last executing test programs: 3m52.441949829s ago: executing program 3 (id=1928): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003700)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x42) 3m52.285520767s ago: executing program 3 (id=1930): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001240)=""/4090, 0xffa}], 0x1) 3m51.82128684s ago: executing program 3 (id=1937): r0 = fsopen(&(0x7f0000001240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 3m51.460608509s ago: executing program 3 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r2], 0x48}}, 0x0) 3m51.160638183s ago: executing program 3 (id=1946): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000005800)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) 3m51.060950949s ago: executing program 3 (id=1947): r0 = syz_io_uring_setup(0x3694, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2016a}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000180}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 3m35.897104959s ago: executing program 32 (id=1947): r0 = syz_io_uring_setup(0x3694, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2016a}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40000180}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2m23.600799133s ago: executing program 5 (id=2803): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x5, 0x62c, &(0x7f0000000c80)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x390587b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0\x00', &(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2m23.004818422s ago: executing program 5 (id=2812): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x8, 0x60}) 2m22.813596982s ago: executing program 5 (id=2816): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001300)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_win95}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_lower}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@numtail}, {@shortname_lower}]}, 0x1, 0x2ac, &(0x7f0000001040)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 2m22.524088027s ago: executing program 5 (id=2818): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, &(0x7f0000000180)) 2m22.06381561s ago: executing program 5 (id=2820): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3fe, 0x80) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x81, 'syz0\x00', 0x8}, 0x5, 0x30, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.25638659s ago: executing program 5 (id=2825): r0 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x50, 0x1}) io_uring_enter(r0, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 2m20.836529431s ago: executing program 33 (id=2825): r0 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xcc09, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x50, 0x1}) io_uring_enter(r0, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 2m1.324937339s ago: executing program 0 (id=2970): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606241a798b8b6d2401040109058103000258057f0904010000020d00000904010102020d00000905820238007f011709050302ff030f0380"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109020102010205240401050c2402"], 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) 1m59.230623224s ago: executing program 0 (id=2978): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r0, 0x4c930000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) 1m58.944393819s ago: executing program 0 (id=2979): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0xc0045b0f, 0x0) 1m57.006852846s ago: executing program 0 (id=2997): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x104d886, 0x0) 1m55.304790091s ago: executing program 0 (id=3022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000600000a14000000110001"], 0x70}}, 0x0) 1m54.016825645s ago: executing program 0 (id=3039): io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 1m53.649787014s ago: executing program 34 (id=3039): io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 24.112622012s ago: executing program 7 (id=3994): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) 23.996738587s ago: executing program 7 (id=3997): timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r0 = syz_io_uring_setup(0x1eae, &(0x7f0000000340)={0x0, 0xa1c4, 0x3800, 0x0, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x1816, 0x2000, 0x1, 0x0, 0x0) 22.94311148s ago: executing program 7 (id=4016): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 22.470441864s ago: executing program 7 (id=4022): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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") chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 22.083834923s ago: executing program 7 (id=4030): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 21.568729579s ago: executing program 7 (id=4034): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@errors_remount}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@bsdgroups}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 21.221490027s ago: executing program 35 (id=4034): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@errors_remount}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@bsdgroups}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 16.472613325s ago: executing program 2 (id=4068): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 14.302952914s ago: executing program 2 (id=4074): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000180), 0x111, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 14.036890537s ago: executing program 2 (id=4080): syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001040)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_remount}, {@utf8}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x3}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002f80)="$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") fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000c40, &(0x7f0000000840)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@dioread_nolock}, {@nouid32}, {@nojournal_checksum}, {@mblk_io_submit}]}, 0x5, 0x536, &(0x7f0000000300)="$eJzs3c9vI1cdAPDvzCYbd3fbpFCpgIAupbCg1dobb7uqeioXEKoqISpOHLYh8Uarddar2KmasNIm/wEHJHpDcOKMBGoPlXriiOAGt17KAanACtQgcTCa8TjrJvbGmx+2an8+0sjzZsbzfc/WvOf5OvELYGpdjIjtiDgbEW9GxHyxPSmWeLWzZMd98uDe8u6De8tJtNtv/DPJ92fbouc5mfPFOUsR8cPvRfwkORi3ubl1e6ler60X5Upr7W6lubl15dba0mpttXanWr2+eP3qy9deqg7VjtIQxzy39tuPv3vrtR+9/95XPvrz9rd/mlXrQrGvtx0nqdP02b04mZmIeO00go3BmaI9Z8ddEY4kjYjPRcTz+fU/H2fyd3M4fS5rAOAzoN2ej/Z8bxkAmHRpngNL0nKRC7gQaVoud3J4z8S5tN5oti7fbGzcWenkyhZiNr15q167WuQKF2I2ycqL97P1h+VqfLp8LSKejoifzz2Rl8vLw+cZAICTdX7f+P+fuc74DwBMuL5/PNN7f35jdHUBAEZjmD+eBQAmi/EfAKbPw/H/3FjrAQCMjvt/AJg+xn8AmDYfdsf/M+OuCQAwEj94/fVsae8Wv3+98tbmxu3GW1dWas3b5bWN5fJyY/1uebXRWK3XysuNtcPOV2807i6+GBtvV1q1ZqvS3Ny6sdbYuNO6kf+u943a7EhaBQA8ytPPffDXJCK2X3kiX6JnLgdjNUy2dNwVAMZGzh+ml1/hhunlHh+m1++K//g9bC7PUrT73yq8c4Sg7ftHeBJw0i59Uf4fppX8P0wv+X+YXjN7n/aBadNuJ4Pm/E/3DgEAJspj5vh9JQAT6PDv/wc4yvf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCEu5MtCTzlNy+WIJyNiIWaTm7fqtasR8VRE/GVudi4rL461xgDA8aV/T4r5vy7Nv3Bh/96zyX/n8se4HxFv/OLtpVZrfTHb/q9ie0TrnWJ7dRz1BwAO0x2nu+N41ycP7i13l1HW5+PvdCYXzeLuFktnz0zMZA9/KuWTDp/7d9IpF7LPK2dOIP72TkR8oV/7kzw3slDMfLo/fhb7yZHGTz8VP833dR6z1+LzB848NzDmYXO9wrT4IOt/Xu13/aVxMX8s9Z38uJT3UMfX7f92D/R/3eu9lPc1/fq/i8PGePEP3x+4byfiSzP94id78ZMB8V8YMv6HX/7q84P2tX8VcSn6x+/K4lZaa3crzc2tK9kLX1ut3alWry9ev/rytZeqlTxHXelmqnt1Roh/vHL5qYHt/827RUd5MH7pkPZ/45Gtbu91wL/+35s//tqg+DsR3/p6//f/mUfEz8bEbxbrg3v6jqVzvx84fXcWf6Xz+u887vt/+ZC4XR/9bWtlyEMBgBFobm7dXqrXa+snujIbJ3zCnpXklOpsZQwrMcJY2cfk457n2SJlttS9fnqP+eMv33822zb2V7W5+e7Pjl2NYXqP3ZNIgQFj8vCiH/YZ750/3RoBAAAAAAAAAAAAAAD7nfp/I6XjbiEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACT7P8BAAD//6r8xy0=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa241, 0x0) 13.357016021s ago: executing program 2 (id=4084): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 12.619867858s ago: executing program 2 (id=4093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) 10.812722039s ago: executing program 2 (id=4106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) 10.399752149s ago: executing program 36 (id=4106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x801) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x1, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) 7.688146375s ago: executing program 8 (id=4035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xeffffffd, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x3, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x2, r2, 0x2}) 7.216235789s ago: executing program 8 (id=4135): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@nodiscard}, {@nolargeio}, {@gquota}]}, 0x1, 0x988a, &(0x7f00000185c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x400) 5.333103433s ago: executing program 8 (id=4153): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 4.374433031s ago: executing program 6 (id=4161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x21, 0x91, "d2d9951dabc3ed057af2f93a0a91d5ea31d51e92efc6e03106b9868679"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x4}]]}, 0x80}}, 0x0) 3.7937374s ago: executing program 6 (id=4162): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000003000000000400000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.501578445s ago: executing program 6 (id=4163): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 2.334604153s ago: executing program 4 (id=4169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, 0x0, 0x0) 2.074528206s ago: executing program 4 (id=4170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.81064556s ago: executing program 1 (id=4172): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xac, 0x0, 0x5, 0x8001}]}) r0 = socket(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) 1.360678292s ago: executing program 6 (id=4173): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2200004, &(0x7f0000000100)=ANY=[@ANYBLOB='nls=cp936,decompose,barrier,part=0x000000000000fc47,nodecompose,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x6b8, &(0x7f0000000a00)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 1.300708395s ago: executing program 1 (id=4174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @loopback, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x20004000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 1.142572513s ago: executing program 4 (id=4175): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.050321768s ago: executing program 1 (id=4176): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, 0x0, 0x2, 0x6}}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbff"], 0x0, 0x97, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) 841.291388ms ago: executing program 4 (id=4177): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000a40)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x21, 0xb, 0x10, {0x4ea4, 0x4e23, [0x3, 0x40000036, 0xf, 0xc3], [0x7, 0x8000, 0x4, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xecd6}}, 0x4c}, 0x1, 0x0, 0x0, 0x480dc}, 0x20040000) 763.954602ms ago: executing program 1 (id=4178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xa) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) 637.924009ms ago: executing program 4 (id=4179): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x80, 0x0}, 0x40) 380.087491ms ago: executing program 6 (id=4180): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r0, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) 360.417953ms ago: executing program 1 (id=4181): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 113.924895ms ago: executing program 8 (id=4182): r0 = syz_io_uring_setup(0x5578, &(0x7f0000000180)={0x0, 0xfffffffd, 0x1000, 0x3, 0x11a}, &(0x7f0000000000), &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000480)=[r1, 0xffffffffffffffff], 0x2) r2 = dup2(r0, r1) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 78.468207ms ago: executing program 9 (id=4107): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.440098ms ago: executing program 1 (id=4183): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16, @ANYBLOB="01002dbd70000000000001000000050004000200000005001f060000000000000700000400000000000000000000000000014d21c6e708edf5d8826b98dbb60b04d02965e114c1012fc3c5f6aeb9c081edd354fc598241f69dd429ba60ba52b7"], 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 10.88495ms ago: executing program 4 (id=4184): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000280)={'some', 0x20, 0x3a}, 0x2f) 0s ago: executing program 6 (id=4185): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) kernel console output (not intermixed with test programs): rb error = -90 [ 359.177493][ T4994] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 359.216810][ T4994] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 359.270931][ T4994] usb 2-1: USB disconnect, device number 19 [ 359.840123][T12375] loop1: detected capacity change from 0 to 256 [ 359.951746][T12375] FAT-fs (loop1): Directory bread(block 64) failed [ 359.978967][T12375] FAT-fs (loop1): Directory bread(block 65) failed [ 359.985632][T12375] FAT-fs (loop1): Directory bread(block 66) failed [ 360.041331][T12375] FAT-fs (loop1): Directory bread(block 67) failed [ 360.069524][T12375] FAT-fs (loop1): Directory bread(block 68) failed [ 360.076201][T12375] FAT-fs (loop1): Directory bread(block 69) failed [ 360.087912][ T4994] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 360.136773][T12375] FAT-fs (loop1): Directory bread(block 70) failed [ 360.143353][T12375] FAT-fs (loop1): Directory bread(block 71) failed [ 360.201730][T12375] FAT-fs (loop1): Directory bread(block 72) failed [ 360.216834][T12375] FAT-fs (loop1): Directory bread(block 73) failed [ 360.298093][ T4994] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 360.327658][ T4994] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 360.379485][ T4994] usb 1-1: config 220 has no interface number 2 [ 360.396638][ T4994] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 360.431931][ T4994] usb 1-1: config 220 interface 1 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 360.474219][T12359] loop2: detected capacity change from 0 to 40427 [ 360.483349][ T4994] usb 1-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 360.519533][ T4994] usb 1-1: config 220 interface 0 has no altsetting 0 [ 360.537846][ T4994] usb 1-1: config 220 interface 76 has no altsetting 0 [ 360.554243][T12359] F2FS-fs (loop2): invalid crc value [ 360.555970][ T4994] usb 1-1: config 220 interface 1 has no altsetting 0 [ 360.579151][T12359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 360.609421][ T4994] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 360.683341][ T4994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.723857][ T4994] usb 1-1: Product: syz [ 360.744144][ T4994] usb 1-1: Manufacturer: syz [ 360.761035][ T4994] usb 1-1: SerialNumber: syz [ 360.835526][T12359] F2FS-fs (loop2): Start checkpoint disabled! [ 360.876988][T12359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 361.009104][ T4994] usb 1-1: selecting invalid altsetting 0 [ 361.016009][T12391] loop1: detected capacity change from 0 to 8192 [ 361.045590][ T4994] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 361.072868][ T4994] usb 1-1: No valid video chain found. [ 361.073130][T12391] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 361.120974][ T4994] usb 1-1: selecting invalid altsetting 0 [ 361.127310][ T4994] usbtest: probe of 1-1:220.1 failed with error -22 [ 361.147531][ T4994] usb 1-1: USB disconnect, device number 27 [ 361.238751][ T4402] kworker/u4:7: attempt to access beyond end of device [ 361.238751][ T4402] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 361.287480][T12391] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 361.338852][T12391] REISERFS (device loop1): using ordered data mode [ 361.396622][T12391] reiserfs: using flush barriers [ 361.433641][T12391] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 361.560717][T12391] REISERFS (device loop1): checking transaction log (loop1) [ 361.818703][T12391] REISERFS (device loop1): Using r5 hash to sort names [ 361.858081][T12391] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 362.006202][T12394] loop6: detected capacity change from 0 to 32768 [ 362.093542][T12394] JBD2: Ignoring recovery information on journal [ 362.290927][T12394] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 362.497840][ T4911] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 362.590990][T11894] ocfs2: Unmounting device (7,6) on (node local) [ 362.686728][ T4911] usb 1-1: Using ep0 maxpacket: 8 [ 362.693435][ T4911] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 362.719236][ T4911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.749795][ T4911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.780338][ T4911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.816700][ T4911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.842828][ T4994] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 362.851744][ T4911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.875667][ T4911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.050157][ T4994] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 363.070658][ T4994] usb 2-1: config 0 has no interface number 0 [ 363.087417][ T4994] usb 2-1: config 0 interface 41 has no altsetting 0 [ 363.120951][ T4911] usb 1-1: GET_CAPABILITIES returned 0 [ 363.127188][ T4911] usbtmc 1-1:16.0: can't read capabilities [ 363.140891][ T4994] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 363.175197][ T4994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.203808][ T4994] usb 2-1: Product: syz [ 363.210809][ T4994] usb 2-1: Manufacturer: syz [ 363.215569][ T4994] usb 2-1: SerialNumber: syz [ 363.232330][ T4994] usb 2-1: config 0 descriptor?? [ 363.388873][ T6597] usb 1-1: USB disconnect, device number 28 [ 363.429060][T12449] loop6: detected capacity change from 0 to 64 [ 363.887320][ T4994] CoreChips: probe of 2-1:0.41 failed with error -71 [ 363.922549][ T4994] usb 2-1: USB disconnect, device number 20 [ 364.612416][T12486] program syz.6.3003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.892035][T12468] loop0: detected capacity change from 0 to 32768 [ 364.922531][T12468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2997 (12468) [ 365.014413][T12468] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.093291][T12468] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 365.118037][T12468] BTRFS info (device loop0): using free space tree [ 365.414612][T12468] BTRFS info (device loop0): enabling ssd optimizations [ 365.738796][ T4266] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.205016][T12556] loop6: detected capacity change from 0 to 256 [ 366.234442][T12556] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 366.250840][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3029'. [ 366.634692][T12545] loop2: detected capacity change from 0 to 32768 [ 367.531579][T12588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3035'. [ 367.570893][T12588] netlink: 'syz.2.3035': attribute type 7 has an invalid length. [ 367.606744][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'. [ 367.659783][T12588] device gretap0 entered promiscuous mode [ 367.707969][T12588] device gretap0 left promiscuous mode [ 367.783079][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 367.812951][T12595] netlink: 'syz.1.3044': attribute type 21 has an invalid length. [ 368.147457][T12605] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 368.217711][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.232254][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.242308][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.250463][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.276710][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.285359][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 368.573082][T12610] lo speed is unknown, defaulting to 1000 [ 369.592642][T12659] loop1: detected capacity change from 0 to 16 [ 369.610780][T12659] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 369.774010][T12610] chnl_net:caif_netlink_parms(): no params data found [ 370.316534][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 370.378329][T12610] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.385535][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.442652][T12610] device bridge_slave_0 entered promiscuous mode [ 370.543580][T12610] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.563471][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.580790][T12610] device bridge_slave_1 entered promiscuous mode [ 370.612947][T12695] loop2: detected capacity change from 0 to 256 [ 370.661914][T12695] exfat: Deprecated parameter 'utf8' [ 370.698582][T12695] exfat: Deprecated parameter 'namecase' [ 370.763581][T12695] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 371.105596][T12610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.217827][T12610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.402839][T12610] team0: Port device team_slave_0 added [ 371.434084][T12712] loop2: detected capacity change from 0 to 128 [ 371.461875][T12610] team0: Port device team_slave_1 added [ 371.492572][ T31] device hsr_slave_0 left promiscuous mode [ 371.514432][ T31] device hsr_slave_1 left promiscuous mode [ 371.593048][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.607334][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.643431][T12717] loop1: detected capacity change from 0 to 512 [ 371.669187][T12717] EXT4-fs: Ignoring removed orlov option [ 371.785567][T12717] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3083: invalid block [ 371.826937][T12717] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3083: invalid indirect mapped block 4294967295 (level 1) [ 371.872914][T12717] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3083: invalid indirect mapped block 4294967295 (level 1) [ 371.888613][T12717] EXT4-fs (loop1): 2 truncates cleaned up [ 371.894383][T12717] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 372.067325][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 372.406529][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 372.917896][ T31] team0 (unregistering): Port device team_slave_1 removed [ 372.986244][ T31] team0 (unregistering): Port device team_slave_0 removed [ 373.666687][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3091'. [ 373.675700][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'. [ 373.755972][T12610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.776451][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.932067][T12610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.934030][T12610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.934045][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.934069][T12610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.035139][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3095'. [ 374.283317][T12610] device hsr_slave_0 entered promiscuous mode [ 374.303835][T12756] program syz.2.3099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.336697][T12610] device hsr_slave_1 entered promiscuous mode [ 374.476507][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 374.607928][T12768] loop6: detected capacity change from 0 to 256 [ 374.609834][T12770] loop1: detected capacity change from 0 to 64 [ 374.826879][T12776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3104'. [ 374.867180][T12776] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3104'. [ 374.896714][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 374.936336][T12610] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 375.008113][T12610] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.068969][T12610] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.112715][T12610] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.359773][ T6597] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 375.392751][T12610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.440629][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.457823][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.489388][T12610] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.519286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.534136][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.569636][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.576928][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.585387][ T6597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.596828][ T6597] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 375.624169][ T6597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.644512][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.657673][ T6597] usb 3-1: Product: syz [ 375.667473][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.676733][ T6597] usb 3-1: Manufacturer: syz [ 375.686605][ T6597] usb 3-1: SerialNumber: syz [ 375.695363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.722116][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.729455][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.748085][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.795511][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.815384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.832138][T12808] loop6: detected capacity change from 0 to 512 [ 375.846567][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.894867][T12808] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3117: Directory hole found for htree index block 0 [ 375.912741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.940093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.957677][T12808] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 375.976079][T12808] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 376.000257][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.053276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.084418][T12808] EXT4-fs (loop6): shut down requested (1) [ 376.102554][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.138206][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.172283][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.198371][T11894] EXT4-fs (loop6): unmounting filesystem. [ 376.226617][T12610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.331245][ T6597] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 376.360166][T12817] loop6: detected capacity change from 0 to 512 [ 376.556643][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 376.568706][ T6597] usb 3-1: USB disconnect, device number 24 [ 376.918191][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.039447][T12838] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3123'. [ 377.134501][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.179457][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.229891][T12610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.308628][T12845] loop2: detected capacity change from 0 to 1024 [ 377.501741][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3129'. [ 377.549468][T12853] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3129'. [ 377.558948][ T31] hfsplus: b-tree write err: -5, ino 25 [ 377.564757][ T31] hfsplus: b-tree write err: -5, ino 4 [ 377.586511][ T31] hfsplus: b-tree write err: -5, ino 2 [ 378.498714][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.527623][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.559378][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.565769][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.597980][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.637505][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.693613][T12610] device veth0_vlan entered promiscuous mode [ 378.701162][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.728425][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.752809][T12610] device veth1_vlan entered promiscuous mode [ 378.840116][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 378.857311][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 378.884873][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.897137][T12912] Bluetooth: MGMT ver 1.22 [ 378.901629][T12912] Bluetooth: hci0: too big key_count value 9038 [ 378.915688][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.929719][T12610] device veth0_macvtap entered promiscuous mode [ 378.955566][T12610] device veth1_macvtap entered promiscuous mode [ 378.992771][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.017542][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.058201][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.108166][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.186619][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: macsec4 [ 379.226496][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.266456][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.306574][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.331309][T12930] loop6: detected capacity change from 0 to 1024 [ 379.352733][T12610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.390035][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 379.411796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.457602][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.470736][T12930] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 379.524705][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.561045][T12930] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 379.581685][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.612959][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.639554][T12930] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 379.663600][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.670643][T12930] EXT4-fs (loop6): This should not happen!! Data will be lost [ 379.670643][T12930] [ 379.696422][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.706272][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.729590][T12930] EXT4-fs (loop6): Total free blocks count 0 [ 379.756046][T12930] EXT4-fs (loop6): Free/Dirty block details [ 379.756469][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.784885][T12930] EXT4-fs (loop6): free_blocks=68451041280 [ 379.796471][T12930] EXT4-fs (loop6): dirty_blocks=32 [ 379.801851][T12930] EXT4-fs (loop6): Block reservation details [ 379.808432][T12930] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 379.815494][T12610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.831908][T12610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.852187][T12610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.871641][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.904056][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.928661][T12610] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.950650][T12610] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.969933][T12610] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.986581][T12610] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.023853][T11894] EXT4-fs (loop6): unmounting filesystem. [ 380.455720][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.486588][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.520978][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 380.567916][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.606251][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.620612][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 380.942435][T12980] 9pnet_fd: Insufficient options for proto=fd [ 381.034606][T12984] loop6: detected capacity change from 0 to 256 [ 381.043091][ T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 381.137563][T12983] loop7: detected capacity change from 0 to 1024 [ 381.219537][T12983] gfs2: path_lookup on c::: returned error -2 [ 381.256862][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 381.265849][ T7] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 381.321098][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.353813][ T7] usb 3-1: Product: syz [ 381.377311][ T7] usb 3-1: Manufacturer: syz [ 381.378773][T11973] hfsplus: b-tree write err: -5, ino 25 [ 381.392162][ T7] usb 3-1: SerialNumber: syz [ 381.407020][T11973] hfsplus: b-tree write err: -5, ino 4 [ 381.420082][ T7] usb 3-1: config 0 descriptor?? [ 381.437436][T11973] hfsplus: b-tree write err: -5, ino 2 [ 381.461621][T12967] loop1: detected capacity change from 0 to 32768 [ 381.545140][T12967] JBD2: Ignoring recovery information on journal [ 381.568957][T12997] loop6: detected capacity change from 0 to 16 [ 381.604314][T12997] erofs: (device loop6): mounted with root inode @ nid 36. [ 381.645163][ T7] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 381.687391][T12997] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 381.695726][T12967] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 382.000292][ T4270] ocfs2: Unmounting device (7,1) on (node local) [ 382.256910][ T7] gspca_sunplus: reg_w_riv err -71 [ 382.262246][ T7] sunplus: probe of 3-1:0.0 failed with error -71 [ 382.302857][ T7] usb 3-1: USB disconnect, device number 25 [ 383.477232][T13073] loop6: detected capacity change from 0 to 128 [ 383.797841][T13081] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3206'. [ 384.439325][T13100] option changes via remount are deprecated (pid=13096 comm=syz.4.3213) [ 384.655733][T13072] loop2: detected capacity change from 0 to 40427 [ 384.733337][T13072] F2FS-fs (loop2): invalid crc value [ 384.798755][T13072] F2FS-fs (loop2): Found nat_bits in checkpoint [ 385.016278][T13072] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 385.066708][T13072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 385.241366][T13072] syz.2.3202: attempt to access beyond end of device [ 385.241366][T13072] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.033540][ T26] audit: type=1326 audit(1774478222.657:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 386.075467][T13147] loop6: detected capacity change from 0 to 512 [ 386.126518][ T26] audit: type=1326 audit(1774478222.697:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 386.154858][T13147] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 386.204789][ T26] audit: type=1326 audit(1774478222.697:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 386.311714][T13147] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 386.367476][ T26] audit: type=1326 audit(1774478222.697:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 386.399635][T13147] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.516458][ T26] audit: type=1326 audit(1774478222.697:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 386.676170][ T26] audit: type=1326 audit(1774478222.697:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe36439c502 code=0x7ffc0000 [ 386.718780][T11894] EXT4-fs (loop6): unmounting filesystem. [ 386.781137][ T26] audit: type=1326 audit(1774478222.697:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe36435cfce code=0x7ffc0000 [ 386.926947][ T26] audit: type=1326 audit(1774478222.697:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe36439c5c7 code=0x7ffc0000 [ 387.046607][ T26] audit: type=1326 audit(1774478222.697:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe36435cfce code=0x7ffc0000 [ 387.126220][ T26] audit: type=1326 audit(1774478222.697:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.3229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe36439c42b code=0x7ffc0000 [ 387.222628][T13171] loop7: detected capacity change from 0 to 8192 [ 387.239750][T13179] loop2: detected capacity change from 0 to 512 [ 387.263769][T13179] EXT4-fs: Ignoring removed nobh option [ 387.297480][T13171] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 387.327456][T13179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.366878][T13171] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 387.373703][T13179] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3237: iget: bad i_size value: 38620345925642 [ 387.376275][T13171] REISERFS (device loop7): using ordered data mode [ 387.416979][T13179] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3237: couldn't read orphan inode 15 (err -117) [ 387.458675][T13171] reiserfs: using flush barriers [ 387.465017][T13171] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 387.481859][T13171] REISERFS (device loop7): checking transaction log (loop7) [ 387.507024][T13179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 387.536566][T13171] REISERFS (device loop7): Using r5 hash to sort names [ 387.544416][T13171] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 387.636606][T13179] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.3237: invalid indirect mapped block 3973251072 (level 0) [ 387.878954][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 387.891406][T13197] loop6: detected capacity change from 0 to 1024 [ 387.937396][T13197] EXT4-fs: Ignoring removed oldalloc option [ 387.972616][T13197] EXT4-fs: Ignoring removed orlov option [ 388.087506][T13197] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 388.316070][T11894] EXT4-fs (loop6): unmounting filesystem. [ 388.685528][T13231] loop6: detected capacity change from 0 to 64 [ 388.814496][T13231] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 389.194333][T13241] program syz.6.3257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.416835][T13248] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3259'. [ 389.521103][T13252] loop7: detected capacity change from 0 to 256 [ 389.590504][T13252] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 389.674107][T13252] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 389.743895][T13252] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 389.996548][ T4995] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 390.194110][ T4995] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.208464][ T4995] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 390.232558][ T4995] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 390.252192][ T4995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.270816][ T4995] usb 2-1: Product: syz [ 390.279333][ T4995] usb 2-1: Manufacturer: syz [ 390.285295][ T4995] usb 2-1: SerialNumber: syz [ 390.646574][ T4995] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 390.899364][T13291] loop7: detected capacity change from 0 to 1024 [ 390.989748][T13291] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 391.071560][T13291] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 391.091686][T13291] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 391.098061][T13297] program syz.2.3273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.115765][T13291] EXT4-fs (loop7): This should not happen!! Data will be lost [ 391.115765][T13291] [ 391.157731][T13291] EXT4-fs (loop7): Total free blocks count 0 [ 391.163779][T13291] EXT4-fs (loop7): Free/Dirty block details [ 391.180600][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3276'. [ 391.256500][T13291] EXT4-fs (loop7): free_blocks=68451041280 [ 391.262480][T13291] EXT4-fs (loop7): dirty_blocks=32 [ 391.293069][T13291] EXT4-fs (loop7): Block reservation details [ 391.305458][T13291] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 391.376707][ T4995] usb 2-1: device descriptor read/64, error -71 [ 391.432065][T12610] EXT4-fs (loop7): unmounting filesystem. [ 391.634976][T13315] loop2: detected capacity change from 0 to 2048 [ 391.676514][ T4995] usb 2-1: reset high-speed USB device number 21 using dummy_hcd [ 391.694142][T13315] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 391.747442][T13315] EXT4-fs (loop2): shut down requested (2) [ 391.880189][ T4995] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.897312][ T4995] usb 2-1: device firmware changed [ 391.943114][ T4995] usb 2-1: USB disconnect, device number 21 [ 391.964095][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 392.275185][T13338] loop6: detected capacity change from 0 to 256 [ 392.369770][T13338] FAT-fs (loop6): Directory bread(block 64) failed [ 392.384612][T13338] FAT-fs (loop6): Directory bread(block 65) failed [ 392.418383][T13338] FAT-fs (loop6): Directory bread(block 66) failed [ 392.455518][T13338] FAT-fs (loop6): Directory bread(block 67) failed [ 392.499896][T13338] FAT-fs (loop6): Directory bread(block 68) failed [ 392.533879][T13338] FAT-fs (loop6): Directory bread(block 69) failed [ 392.577059][T13338] FAT-fs (loop6): Directory bread(block 70) failed [ 392.607993][T13338] FAT-fs (loop6): Directory bread(block 71) failed [ 392.631737][T13338] FAT-fs (loop6): Directory bread(block 72) failed [ 392.639813][T13354] loop2: detected capacity change from 0 to 256 [ 392.658655][T13338] FAT-fs (loop6): Directory bread(block 73) failed [ 392.692943][T13354] exfat: Deprecated parameter 'utf8' [ 392.748419][T13354] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 392.911784][T13359] loop1: detected capacity change from 0 to 512 [ 393.312422][T13370] hugetlbfs: syz.4.3296 (13370): Using mlock ulimits for SHM_HUGETLB is obsolete [ 393.685514][T13383] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3301'. [ 393.730949][T13383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 393.871832][T13379] loop7: detected capacity change from 0 to 8192 [ 393.949728][T13379] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 394.031557][T13395] loop6: detected capacity change from 0 to 4096 [ 394.034262][T13379] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 394.051263][T13379] REISERFS (device loop7): using ordered data mode [ 394.064715][T13379] reiserfs: using flush barriers [ 394.084035][T13379] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 394.104196][T13379] REISERFS (device loop7): checking transaction log (loop7) [ 394.114945][T13379] REISERFS (device loop7): Using rupasov hash to sort names [ 394.142208][T13379] REISERFS (device loop7): using 3.5.x disk format [ 394.156883][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 394.221468][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 394.283959][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 394.356949][T13379] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 394.403625][T11894] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 394.435615][T11894] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 394.476871][T13379] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 394.520525][T13404] loop2: detected capacity change from 0 to 2048 [ 394.579171][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 394.645983][T13404] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 394.686554][T13404] UDF-fs: Scanning with blocksize 512 failed [ 394.703692][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 394.757672][T13404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.795331][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 394.895460][T13379] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 395.620456][T13432] loop7: detected capacity change from 0 to 256 [ 395.647322][T13432] exfat: Deprecated parameter 'utf8' [ 395.661769][T13432] exfat: Deprecated parameter 'namecase' [ 395.702038][T13432] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 396.159794][T13421] loop6: detected capacity change from 0 to 32768 [ 396.332274][T13421] XFS (loop6): Mounting V5 Filesystem [ 396.410114][T13421] XFS (loop6): Ending clean mount [ 396.446678][ T4911] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 396.592525][T11894] XFS (loop6): Unmounting Filesystem [ 396.648309][ T4911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.680503][ T4911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.724112][ T4911] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 396.756536][ T4911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.793737][ T4911] usb 3-1: config 0 descriptor?? [ 397.251552][ T4911] hid-steam 0003:28DE:1142.001F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 397.442208][T13491] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 397.466677][ T4911] hid-steam 0003:28DE:1142.0020: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 397.631457][ T4911] hid-steam 0003:28DE:1142.001F: Steam wireless receiver connected [ 397.694364][ T4911] usb 3-1: USB disconnect, device number 26 [ 397.786307][ T4911] hid-steam 0003:28DE:1142.001F: Steam wireless receiver disconnected [ 397.979445][T13496] fido_id[13496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 398.211030][T13514] vivid-002: disconnect [ 398.544825][T13525] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3343'. [ 398.806616][T13503] loop7: detected capacity change from 0 to 32768 [ 398.922294][T13503] XFS (loop7): Mounting V5 Filesystem [ 398.979249][T13512] vivid-002: reconnect [ 399.020154][T13503] XFS (loop7): Ending clean mount [ 399.047125][T13503] XFS (loop7): Quotacheck needed: Please wait. [ 399.091713][T13550] loop2: detected capacity change from 0 to 2048 [ 399.189198][T13550] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 399.228017][T13550] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 399.257478][T13550] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 399.257996][T13503] XFS (loop7): Quotacheck: Done. [ 399.295718][T13550] UDF-fs: Scanning with blocksize 512 failed [ 399.329224][T13556] input: syz0 as /devices/virtual/input/input26 [ 399.395822][T13550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.559318][T13558] netlink: 844 bytes leftover after parsing attributes in process `syz.1.3351'. [ 399.579060][T12610] XFS (loop7): Unmounting Filesystem [ 399.892517][T13567] loop2: detected capacity change from 0 to 164 [ 400.143092][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3357'. [ 400.628757][T13589] program syz.2.3363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.751729][T13582] loop7: detected capacity change from 0 to 4096 [ 401.111194][T13604] mkiss: ax0: crc mode is auto. [ 401.158300][T13608] 9pnet_fd: Insufficient options for proto=fd [ 401.755919][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3376'. [ 401.777380][T13598] loop2: detected capacity change from 0 to 32768 [ 402.326095][T13646] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 403.240929][T13667] loop2: detected capacity change from 0 to 512 [ 403.264776][T13670] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.273743][T13670] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.283081][T13670] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.291899][T13670] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.337157][T13667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 403.369994][T13670] device vxlan0 entered promiscuous mode [ 403.659742][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 404.431363][T13714] netlink: 'syz.2.3405': attribute type 2 has an invalid length. [ 404.439868][T13714] netlink: 'syz.2.3405': attribute type 1 has an invalid length. [ 404.448419][T13714] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.3405'. [ 404.698112][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3410'. [ 404.748646][T13724] device netdevsim0 entered promiscuous mode [ 404.764429][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3411'. [ 404.783904][T13724] device netdevsim0 left promiscuous mode [ 404.895917][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3411'. [ 405.139107][T13739] loop7: detected capacity change from 0 to 512 [ 405.185036][T13739] EXT4-fs (loop7): orphan cleanup on readonly fs [ 405.210456][T13739] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 405.225174][T13739] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.3416: corrupted inode contents [ 405.243551][T13739] EXT4-fs error (device loop7): ext4_dirty_inode:6133: inode #15: comm syz.7.3416: mark_inode_dirty error [ 405.256227][T13739] EXT4-fs error (device loop7): ext4_do_update_inode:5268: inode #15: comm syz.7.3416: corrupted inode contents [ 405.286961][T13739] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2945: inode #15: comm syz.7.3416: mark_inode_dirty error [ 405.308580][T13739] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2948: inode #15: comm syz.7.3416: mark inode dirty (error -117) [ 405.326921][T13739] EXT4-fs warning (device loop7): ext4_evict_inode:299: xattr delete (err -117) [ 405.343405][T13745] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 405.357054][T13739] EXT4-fs (loop7): 1 orphan inode deleted [ 405.378468][T13739] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 405.405845][T13745] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.413234][T13745] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.657406][T12610] EXT4-fs (loop7): unmounting filesystem. [ 406.297631][T13785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3437'. [ 406.939199][T13807] loop2: detected capacity change from 0 to 64 [ 407.273267][T13818] loop6: detected capacity change from 0 to 64 [ 407.437081][ T4269] Bluetooth: hci0: command 0x0411 tx timeout [ 407.960071][T13831] loop6: detected capacity change from 0 to 8192 [ 408.072306][T13831] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 408.150933][T13831] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 408.221638][T13831] REISERFS (device loop6): using ordered data mode [ 408.275903][T13824] loop7: detected capacity change from 0 to 40427 [ 408.276615][T13831] reiserfs: using flush barriers [ 408.317511][T13824] F2FS-fs (loop7): Found nat_bits in checkpoint [ 408.331479][T13831] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 408.424714][T13831] REISERFS (device loop6): checking transaction log (loop6) [ 408.478728][T13824] F2FS-fs (loop7): Cannot turn on quotas: -2 on 2 [ 408.536261][T13824] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 408.693848][T13831] REISERFS (device loop6): Using tea hash to sort names [ 408.730267][T13831] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 408.834317][T13857] netlink: 'syz.4.3466': attribute type 2 has an invalid length. [ 408.917494][T13831] overlayfs: upper fs needs to support d_type. [ 408.932115][T13831] overlayfs: upper fs does not support tmpfile. [ 408.963120][T13831] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 409.042646][T13831] overlayfs: failed to resolve './file1': -2 [ 409.070509][T13861] device wlan0 entered promiscuous mode [ 409.145066][T13861] device macsec5 entered promiscuous mode [ 409.174907][T13863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3469'. [ 409.234226][T13863] device netdevsim0 entered promiscuous mode [ 409.317744][T13863] device netdevsim0 left promiscuous mode [ 409.540631][T13848] loop2: detected capacity change from 0 to 32768 [ 409.664763][T13848] XFS (loop2): Mounting V5 Filesystem [ 409.789183][T13848] XFS (loop2): Ending clean mount [ 409.807758][T13848] XFS (loop2): Quotacheck needed: Please wait. [ 409.963731][T13848] XFS (loop2): Quotacheck: Done. [ 410.084483][ T4273] XFS (loop2): Unmounting Filesystem [ 410.364241][ T33] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 410.574720][ T33] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 410.602532][ T33] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 410.631974][ T33] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 410.661168][ T33] usb 2-1: config 220 has no interface number 2 [ 410.688143][ T33] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 410.726489][ T33] usb 2-1: config 220 interface 0 has no altsetting 0 [ 410.746421][ T33] usb 2-1: config 220 interface 76 has no altsetting 0 [ 410.753335][ T33] usb 2-1: config 220 interface 1 has no altsetting 0 [ 410.781775][ T33] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 410.797453][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.842604][ T33] usb 2-1: Product: syz [ 410.847398][ T33] usb 2-1: Manufacturer: syz [ 410.852415][ T33] usb 2-1: SerialNumber: syz [ 411.058037][T13919] lo speed is unknown, defaulting to 1000 [ 411.093439][ T33] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 411.105565][ T33] usb 2-1: No valid video chain found. [ 411.121326][ T33] usb 2-1: selecting invalid altsetting 0 [ 411.176480][ T33] usb 2-1: selecting invalid altsetting 0 [ 411.182269][ T33] usbtest: probe of 2-1:220.1 failed with error -22 [ 411.233581][ T33] usb 2-1: USB disconnect, device number 22 [ 411.319450][T13914] loop7: detected capacity change from 0 to 32768 [ 411.340601][T13914] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.3486 (13914) [ 411.403014][T13914] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 411.432288][T13914] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 411.456807][T13914] BTRFS info (device loop7): using free space tree [ 411.489068][T13934] sctp: [Deprecated]: syz.4.3493 (pid 13934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.489068][T13934] Use struct sctp_sack_info instead [ 411.621375][T13914] BTRFS info (device loop7): enabling ssd optimizations [ 411.942150][T12610] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 411.994264][T13960] lo speed is unknown, defaulting to 1000 [ 412.203659][T13969] loop6: detected capacity change from 0 to 1024 [ 412.247097][T13969] EXT4-fs: Ignoring removed orlov option [ 412.308561][T13969] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 412.584382][T11894] EXT4-fs (loop6): unmounting filesystem. [ 412.826424][ T6594] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 413.039037][ T6594] usb 3-1: config 0 has no interfaces? [ 413.048932][ T6594] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 413.095793][ T6594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.142577][ T6594] usb 3-1: Product: syz [ 413.154896][ T6594] usb 3-1: Manufacturer: syz [ 413.169816][ T6594] usb 3-1: SerialNumber: syz [ 413.218471][ T6594] usb 3-1: config 0 descriptor?? [ 413.381446][T14000] loop1: detected capacity change from 0 to 4096 [ 413.421378][T14000] EXT4-fs (loop1): invalid inodes per group: 458784 [ 413.421378][T14000] [ 413.666064][ T4997] usb 3-1: USB disconnect, device number 27 [ 414.905748][T14061] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 414.961337][T14061] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 415.730968][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3546'. [ 416.646568][ T5324] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 416.848973][ T5324] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 416.874436][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.889465][ T5324] usb 2-1: Product: syz [ 416.900495][ T5324] usb 2-1: Manufacturer: syz [ 416.915620][ T5324] usb 2-1: SerialNumber: syz [ 416.936180][ T5324] usb 2-1: config 0 descriptor?? [ 417.319286][T14144] loop2: detected capacity change from 0 to 1024 [ 417.342118][T14144] EXT4-fs: Ignoring removed bh option [ 417.451568][T14144] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #3: block 1: comm syz.2.3564: lblock 1 mapped to illegal pblock 1 (length 1) [ 417.493487][T14144] __quota_error: 13 callbacks suppressed [ 417.493505][T14144] Quota error (device loop2): write_blk: dquota write failed [ 417.515842][T14144] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 417.526829][T14144] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.3564: Failed to acquire dquot type 0 [ 417.547961][T14144] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.3564: Freeing blocks not in datazone - block = 0, count = 4096 [ 417.584929][T14144] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3564: Invalid inode bitmap blk 0 in block_group 0 [ 417.606176][ T11] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 417.624609][T14144] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 417.672733][T14144] EXT4-fs (loop2): 1 orphan inode deleted [ 417.675136][ T11] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 417.701887][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 417.713487][T14144] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 417.766671][ T5324] usb 2-1: Firmware version (0.0) predates our first public release. [ 417.774889][ T5324] usb 2-1: Please update to version 0.2 or newer [ 417.792897][T14144] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 417.842121][ T5324] usb 2-1: USB disconnect, device number 23 [ 417.886259][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 417.892449][T14159] loop7: detected capacity change from 0 to 2048 [ 417.919698][T14159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.193955][T14171] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3569'. [ 418.494341][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3573'. [ 418.505184][T14176] tap0: tun_chr_ioctl cmd 2148553947 [ 419.044713][T14202] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3581'. [ 419.459143][T14218] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3588'. [ 419.511421][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3589'. [ 419.542239][T14221] netem: unknown loss type 13 [ 419.555498][T14221] netem: change failed [ 419.950379][T14233] tun0: tun_chr_ioctl cmd 1074025677 [ 419.986759][T14233] tun0: linktype set to 6 [ 420.106789][T14240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3594'. [ 420.290147][T14248] loop1: detected capacity change from 0 to 128 [ 420.333693][T14248] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 420.374589][T14248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.736173][T14226] loop7: detected capacity change from 0 to 32768 [ 420.841662][T14226] JBD2: Ignoring recovery information on journal [ 420.914481][T14271] TCP: TCP_TX_DELAY enabled [ 420.942727][T14226] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 421.052328][ T26] audit: type=1800 audit(1774478257.677:456): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3590" name="file1" dev="loop7" ino=17058 res=0 errno=0 [ 421.087198][T14278] sg_read: process 1519 (syz.2.3608) changed security contexts after opening file descriptor, this is not allowed. [ 421.179777][T12610] ocfs2: Unmounting device (7,7) on (node local) [ 422.009795][T14312] loop1: detected capacity change from 0 to 128 [ 422.052618][T14312] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 422.133052][T14312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 422.565686][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 423.739690][T14374] netlink: 'syz.4.3635': attribute type 10 has an invalid length. [ 423.905111][T14370] lo speed is unknown, defaulting to 1000 [ 424.058747][T14386] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3639'. [ 424.776205][T14412] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3647'. [ 425.068643][T14427] netlink: 'syz.6.3654': attribute type 9 has an invalid length. [ 425.134266][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3654'. [ 425.250094][T14432] fuse: Bad value for 'fd' [ 425.707948][T14456] overlayfs: invalid origin (0000) [ 427.442843][T14478] loop2: detected capacity change from 0 to 32768 [ 427.510354][T14502] syz.6.3685 uses obsolete (PF_INET,SOCK_PACKET) [ 427.535366][T14502] device syzkaller1 entered promiscuous mode [ 427.546357][ C0] sched: RT throttling activated [ 427.824976][T14509] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 427.846761][T14509] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 427.870283][T14509] overlayfs: failed to resolve './file1/file0': -2 [ 428.540692][T14478] XFS (loop2): Mounting V5 Filesystem [ 428.557850][T14487] loop1: detected capacity change from 0 to 262144 [ 428.582129][T14487] F2FS-fs (loop1): invalid crc value [ 428.590866][T14487] F2FS-fs (loop1): Found nat_bits in checkpoint [ 428.631123][T14487] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 428.644228][T14478] XFS (loop2): Ending clean mount [ 428.852273][ T4273] XFS (loop2): Unmounting Filesystem [ 429.829531][T14540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3696'. [ 429.863496][T14543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 429.905510][T14543] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 430.018216][T14546] overlayfs: failed to set xattr on upper [ 430.024083][T14546] overlayfs: ...falling back to index=off,metacopy=off. [ 431.501270][ T4269] Bluetooth: hci0: link tx timeout [ 431.507710][ T4269] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.516794][T14588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.391849][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3719'. [ 432.526426][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3719'. [ 432.902769][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'. [ 432.979075][T14610] loop2: detected capacity change from 0 to 131072 [ 433.008229][T14610] F2FS-fs (loop2): Found nat_bits in checkpoint [ 433.085579][T14610] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 433.187485][T14610] F2FS-fs (loop2): list inode (7) has corrupted xattr [ 433.391459][T14629] team0: Port device team_slave_0 removed [ 433.444224][ T26] audit: type=1326 audit(1774478270.067:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14637 comm="syz.6.3726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe36439c799 code=0x0 [ 433.596797][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 433.724293][T14652] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000004184467440737095516150x0000000000000000 [ 434.393521][T14671] loop1: detected capacity change from 0 to 8192 [ 434.449564][T14671] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 434.471050][T14671] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 434.484956][T14671] REISERFS (device loop1): using journaled data mode [ 434.492490][T14671] reiserfs: using flush barriers [ 434.504216][T14671] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 434.522194][T14671] REISERFS (device loop1): checking transaction log (loop1) [ 434.531085][T14671] REISERFS (device loop1): Using r5 hash to sort names [ 434.538833][T14671] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 434.554110][T14671] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 434.621895][T14671] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 434.642311][T14671] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 434.663512][T14671] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 434.943253][T14680] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 435.482453][T14706] loop2: detected capacity change from 0 to 1024 [ 435.502347][T14706] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 435.533126][T14708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3755'. [ 435.555841][T14706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 435.857803][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 436.022133][T14726] device team_slave_0 entered promiscuous mode [ 436.029582][T14726] device team_slave_1 entered promiscuous mode [ 436.035868][T14726] device batadv1 entered promiscuous mode [ 436.072429][T14726] device team_slave_0 left promiscuous mode [ 436.079396][T14726] device team_slave_1 left promiscuous mode [ 436.085680][T14726] device batadv1 left promiscuous mode [ 436.499506][T14739] loop6: detected capacity change from 0 to 4096 [ 436.522501][T14739] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 436.571441][T14739] ntfs3: loop6: Failed to load $Extend. [ 436.676014][T14739] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 436.732295][T14749] binder: 14748:14749 ioctl c0306201 0 returned -14 [ 437.001870][T14753] vivid-003: disconnect [ 437.014721][T14752] vivid-003: reconnect [ 437.227422][T14743] loop2: detected capacity change from 0 to 40427 [ 437.324186][T14743] F2FS-fs (loop2): Found nat_bits in checkpoint [ 437.418900][T14743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 437.655777][ T4273] syz-executor: attempt to access beyond end of device [ 437.655777][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 438.351819][T14791] loop1: detected capacity change from 0 to 4096 [ 438.441185][T14794] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.463316][ T26] audit: type=1800 audit(1774478275.087:458): pid=14791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3786" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 438.636026][T14775] loop7: detected capacity change from 0 to 40427 [ 438.655358][T14775] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 438.664299][T14775] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 438.744579][T14775] F2FS-fs (loop7): Found nat_bits in checkpoint [ 438.903607][T14775] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 438.922349][T14775] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 439.169538][T14813] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 439.749631][T14828] (syz.7.3795,14828,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 439.972924][ T26] audit: type=1326 audit(1774478276.597:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 439.995336][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.003259][ T26] audit: type=1326 audit(1774478276.637:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.027284][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.033710][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.131057][ T26] audit: type=1326 audit(1774478276.657:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.200389][ T26] audit: type=1326 audit(1774478276.657:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.291513][ T26] audit: type=1326 audit(1774478276.657:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.404550][ T26] audit: type=1326 audit(1774478276.657:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.426858][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.450495][ T26] audit: type=1326 audit(1774478276.657:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.464259][T14858] loop7: detected capacity change from 0 to 256 [ 440.479534][ T6594] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 440.492248][ T26] audit: type=1326 audit(1774478276.657:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.514697][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.545318][T14858] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 440.554767][ T26] audit: type=1326 audit(1774478276.657:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14844 comm="syz.2.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0971f9c799 code=0x7ffc0000 [ 440.580187][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.698196][ T6594] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 440.716396][ T6594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.746421][ T6594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.765079][T14863] exFAT-fs (loop7): error, broken FAT chain. [ 440.776451][ T6594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 440.785396][T14863] exFAT-fs (loop7): Filesystem has been set read-only [ 440.807558][ T6594] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 440.829892][ T6594] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 440.834040][T14863] exFAT-fs (loop7): error, failed to bmap (inode : ffff888055d9c260 iblock : 0, err : -5) [ 440.849486][ T6594] usb 3-1: Manufacturer: syz [ 440.878394][ T6594] usb 3-1: config 0 descriptor?? [ 440.917020][T14867] device syzkaller1 entered promiscuous mode [ 441.305780][ T6594] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 441.318036][ T6594] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 441.417424][ T6594] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 441.613627][ T6594] usb 3-1: USB disconnect, device number 28 [ 442.100315][T14906] MTD: Attempt to mount non-MTD device "./file0" [ 442.107717][T14906] ./file0: Can't open blockdev [ 442.294146][T14913] lo speed is unknown, defaulting to 1000 [ 443.699773][T14929] loop7: detected capacity change from 0 to 32768 [ 443.757892][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 443.757907][ T26] audit: type=1800 audit(1774478280.377:475): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3843" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 444.052895][T14944] loop1: detected capacity change from 0 to 2048 [ 444.151075][T14948] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.363884][T14953] loop6: detected capacity change from 0 to 256 [ 445.053303][T14963] loop6: detected capacity change from 0 to 512 [ 445.113352][T14963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 445.144585][T14955] loop7: detected capacity change from 0 to 32768 [ 445.201350][T14955] [ 445.201350][T14955] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 445.201350][T14955] [ 445.247471][T14963] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.3857: corrupted xattr entries [ 445.303502][T14955] read_mapping_page failed! [ 445.309790][T14955] ERROR: (device loop7): txCommit: [ 445.309790][T14955] [ 445.396499][T14963] EXT4-fs (loop6): Remounting filesystem read-only [ 445.403088][T14963] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 445.421823][T12610] [ 445.421823][T12610] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 445.421823][T12610] [ 445.465433][T12610] [ 445.465433][T12610] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 445.465433][T12610] [ 445.488442][T14963] EXT4-fs (loop6): 1 orphan inode deleted [ 445.494231][T14963] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 445.845795][T11894] EXT4-fs (loop6): unmounting filesystem. [ 446.006229][ T26] audit: type=1326 audit(1774478282.627:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.073075][ T26] audit: type=1326 audit(1774478282.627:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.138943][ T26] audit: type=1326 audit(1774478282.667:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.202392][ T26] audit: type=1326 audit(1774478282.667:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.276493][ T26] audit: type=1326 audit(1774478282.667:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.370922][ T26] audit: type=1326 audit(1774478282.667:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.440074][ T26] audit: type=1326 audit(1774478282.667:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.536445][ T26] audit: type=1326 audit(1774478282.667:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.606514][ T26] audit: type=1326 audit(1774478282.667:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.6.3868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fe36439c799 code=0x7ffc0000 [ 446.730147][ T6594] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 446.759698][ T6594] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 446.811564][T15002] loop1: detected capacity change from 0 to 2048 [ 446.850037][T15002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.122352][T15009] fido_id[15009]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 448.021961][T15049] loop2: detected capacity change from 0 to 128 [ 448.890837][T15066] loop7: detected capacity change from 0 to 1024 [ 448.943174][T15066] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 448.956992][T15066] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.145253][T12610] EXT4-fs (loop7): unmounting filesystem. [ 449.269871][T15076] loop1: detected capacity change from 0 to 128 [ 449.333450][T15078] program syz.7.3907 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.483118][ T4313] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 449.579729][ T4313] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.609844][T15084] loop6: detected capacity change from 0 to 2048 [ 449.675153][T15084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.846206][T15088] fido_id[15088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 449.936991][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3915'. [ 450.181730][T15101] netlink: 27 bytes leftover after parsing attributes in process `syz.7.3918'. [ 450.274587][T15105] loop6: detected capacity change from 0 to 512 [ 450.419381][T15105] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3920: inode has both inline data and extents flags [ 450.472520][T15115] loop1: detected capacity change from 0 to 1024 [ 450.480553][T15115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 450.496914][T15105] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3920: couldn't read orphan inode 15 (err -117) [ 450.512312][T15115] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.567427][T15105] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 450.744273][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 450.792681][T15121] loop7: detected capacity change from 0 to 2048 [ 450.874194][T15121] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 450.894449][T11894] EXT4-fs (loop6): unmounting filesystem. [ 451.128403][T12610] EXT4-fs (loop7): unmounting filesystem. [ 451.207255][ T5003] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 451.254939][T15131] loop2: detected capacity change from 0 to 2048 [ 451.257088][ T5003] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 451.355882][T15131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.627925][T15142] fido_id[15142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 451.686257][T15146] loop2: detected capacity change from 0 to 2048 [ 451.753207][T15146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 451.799939][T15146] ext4 filesystem being mounted at /753/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.919375][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 451.919389][ T26] audit: type=1800 audit(1774478288.547:490): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3935" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 451.985932][ T26] audit: type=1800 audit(1774478288.597:491): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3935" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 452.107279][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 452.111417][T15135] loop6: detected capacity change from 0 to 32768 [ 452.232508][T15135] XFS (loop6): Mounting V5 Filesystem [ 452.277417][T15137] loop7: detected capacity change from 0 to 40427 [ 452.293001][T15137] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 452.326261][T15137] F2FS-fs (loop7): invalid crc value [ 452.357794][T15137] F2FS-fs (loop7): Found nat_bits in checkpoint [ 452.458144][T15135] XFS (loop6): Ending clean mount [ 452.489878][T15135] XFS (loop6): Quotacheck needed: Please wait. [ 452.522781][T15137] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 452.571151][ T26] audit: type=1804 audit(1774478289.197:492): pid=15137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3930" name="/newroot/121/file1/file1" dev="loop7" ino=10 res=1 errno=0 [ 452.663732][T12610] syz-executor: attempt to access beyond end of device [ 452.663732][T12610] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 452.707540][T15135] XFS (loop6): Quotacheck: Done. [ 452.767532][ T26] audit: type=1800 audit(1774478289.397:493): pid=15135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3931" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 452.863505][T15135] Direct I/O collision with buffered writes! File: /file1 Comm: syz.6.3931 [ 452.917984][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 452.946951][T15180] netlink: 'syz.4.3945': attribute type 30 has an invalid length. [ 452.998694][T15180] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.007898][T15180] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.016708][T15180] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.025428][T15180] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.044146][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3945'. [ 453.054536][T15180] netlink: 'syz.4.3945': attribute type 30 has an invalid length. [ 453.062812][T11894] XFS (loop6): Unmounting Filesystem [ 453.396473][ T5003] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 453.596623][ T5003] usb 2-1: Using ep0 maxpacket: 16 [ 453.603455][ T5003] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.654476][ T5003] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.685653][ T5003] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.731096][ T5003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.751340][ T5003] usb 2-1: Product: syz [ 453.755558][ T5003] usb 2-1: Manufacturer: syz [ 453.776414][ T5003] usb 2-1: SerialNumber: syz [ 453.859116][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3954'. [ 453.876528][T15196] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 453.929211][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3954'. [ 454.002697][ T5003] usb 2-1: 0:2 : does not exist [ 454.014934][T15196] syz.2.3953: attempt to access beyond end of device [ 454.014934][T15196] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 454.019036][ T5003] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 454.100648][T15196] syz.2.3953: attempt to access beyond end of device [ 454.100648][T15196] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 454.135764][ T5003] usb 2-1: USB disconnect, device number 24 [ 454.162901][T15196] syz.2.3953: attempt to access beyond end of device [ 454.162901][T15196] loop2: rw=0, sector=280, nr_sectors = 8 limit=256 [ 454.235574][ T26] audit: type=1800 audit(1774478290.857:494): pid=15196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3953" name="file1" dev="loop2" ino=1048715 res=0 errno=0 [ 454.428605][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.212487][ T5003] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 455.444486][ T5003] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 455.477442][ T5003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.511705][ T5003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.525906][ T5003] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 455.529417][T15256] set_capacity_and_notify: 1 callbacks suppressed [ 455.529432][T15256] loop2: detected capacity change from 0 to 8192 [ 455.546762][ T5003] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 455.562993][T15232] loop6: detected capacity change from 0 to 32768 [ 455.599037][ T26] audit: type=1800 audit(1774478292.227:495): pid=15256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3979" name="file2" dev="loop2" ino=1048717 res=0 errno=0 [ 455.624790][ T5003] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 455.647056][T15256] syz.2.3979: attempt to access beyond end of device [ 455.647056][T15256] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 455.667572][T15256] Buffer I/O error on dev loop2, logical block 57847, async page read [ 455.683843][T15232] XFS (loop6): Mounting V5 Filesystem [ 455.693707][ T5003] usb 2-1: Manufacturer: syz [ 455.711207][T15256] syz.2.3979: attempt to access beyond end of device [ 455.711207][T15256] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 455.730659][ T5003] usb 2-1: config 0 descriptor?? [ 455.827720][T15232] XFS (loop6): Ending clean mount [ 455.834556][T15256] Buffer I/O error on dev loop2, logical block 57847, async page read [ 455.906131][T15256] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 455.927821][T15256] FAT-fs (loop2): Filesystem has been set read-only [ 455.963978][T11894] XFS (loop6): Unmounting Filesystem [ 455.982577][T15256] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 456.074970][T15274] Bluetooth: MGMT ver 1.22 [ 456.090754][T15274] Bluetooth: hci1: unsupported parameter 65535 [ 456.112263][T15274] Bluetooth: hci1: invalid length 0, exp 2 for type 5 [ 456.155439][ T5003] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 456.166599][ T5003] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 456.233734][ T5003] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 456.528872][ T5003] usb 2-1: USB disconnect, device number 25 [ 457.686753][T15333] loop2: detected capacity change from 0 to 256 [ 457.702847][T15333] exfat: Deprecated parameter 'utf8' [ 457.710959][T15333] exfat: Deprecated parameter 'utf8' [ 457.768102][T15333] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 457.942930][ T5003] hid-generic 0005:15C2:0C6E.0026: unknown main item tag 0x0 [ 458.038848][T15345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4016'. [ 458.073801][ T5003] hid-generic 0005:15C2:0C6E.0026: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 458.075650][T15345] device bond_slave_0 entered promiscuous mode [ 458.091747][T15345] device bond_slave_1 entered promiscuous mode [ 458.157169][T15345] device macvlan2 entered promiscuous mode [ 458.226629][T15345] device bond0 entered promiscuous mode [ 458.257440][T15345] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 458.265223][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4017'. [ 458.426693][T15359] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.593872][T15365] loop7: detected capacity change from 0 to 1024 [ 458.719288][ T51] hfsplus: b-tree write err: -5, ino 25 [ 458.725150][ T51] hfsplus: b-tree write err: -5, ino 4 [ 458.746281][ T51] hfsplus: b-tree write err: -5, ino 2 [ 458.868994][T12610] hfsplus: bad catalog entry type [ 458.913300][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4029'. [ 459.027699][ T5003] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 459.050786][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4031'. [ 459.203871][T15385] loop1: detected capacity change from 0 to 2048 [ 459.222415][ T5003] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 459.232067][T15385] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 459.248166][ T5003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.267903][ T5003] usb 3-1: config 0 descriptor?? [ 459.284998][ T5003] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 459.303017][T15386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.366191][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.530242][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.561945][T15385] Remounting filesystem read-only [ 459.565178][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.578141][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.679284][ T5003] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 459.683427][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.731631][T15387] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.779484][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.801125][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.818865][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.839551][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.861144][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.886938][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.917422][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.971954][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 459.996940][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 460.018044][T15385] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 460.029999][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.051712][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.150637][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.181675][ T4270] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 460.192044][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.261455][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.275053][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.302283][ T5003] gspca_cpia1: usb_control_msg 05, error -71 [ 460.315833][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.323108][ T5003] cpia1 3-1:0.0: unexpected systemstate: 00 [ 460.346150][ T5003] usb 3-1: USB disconnect, device number 29 [ 460.355168][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.382562][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 460.392756][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 460.581369][T15389] lo speed is unknown, defaulting to 1000 [ 461.019787][T15409] loop1: detected capacity change from 0 to 256 [ 461.850699][T15389] chnl_net:caif_netlink_parms(): no params data found [ 461.872392][T15431] loop8: detected capacity change from 0 to 8 [ 461.910448][ T4391] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 461.925667][ T4391] loop8: p1 start 912119244 is beyond EOD, truncated [ 461.952467][ T4391] loop8: p2 start 2949906769 is beyond EOD, truncated [ 461.976814][ T4391] loop8: p3 start 3740906666 is beyond EOD, truncated [ 461.989283][ T4391] loop8: p4 start 2974154542 is beyond EOD, truncated [ 462.005228][ T4391] loop8: p5 start 2946449176 is beyond EOD, truncated [ 462.036367][ T4391] loop8: p6 start 1287082477 is beyond EOD, truncated [ 462.054113][ T4391] loop8: p7 start 3756907806 is beyond EOD, truncated [ 462.086634][ T4391] loop8: p8 start 974053343 is beyond EOD, truncated [ 462.093637][ T4391] loop8: p9 start 175385606 is beyond EOD, truncated [ 462.116385][ T4391] loop8: p10 start 1987014430 is beyond EOD, truncated [ 462.123429][ T4391] loop8: p11 start 1637589159 is beyond EOD, truncated [ 462.146121][T15431] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 462.167386][T15431] loop8: p1 start 912119244 is beyond EOD, truncated [ 462.174126][T15431] loop8: p2 start 2949906769 is beyond EOD, truncated [ 462.183356][T15389] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.193023][T15389] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.202515][T15389] device bridge_slave_0 entered promiscuous mode [ 462.202516][T15431] loop8: p3 start 3740906666 is beyond EOD, truncated [ 462.246574][T15431] loop8: p4 start 2974154542 is beyond EOD, truncated [ 462.253414][T15431] loop8: p5 start 2946449176 is beyond EOD, truncated [ 462.262691][T15389] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.268617][T15431] loop8: p6 start 1287082477 is beyond EOD, truncated [ 462.276944][T15431] loop8: p7 start 3756907806 is beyond EOD, truncated [ 462.284148][T15431] loop8: p8 start 974053343 is beyond EOD, truncated [ 462.306524][T15431] loop8: p9 start 175385606 is beyond EOD, truncated [ 462.306721][T15389] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.318082][T15431] loop8: p10 start 1987014430 is beyond EOD, truncated [ 462.326408][T15389] device bridge_slave_1 entered promiscuous mode [ 462.352367][T15431] loop8: p11 start 1637589159 is beyond EOD, truncated [ 462.476912][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 462.477677][T15389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.676009][T15389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.859366][T15389] team0: Port device team_slave_0 added [ 463.085943][T15457] loop2: detected capacity change from 0 to 4096 [ 463.188836][T15389] team0: Port device team_slave_1 added [ 463.371141][T15389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.379087][ T4273] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 463.385578][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 463.423898][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.546469][T15389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.612774][T15389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.642768][T15474] netlink: 'syz.6.4059': attribute type 11 has an invalid length. [ 463.644937][T15389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.732263][T15389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.957217][ T11] device hsr_slave_0 left promiscuous mode [ 463.965556][ T11] device hsr_slave_1 left promiscuous mode [ 463.985568][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.004349][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.043881][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.084715][ T26] audit: type=1326 audit(1774478300.707:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.6.4064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe36439c799 code=0x0 [ 464.085237][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.157762][ T11] device bridge_slave_1 left promiscuous mode [ 464.165284][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.197462][ T11] device bridge_slave_0 left promiscuous mode [ 464.209558][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.315456][ T11] device bond0 left promiscuous mode [ 464.330558][ T11] device bond_slave_0 left promiscuous mode [ 464.337587][ T11] device bond_slave_1 left promiscuous mode [ 464.364539][ T11] device veth1_macvtap left promiscuous mode [ 464.379075][ T11] device veth0_macvtap left promiscuous mode [ 464.391905][ T11] device veth1_vlan left promiscuous mode [ 464.399354][ T11] device veth0_vlan left promiscuous mode [ 464.556721][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 464.999378][T15507] Bluetooth: MGMT ver 1.22 [ 465.004091][T15507] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 465.586221][ T11] team0 (unregistering): Port device team_slave_1 removed [ 465.665087][ T11] team0 (unregistering): Port device team_slave_0 removed [ 465.738486][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.805509][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.384201][ T11] bond0 (unregistering): Released all slaves [ 466.543944][T15389] device hsr_slave_0 entered promiscuous mode [ 466.551577][T15389] device hsr_slave_1 entered promiscuous mode [ 466.646523][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 467.033550][T15533] loop2: detected capacity change from 0 to 256 [ 467.111582][T15533] exfat: Deprecated parameter 'utf8' [ 467.148401][T15533] exfat: Deprecated parameter 'utf8' [ 467.261325][T15533] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 467.295809][T15538] loop6: detected capacity change from 0 to 512 [ 467.378598][T15538] EXT4-fs: Ignoring removed oldalloc option [ 467.400428][T15389] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 467.437474][T15538] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 467.486814][T15389] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 467.514592][T15389] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 467.531433][T15538] EXT4-fs (loop6): 1 truncate cleaned up [ 467.547517][T15538] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 467.581780][T15389] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 467.676426][ T4271] Bluetooth: hci4: command 0x0406 tx timeout [ 467.821909][T15550] loop2: detected capacity change from 0 to 512 [ 467.881310][T15550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 467.910217][T11894] EXT4-fs (loop6): unmounting filesystem. [ 467.946849][T15550] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.4084: inode has both inline data and extents flags [ 467.985301][T15550] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4084: couldn't read orphan inode 15 (err -117) [ 468.011809][T15389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.026029][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.035386][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.049101][T15389] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.074780][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.153875][T15550] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 468.154511][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.226980][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.234164][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.284990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.314363][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.352606][ T4273] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /788/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 468.352702][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.381156][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.430312][ T4273] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 468.455775][ T4273] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /788/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 468.471720][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.477314][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.501743][ T4273] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 468.528157][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.535808][ T4273] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /788/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 468.577498][ T4273] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 468.582311][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.634003][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.676211][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.697657][ T4273] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /788/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 468.717095][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 468.748687][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.758146][ T4273] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 468.787576][ T4273] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /788/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 468.791956][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.809016][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.833423][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.845773][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.871767][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.893195][T15389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 468.896675][ T4273] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 468.912220][T15389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 468.940795][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.983590][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.396421][ T5003] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 469.601046][ T5003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.622301][ T5003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.653418][ T5003] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.686466][ T5003] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.702097][ T5003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.766503][ T5003] usb 2-1: config 0 descriptor?? [ 469.854189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.877644][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.891255][T15389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.041375][T11499] EXT4-fs (loop2): unmounting filesystem. [ 470.205212][ T5003] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 470.227019][ T5003] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 470.509665][ T5003] usb 2-1: USB disconnect, device number 26 [ 470.629933][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4109'. [ 470.666870][T15632] netlink: 'syz.4.4109': attribute type 7 has an invalid length. [ 470.726838][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4109'. [ 470.970673][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.995460][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.105351][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.136516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.167433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.216046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.235736][T15389] device veth0_vlan entered promiscuous mode [ 471.267640][T15389] device veth1_vlan entered promiscuous mode [ 471.438318][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.455774][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.469529][ T4271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.478422][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.496612][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 471.503727][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.504467][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.522397][ T4271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.567793][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.576644][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.586209][T15389] device veth0_macvtap entered promiscuous mode [ 471.640080][T15389] device veth1_macvtap entered promiscuous mode [ 471.677145][T15651] lo speed is unknown, defaulting to 1000 [ 471.737952][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.783299][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.806136][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.834301][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.874662][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: macsec4 [ 471.913094][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.948939][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.984144][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.025050][T15389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.036964][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.076251][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.102992][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.129989][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.154982][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.170522][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.193267][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.223926][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.256541][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.289274][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.322909][T15389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.346426][T15389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.368618][T15389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.372860][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.373571][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.375059][T15680] tipc: Started in network mode [ 472.375089][T15680] tipc: Node identity ac14142f, cluster identity 4711 [ 472.376257][T15680] tipc: Enabled bearer , priority 10 [ 472.469720][T15389] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.505344][T15389] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.515394][T15389] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.540227][T15389] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.570096][T15680] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 472.902885][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.911018][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.923425][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 473.033675][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.078110][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.111902][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.119623][ T5003] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 473.160170][T15651] chnl_net:caif_netlink_parms(): no params data found [ 473.316554][ T5003] usb 2-1: Using ep0 maxpacket: 32 [ 473.335122][ T5003] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 473.367233][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.386507][ T5003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.394590][ T5003] usb 2-1: Product: syz [ 473.396793][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.414913][T15651] device bridge_slave_0 entered promiscuous mode [ 473.415616][ T5003] usb 2-1: Manufacturer: syz [ 473.434649][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.443790][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.446589][ T5003] usb 2-1: SerialNumber: syz [ 473.465435][T15651] device bridge_slave_1 entered promiscuous mode [ 473.501349][ T5003] usb 2-1: config 0 descriptor?? [ 473.507824][ T5328] tipc: Node number set to 2886997039 [ 473.519693][ T5003] dw2102: su3000_identify_state [ 473.525140][ T5003] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 473.538722][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.574174][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.577278][ T5003] dw2102: su3000_power_ctrl: 1, initialized 0 [ 473.596764][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 473.616968][ T5003] dvb-usb: bulk message failed: -22 (2/0) [ 473.639202][ T5003] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 473.649127][ T5003] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 473.659956][ T5003] usb 2-1: media controller created [ 473.665381][ T5003] dvb-usb: bulk message failed: -22 (6/0) [ 473.684692][ T5003] dw2102: i2c transfer failed. [ 473.694835][ T5003] dvb-usb: bulk message failed: -22 (6/0) [ 473.704978][ T5003] dw2102: i2c transfer failed. [ 473.713881][T15651] team0: Port device team_slave_0 added [ 473.714712][ T5003] dvb-usb: bulk message failed: -22 (6/0) [ 473.756456][ T5003] dw2102: i2c transfer failed. [ 473.772882][T15695] dvb-usb: bulk message failed: -22 (3/0) [ 473.808263][T15695] dw2102: i2c transfer failed. [ 473.813609][T15695] dvb-usb: bulk message failed: -22 (3/0) [ 473.814407][T15651] team0: Port device team_slave_1 added [ 473.845455][T15695] dw2102: i2c transfer failed. [ 473.868481][ T5003] dvb-usb: bulk message failed: -22 (6/0) [ 473.874315][ T5003] dw2102: i2c transfer failed. [ 473.896571][ T5003] dvb-usb: bulk message failed: -22 (6/0) [ 473.903049][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.926986][ T5003] dw2102: i2c transfer failed. [ 473.936992][ T5003] dvb-usb: bulk message failed: -22 (6/0) [ 473.953771][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.963328][ T5003] dw2102: i2c transfer failed. [ 474.019489][ T5003] dvb-usb: MAC address: 02:02:02:02:02:02 [ 474.081707][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.097945][ T5003] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.154381][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.162624][ T5003] dvb-usb: bulk message failed: -22 (3/0) [ 474.176582][ T5003] dw2102: command 0x0e transfer failed. [ 474.176577][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.195828][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.209778][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.306458][ T5003] dvb-usb: bulk message failed: -22 (3/0) [ 474.336447][ T5003] dw2102: command 0x0e transfer failed. [ 474.416235][T15651] device hsr_slave_0 entered promiscuous mode [ 474.440942][T15651] device hsr_slave_1 entered promiscuous mode [ 474.461791][T15651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.496088][T15651] Cannot create hsr debugfs directory [ 474.675223][ T5003] dvb-usb: bulk message failed: -22 (3/0) [ 474.686410][ T5003] dw2102: command 0x0e transfer failed. [ 474.692045][ T5003] dvb-usb: bulk message failed: -22 (3/0) [ 474.746381][ T5003] dw2102: command 0x0e transfer failed. [ 474.760207][T15727] loop8: detected capacity change from 0 to 32768 [ 474.776495][ T5003] dvb-usb: bulk message failed: -22 (1/0) [ 474.792639][ T5003] dw2102: command 0x51 transfer failed. [ 474.874863][T15762] loop6: detected capacity change from 0 to 512 [ 474.896704][T15762] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.4147: inode has both inline data and extents flags [ 474.922567][T15727] XFS (loop8): Mounting V5 Filesystem [ 474.935535][T15762] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4147: couldn't read orphan inode 15 (err -117) [ 474.952430][T15762] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 475.054963][T15727] XFS (loop8): Ending clean mount [ 475.087026][T15727] XFS (loop8): Quotacheck needed: Please wait. [ 475.192079][ T5003] DVB: Unable to find symbol ds3000_attach() [ 475.206516][ T5003] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 475.222114][T11894] EXT4-fs (loop6): unmounting filesystem. [ 475.322905][T15727] XFS (loop8): Quotacheck: Done. [ 475.403083][ T26] audit: type=1800 audit(1774478312.027:497): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4135" name="file1" dev="loop8" ino=6150 res=0 errno=0 [ 475.489055][T15651] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 475.555810][T15651] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 475.579721][T15651] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 475.596488][ T5003] rc_core: IR keymap rc-su3000 not found [ 475.602359][ T5003] Registered IR keymap rc-empty [ 475.631494][ T5003] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 475.646446][T15389] XFS (loop8): Unmounting Filesystem [ 475.676761][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 475.695040][ T5003] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input28 [ 475.718897][T15651] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 475.730440][ T5003] dvb-usb: schedule remote query interval to 150 msecs. [ 475.763697][ T5003] dw2102: su3000_power_ctrl: 0, initialized 1 [ 475.777106][ T5003] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 475.855574][ T5003] usb 2-1: USB disconnect, device number 27 [ 475.946855][ T5003] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 475.959371][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.003727][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.024160][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.073731][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.087856][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.109262][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.127040][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.134214][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.165524][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.184128][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.205844][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.239981][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.247171][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.265715][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.284834][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.294236][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.323601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.347905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.356028][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.364399][ T5003] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 476.373661][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.397963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.416212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.438804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.464279][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.489730][T15651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.596585][ T5003] usb 2-1: Using ep0 maxpacket: 8 [ 476.617931][ T5003] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 476.632566][ T5003] usb 2-1: config 179 has no interface number 0 [ 476.639576][ T5003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 476.651654][ T5003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 476.663529][ T5003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 476.712584][ T5003] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 476.733232][ T5003] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 476.748993][ T5003] usb 2-1: config 179 interface 65 has no altsetting 0 [ 476.756083][ T5003] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 476.773741][ T5003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.868589][ T5003] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input29 [ 477.256156][ T8229] usb 2-1: USB disconnect, device number 28 [ 477.256175][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 477.271318][ T8229] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 477.273473][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 477.540102][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.565483][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.605772][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.756567][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 478.101840][ T8229] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 478.298511][ T8229] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 478.315314][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.354194][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.404656][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 478.451530][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.507334][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.557011][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 478.585789][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.614555][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.660798][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 478.676144][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 478.695217][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.697966][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.723677][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.754184][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 478.766996][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.780506][T15823] loop6: detected capacity change from 0 to 40427 [ 478.787973][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.805340][T15651] device veth0_vlan entered promiscuous mode [ 478.806567][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.819359][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.833585][T15823] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 478.851075][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.858417][T15823] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 478.878092][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.914212][T15651] device veth1_vlan entered promiscuous mode [ 478.919402][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 478.955548][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.989517][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.994635][T15823] F2FS-fs (loop6): Found nat_bits in checkpoint [ 479.026365][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 479.047614][T15651] device veth0_macvtap entered promiscuous mode [ 479.074749][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.075034][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.114507][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.122415][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.147538][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 479.159464][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.192821][ T8229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 479.194073][T15823] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 479.217538][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.234700][T15651] device veth1_macvtap entered promiscuous mode [ 479.246654][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.252836][ T8229] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 479.254851][T15823] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 479.277902][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.294421][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.326500][ T8229] usb 9-1: config 0 interface 0 has no altsetting 0 [ 479.345649][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.382782][ T8229] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 479.393470][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.404254][ T8229] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 479.448576][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.457756][ T8229] usb 9-1: Product: syz [ 479.462686][ T8229] usb 9-1: Manufacturer: syz [ 479.487431][ T8229] usb 9-1: SerialNumber: syz [ 479.492093][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: macsec4 [ 479.492113][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.492126][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.552202][ T8229] usb 9-1: config 0 descriptor?? [ 479.563862][ T8229] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 479.575125][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.597804][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.611220][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.622165][T11894] syz-executor: attempt to access beyond end of device [ 479.622165][T11894] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 479.672847][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.698796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.740189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.789531][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.829299][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.846832][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 479.916797][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.931110][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.941781][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.986387][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.996291][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.006702][ T5328] usb 9-1: USB disconnect, device number 2 [ 480.026453][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.045586][ T5328] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 480.052165][T15651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.069555][T15651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.082033][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.092550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.113817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.138014][T15651] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.196479][T15651] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.242039][T15651] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.281643][T15651] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.360386][T15889] loop6: detected capacity change from 0 to 1024 [ 480.521387][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.539622][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.574282][ T31] hfsplus: b-tree write err: -5, ino 25 [ 480.609790][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 480.616634][ T31] hfsplus: b-tree write err: -5, ino 4 [ 480.634431][ T31] hfsplus: b-tree write err: -5, ino 2 [ 480.653786][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.675672][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.702136][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.001885][T15906] loop1: detected capacity change from 0 to 1024 [ 481.079289][T15906] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 481.171390][T15906] ================================================================== [ 481.179504][T15906] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x965/0x1e90 [ 481.187257][T15906] Read of size 18446744073709551588 at addr ffff888056cf6040 by task syz.1.4183/15906 [ 481.196817][T15906] [ 481.199163][T15906] CPU: 0 PID: 15906 Comm: syz.1.4183 Not tainted syzkaller #0 [ 481.206609][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.216685][T15906] Call Trace: [ 481.220059][T15906] [ 481.222993][T15906] dump_stack_lvl+0x188/0x24e [ 481.227685][T15906] ? __lock_acquire+0x7d10/0x7d10 [ 481.232718][T15906] ? show_regs_print_info+0x12/0x12 [ 481.237916][T15906] ? load_image+0x400/0x400 [ 481.242415][T15906] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 481.247892][T15906] ? __virt_addr_valid+0x188/0x540 [ 481.253007][T15906] ? __virt_addr_valid+0x465/0x540 [ 481.258199][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 481.263683][T15906] print_report+0xa8/0x210 [ 481.268130][T15906] kasan_report+0x10b/0x140 [ 481.272732][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 481.278214][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 481.283870][T15906] kasan_check_range+0x235/0x290 [ 481.288812][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 481.294288][T15906] memmove+0x25/0x60 [ 481.298197][T15906] ext4_xattr_set_entry+0x965/0x1e90 [ 481.303529][T15906] ext4_xattr_block_set+0xae4/0x32b0 [ 481.308826][T15906] ? ext4_destroy_inode+0x200/0x200 [ 481.314025][T15906] ? proc_nr_inodes+0x2f0/0x2f0 [ 481.318874][T15906] ? _raw_spin_unlock+0x24/0x40 [ 481.323715][T15906] ? iput+0x768/0x980 [ 481.327784][T15906] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 481.333243][T15906] ? ext4_xattr_ibody_set+0x509/0x690 [ 481.338796][T15906] ext4_xattr_set_handle+0xe3b/0x1570 [ 481.344171][T15906] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 481.350151][T15906] ext4_xattr_set+0x242/0x320 [ 481.354825][T15906] ? end_current_label_crit_section+0x170/0x170 [ 481.361162][T15906] ? ext4_xattr_set_credits+0x290/0x290 [ 481.366721][T15906] ? evm_protect_xattr+0x7e9/0x9d0 [ 481.372105][T15906] ? ext4_xattr_security_get+0x40/0x40 [ 481.377770][T15906] __vfs_setxattr+0x3e0/0x420 [ 481.382642][T15906] __vfs_setxattr_noperm+0x129/0x5e0 [ 481.387930][T15906] vfs_setxattr+0x167/0x2e0 [ 481.392431][T15906] ? xattr_permission+0x500/0x500 [ 481.397459][T15906] ? _copy_from_user+0x10b/0x170 [ 481.402394][T15906] ? setxattr+0x2ce/0x360 [ 481.406720][T15906] setxattr+0x346/0x360 [ 481.410875][T15906] ? path_setxattr+0x290/0x290 [ 481.415653][T15906] ? __mnt_want_write+0x21f/0x2a0 [ 481.420678][T15906] path_setxattr+0x147/0x290 [ 481.425277][T15906] ? simple_xattr_list_add+0xf0/0xf0 [ 481.430580][T15906] ? lock_chain_count+0x20/0x20 [ 481.435518][T15906] __x64_sys_setxattr+0xb7/0xd0 [ 481.440408][T15906] do_syscall_64+0x4c/0xa0 [ 481.444828][T15906] ? clear_bhb_loop+0x60/0xb0 [ 481.449511][T15906] ? clear_bhb_loop+0x60/0xb0 [ 481.454184][T15906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.460079][T15906] RIP: 0033:0x7fb5cdf9c799 [ 481.464625][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.484228][T15906] RSP: 002b:00007fb5cef14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 481.492729][T15906] RAX: ffffffffffffffda RBX: 00007fb5ce215fa0 RCX: 00007fb5cdf9c799 [ 481.500695][T15906] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 481.508666][T15906] RBP: 00007fb5ce032c99 R08: 0000000000000000 R09: 0000000000000000 [ 481.516658][T15906] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 481.524710][T15906] R13: 00007fb5ce216038 R14: 00007fb5ce215fa0 R15: 00007ffd62e75858 [ 481.532681][T15906] [ 481.535689][T15906] [ 481.537999][T15906] Allocated by task 15906: [ 481.542414][T15906] kasan_set_track+0x4b/0x70 [ 481.547024][T15906] __kasan_kmalloc+0x8e/0xa0 [ 481.551633][T15906] __kmalloc_node_track_caller+0xae/0x230 [ 481.557450][T15906] kmemdup+0x27/0x60 [ 481.561340][T15906] ext4_xattr_block_set+0x9e6/0x32b0 [ 481.566619][T15906] ext4_xattr_set_handle+0xe3b/0x1570 [ 481.571987][T15906] ext4_xattr_set+0x242/0x320 [ 481.576837][T15906] __vfs_setxattr+0x3e0/0x420 [ 481.581511][T15906] __vfs_setxattr_noperm+0x129/0x5e0 [ 481.586799][T15906] vfs_setxattr+0x167/0x2e0 [ 481.591307][T15906] setxattr+0x346/0x360 [ 481.595460][T15906] path_setxattr+0x147/0x290 [ 481.600045][T15906] __x64_sys_setxattr+0xb7/0xd0 [ 481.604889][T15906] do_syscall_64+0x4c/0xa0 [ 481.609562][T15906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.615644][T15906] [ 481.617964][T15906] Last potentially related work creation: [ 481.623773][T15906] kasan_save_stack+0x3a/0x60 [ 481.628625][T15906] __kasan_record_aux_stack+0xb2/0xc0 [ 481.634104][T15906] call_rcu+0x14f/0x990 [ 481.638257][T15906] sctp_association_free+0x69d/0x7e0 [ 481.643547][T15906] sctp_do_sm+0x3725/0x55f0 [ 481.648050][T15906] sctp_assoc_bh_rcv+0x3ee/0x630 [ 481.652990][T15906] sctp_backlog_rcv+0x15f/0x370 [ 481.657836][T15906] __release_sock+0x1e1/0x450 [ 481.662508][T15906] release_sock+0x5b/0x1b0 [ 481.667002][T15906] sctp_wait_for_connect+0x38b/0x680 [ 481.672290][T15906] sctp_sendmsg_to_asoc+0x13e5/0x1830 [ 481.677659][T15906] sctp_sendmsg+0x1984/0x2940 [ 481.682334][T15906] __sys_sendto+0x497/0x650 [ 481.686832][T15906] __x64_sys_sendto+0xda/0xf0 [ 481.691512][T15906] do_syscall_64+0x4c/0xa0 [ 481.695932][T15906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.701893][T15906] [ 481.704208][T15906] Second to last potentially related work creation: [ 481.710958][T15906] kasan_save_stack+0x3a/0x60 [ 481.715718][T15906] __kasan_record_aux_stack+0xb2/0xc0 [ 481.721203][T15906] call_rcu+0x14f/0x990 [ 481.725354][T15906] dev_shutdown+0x34b/0x440 [ 481.729855][T15906] unregister_netdevice_many+0xa4f/0x1930 [ 481.735572][T15906] ip6gre_exit_batch_net+0x44d/0x4a0 [ 481.740859][T15906] cleanup_net+0x791/0xba0 [ 481.745307][T15906] process_one_work+0x8a2/0x1160 [ 481.750261][T15906] worker_thread+0xaa2/0x1270 [ 481.754955][T15906] kthread+0x29d/0x330 [ 481.759033][T15906] ret_from_fork+0x1f/0x30 [ 481.763460][T15906] [ 481.765777][T15906] The buggy address belongs to the object at ffff888056cf6000 [ 481.765777][T15906] which belongs to the cache kmalloc-1k of size 1024 [ 481.780452][T15906] The buggy address is located 64 bytes inside of [ 481.780452][T15906] 1024-byte region [ffff888056cf6000, ffff888056cf6400) [ 481.793723][T15906] [ 481.796036][T15906] The buggy address belongs to the physical page: [ 481.802460][T15906] page:ffffea00015b3c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56cf0 [ 481.812780][T15906] head:ffffea00015b3c00 order:3 compound_mapcount:0 compound_pincount:0 [ 481.821180][T15906] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 481.829165][T15906] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441dc0 [ 481.837738][T15906] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 481.846414][T15906] page dumped because: kasan: bad access detected [ 481.852841][T15906] page_owner tracks the page as allocated [ 481.858566][T15906] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4309, tgid 4309 (kworker/1:5), ts 60501240902, free_ts 13027965991 [ 481.879333][T15906] post_alloc_hook+0x173/0x1a0 [ 481.884101][T15906] get_page_from_freelist+0x1a1e/0x1ab0 [ 481.889643][T15906] __alloc_pages+0x1ec/0x4f0 [ 481.894314][T15906] alloc_slab_page+0x5d/0x160 [ 481.898989][T15906] new_slab+0x87/0x2c0 [ 481.903073][T15906] ___slab_alloc+0xbc6/0x1240 [ 481.907739][T15906] __kmem_cache_alloc_node+0x1a0/0x260 [ 481.913192][T15906] __kmalloc_node_track_caller+0x9e/0x230 [ 481.918924][T15906] __alloc_skb+0x22a/0x7e0 [ 481.923383][T15906] ndisc_alloc_skb+0xa6/0x450 [ 481.928076][T15906] ndisc_ns_create+0x1ce/0x620 [ 481.932846][T15906] ndisc_send_ns+0xb7/0x160 [ 481.937347][T15906] addrconf_dad_work+0xa31/0x14f0 [ 481.942454][T15906] process_one_work+0x8a2/0x1160 [ 481.947387][T15906] worker_thread+0xaa2/0x1270 [ 481.952067][T15906] kthread+0x29d/0x330 [ 481.956308][T15906] page last free stack trace: [ 481.960986][T15906] free_unref_page_prepare+0x8b4/0x9a0 [ 481.966445][T15906] free_unref_page+0x2e/0x3f0 [ 481.971121][T15906] free_contig_range+0x9d/0x150 [ 481.975972][T15906] destroy_args+0xf0/0xa0a [ 481.980381][T15906] debug_vm_pgtable+0x33c/0x38e [ 481.985268][T15906] do_one_initcall+0x26a/0x840 [ 481.990057][T15906] do_initcall_level+0x137/0x1e4 [ 481.994995][T15906] do_initcalls+0x4b/0x8a [ 481.999410][T15906] kernel_init_freeable+0x415/0x5be [ 482.004600][T15906] kernel_init+0x19/0x1b0 [ 482.008922][T15906] ret_from_fork+0x1f/0x30 [ 482.013339][T15906] [ 482.015665][T15906] Memory state around the buggy address: [ 482.021281][T15906] ffff888056cf5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 482.029329][T15906] ffff888056cf5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 482.037550][T15906] >ffff888056cf6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.045596][T15906] ^ [ 482.051737][T15906] ffff888056cf6080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.059811][T15906] ffff888056cf6100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 482.067873][T15906] ================================================================== [ 482.147216][T15906] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 482.154462][T15906] CPU: 1 PID: 15906 Comm: syz.1.4183 Not tainted syzkaller #0 [ 482.161943][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.172030][T15906] Call Trace: [ 482.175320][T15906] [ 482.178264][T15906] dump_stack_lvl+0x188/0x24e [ 482.183144][T15906] ? memcpy+0x3c/0x60 [ 482.187143][T15906] ? show_regs_print_info+0x12/0x12 [ 482.192371][T15906] ? load_image+0x400/0x400 [ 482.196978][T15906] panic+0x2e5/0x730 [ 482.200976][T15906] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 482.207179][T15906] ? bpf_jit_dump+0xd0/0xd0 [ 482.211705][T15906] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 482.217899][T15906] ? _raw_spin_unlock+0x40/0x40 [ 482.222957][T15906] check_panic_on_warn+0x80/0xa0 [ 482.227941][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 482.233437][T15906] end_report+0x66/0x110 [ 482.237919][T15906] kasan_report+0x118/0x140 [ 482.242460][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 482.248043][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 482.253548][T15906] kasan_check_range+0x235/0x290 [ 482.258525][T15906] ? ext4_xattr_set_entry+0x965/0x1e90 [ 482.264628][T15906] memmove+0x25/0x60 [ 482.268624][T15906] ext4_xattr_set_entry+0x965/0x1e90 [ 482.274040][T15906] ext4_xattr_block_set+0xae4/0x32b0 [ 482.279364][T15906] ? ext4_destroy_inode+0x200/0x200 [ 482.284598][T15906] ? proc_nr_inodes+0x2f0/0x2f0 [ 482.289487][T15906] ? _raw_spin_unlock+0x24/0x40 [ 482.294452][T15906] ? iput+0x768/0x980 [ 482.298471][T15906] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 482.303960][T15906] ? ext4_xattr_ibody_set+0x509/0x690 [ 482.309425][T15906] ext4_xattr_set_handle+0xe3b/0x1570 [ 482.314836][T15906] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 482.320853][T15906] ext4_xattr_set+0x242/0x320 [ 482.325657][T15906] ? end_current_label_crit_section+0x170/0x170 [ 482.332022][T15906] ? ext4_xattr_set_credits+0x290/0x290 [ 482.337591][T15906] ? evm_protect_xattr+0x7e9/0x9d0 [ 482.342810][T15906] ? ext4_xattr_security_get+0x40/0x40 [ 482.348300][T15906] __vfs_setxattr+0x3e0/0x420 [ 482.353002][T15906] __vfs_setxattr_noperm+0x129/0x5e0 [ 482.358398][T15906] vfs_setxattr+0x167/0x2e0 [ 482.362929][T15906] ? xattr_permission+0x500/0x500 [ 482.367980][T15906] ? _copy_from_user+0x10b/0x170 [ 482.372977][T15906] ? setxattr+0x2ce/0x360 [ 482.377337][T15906] setxattr+0x346/0x360 [ 482.381520][T15906] ? path_setxattr+0x290/0x290 [ 482.386318][T15906] ? __mnt_want_write+0x21f/0x2a0 [ 482.391377][T15906] path_setxattr+0x147/0x290 [ 482.396001][T15906] ? simple_xattr_list_add+0xf0/0xf0 [ 482.401320][T15906] ? lock_chain_count+0x20/0x20 [ 482.406198][T15906] __x64_sys_setxattr+0xb7/0xd0 [ 482.411103][T15906] do_syscall_64+0x4c/0xa0 [ 482.415552][T15906] ? clear_bhb_loop+0x60/0xb0 [ 482.420271][T15906] ? clear_bhb_loop+0x60/0xb0 [ 482.424989][T15906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.430906][T15906] RIP: 0033:0x7fb5cdf9c799 [ 482.435329][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.454929][T15906] RSP: 002b:00007fb5cef14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 482.463344][T15906] RAX: ffffffffffffffda RBX: 00007fb5ce215fa0 RCX: 00007fb5cdf9c799 [ 482.471396][T15906] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 482.479372][T15906] RBP: 00007fb5ce032c99 R08: 0000000000000000 R09: 0000000000000000 [ 482.487336][T15906] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 482.495294][T15906] R13: 00007fb5ce216038 R14: 00007fb5ce215fa0 R15: 00007ffd62e75858 [ 482.503263][T15906] [ 482.506610][T15906] Kernel Offset: disabled [ 482.511005][T15906] Rebooting in 86400 seconds..