m8.598131109s ago: executing program 5 (id=630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000804) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) 3m7.445500306s ago: executing program 3 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x200408b8) 3m6.450615801s ago: executing program 34 (id=632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x200408b8) 3m5.689840269s ago: executing program 5 (id=642): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14045200d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m5.482693665s ago: executing program 5 (id=636): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 3m4.662583954s ago: executing program 5 (id=640): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@random="4de781a1dc5b", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0) 3m4.041445359s ago: executing program 5 (id=645): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xd) ptrace$pokeuser(0x6, r0, 0x358, 0x103) 3m3.271413888s ago: executing program 35 (id=645): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xd) ptrace$pokeuser(0x6, r0, 0x358, 0x103) 5.914051786s ago: executing program 4 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 5.896842966s ago: executing program 0 (id=1234): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)="c945221e0000000059000019cb87f4a5", 0x30}) 5.095583906s ago: executing program 0 (id=1236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) 4.854340222s ago: executing program 7 (id=1238): socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x78) 4.823050442s ago: executing program 4 (id=1239): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) recvmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000033240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) 4.652568956s ago: executing program 0 (id=1240): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) fcntl$notify(r0, 0x402, 0x8000000b) getdents(r1, &(0x7f0000000500)=""/218, 0xda) 4.578310828s ago: executing program 7 (id=1241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf250a00000008000300"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 4.353052804s ago: executing program 0 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.339380644s ago: executing program 6 (id=1243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) 4.246388897s ago: executing program 7 (id=1244): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) recvmsg$kcm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/183, 0xb7}], 0x1}, 0x2000) 4.060900471s ago: executing program 4 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.219850062s ago: executing program 7 (id=1246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000440)=@svm={0x103, 0x1, 0x1080, {0x4000}, {"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"}}) 2.4380346s ago: executing program 0 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.360505962s ago: executing program 6 (id=1248): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) 2.158869957s ago: executing program 4 (id=1249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x0, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x10, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x27, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xf, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x87, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) 1.996992521s ago: executing program 6 (id=1250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000c95d"}) 1.874342234s ago: executing program 7 (id=1251): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x45, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x5299, 0xc, 0x800, 0xf533, 0xf4a}, {0x8001, 0x807, 0x1, 0x17, 0x0, 0xffff}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001300)=""/115) 1.62608851s ago: executing program 4 (id=1252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x200000000000) 1.604699661s ago: executing program 6 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8477, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44002) 1.509916953s ago: executing program 0 (id=1254): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x10, 0x2, "8b61"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.462247964s ago: executing program 7 (id=1255): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4e7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc8, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385126eb63747a739960044380000000000000000000000000000000000000080000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.301760708s ago: executing program 6 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.22979897s ago: executing program 4 (id=1257): syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc408, 0x103) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004180)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRESOCT, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000000)='./file0\x00') 0s ago: executing program 6 (id=1258): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000100)=0x7, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/rcu_expedited', 0x10000, 0x10) getsockname$packet(r6, 0x0, &(0x7f0000000280)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r8 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000009b80)={0x40000012}) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0xfffffecf) epoll_pwait(r8, &(0x7f0000000040), 0x0, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x10}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) kernel console output (not intermixed with test programs): on, please check. [ 230.605346][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.704133][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 230.825352][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 230.832880][ T27] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.865708][ T27] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.903697][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.920911][ T27] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 230.954375][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.994328][ T27] usb 4-1: config 0 descriptor?? [ 231.032986][ T7954] loop4: detected capacity change from 0 to 32768 [ 231.144276][ T7954] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 231.461844][ T27] hkems 0003:2006:0118.0012: item fetching failed at offset 6/24 [ 231.476146][ T27] hkems 0003:2006:0118.0012: parse failed [ 231.482288][ T27] hkems: probe of 0003:2006:0118.0012 failed with error -22 [ 231.493538][ T6064] ocfs2: Unmounting device (7,4) on (node local) [ 231.742544][ T27] usb 4-1: USB disconnect, device number 11 [ 232.509498][ T8004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.579463][ T8010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.346218][ T8027] capability: warning: `syz.3.580' uses 32-bit capabilities (legacy support in use) [ 233.574371][ T8034] syz.5.581: attempt to access beyond end of device [ 233.574371][ T8034] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 234.669577][ T8045] bridge0: entered promiscuous mode [ 235.310702][ T8035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.430464][ T8071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.481286][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 235.913962][ T8080] syz.5.594: attempt to access beyond end of device [ 235.913962][ T8080] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 236.720730][ T8082] loop5: detected capacity change from 0 to 512 [ 236.871492][ T8082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.911737][ T8082] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.950355][ T8082] EXT4-fs error (device loop5): ext4_readdir:223: inode #12: comm syz.5.596: path /56/file0/file0: directory fails checksum at offset 0 [ 237.108382][ T7305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.496296][ T8069] loop3: detected capacity change from 0 to 40427 [ 237.593834][ T8069] F2FS-fs (loop3): invalid crc value [ 237.679410][ T8069] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.905700][ T8069] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 238.434650][ T8095] loop5: detected capacity change from 0 to 32768 [ 238.546399][ T8095] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 238.723327][ T8095] XFS (loop5): Ending clean mount [ 238.770417][ T28] audit: type=1800 audit(1788802607.573:14): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.597" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 238.991399][ T7305] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 239.232891][ T8130] process 'syz.3.602' launched './file2' with NULL argv: empty string added [ 239.703317][ T8140] loop5: detected capacity change from 0 to 512 [ 239.745900][ T51] Bluetooth: hci0: unexpected event for opcode 0x203c [ 239.854729][ T8140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 239.932689][ T8140] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.046495][ T8140] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 240.065640][ T8140] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 240.120273][ T8140] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.604: Failed to acquire dquot type 0 [ 240.179878][ T8157] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 240.270273][ T8157] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 240.303780][ T8157] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.604: Failed to acquire dquot type 0 [ 240.404430][ T7305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 240.614421][ T8172] loop3: detected capacity change from 0 to 512 [ 240.703268][ T8172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.722927][ T8172] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.751894][ T28] audit: type=1800 audit(1788802609.563:15): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 240.868040][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.972164][ T8184] syz.0.623: attempt to access beyond end of device [ 240.972164][ T8184] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 242.288204][ T8205] loop4: detected capacity change from 0 to 512 [ 242.386536][ T8206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.479686][ T8205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 242.520939][ T8205] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.633160][ T8205] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 242.676138][ T8205] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 242.692967][ T8205] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.620: Failed to acquire dquot type 0 [ 242.719695][ T8205] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 242.767004][ T8205] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 242.791790][ T8205] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.620: Failed to acquire dquot type 0 [ 242.976775][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 243.050311][ T8224] loop3: detected capacity change from 0 to 2048 [ 243.104186][ T8224] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 243.217127][ T8224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.360096][ T8224] UDF-fs: bad mount option "fscontext=system_u" or missing value [ 243.475472][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 243.507018][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 243.836889][ T6775] infiniband syz1: set down [ 243.843534][ T5843] syz1: rxe_query_port: returned err = -19 [ 243.908677][ T5822] syz1: rxe_query_port: returned err = -19 [ 243.955917][ T5822] infiniband syz1: ib_query_port failed (-19) [ 244.026900][ T27] syz1: rxe_query_port: returned err = -19 [ 244.048124][ T7480] smc: removing ib device syz1 [ 244.531590][ T8229] loop4: detected capacity change from 0 to 40427 [ 244.579804][ T8229] F2FS-fs (loop4): Invalid segment/section count (24 != 3 * 1) [ 244.606222][ T8229] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 244.669770][ T8229] F2FS-fs (loop4): invalid crc value [ 244.743455][ T8229] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.973834][ T8229] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 245.011989][ T8229] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 245.218593][ T8229] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 245.320081][ T8229] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 245.801850][ T8229] F2FS-fs (loop4): f2fs_new_node_page: inconsistent nat entry, ino:5, nid:5, blkaddr:4608, ver:0, flag:0 [ 246.271365][ T7596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.416408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 247.449728][ T7596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.684267][ T7596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.023381][ T8283] loop4: detected capacity change from 0 to 512 [ 248.114927][ T8283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.175811][ T8283] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.217534][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.229312][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.240380][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.276240][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.293968][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.321551][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.328704][ T8283] EXT4-fs error (device loop4): ext4_readdir:223: inode #12: comm syz.4.634: path /110/file0/file0: directory fails checksum at offset 0 [ 248.454521][ T8289] loop5: detected capacity change from 0 to 2048 [ 248.567589][ T8289] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 248.568530][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.614257][ T8289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.774706][ T8289] UDF-fs: bad mount option "fscontext=system_u" or missing value [ 248.858348][ T7305] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 248.876240][ T7305] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 249.758211][ T8286] chnl_net:caif_netlink_parms(): no params data found [ 250.197019][ T8308] loop0: detected capacity change from 0 to 40427 [ 250.216979][ T8308] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 250.223400][ T8308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 250.263073][ T8308] F2FS-fs (loop0): invalid crc value [ 250.324184][ T8286] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.365626][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.373068][ T8286] bridge_slave_0: entered allmulticast mode [ 250.427496][ T8286] bridge_slave_0: entered promiscuous mode [ 250.458222][ T8286] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.466933][ T5787] Bluetooth: hci0: command tx timeout [ 250.497358][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.504686][ T8286] bridge_slave_1: entered allmulticast mode [ 250.563421][ T8286] bridge_slave_1: entered promiscuous mode [ 250.781900][ T8308] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 250.796520][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.822985][ T8308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 250.977902][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.259203][ T8286] team0: Port device team_slave_0 added [ 251.357051][ T7596] hsr_slave_0: left promiscuous mode [ 251.373235][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.394133][ T7596] hsr_slave_1: left promiscuous mode [ 251.406844][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.415889][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.423371][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.431696][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.446563][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.466449][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.473982][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.543788][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.556852][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.569625][ T7596] bridge_slave_1: left allmulticast mode [ 251.576611][ T7596] bridge_slave_1: left promiscuous mode [ 251.583621][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.595930][ T7596] bridge_slave_0: left allmulticast mode [ 251.601653][ T7596] bridge_slave_0: left promiscuous mode [ 251.608769][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.688101][ T7596] veth0_macvtap: left promiscuous mode [ 251.704049][ T7596] veth1_vlan: left promiscuous mode [ 251.710123][ T7596] veth0_vlan: left promiscuous mode [ 252.277458][ T8367] Bluetooth: MGMT ver 1.22 [ 252.529564][ T8371] loop0: detected capacity change from 0 to 64 [ 252.556588][ T5787] Bluetooth: hci0: command tx timeout [ 253.350569][ T8382] syz.0.662: attempt to access beyond end of device [ 253.350569][ T8382] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 253.506978][ T5787] Bluetooth: hci1: command tx timeout [ 254.521625][ T8384] loop0: detected capacity change from 0 to 32768 [ 254.586973][ T28] audit: type=1800 audit(1788802623.393:16): pid=8384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.657" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 254.631436][ T8384] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 254.631436][ T8384] [ 254.643722][ T5787] Bluetooth: hci0: command tx timeout [ 254.654628][ T8384] ERROR: (device loop0): remounting filesystem as read-only [ 254.663312][ T8384] ialloc: diAlloc returned -5! [ 254.868353][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 255.049149][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 255.134646][ T8380] loop4: detected capacity change from 0 to 40427 [ 255.164195][ T8380] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 255.178321][ T8380] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 255.217226][ T8380] F2FS-fs (loop4): invalid crc value [ 255.243915][ T7596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.397728][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.510176][ T8380] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 255.523254][ T8380] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.596285][ T5787] Bluetooth: hci1: command tx timeout [ 255.735962][ T8386] loop0: detected capacity change from 0 to 32768 [ 255.858473][ T8386] ialloc: diAlloc returned -28! [ 256.074799][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.088335][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.442967][ T7596] bond0 (unregistering): Released all slaves [ 256.654484][ T8286] team0: Port device team_slave_1 added [ 256.706261][ T5787] Bluetooth: hci0: command tx timeout [ 256.831470][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.845403][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.912347][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.944475][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.985251][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.043611][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.207695][ T8392] loop4: detected capacity change from 0 to 32768 [ 257.382368][ T8286] hsr_slave_0: entered promiscuous mode [ 257.414120][ T8405] loop0: detected capacity change from 0 to 64 [ 257.429686][ T8286] hsr_slave_1: entered promiscuous mode [ 257.464776][ T8286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.477917][ T8286] Cannot create hsr debugfs directory [ 257.666343][ T5787] Bluetooth: hci1: command tx timeout [ 257.938018][ T8415] loop0: detected capacity change from 0 to 256 [ 258.341104][ T7596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.433317][ T8427] loop0: detected capacity change from 0 to 2048 [ 258.488437][ T8427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.526283][ T8427] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.721195][ T7596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.736466][ T8427] fs-verity (loop0, inode 13): Unknown hash algorithm number: 246 [ 258.794630][ T8347] chnl_net:caif_netlink_parms(): no params data found [ 258.900708][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.949221][ T7596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.188356][ T7596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.427298][ T5823] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 259.627902][ T5823] usb 1-1: Using ep0 maxpacket: 8 [ 259.648119][ T5823] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 259.669461][ T5823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 259.712729][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.745377][ T5787] Bluetooth: hci1: command tx timeout [ 259.751109][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.759023][ T5823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.770736][ T5823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 259.778883][ T8347] bridge_slave_0: entered allmulticast mode [ 259.784047][ T5823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 259.802146][ T5823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.824590][ T5823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.835958][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.847282][ T8347] bridge_slave_0: entered promiscuous mode [ 259.867824][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.875099][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.883726][ T8347] bridge_slave_1: entered allmulticast mode [ 259.903875][ T8347] bridge_slave_1: entered promiscuous mode [ 259.943917][ T8286] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.053120][ T8286] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.066851][ T5823] usb 1-1: GET_CAPABILITIES returned 0 [ 260.074547][ T5823] usbtmc 1-1:16.0: can't read capabilities [ 260.084631][ T8286] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.224402][ T8347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.256389][ T8286] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.302419][ T5823] usb 1-1: USB disconnect, device number 12 [ 260.409115][ T8347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.614655][ T8347] team0: Port device team_slave_0 added [ 260.647443][ T8347] team0: Port device team_slave_1 added [ 260.697353][ T8461] loop4: detected capacity change from 0 to 256 [ 260.742373][ T8461] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf9f813e7, utbl_chksum : 0xe619d30d) [ 261.035736][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.042784][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.081516][ T8347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.099327][ T8465] loop4: detected capacity change from 0 to 16 [ 261.178231][ T8465] erofs: (device loop4): mounted with root inode @ nid 36. [ 261.197944][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.205025][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.276082][ T8347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.534897][ T8468] loop4: detected capacity change from 0 to 4096 [ 261.572862][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.654060][ T8347] hsr_slave_0: entered promiscuous mode [ 261.736513][ T8347] hsr_slave_1: entered promiscuous mode [ 261.792598][ T8347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.815904][ T8347] Cannot create hsr debugfs directory [ 262.026123][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.201328][ T8480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.371150][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.586785][ T8286] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.663433][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.670769][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.698267][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.705645][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.803907][ T8486] loop4: detected capacity change from 0 to 4096 [ 263.450001][ T8347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 263.530860][ T7596] hsr_slave_0: left promiscuous mode [ 263.557480][ T7596] hsr_slave_1: left promiscuous mode [ 263.590071][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.640432][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.659263][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.685949][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.753519][ T7596] bridge_slave_1: left allmulticast mode [ 263.803130][ T7596] bridge_slave_1: left promiscuous mode [ 263.830380][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.849914][ T7596] bridge_slave_0: left allmulticast mode [ 263.856864][ T7596] bridge_slave_0: left promiscuous mode [ 263.862743][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.918169][ T7596] bridge0: left promiscuous mode [ 263.924057][ T7596] veth1_macvtap: left promiscuous mode [ 263.930721][ T7596] veth0_macvtap: left promiscuous mode [ 263.937351][ T8501] loop0: detected capacity change from 0 to 16 [ 263.945054][ T7596] veth1_vlan: left promiscuous mode [ 263.972363][ T7596] veth0_vlan: left promiscuous mode [ 264.001573][ T8501] erofs: (device loop0): mounted with root inode @ nid 36. [ 264.017102][ T8501] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 265.470338][ T8516] loop4: detected capacity change from 0 to 256 [ 266.052433][ T8520] loop4: detected capacity change from 0 to 4096 [ 266.073076][ T8520] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 266.345986][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 266.458166][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 266.476935][ T8522] loop4: detected capacity change from 0 to 256 [ 266.562315][ T7596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.700873][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.972846][ T8527] loop4: detected capacity change from 0 to 512 [ 267.048386][ T8527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.074915][ T8527] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.255890][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.492401][ T7596] bond0 (unregistering): Released all slaves [ 267.612515][ T8347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.639157][ T8511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.788241][ T8347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.843206][ T8347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.960114][ T8540] loop4: detected capacity change from 0 to 1024 [ 268.043821][ T8540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.086045][ T8540] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.222063][ T5820] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 268.362135][ T8286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.377714][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 268.465417][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 268.475172][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 268.518972][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 268.578654][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 268.593821][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.616225][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 268.636258][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.673583][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.689529][ T5820] usb 1-1: config 0 descriptor?? [ 268.751137][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.758467][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.808456][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.815743][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.848978][ T8554] loop4: detected capacity change from 0 to 2048 [ 268.916896][ T8554] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=4294967289, location=4294967289 [ 268.935911][ T5820] hdpvr 1-1:0.0: firmware version 0x0 dated [ 268.944838][ T5820] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 268.977357][ T8554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.418900][ T5820] hdpvr 1-1:0.0: Could not setup controls [ 269.446800][ T5820] hdpvr 1-1:0.0: registering videodev failed [ 269.522394][ T5820] hdpvr: probe of 1-1:0.0 failed with error -71 [ 269.561820][ T5820] usb 1-1: USB disconnect, device number 13 [ 269.650452][ T8574] syz.4.691: attempt to access beyond end of device [ 269.650452][ T8574] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 269.942462][ T8286] veth0_vlan: entered promiscuous mode [ 270.281485][ T8286] veth1_vlan: entered promiscuous mode [ 270.572183][ T8286] veth0_macvtap: entered promiscuous mode [ 270.598895][ T8286] veth1_macvtap: entered promiscuous mode [ 270.747052][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.772390][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.817210][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.839738][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.853010][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.887473][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.915965][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.928127][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.940474][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.954993][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.978165][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.018522][ T8286] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.045459][ T8286] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.065881][ T8286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.092272][ T8286] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.436556][ T7564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.444489][ T7564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.614701][ T8594] loop0: detected capacity change from 0 to 512 [ 271.623213][ T7596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.649343][ T7596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.721024][ T8594] EXT4-fs (loop0): 1 truncate cleaned up [ 271.741166][ T8594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.070370][ T8594] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.695: bg 0: block 465: padding at end of block bitmap is not set [ 272.191472][ T8595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.216753][ T8594] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 272.301261][ T8594] EXT4-fs (loop0): This should not happen!! Data will be lost [ 272.301261][ T8594] [ 272.312700][ T8594] EXT4-fs (loop0): Total free blocks count 0 [ 272.331924][ T8594] EXT4-fs (loop0): Free/Dirty block details [ 272.384866][ T8594] EXT4-fs (loop0): free_blocks=0 [ 272.456144][ T8594] EXT4-fs (loop0): dirty_blocks=1 [ 272.461277][ T8594] EXT4-fs (loop0): Block reservation details [ 272.487978][ T8347] veth0_vlan: entered promiscuous mode [ 272.507198][ T8594] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 272.530036][ T8347] veth1_vlan: entered promiscuous mode [ 272.649153][ T8347] veth0_macvtap: entered promiscuous mode [ 272.659193][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.695137][ T8347] veth1_macvtap: entered promiscuous mode [ 272.818555][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.856495][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.875008][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.906050][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.945291][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.995564][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.138360][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.218833][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.281523][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.292122][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.395967][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.235243][ T8347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.256656][ T8622] syz.4.698: attempt to access beyond end of device [ 274.256656][ T8622] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 274.361265][ T8347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.469468][ T8347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.528105][ T8620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.562278][ T8347] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.601876][ T8347] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.614116][ T8347] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.631131][ T8347] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.727550][ T8625] loop4: detected capacity change from 0 to 512 [ 274.760565][ T8625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 274.818877][ T8625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 274.850025][ T8625] System zones: 1-12 [ 274.886758][ T8625] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.700: bad orphan inode 16 [ 274.910426][ T8606] loop6: detected capacity change from 0 to 32768 [ 274.951164][ T8625] ext4_test_bit(bit=15, block=4) = 0 [ 274.964378][ T8606] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 275.040591][ T8625] EXT4-fs (loop4): 1 orphan inode deleted [ 275.058779][ T8606] JBD2: Ignoring recovery information on journal [ 275.088195][ T8625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.110561][ T8630] loop0: detected capacity change from 0 to 2048 [ 275.139697][ T7564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.148936][ T8630] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4294967289, location=4294967289 [ 275.204499][ T7564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.219631][ T8630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.230505][ T8625] EXT4-fs error (device loop4): __ext4_new_inode:1083: comm syz.4.700: reserved inode found cleared - inode=9 [ 275.293922][ T7564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.315076][ T8606] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 275.341185][ T7564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.520894][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.670405][ T8286] ocfs2: Unmounting device (7,6) on (node local) [ 275.852223][ T8639] loop4: detected capacity change from 0 to 512 [ 275.960787][ T8639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.022642][ T8639] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.244666][ T8650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 276.276314][ T8652] syz.0.704: attempt to access beyond end of device [ 276.276314][ T8652] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 277.302033][ T8661] syz.0.707: attempt to access beyond end of device [ 277.302033][ T8661] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 278.210699][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.463404][ T8677] loop6: detected capacity change from 0 to 512 [ 278.587484][ T8677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 278.646921][ T8677] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 278.655029][ T8677] System zones: 1-12 [ 278.794468][ T8677] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.710: bad orphan inode 16 [ 278.856272][ T8677] ext4_test_bit(bit=15, block=4) = 0 [ 278.872396][ T8677] EXT4-fs (loop6): 1 orphan inode deleted [ 278.892426][ T8677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.996336][ T8677] EXT4-fs error (device loop6): __ext4_new_inode:1083: comm syz.6.710: reserved inode found cleared - inode=9 [ 279.183238][ T8286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.319392][ T8691] loop7: detected capacity change from 0 to 256 [ 279.327945][ T8691] exfat: Deprecated parameter 'utf8' [ 279.336311][ T8691] exfat: Deprecated parameter 'utf8' [ 279.341895][ T8691] exfat: Deprecated parameter 'utf8' [ 279.418155][ T8691] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 279.572057][ T8669] loop0: detected capacity change from 0 to 32768 [ 279.646273][ T8669] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 279.681824][ T8669] JBD2: Ignoring recovery information on journal [ 279.785905][ T5821] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 279.872679][ T8700] loop7: detected capacity change from 0 to 512 [ 279.904882][ T8669] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 279.941713][ T8700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.996841][ T8686] loop4: detected capacity change from 0 to 32768 [ 280.001350][ T5821] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 280.028978][ T8700] EXT4-fs (loop7): 1 truncate cleaned up [ 280.049219][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.063946][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.083947][ T8686] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 280.103430][ T8700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.125880][ T5821] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 280.186453][ T5821] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 280.226200][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.294339][ T5821] usb 7-1: config 0 descriptor?? [ 280.406510][ T8347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.450947][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 280.564962][ T5785] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 281.297899][ T5821] holtek_kbd 0003:04D9:A055.0013: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 281.419340][ T8714] Bluetooth: MGMT ver 1.22 [ 281.503462][ T5821] usb 7-1: USB disconnect, device number 2 [ 281.834456][ T8721] loop7: detected capacity change from 0 to 256 [ 281.874926][ T8715] fido_id[8715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 282.024465][ T5822] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.246168][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 282.253492][ T5822] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.308019][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.329530][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 282.378950][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.413750][ T5822] usb 5-1: config 0 descriptor?? [ 282.787812][ T8737] loop6: detected capacity change from 0 to 2048 [ 282.862371][ T5822] logitech 0003:046D:CA03.0014: unknown main item tag 0x4 [ 282.882870][ T5822] logitech 0003:046D:CA03.0014: ignoring exceeding usage max [ 282.901955][ T8737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.931701][ T5822] logitech 0003:046D:CA03.0014: unbalanced collection at end of report description [ 282.992245][ T5822] logitech 0003:046D:CA03.0014: parse failed [ 283.019231][ T5822] logitech: probe of 0003:046D:CA03.0014 failed with error -22 [ 283.126735][ T5822] usb 5-1: USB disconnect, device number 7 [ 283.217637][ T8286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.493603][ T8723] loop0: detected capacity change from 0 to 32768 [ 283.596149][ T8723] JBD2: Ignoring recovery information on journal [ 283.829157][ T8723] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 284.073672][ T8755] FAULT_INJECTION: forcing a failure. [ 284.073672][ T8755] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 284.116157][ T8755] CPU: 0 PID: 8755 Comm: syz.4.728 Not tainted syzkaller #0 [ 284.123538][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.133666][ T8755] Call Trace: [ 284.136993][ T8755] [ 284.139971][ T8755] dump_stack_lvl+0x18c/0x250 [ 284.144715][ T8755] ? show_regs_print_info+0x20/0x20 [ 284.149990][ T8755] ? load_image+0x420/0x420 [ 284.154563][ T8755] ? __might_fault+0xaa/0x120 [ 284.159299][ T8755] ? __lock_acquire+0x7d80/0x7d80 [ 284.164405][ T8755] should_fail_ex+0x394/0x4c0 [ 284.169148][ T8755] _copy_from_user+0x2f/0xe0 [ 284.173794][ T8755] kstrtouint_from_user+0xde/0x170 [ 284.178969][ T8755] ? kstrtol_from_user+0x190/0x190 [ 284.184148][ T8755] ? get_pid_task+0x20/0x1e0 [ 284.188813][ T8755] proc_fail_nth_write+0x8f/0x250 [ 284.193908][ T8755] ? proc_fail_nth_read+0x260/0x260 [ 284.199174][ T8755] ? iov_iter_iovec_advance+0x1ef/0x290 [ 284.204803][ T8755] do_iter_write+0x4e5/0xc50 [ 284.209479][ T8755] ? proc_fail_nth_read+0x260/0x260 [ 284.214748][ T8755] ? vfs_iter_write+0xa0/0xa0 [ 284.219489][ T8755] ? rcu_read_lock_any_held+0xb4/0x140 [ 284.225005][ T8755] ? rcu_read_lock_bh_held+0x100/0x100 [ 284.230537][ T8755] do_writev+0x27f/0x480 [ 284.234839][ T8755] ? do_readv+0x460/0x460 [ 284.239243][ T8755] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 284.245287][ T8755] ? lock_chain_count+0x20/0x20 [ 284.250223][ T8755] ? lockdep_hardirqs_on+0x98/0x150 [ 284.255494][ T8755] do_syscall_64+0x55/0xb0 [ 284.259976][ T8755] ? clear_bhb_loop+0x40/0x90 [ 284.264719][ T8755] ? clear_bhb_loop+0x40/0x90 [ 284.269462][ T8755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.275462][ T8755] RIP: 0033:0x7fd78fb9e159 [ 284.279932][ T8755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.299599][ T8755] RSP: 002b:00007fd790984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 284.308091][ T8755] RAX: ffffffffffffffda RBX: 00007fd78fe25fa0 RCX: 00007fd78fb9e159 [ 284.316129][ T8755] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 284.324188][ T8755] RBP: 00007fd78fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 284.332343][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.340373][ T8755] R13: 00007fd78fe26038 R14: 00007fd78fe25fa0 R15: 00007ffe80703df8 [ 284.348425][ T8755] [ 284.517346][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 284.548784][ T8761] loop7: detected capacity change from 0 to 1024 [ 284.907037][ T7079] hfsplus: b-tree write err: -5, ino 8 [ 285.446092][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 285.658598][ T27] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 285.676839][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.727804][ T27] usb 1-1: config 0 descriptor?? [ 285.737960][ T27] cp210x 1-1:0.0: cp210x converter detected [ 285.743543][ T8781] loop6: detected capacity change from 0 to 256 [ 285.818712][ T8781] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 286.000844][ T8770] loop7: detected capacity change from 0 to 32768 [ 286.121715][ T8770] JBD2: Ignoring recovery information on journal [ 286.299967][ T8770] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 286.359567][ T27] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 286.390380][ T27] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 286.432332][ T27] usb 1-1: cp210x converter now attached to ttyUSB0 [ 286.491300][ T27] usb 1-1: USB disconnect, device number 14 [ 286.534779][ T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 286.587453][ T27] cp210x 1-1:0.0: device disconnected [ 286.699124][ T8347] ocfs2: Unmounting device (7,7) on (node local) [ 286.748524][ T8777] loop4: detected capacity change from 0 to 32768 [ 286.861498][ T8777] JBD2: Ignoring recovery information on journal [ 286.881199][ T8777] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 286.890722][ T8777] JBD2: bad block at offset 32 [ 286.926233][ T8777] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 287.044861][ T8799] netlink: 68 bytes leftover after parsing attributes in process `syz.7.736'. [ 287.045283][ T8777] (syz.4.741,8777,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=3344, inode=0, rec_len=0, name_len=0 [ 287.301290][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.737'. [ 287.411499][ T6064] ocfs2: Unmounting device (7,4) on (node local) [ 287.622365][ T8813] loop6: detected capacity change from 0 to 512 [ 287.659697][ T8813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 287.715471][ T8813] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.798499][ T8813] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:478: comm syz.6.742: Invalid block bitmap block 0 in block_group 0 [ 287.841492][ T8813] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 287.900340][ T8813] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.742: attempt to clear invalid blocks 983261 len 1 [ 287.990937][ T8813] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz.6.742: Invalid inode table block 0 in block_group 0 [ 288.072335][ T8813] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 288.166315][ T8813] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 288.217680][ T8813] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz.6.742: Invalid inode table block 0 in block_group 0 [ 288.289537][ T8813] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 288.343740][ T8813] EXT4-fs error (device loop6): ext4_truncate:4302: inode #11: comm syz.6.742: mark_inode_dirty error [ 288.389400][ T8813] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 288.433403][ T8813] EXT4-fs error (device loop6): __ext4_get_inode_loc:4497: comm syz.6.742: Invalid inode table block 0 in block_group 0 [ 288.500754][ T8813] EXT4-fs (loop6): 1 truncate cleaned up [ 288.537638][ T8813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.868228][ T8286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.055946][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 290.079175][ T8838] loop6: detected capacity change from 0 to 32768 [ 290.153746][ T8838] JBD2: Ignoring recovery information on journal [ 290.252928][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 290.254517][ T8842] loop7: detected capacity change from 0 to 32768 [ 290.275931][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.284020][ T27] usb 1-1: Product: syz [ 290.290010][ T27] usb 1-1: Manufacturer: syz [ 290.294684][ T27] usb 1-1: SerialNumber: syz [ 290.370752][ T971] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 290.400293][ T8842] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 290.448601][ T8838] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 290.597433][ T8856] loop4: detected capacity change from 0 to 16 [ 290.653442][ T8856] erofs: (device loop4): mounted with root inode @ nid 36. [ 290.710197][ T8856] syz.4.750: attempt to access beyond end of device [ 290.710197][ T8856] loop4: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 290.756999][ T8856] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 291.007573][ T789] usb 1-1: USB disconnect, device number 15 [ 291.182944][ T8286] ocfs2: Unmounting device (7,6) on (node local) [ 291.319726][ T8842] loop7: detected capacity change from 0 to 2048 [ 291.477294][ T8842] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.523008][ T971] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 291.572839][ T971] ath9k_htc: Failed to initialize the device [ 291.614451][ T789] usb 1-1: ath9k_htc: USB layer deinitialized [ 291.704276][ T8871] loop0: detected capacity change from 0 to 256 [ 291.757421][ T8347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.035975][ T5822] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 292.262985][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.286465][ T5822] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.317314][ T5822] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 292.336143][ T789] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 292.351125][ T5822] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.370148][ T5822] usb 7-1: config 0 descriptor?? [ 292.521642][ T8887] loop0: detected capacity change from 0 to 4096 [ 292.539200][ T8887] EXT4-fs: inline encryption not supported [ 292.556105][ T789] usb 8-1: Using ep0 maxpacket: 16 [ 292.581902][ T789] usb 8-1: config 0 interface 0 altsetting 183 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.602994][ T789] usb 8-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.619635][ T8887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 292.663116][ T789] usb 8-1: config 0 interface 0 has no altsetting 0 [ 292.699389][ T789] usb 8-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 292.719925][ T8887] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 292.755950][ T789] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.793132][ T8887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.828506][ T789] usb 8-1: config 0 descriptor?? [ 292.864510][ T5822] isku 0003:1E7D:319C.0015: unknown main item tag 0x1 [ 292.915880][ T5822] isku 0003:1E7D:319C.0015: item fetching failed at offset 2/7 [ 292.924303][ T5822] isku 0003:1E7D:319C.0015: parse failed [ 292.983141][ T5822] isku: probe of 0003:1E7D:319C.0015 failed with error -22 [ 293.258968][ T5821] usb 7-1: USB disconnect, device number 3 [ 293.280568][ T789] logitech-djreceiver 0003:046D:C71C.0016: unexpected long global item [ 293.341644][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.382750][ T789] logitech-djreceiver 0003:046D:C71C.0016: logi_dj_probe: parse failed [ 293.457995][ T789] logitech-djreceiver: probe of 0003:046D:C71C.0016 failed with error -22 [ 293.554525][ T789] usb 8-1: USB disconnect, device number 2 [ 294.745881][ T789] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 294.770240][ T8918] loop7: detected capacity change from 0 to 4096 [ 294.814937][ T8918] ntfs3: loop7: Different NTFS sector size (2048) and media sector size (512). [ 294.963307][ T789] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 295.004520][ T789] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 295.045968][ T789] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 295.115986][ T789] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 295.125107][ T789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.171533][ T8915] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 295.672629][ T8922] loop4: detected capacity change from 0 to 2048 [ 295.702454][ T8925] loop0: detected capacity change from 0 to 512 [ 295.790417][ T8925] EXT4-fs: Ignoring removed nobh option [ 295.874797][ T8925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.920676][ T8922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.943349][ T8925] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 296.040568][ T8925] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 296.137613][ T8925] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 296.248206][ T8922] EXT4-fs (loop4): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 296.287842][ T8925] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 296.335612][ T8925] EXT4-fs (loop0): orphan cleanup on readonly fs [ 296.347893][ T8925] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.759: bg 0: block 34: padding at end of block bitmap is not set [ 296.375017][ T8925] Quota error (device loop0): write_blk: dquota write failed [ 296.407273][ T8922] EXT4-fs error (device loop4): __ext4_remount:6756: comm syz.4.763: Abort forced by user [ 296.456171][ T8922] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 296.469050][ T8925] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 296.507620][ T8925] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.759: Failed to acquire dquot type 1 [ 296.587557][ T8925] EXT4-fs (loop0): 1 truncate cleaned up [ 296.618415][ T8925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.688033][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.158027][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.261042][ T27] usb 7-1: USB disconnect, device number 4 [ 297.261764][ T5787] Bluetooth: hci4: Reading Intel version command failed (-71) [ 297.679690][ T8954] bonding: bond is being created... [ 298.331283][ T8965] loop0: detected capacity change from 0 to 1024 [ 298.346418][ T8942] loop4: detected capacity change from 0 to 32768 [ 298.368683][ T8965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.423097][ T8942] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 298.493914][ T8965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.517114][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 298.650416][ T8942] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 298.748732][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.822094][ T8942] XFS (loop4): Starting recovery (logdev: internal) [ 298.833916][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.883471][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.963824][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.015119][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.041462][ T8942] XFS (loop4): Ending recovery (logdev: internal) [ 299.052045][ T8964] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 299.162397][ T8] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 299.994294][ T6064] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 300.029586][ T8] usb 8-1: USB disconnect, device number 3 [ 302.670163][ T9003] loop0: detected capacity change from 0 to 4096 [ 302.830346][ T9003] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 302.882998][ T9003] ntfs3: loop0: Failed to load $Extend (-22). [ 302.912417][ T9003] ntfs3: loop0: Failed to initialize $Extend. [ 303.435859][ T789] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 305.296783][ T9039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.332940][ T789] usb 8-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 305.392327][ T789] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.541083][ T789] usb 8-1: Product: syz [ 305.593930][ T789] usb 8-1: Manufacturer: syz [ 305.609620][ T789] usb 8-1: SerialNumber: syz [ 305.634780][ T789] usb 8-1: config 0 descriptor?? [ 305.661246][ T789] i2c-tiny-usb 8-1:0.0: version 6d.cc found at bus 008 address 004 [ 305.965232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 306.006627][ T5787] Bluetooth: hci3: Malformed LE Event: 0x0d [ 306.340054][ T789] i2c i2c-1: failure reading functionality [ 306.388507][ T789] i2c i2c-1: connected i2c-tiny-usb device [ 306.412037][ T789] usb 8-1: USB disconnect, device number 4 [ 306.951395][ T9067] syz.0.790: attempt to access beyond end of device [ 306.951395][ T9067] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 308.345925][ T27] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 308.550729][ T27] usb 5-1: not running at top speed; connect to a high speed hub [ 308.573126][ T7596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.616186][ T27] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 308.649927][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.683950][ T27] usb 5-1: Product: syz [ 308.703894][ T27] usb 5-1: Manufacturer: syz [ 308.717091][ T27] usb 5-1: SerialNumber: syz [ 308.739134][ T27] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 308.772078][ T27] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 308.850586][ T27] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 308.923987][ T7596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.934491][ T27] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 308.959471][ T27] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 308.983702][ T9081] loop6: detected capacity change from 0 to 32768 [ 309.031301][ T9081] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 309.289120][ T7596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.420123][ T5793] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 309.612656][ T7596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.916982][ T9102] syz.6.800: attempt to access beyond end of device [ 309.916982][ T9102] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 310.994567][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.014009][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.044822][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.076576][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.097751][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.109668][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.160768][ T5822] usb 5-1: USB disconnect, device number 8 [ 311.261306][ T5822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 311.395016][ T5822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 311.483954][ T5822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 311.539570][ T5822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 311.567266][ T5822] keyspan 5-1:1.0: device disconnected [ 311.742533][ T9123] loop4: detected capacity change from 0 to 512 [ 311.833178][ T9123] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.878680][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.807'. [ 313.199464][ T51] Bluetooth: hci3: command tx timeout [ 313.401122][ T9110] chnl_net:caif_netlink_parms(): no params data found [ 313.435823][ T9153] loop5: detected capacity change from 0 to 6 [ 313.467465][ T9153] loop5: [POWERTEC] p1 p2 p3 [ 313.497799][ T9153] loop5: p1 start 2738982409 is beyond EOD, truncated [ 313.515053][ T9153] loop5: p2 start 3318134482 is beyond EOD, truncated [ 313.555585][ T9153] loop5: p3 start 3832978868 is beyond EOD, truncated [ 313.937143][ T9149] loop7: detected capacity change from 0 to 32768 [ 314.074714][ T9149] JBD2: Ignoring recovery information on journal [ 314.177316][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.184555][ T9110] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.192442][ T9110] bridge_slave_0: entered allmulticast mode [ 314.200179][ T9110] bridge_slave_0: entered promiscuous mode [ 314.209570][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.218616][ T9149] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 314.218719][ T9110] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.237277][ T9110] bridge_slave_1: entered allmulticast mode [ 314.245010][ T9110] bridge_slave_1: entered promiscuous mode [ 314.309813][ T7596] hsr_slave_0: left promiscuous mode [ 314.336198][ T7596] hsr_slave_1: left promiscuous mode [ 314.346720][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.369972][ T9165] loop6: detected capacity change from 0 to 512 [ 314.377007][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.399949][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.431189][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.441298][ T9148] loop4: detected capacity change from 0 to 32768 [ 314.464576][ T7596] bridge_slave_1: left allmulticast mode [ 314.505426][ T7596] bridge_slave_1: left promiscuous mode [ 314.526726][ T9148] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 314.526726][ T9148] [ 314.555687][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.588042][ T9165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.602924][ T9148] ERROR: (device loop4): remounting filesystem as read-only [ 314.619243][ T7596] bridge_slave_0: left allmulticast mode [ 314.665785][ T7596] bridge_slave_0: left promiscuous mode [ 314.672272][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.686752][ T9165] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.699169][ T9172] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 314.699169][ T9172] [ 314.806455][ T8347] ocfs2: Unmounting device (7,7) on (node local) [ 314.822155][ T9165] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 314.884572][ T7596] veth0_macvtap: left promiscuous mode [ 314.891116][ T7596] veth0_vlan: left promiscuous mode [ 314.897732][ T9165] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 314.973258][ T9165] EXT4-fs (loop6): This should not happen!! Data will be lost [ 314.973258][ T9165] [ 315.025737][ T9165] EXT4-fs (loop6): Total free blocks count 0 [ 315.056204][ T9165] EXT4-fs (loop6): Free/Dirty block details [ 315.095828][ T9165] EXT4-fs (loop6): free_blocks=65280 [ 315.101246][ T9165] EXT4-fs (loop6): dirty_blocks=33 [ 315.136700][ T9165] EXT4-fs (loop6): Block reservation details [ 315.142783][ T9165] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 315.276295][ T51] Bluetooth: hci3: command tx timeout [ 315.359595][ T8286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.410543][ T7596] bond (unregistering): Released all slaves [ 316.684273][ T9206] kvm: user requested TSC rate below hardware speed [ 316.969895][ T9211] syz.7.827: attempt to access beyond end of device [ 316.969895][ T9211] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 317.512989][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.776277][ T51] Bluetooth: hci3: command tx timeout [ 317.782638][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.195360][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 318.389603][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 318.457710][ T27] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.494468][ T27] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 318.514156][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 318.525160][ T27] usb 8-1: Product: syz [ 318.529909][ T27] usb 8-1: Manufacturer: syz [ 318.551066][ T27] navman 8-1:1.0: navman converter detected [ 318.586102][ T27] usb 8-1: navman converter now attached to ttyUSB0 [ 318.601610][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 318.727451][ T7596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.802893][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.837588][ T789] usb 8-1: USB disconnect, device number 5 [ 318.874492][ T789] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 318.890393][ T789] navman 8-1:1.0: device disconnected [ 319.059565][ T9215] loop6: detected capacity change from 0 to 32768 [ 319.134491][ T9215] JBD2: Ignoring recovery information on journal [ 319.277888][ T9215] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 319.433187][ T9215] (syz.6.829,9215,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 319.521259][ T8286] ocfs2: Unmounting device (7,6) on (node local) [ 319.788620][ T7596] bond0 (unregistering): Released all slaves [ 319.826105][ T51] Bluetooth: hci3: command tx timeout [ 320.168673][ T9110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.258393][ T9110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.313228][ T9227] xt_hashlimit: size too large, truncated to 1048576 [ 320.353957][ T9110] team0: Port device team_slave_0 added [ 320.373217][ T9219] loop7: detected capacity change from 0 to 32768 [ 320.384447][ T9110] team0: Port device team_slave_1 added [ 320.394838][ T9230] xt_hashlimit: size too large, truncated to 1048576 [ 320.431039][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.439706][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.471243][ T9110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.523566][ T9110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.532046][ T9110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.561531][ T9110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.599365][ T9219] JBD2: Ignoring recovery information on journal [ 320.740361][ T9110] hsr_slave_0: entered promiscuous mode [ 320.759918][ T9110] hsr_slave_1: entered promiscuous mode [ 320.873923][ T9219] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 321.490323][ T9246] loop4: detected capacity change from 0 to 256 [ 321.516063][ T8347] ocfs2: Unmounting device (7,7) on (node local) [ 321.873570][ T9251] loop4: detected capacity change from 0 to 512 [ 321.941864][ T9251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 322.047237][ T9251] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.837: bad orphan inode 131083 [ 322.138512][ T9259] syz.7.836: attempt to access beyond end of device [ 322.138512][ T9259] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 322.228775][ T9251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.398926][ T5787] Bluetooth: hci3: command tx timeout [ 323.207124][ T9110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.222976][ T9110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.249618][ T9110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.250284][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.269622][ T9110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.445416][ T5766] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 323.510422][ T9110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.567055][ T9110] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.617351][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.624650][ T7568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.651601][ T5766] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 323.662595][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.669867][ T7568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.690377][ T5766] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 323.714674][ T5766] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 323.761238][ T5766] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 323.819876][ T5766] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 323.854928][ T5766] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.881438][ T5766] usb 8-1: Product: syz [ 323.886455][ T5766] usb 8-1: Manufacturer: syz [ 323.916346][ T5766] usb 8-1: SerialNumber: syz [ 323.944905][ T9263] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 323.956117][ T9263] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 323.970014][ T5766] oti6858 8-1:1.0: oti6858 converter detected [ 324.020789][ T5766] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 324.205964][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 324.274962][ T5821] usb 8-1: USB disconnect, device number 6 [ 324.304688][ T5821] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 324.341249][ T5821] oti6858 8-1:1.0: device disconnected [ 324.411464][ T8] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 324.436018][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.444125][ T8] usb 5-1: Product: syz [ 324.468890][ T8] usb 5-1: Manufacturer: syz [ 324.477368][ T8] usb 5-1: SerialNumber: syz [ 324.497444][ T8] usb 5-1: config 0 descriptor?? [ 324.510117][ T9110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.518354][ T8] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 324.619817][ T9110] veth0_vlan: entered promiscuous mode [ 324.645115][ T9110] veth1_vlan: entered promiscuous mode [ 324.721889][ T9110] veth0_macvtap: entered promiscuous mode [ 324.744629][ T9110] veth1_macvtap: entered promiscuous mode [ 324.799775][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.818278][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.831446][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.847452][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.877766][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.912711][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.932861][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.993204][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.045456][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.068590][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.080532][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.095505][ T9110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.121237][ T9110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.141008][ T9110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.171025][ T9110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.193386][ T9110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.210023][ T9110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.224160][ T9110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.346360][ T8] gspca_sunplus: reg_w_riv err -71 [ 325.368525][ T8] sunplus: probe of 5-1:0.0 failed with error -71 [ 325.418507][ T8] usb 5-1: USB disconnect, device number 9 [ 325.498912][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.519442][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.609910][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.636889][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.691604][ T9280] loop7: detected capacity change from 0 to 64 [ 325.882445][ T9280] hfs: request for non-existent node 131072 in B*Tree [ 325.921852][ T9280] hfs: request for non-existent node 131072 in B*Tree [ 326.252137][ T9288] loop7: detected capacity change from 0 to 256 [ 326.301582][ T9288] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 326.398912][ T9286] loop0: detected capacity change from 0 to 4096 [ 326.872473][ T9298] syz.4.846: attempt to access beyond end of device [ 326.872473][ T9298] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 327.843043][ T9302] loop0: detected capacity change from 0 to 256 [ 327.903169][ T9302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 328.233411][ T9312] kAFS: bad VL server IP address [ 328.669718][ T9322] loop0: detected capacity change from 0 to 64 [ 328.867346][ T9294] loop7: detected capacity change from 0 to 40427 [ 328.922525][ T9294] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 328.976077][ T9294] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 329.025054][ T9294] F2FS-fs (loop7): invalid crc value [ 329.396420][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 329.478180][ T9294] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 329.503627][ T9294] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 329.647834][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 329.669058][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 329.698899][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 329.749618][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 329.786393][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 329.825265][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 329.856785][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.895862][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.905007][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.921124][ T8347] syz-executor: attempt to access beyond end of device [ 329.921124][ T8347] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.999949][ T8347] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 330.124782][ T9350] loop4: detected capacity change from 0 to 4096 [ 330.140246][ T9350] EXT4-fs: inline encryption not supported [ 330.148571][ T9350] EXT4-fs (loop4): Test dummy encryption mode enabled [ 330.178012][ T9350] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 330.189571][ T9350] System zones: 0-5 [ 330.227556][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 330.233224][ T8] usbtmc 1-1:16.0: can't read capabilities [ 330.257974][ T9350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.301840][ T9350] EXT4-fs (loop4): shut down requested (0) [ 330.462151][ T8] usb 1-1: USB disconnect, device number 16 [ 330.532591][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.846596][ T9360] loop4: detected capacity change from 0 to 1024 [ 331.692955][ T9379] syz.4.863: attempt to access beyond end of device [ 331.692955][ T9379] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 333.091504][ T9369] loop7: detected capacity change from 0 to 32768 [ 333.248219][ T9369] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 333.650086][ T8347] ocfs2: Unmounting device (7,7) on (node local) [ 333.696106][ T5821] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 333.720290][ T9400] loop6: detected capacity change from 0 to 256 [ 333.811780][ T9400] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 333.907334][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.934614][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.954899][ T9403] netlink: 104 bytes leftover after parsing attributes in process `syz.7.869'. [ 333.990376][ T5821] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 334.036892][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.077628][ T5821] usb 1-1: config 0 descriptor?? [ 334.452883][ T9409] loop7: detected capacity change from 0 to 512 [ 334.532922][ T9409] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.871: corrupted in-inode xattr: invalid ea_ino [ 334.578143][ T9409] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.871: couldn't read orphan inode 15 (err -117) [ 334.619196][ T9409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.899123][ T8347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.947883][ T5821] hid-led: probe of 0003:27B8:01ED.0017 failed with error -71 [ 335.007790][ T5821] usb 1-1: USB disconnect, device number 17 [ 335.461806][ T9407] loop6: detected capacity change from 0 to 32768 [ 335.469286][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 335.696526][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 335.704610][ T8] usb 8-1: config 0 has no interface number 0 [ 335.754673][ T8] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 335.781994][ T9428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.790560][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.833418][ T8] usb 8-1: Product: syz [ 335.839482][ T8] usb 8-1: Manufacturer: syz [ 335.844285][ T8] usb 8-1: SerialNumber: syz [ 335.864392][ T8] usb 8-1: config 0 descriptor?? [ 336.016088][ T5821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 336.114268][ T8] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 336.161176][ T8] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 336.205833][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 336.224263][ T5821] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.246677][ T8] usb 8-1: media controller created [ 336.256221][ T5821] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.322085][ T5821] usb 7-1: config 0 interface 0 has no altsetting 0 [ 336.345827][ T5821] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 336.357775][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 336.373776][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.422909][ T5821] usb 7-1: config 0 descriptor?? [ 336.458816][ T8] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 336.540555][ T8] usb 8-1: USB disconnect, device number 7 [ 336.872863][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.896074][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903599][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903636][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903667][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903696][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903725][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903754][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903783][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903812][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903842][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.903871][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927173][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927213][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927245][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927275][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927306][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927336][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927366][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927396][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927426][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927455][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927485][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 336.927515][ T5821] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 337.006305][ T5821] hid-picolcd 0003:04D8:C002.0018: No report with id 0x11 found [ 337.016469][ T9443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.075747][ T5820] usb 7-1: USB disconnect, device number 5 [ 337.964116][ T9458] loop6: detected capacity change from 0 to 512 [ 338.063301][ T9458] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.675331][ T9450] loop7: detected capacity change from 0 to 131072 [ 338.781069][ T9465] syz.4.879: attempt to access beyond end of device [ 338.781069][ T9465] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 338.839770][ T9450] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 338.839839][ T9450] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 338.898953][ T9450] F2FS-fs (loop7): invalid crc value [ 338.988745][ T9450] F2FS-fs (loop7): Found nat_bits in checkpoint [ 339.093459][ T9450] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 339.093495][ T9450] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 339.493820][ T9462] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 340.481101][ T9470] loop6: detected capacity change from 0 to 32768 [ 340.624363][ T9470] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 340.993306][ T8286] ocfs2: Unmounting device (7,6) on (node local) [ 341.626568][ T9508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.993287][ T9511] loop6: detected capacity change from 0 to 4096 [ 342.198664][ T9511] ntfs: volume version 3.1. [ 342.594955][ T9523] loop7: detected capacity change from 0 to 512 [ 342.696477][ T9523] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.771664][ T9529] syz.6.892: attempt to access beyond end of device [ 342.771664][ T9529] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 343.615025][ T9533] syz.6.893: attempt to access beyond end of device [ 343.615025][ T9533] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 345.921380][ T9552] loop0: detected capacity change from 0 to 8192 [ 347.414881][ T9567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.744412][ T9579] loop0: detected capacity change from 0 to 32768 [ 348.832692][ T9579] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 349.113389][ T9584] loop7: detected capacity change from 0 to 32768 [ 349.145966][ T9110] ocfs2: Unmounting device (7,0) on (node local) [ 349.161301][ T9584] (syz.7.900,9584,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 349.226869][ T9584] (syz.7.900,9584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 349.330736][ T9610] syz.4.904: attempt to access beyond end of device [ 349.330736][ T9610] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 349.800912][ T9584] JBD2: Ignoring recovery information on journal [ 350.007713][ T9613] loop0: detected capacity change from 0 to 512 [ 350.019824][ T9613] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.203220][ T9618] netlink: 'syz.4.906': attribute type 39 has an invalid length. [ 350.243648][ T9584] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 350.519811][ T9584] (syz.7.900,9584,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 350.562392][ T9584] (syz.7.900,9584,0):update_backups:188 ERROR: status = -12 [ 350.594825][ T9584] ocfs2: Failed to update super blocks on 7,7 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 351.094005][ T9623] syz.7.900 (9623) used greatest stack depth: 18856 bytes left [ 351.242373][ T8347] ocfs2: Unmounting device (7,7) on (node local) [ 352.360538][ T9635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.008913][ T9643] loop6: detected capacity change from 0 to 128 [ 353.073995][ T9643] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.107190][ T9632] loop7: detected capacity change from 0 to 40427 [ 353.133632][ T9643] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.134093][ T9632] F2FS-fs (loop7): build fault injection attr: rate: 18446, type: 0x7ffff [ 353.186775][ T9632] F2FS-fs (loop7): invalid crc value [ 353.212808][ T9632] F2FS-fs (loop7): Found nat_bits in checkpoint [ 353.468811][ T8286] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.485979][ T9632] F2FS-fs (loop7): Start checkpoint disabled! [ 353.555322][ T9632] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 353.673722][ T9660] syz.0.915: attempt to access beyond end of device [ 353.673722][ T9660] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 354.190186][ T9657] loop4: detected capacity change from 0 to 8192 [ 354.470504][ T9657] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 354.507330][ T9657] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 354.536143][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 354.591207][ T9657] REISERFS (device loop4): using ordered data mode [ 354.649210][ T9657] reiserfs: using flush barriers [ 354.731332][ T9657] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 354.816215][ T9657] REISERFS (device loop4): checking transaction log (loop4) [ 354.959802][ T7480] kworker/u4:16: attempt to access beyond end of device [ 354.959802][ T7480] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 355.013023][ T7480] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 355.022702][ T7480] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 355.263258][ T9657] REISERFS (device loop4): Using tea hash to sort names [ 355.272772][ T9657] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 355.403446][ T9657] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 356.122716][ T9696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.286116][ T9707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.710950][ T9711] netlink: 128 bytes leftover after parsing attributes in process `syz.4.923'. [ 356.762092][ T9711] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 357.036007][ T9718] loop6: detected capacity change from 0 to 256 [ 357.054235][ T9718] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 357.087773][ T9718] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 357.244120][ T9716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.482835][ T9722] syz.6.927: attempt to access beyond end of device [ 357.482835][ T9722] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 358.759226][ T9714] loop0: detected capacity change from 0 to 32768 [ 358.846434][ T9715] loop4: detected capacity change from 0 to 40427 [ 358.854790][ T9715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 358.864321][ T9715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 358.900054][ T9714] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 358.987269][ T9715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 359.159768][ T9714] XFS (loop0): Ending clean mount [ 359.250617][ T9715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 359.260379][ T9715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 359.450354][ T28] audit: type=1800 audit(1788802728.253:17): pid=9715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.925" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 359.510657][ T9110] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 361.625985][ T9779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.912752][ T9784] syz.7.937: attempt to access beyond end of device [ 361.912752][ T9784] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 362.546951][ T9796] loop7: detected capacity change from 0 to 1024 [ 362.569875][ T9796] EXT4-fs: Ignoring removed bh option [ 362.659263][ T9796] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 362.793723][ T28] audit: type=1800 audit(1788802731.603:18): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.941" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 362.968760][ T8347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 363.233547][ T9816] pimreg: tun_chr_ioctl cmd 1074025677 [ 363.242949][ T9816] pimreg: linktype set to 270 [ 363.472175][ T9821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.383027][ T9835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.503944][ T9839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.262173][ T9833] syz.0.948: attempt to access beyond end of device [ 365.262173][ T9833] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 365.650563][ T9846] loop6: detected capacity change from 0 to 512 [ 365.683320][ T9846] EXT4-fs: Ignoring removed bh option [ 365.709277][ T9846] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.798743][ T9846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.876724][ T9846] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.043728][ T9856] Console: switching to colour VGA+ 80x25 [ 366.084263][ T9859] loop0: detected capacity change from 0 to 128 [ 366.115063][ T8286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.159532][ T9859] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.180348][ T9859] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 366.456717][ T9864] tipc: Started in network mode [ 366.461698][ T9864] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 366.506416][ T9864] tipc: Enabled bearer , priority 0 [ 366.519376][ T9110] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.307695][ T9880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.325477][ T9881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.349986][ T8] tipc: Node number set to 43690 [ 370.078751][ T9902] loop7: detected capacity change from 0 to 22 [ 370.114236][ T9902] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 370.145997][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 370.182426][ T9902] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 370.366484][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 370.389181][ T8] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 370.415221][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 370.422759][ T8] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 370.471767][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.517171][ T8] usb 1-1: config 0 descriptor?? [ 370.760301][ T9885] loop4: detected capacity change from 0 to 32768 [ 370.826952][ T28] audit: type=1800 audit(1788802739.633:19): pid=9885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.960" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 370.942159][ T8] ntrig 0003:1B96:000A.0019: unknown global tag 0xd [ 370.985275][ T8] ntrig 0003:1B96:000A.0019: item 0 1 1 13 parsing failed [ 371.017625][ T8] ntrig 0003:1B96:000A.0019: parse failed [ 371.023659][ T8] ntrig: probe of 0003:1B96:000A.0019 failed with error -22 [ 371.085931][ T28] audit: type=1800 audit(1788802739.893:20): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.960" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 371.162397][ T5822] usb 1-1: USB disconnect, device number 18 [ 371.432882][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 372.224554][ T9912] loop6: detected capacity change from 0 to 32768 [ 372.393513][ T9912] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 372.628214][ T9934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.949238][ T9912] XFS (loop6): Ending clean mount [ 373.973087][ T9954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.395946][ T9956] loop7: detected capacity change from 0 to 136 [ 374.601719][ T5766] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 374.634457][ T9956] Attempt to read inode for relocated directory [ 374.861365][ T8286] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 376.059689][ T9992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.804357][ T9993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.036680][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 378.173537][T10015] syz.0.989 uses obsolete (PF_INET,SOCK_PACKET) [ 378.421303][T10023] bonding: no command found in bonding_masters - use +ifname or -ifname [ 378.969567][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.985962][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.544123][T10027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.714172][T10038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.793790][ T9996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.222272][T10054] loop0: detected capacity change from 0 to 512 [ 381.347916][T10054] EXT4-fs (loop0): 1 orphan inode deleted [ 381.367242][T10054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.411728][ T8999] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 381.433890][T10054] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.448148][ T8999] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:24: Failed to release dquot type 1 [ 381.670253][ T9110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.236640][T10084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.605254][T10093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.565053][T10099] loop0: detected capacity change from 0 to 4096 [ 384.136822][T10108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.810961][T10123] : renamed from bond0 (while UP) [ 386.188553][T10125] loop0: detected capacity change from 0 to 32768 [ 386.280359][T10125] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1018 (10125) [ 386.583299][T10125] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 386.636661][T10125] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 386.687445][T10125] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 386.730729][T10125] BTRFS info (device loop0): use zstd compression, level 3 [ 386.798585][T10125] BTRFS info (device loop0): using free space tree [ 387.091361][T10125] BTRFS info (device loop0): enabling ssd optimizations [ 387.125985][T10125] BTRFS info (device loop0): auto enabling async discard [ 387.135831][T10139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.355833][ T28] audit: type=1800 audit(1788802756.143:21): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1018" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 387.588288][ T9110] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 387.623876][T10178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.491860][T10227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.737478][T10230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.504407][T10249] program syz.7.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.867308][T10258] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1048'. [ 391.445114][T10268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.651623][T10269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.887172][ T5820] logitech-hidpp-device 0005:046D:B012.001A: hidraw0: BLUETOOTH HID v0.07 Device [syz1] on syz1 [ 393.172366][T10294] fido_id[10294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 394.065430][T10290] loop7: detected capacity change from 0 to 32768 [ 394.145587][T10290] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1057 (10290) [ 394.598675][T10309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.279562][T10290] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 395.356006][T10290] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 395.447374][T10290] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 395.516734][T10290] BTRFS info (device loop7): use zstd compression, level 3 [ 395.596565][T10290] BTRFS info (device loop7): using free space tree [ 395.733349][T10336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.789531][T10290] BTRFS info (device loop7): enabling ssd optimizations [ 395.850035][T10290] BTRFS info (device loop7): auto enabling async discard [ 396.152469][ T8347] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 396.660234][ T5795] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop7 scanned by udevd (5795) [ 396.946682][T10362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.594983][T10373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.149406][T10389] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 400.015701][T10410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.947234][T10433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.487016][T10436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.014308][T10448] loop0: detected capacity change from 0 to 4096 [ 402.133449][T10448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.277498][ T28] audit: type=1800 audit(1788802771.093:22): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1090" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 402.378462][T10458] loop7: detected capacity change from 0 to 1024 [ 402.502505][T10456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 402.683589][ T9110] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.743751][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1095'. [ 403.348393][T10484] loop0: detected capacity change from 0 to 8 [ 404.065660][T10492] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 404.869773][T10487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.846477][T10501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.188375][T10514] loop4: detected capacity change from 0 to 1024 [ 406.324345][ T28] audit: type=1800 audit(1788802775.133:23): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1106" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 406.560219][T10499] loop0: detected capacity change from 0 to 32768 [ 406.668909][T10499] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 406.934167][T10499] XFS (loop0): Ending clean mount [ 406.990107][T10539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.539312][ T9110] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 408.317975][T10537] loop6: detected capacity change from 0 to 40427 [ 408.360864][T10537] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x712010) [ 408.421995][T10537] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 408.472545][T10537] F2FS-fs (loop6): invalid crc_offset: 0 [ 408.997048][T10537] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 409.004193][T10537] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 409.026185][T10557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.233198][T10562] f2fs_ckpt-7:6: attempt to access beyond end of device [ 409.233198][T10562] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 409.402721][T10562] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 409.554062][T10576] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1117'. [ 409.563263][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1117'. [ 410.708748][T10584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.242613][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1127'. [ 411.438401][T10608] netlink: 'syz.7.1128': attribute type 12 has an invalid length. [ 411.446908][T10608] netlink: 'syz.7.1128': attribute type 29 has an invalid length. [ 411.454788][T10608] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1128'. [ 411.464141][T10608] netlink: 'syz.7.1128': attribute type 1 has an invalid length. [ 411.472014][T10608] netlink: 'syz.7.1128': attribute type 2 has an invalid length. [ 411.576734][T10589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.759977][T10610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.967185][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 412.222250][T10621] loop6: detected capacity change from 0 to 8 [ 412.842551][T10619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.367083][T10633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.868191][T10632] loop4: detected capacity change from 0 to 32768 [ 413.898694][T10632] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 414.141658][ T5795] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 414.223861][T10652] netlink: 552 bytes leftover after parsing attributes in process `syz.6.1146'. [ 414.528539][T10657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.648022][T10661] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)' [ 415.473860][T10665] loop0: detected capacity change from 0 to 32768 [ 415.521377][T10665] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 415.641980][T10663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.713077][ T5795] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 415.828508][T10672] loop0: detected capacity change from 0 to 256 [ 416.347723][T10667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.472065][T10676] input: syz1 as /devices/virtual/input/input12 [ 416.529509][T10679] jffs2: notice: (10679) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 417.010870][T10691] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1161'. [ 417.054518][T10682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 418.117803][T10698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.675012][T10708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.781363][T10722] bond0: entered promiscuous mode [ 418.787344][T10722] bond_slave_0: entered promiscuous mode [ 418.793889][T10722] bond_slave_1: entered promiscuous mode [ 418.817607][T10722] bond0: left promiscuous mode [ 418.823194][T10722] bond_slave_0: left promiscuous mode [ 418.848083][T10722] bond_slave_1: left promiscuous mode [ 418.893233][T10699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.591345][ T28] audit: type=1326 audit(1788802788.343:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 419.708620][ T28] audit: type=1326 audit(1788802788.343:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 419.776342][ T28] audit: type=1326 audit(1788802788.373:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 419.987959][ T28] audit: type=1326 audit(1788802788.373:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 420.077989][T10741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.095561][ T28] audit: type=1326 audit(1788802788.373:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 420.254956][ T28] audit: type=1326 audit(1788802788.373:29): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 420.333299][ T28] audit: type=1326 audit(1788802788.373:30): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 420.422101][ T28] audit: type=1326 audit(1788802788.383:31): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10745 comm="syz.4.1180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78fb9e159 code=0x7ffc0000 [ 420.686202][T10760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.509183][T10786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.581899][T10791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.690307][T10795] loop6: detected capacity change from 0 to 128 [ 422.050388][T10800] loop4: detected capacity change from 0 to 512 [ 422.166236][T10800] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 422.229751][T10800] EXT4-fs (loop4): invalid journal inode [ 422.260393][T10800] EXT4-fs (loop4): can't get journal size [ 422.347016][T10800] EXT4-fs (loop4): 1 truncate cleaned up [ 422.358096][T10798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.388095][T10800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.456612][T10800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1201'. [ 422.678686][T10811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.736188][ T6064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.968540][T10819] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 423.026208][T10819] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 423.471521][T10831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.543173][T10834] ªªªªªª: renamed from vlan0 (while UP) [ 423.770297][T10829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.050574][T10838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.315020][T10843] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 424.935996][ T8] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 424.967519][T10837] loop4: detected capacity change from 0 to 40427 [ 424.985870][T10837] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 425.008604][T10837] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 425.061976][T10837] F2FS-fs (loop4): invalid crc value [ 425.104473][T10837] F2FS-fs (loop4): Found nat_bits in checkpoint [ 425.157056][ T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.179432][ T8] usb 7-1: config 0 has no interface number 0 [ 425.195826][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 425.234010][ T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 425.266038][ T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.285780][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.317250][ T8] usb 7-1: config 0 descriptor?? [ 425.350927][T10848] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 425.359776][T10837] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 425.389216][ T8] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 425.406305][T10837] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 425.604631][ T971] usb 7-1: USB disconnect, device number 6 [ 425.611004][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 425.759653][ T7568] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 425.774691][ T7568] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 426.532643][T10865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.167498][T10868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.219413][T10887] Cannot find set identified by id 0 to match [ 427.250301][T10888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.696710][T10898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.509715][T10896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.834947][T10913] loop6: detected capacity change from 0 to 1024 [ 428.862163][T10913] hfsplus: unable to parse mount options [ 428.928641][ T5793] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 429.062510][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1241'. [ 429.091921][ T5793] udevd[5793]: symlink '../../loop6' '/dev/disk/by-diskseq/428.tmp-b7:6' failed: Read-only file system [ 429.187094][ T5795] udevd[5795]: symlink '../../loop6' '/dev/disk/by-diskseq/428.tmp-b7:6' failed: Read-only file system [ 429.300600][ T5795] udevd[5795]: symlink '../../loop6' '/dev/disk/by-diskseq/428.tmp-b7:6' failed: Read-only file system [ 429.378348][ T5795] udevd[5795]: symlink '../../loop6' '/dev/disk/by-diskseq/428.tmp-b7:6' failed: Read-only file system [ 429.827943][T10930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.266187][T10932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.132397][ T5785] udevd[5785]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 431.719856][ T5795] udevd[5795]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 431.846124][T10936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.010644][ T5795] udevd[5795]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 432.157434][T10953] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 432.242435][ T5795] udevd[5795]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 432.603711][T10963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.623554][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 432.705381][ T23] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 432.841232][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.995103][ T27] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 433.265303][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 433.290648][ T27] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 433.339016][ T23] usb 8-1: config 0 interface 0 has no altsetting 0 [ 433.356237][ T23] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 433.372325][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.473762][T10961] loop4: detected capacity change from 0 to 32768 [ 433.495606][ T27] usb 1-1: Product: syz [ 433.499872][ T27] usb 1-1: Manufacturer: syz [ 433.505055][ T27] usb 1-1: SerialNumber: syz [ 433.509839][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.528262][ T23] usb 8-1: config 0 descriptor?? [ 433.539540][ T27] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 433.572284][ T27] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 433.572284][ T27] Please send a copy of this message to and [ 433.573072][T10961] JBD2: Ignoring recovery information on journal [ 433.664514][ T5777] udevd[5777]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 433.681489][T10961] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 433.822575][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/430.tmp-b7:4' failed: Read-only file system [ 433.858160][T10961] [ 433.860570][T10961] ====================================================== [ 433.867624][T10961] WARNING: possible circular locking dependency detected [ 433.874687][T10961] syzkaller #0 Not tainted [ 433.879134][T10961] ------------------------------------------------------ [ 433.886185][T10961] syz.4.1257/10961 is trying to acquire lock: [ 433.892277][T10961] ffff888076da86f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 433.901834][T10961] [ 433.901834][T10961] but task is already holding lock: [ 433.909229][T10961] ffff8880187f30e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 433.919602][T10961] [ 433.919602][T10961] which lock already depends on the new lock. [ 433.919602][T10961] [ 433.930034][T10961] [ 433.930034][T10961] the existing dependency chain (in reverse order) is: [ 433.939082][T10961] [ 433.939082][T10961] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 433.947650][T10961] down_read+0x46/0x2e0 [ 433.952494][T10961] ocfs2_start_trans+0x3a8/0x6f0 [ 433.958006][T10961] ocfs2_mknod+0xf33/0x2310 [ 433.963076][T10961] ocfs2_create+0x196/0x430 [ 433.968143][T10961] path_openat+0x1705/0x3270 [ 433.973340][T10961] do_filp_open+0x1f2/0x430 [ 433.978409][T10961] do_sys_openat2+0x134/0x1d0 [ 433.983652][T10961] __x64_sys_open+0x11f/0x140 [ 433.988902][T10961] do_syscall_64+0x55/0xb0 [ 433.993986][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.000502][T10961] [ 434.000502][T10961] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 434.008028][T10961] ocfs2_start_trans+0x2a9/0x6f0 [ 434.013547][T10961] ocfs2_xattr_set+0xe98/0x13a0 [ 434.018972][T10961] __vfs_setxattr+0x437/0x470 [ 434.024244][T10961] __vfs_setxattr_noperm+0x12a/0x5e0 [ 434.030088][T10961] vfs_setxattr+0x16b/0x2f0 [ 434.035255][T10961] path_setxattr+0x33a/0x590 [ 434.040429][T10961] __x64_sys_lsetxattr+0xb8/0xd0 [ 434.045944][T10961] do_syscall_64+0x55/0xb0 [ 434.050930][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.057385][T10961] [ 434.057385][T10961] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 434.067957][T10961] down_write+0x97/0x200 [ 434.072781][T10961] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 434.079248][T10961] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 434.086239][T10961] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 434.092442][T10961] ocfs2_xattr_set+0xc75/0x13a0 [ 434.097856][T10961] __vfs_setxattr+0x437/0x470 [ 434.103102][T10961] __vfs_setxattr_noperm+0x12a/0x5e0 [ 434.108985][T10961] vfs_setxattr+0x16b/0x2f0 [ 434.114046][T10961] path_setxattr+0x33a/0x590 [ 434.119222][T10961] __x64_sys_lsetxattr+0xb8/0xd0 [ 434.124744][T10961] do_syscall_64+0x55/0xb0 [ 434.129719][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.136164][T10961] [ 434.136164][T10961] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 434.144047][T10961] __lock_acquire+0x37ef/0x7d80 [ 434.149497][T10961] lock_acquire+0x19e/0x420 [ 434.154559][T10961] down_read+0x46/0x2e0 [ 434.159279][T10961] ocfs2_init_acl+0x30a/0x770 [ 434.164524][T10961] ocfs2_mknod+0x1427/0x2310 [ 434.169681][T10961] vfs_mknod+0x325/0x360 [ 434.174481][T10961] do_mknodat+0x386/0x500 [ 434.179393][T10961] __x64_sys_mknodat+0xa9/0xc0 [ 434.184713][T10961] do_syscall_64+0x55/0xb0 [ 434.189696][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.196159][T10961] [ 434.196159][T10961] other info that might help us debug this: [ 434.196159][T10961] [ 434.206409][T10961] Chain exists of: [ 434.206409][T10961] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 434.206409][T10961] [ 434.220981][T10961] Possible unsafe locking scenario: [ 434.220981][T10961] [ 434.228468][T10961] CPU0 CPU1 [ 434.233874][T10961] ---- ---- [ 434.239264][T10961] rlock(&journal->j_trans_barrier); [ 434.244671][T10961] lock(sb_internal#4); [ 434.251479][T10961] lock(&journal->j_trans_barrier); [ 434.259356][T10961] rlock(&oi->ip_xattr_sem); [ 434.264068][T10961] [ 434.264068][T10961] *** DEADLOCK *** [ 434.264068][T10961] [ 434.272252][T10961] 8 locks held by syz.4.1257/10961: [ 434.277480][T10961] #0: ffff88801f376418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 434.286800][T10961] #1: ffff888076da89d8 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 434.297587][T10961] #2: ffff8880583eb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 434.311345][T10961] #3: ffff888076daa658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 434.325166][T10961] #4: ffff8880583ec2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 434.339195][T10961] #5: ffff88801f376608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 434.348578][T10961] #6: ffff8880187f30e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 434.359350][T10961] #7: ffff888064b48990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 434.369284][T10961] [ 434.369284][T10961] stack backtrace: [ 434.375210][T10961] CPU: 0 PID: 10961 Comm: syz.4.1257 Not tainted syzkaller #0 [ 434.382712][T10961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.392834][T10961] Call Trace: [ 434.396225][T10961] [ 434.399280][T10961] dump_stack_lvl+0x18c/0x250 [ 434.404076][T10961] ? load_image+0x420/0x420 [ 434.408676][T10961] ? show_regs_print_info+0x20/0x20 [ 434.413941][T10961] ? print_circular_bug+0x12b/0x1a0 [ 434.419193][T10961] check_noncircular+0x2fc/0x400 [ 434.424172][T10961] ? print_deadlock_bug+0x5d0/0x5d0 [ 434.429461][T10961] ? _find_first_zero_bit+0xd6/0x100 [ 434.434822][T10961] ? add_lock_to_list+0x191/0x280 [ 434.439900][T10961] __lock_acquire+0x37ef/0x7d80 [ 434.444809][T10961] ? ocfs2_lock_res_init_common+0x32a/0x450 [ 434.450761][T10961] ? verify_lock_unused+0x140/0x140 [ 434.456003][T10961] ? __lock_acquire+0x7d80/0x7d80 [ 434.461074][T10961] ? do_raw_spin_lock+0x11f/0x2b0 [ 434.466154][T10961] lock_acquire+0x19e/0x420 [ 434.470720][T10961] ? ocfs2_init_acl+0x30a/0x770 [ 434.475616][T10961] ? __might_sleep+0xe0/0xe0 [ 434.480324][T10961] ? read_lock_is_recursive+0x20/0x20 [ 434.485765][T10961] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 434.492429][T10961] ? mark_lock+0x94/0x320 [ 434.496827][T10961] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 434.502879][T10961] down_read+0x46/0x2e0 [ 434.507096][T10961] ? ocfs2_init_acl+0x30a/0x770 [ 434.512020][T10961] ocfs2_init_acl+0x30a/0x770 [ 434.516748][T10961] ? ocfs2_mknod_locked+0x159/0x290 [ 434.522003][T10961] ? ocfs2_acl_chmod+0x340/0x340 [ 434.526999][T10961] ? dquot_alloc_inode+0x211/0xa40 [ 434.532199][T10961] ? ocfs2_block_signals+0x9b/0xe0 [ 434.537387][T10961] ? ocfs2_free_mem_caches+0x50/0x50 [ 434.542742][T10961] ? mark_lock+0x94/0x320 [ 434.547168][T10961] ? ocfs2_init_security_get+0x139/0x1a0 [ 434.552865][T10961] ocfs2_mknod+0x1427/0x2310 [ 434.557523][T10961] ? ocfs2_mkdir+0x430/0x430 [ 434.562185][T10961] ? verify_lock_unused+0x140/0x140 [ 434.567462][T10961] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 434.573273][T10961] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 434.579247][T10961] ? __lock_acquire+0x7d80/0x7d80 [ 434.584339][T10961] ? __rwlock_init+0x150/0x150 [ 434.589184][T10961] ? do_raw_spin_unlock+0x121/0x230 [ 434.594461][T10961] ? put_pid+0xde/0x120 [ 434.598673][T10961] ? ocfs2_permission+0x117/0x1e0 [ 434.603767][T10961] ? ocfs2_getattr+0x3a0/0x3a0 [ 434.608654][T10961] ? make_kgid+0x650/0x650 [ 434.613219][T10961] ? apparmor_path_mknod+0x1ba/0x240 [ 434.618577][T10961] ? make_vfsgid+0x67/0xb0 [ 434.623061][T10961] ? HAS_UNMAPPED_ID+0x101/0x170 [ 434.628071][T10961] ? ocfs2_getattr+0x3a0/0x3a0 [ 434.632903][T10961] ? bpf_lsm_inode_mknod+0x9/0x10 [ 434.638037][T10961] ? security_inode_mknod+0xc7/0x110 [ 434.643406][T10961] vfs_mknod+0x325/0x360 [ 434.647735][T10961] do_mknodat+0x386/0x500 [ 434.652126][T10961] ? __check_object_size+0x4fc/0xa40 [ 434.657467][T10961] ? do_o_path+0x200/0x200 [ 434.661957][T10961] ? getname_flags+0x20a/0x500 [ 434.666799][T10961] __x64_sys_mknodat+0xa9/0xc0 [ 434.671620][T10961] do_syscall_64+0x55/0xb0 [ 434.676078][T10961] ? clear_bhb_loop+0x40/0x90 [ 434.680820][T10961] ? clear_bhb_loop+0x40/0x90 [ 434.685546][T10961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.691497][T10961] RIP: 0033:0x7fd78fb9e159 [ 434.696022][T10961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.715733][T10961] RSP: 002b:00007fd790984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 434.724180][T10961] RAX: ffffffffffffffda RBX: 00007fd78fe25fa0 RCX: 00007fd78fb9e159 [ 434.732214][T10961] RDX: 000000000000c408 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 434.740226][T10961] RBP: 00007fd78fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 434.748228][T10961] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000000 [ 434.756250][T10961] R13: 00007fd78fe26038 R14: 00007fd78fe25fa0 R15: 00007ffe80703df8 [ 434.764353][T10961] [ 434.794285][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x1 [ 434.804141][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.811002][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.818560][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.818515][T10961] (syz.4.1257,10961,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 434.838047][T10970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.855011][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.861932][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.868959][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.876143][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.883079][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.890946][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.897803][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.904768][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.911638][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.918492][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.925368][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.932172][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.939062][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.945882][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.952995][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 434.960418][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 435.038511][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 435.045487][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 435.052313][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 435.053080][ T6064] ocfs2: Unmounting device (7,4) on (node local) [ 435.059101][ T23] elo 0003:04E7:0009.001B: unknown main item tag 0x0 [ 435.078218][ T23] elo 0003:04E7:0009.001B: hidraw0: USB HID v0.c1 Device [HID 04e7:0009] on usb-dummy_hcd.7-1/input0 [ 435.100019][ T23] usb 8-1: USB disconnect, device number 8 [ 435.134479][ T5793] udevd[5793]: symlink '../../loop6' '/dev/disk/by-diskseq/429.tmp-b7:6' failed: Read-only file system [ 435.169562][ T5794] udevd[5794]: symlink '../../loop4' '/dev/disk/by-diskseq/430.tmp-b7:4' failed: Read-only file system [ 435.186052][ T27] scsi host1: usb-storage 1-1:1.0 [ 435.203173][ T5793] udevd[5793]: symlink '../../loop4' '/dev/disk/by-diskseq/430.tmp-b7:4' failed: Read-only file system [ 435.221021][ T27] usb 1-1: USB disconnect, device number 19 [ 435.264712][T10971] fido_id[10971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 435.356994][ T5795] udevd[5795]: symlink '../../loop4' '/dev/disk/by-diskseq/431.tmp-b7:4' failed: Read-only file system [ 437.166539][ T3518] ------------[ cut here ]------------ [ 437.172108][ T3518] WARNING: CPU: 0 PID: 3518 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 437.182245][ T3518] Modules linked in: [ 437.186760][ T3518] CPU: 0 PID: 3518 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 437.194448][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.205848][ T3518] Workqueue: iou_exit io_ring_exit_work [ 437.211474][ T3518] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 437.217830][ T3518] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 11 01 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 41 00 f7 e9 b1 fd ff ff e8 f7 40 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 437.238130][ T3518] RSP: 0018:ffffc9000cc8fa40 EFLAGS: 00010293 [ 437.245008][ T3518] RAX: ffffffff8a874179 RBX: ffff88807f602000 RCX: ffff88802e565a00 [ 437.253665][ T3518] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 437.262175][ T3518] RBP: ffffc9000cc8fbb0 R08: ffffc9000cc8f9c7 R09: 1ffff92001991f38 [ 437.270739][ T3518] R10: dffffc0000000000 R11: fffff52001991f39 R12: dffffc0000000000 [ 437.279226][ T3518] R13: 00000001000034bb R14: 00000001000034be R15: ffff88807f602510 [ 437.287244][ T3518] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 437.296273][ T3518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.302891][ T3518] CR2: 00007f49239ef2f8 CR3: 000000002d7dc000 CR4: 00000000003506f0 [ 437.311432][ T3518] Call Trace: [ 437.314729][ T3518] [ 437.318244][ T3518] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 437.324146][ T3518] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.329972][ T3518] ? process_scheduled_works+0x975/0x1600 [ 437.336383][ T3518] ? process_scheduled_works+0x975/0x1600 [ 437.342175][ T3518] process_scheduled_works+0xa60/0x1600 [ 437.349094][ T3518] ? worker_attach_to_pool+0x370/0x370 [ 437.354745][ T3518] ? assign_work+0x3cc/0x5d0 [ 437.359953][ T3518] worker_thread+0xa5e/0xfe0 [ 437.364581][ T3518] kthread+0x2fa/0x390 [ 437.368337][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 437.370154][ T3518] ? pr_cont_work+0x550/0x550 [ 437.379837][ T3518] ? kthread_blkcg+0xd0/0xd0 [ 437.384446][ T3518] ret_from_fork+0x48/0x80 [ 437.389322][ T3518] ? kthread_blkcg+0xd0/0xd0 [ 437.394006][ T3518] ret_from_fork_asm+0x11/0x20 [ 437.399236][ T3518] [ 437.402274][ T3518] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 437.409567][ T3518] CPU: 0 PID: 3518 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 437.417216][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.427306][ T3518] Workqueue: iou_exit io_ring_exit_work [ 437.432908][ T3518] Call Trace: [ 437.436217][ T3518] [ 437.439182][ T3518] dump_stack_lvl+0x18c/0x250 [ 437.443897][ T3518] ? show_regs_print_info+0x20/0x20 [ 437.449119][ T3518] ? load_image+0x420/0x420 [ 437.453674][ T3518] panic+0x2ca/0x720 [ 437.457640][ T3518] ? bpf_jit_dump+0xd0/0xd0 [ 437.462176][ T3518] ? ret_from_fork_asm+0x11/0x20 [ 437.467143][ T3518] __warn+0x2e0/0x470 [ 437.471155][ T3518] ? io_ring_exit_work+0x3b9/0x830 [ 437.476295][ T3518] ? io_ring_exit_work+0x3b9/0x830 [ 437.481446][ T3518] report_bug+0x2be/0x4f0 [ 437.485833][ T3518] ? io_ring_exit_work+0x3b9/0x830 [ 437.490974][ T3518] ? io_ring_exit_work+0x3b9/0x830 [ 437.496114][ T3518] ? io_ring_exit_work+0x3bb/0x830 [ 437.501256][ T3518] handle_bug+0xcf/0x120 [ 437.505561][ T3518] exc_invalid_op+0x1a/0x50 [ 437.510097][ T3518] asm_exc_invalid_op+0x1a/0x20 [ 437.514989][ T3518] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 437.520743][ T3518] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 11 01 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 41 00 f7 e9 b1 fd ff ff e8 f7 40 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 437.540375][ T3518] RSP: 0018:ffffc9000cc8fa40 EFLAGS: 00010293 [ 437.546465][ T3518] RAX: ffffffff8a874179 RBX: ffff88807f602000 RCX: ffff88802e565a00 [ 437.554458][ T3518] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 437.562454][ T3518] RBP: ffffc9000cc8fbb0 R08: ffffc9000cc8f9c7 R09: 1ffff92001991f38 [ 437.570452][ T3518] R10: dffffc0000000000 R11: fffff52001991f39 R12: dffffc0000000000 [ 437.578460][ T3518] R13: 00000001000034bb R14: 00000001000034be R15: ffff88807f602510 [ 437.586483][ T3518] ? io_ring_exit_work+0x3b9/0x830 [ 437.591663][ T3518] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 437.597504][ T3518] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.602726][ T3518] ? process_scheduled_works+0x975/0x1600 [ 437.608491][ T3518] ? process_scheduled_works+0x975/0x1600 [ 437.614262][ T3518] process_scheduled_works+0xa60/0x1600 [ 437.619879][ T3518] ? worker_attach_to_pool+0x370/0x370 [ 437.625443][ T3518] ? assign_work+0x3cc/0x5d0 [ 437.630073][ T3518] worker_thread+0xa5e/0xfe0 [ 437.634743][ T3518] kthread+0x2fa/0x390 [ 437.638888][ T3518] ? pr_cont_work+0x550/0x550 [ 437.643600][ T3518] ? kthread_blkcg+0xd0/0xd0 [ 437.648226][ T3518] ret_from_fork+0x48/0x80 [ 437.652684][ T3518] ? kthread_blkcg+0xd0/0xd0 [ 437.657307][ T3518] ret_from_fork_asm+0x11/0x20 [ 437.662117][ T3518] [ 437.665759][ T3518] Kernel Offset: disabled [ 437.670093][ T3518] Rebooting in 86400 seconds..