last executing test programs: 4m13.864887404s ago: executing program 3 (id=909): r0 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x7) keyctl$setperm(0x5, r0, 0x8082008) 4m13.149413436s ago: executing program 3 (id=912): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902240001"], 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x20) 4m11.630557235s ago: executing program 3 (id=918): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000080)='./bus\x00', 0x86, &(0x7f00000002c0)={[{}, {@usrjquota_file, 0x4}, {@grpjquota}, {@usrjquota_file}, {@usrjquota, 0x3d}]}, 0xfc, 0x110a, &(0x7f0000006580)="$eJzs2LFqFEEYB/D/7B2YbmXTL4IWFhISzs4qRYRrrW1EUpkqV0UE8V18HEllH/IAFgFLYWQ3t0YkEDBnJPD7wcwO38438005EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALj0Yui2m6SbIk2SkvT96fI8ST/FH36ZNSl5dbhcHRwvXq6SzMbpZWhD1pCWbu/xVrfoFt1e93x7/0m3Onn/7s3R0eHxepmSPmcXmz9IWddzra3N7wcAAAD3Rb219s8l53e7PwAAAHCTjT4mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyF2l6NuyQ/aq1pkpSk70+X50n6/1kgAAAAcGslTV6318UzPgNceZavbRnjU/tehjm7+TzmP7izmgEAAOD+md84o/x2H3+aeWqtH6d/jzLPzs7leP3Jt/1kdnKQ3V938k9jf3bx4e3USp39g7MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAOClAAAA///LONy9") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200), 0x0, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 4m10.396789097s ago: executing program 3 (id=925): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 4m9.828084129s ago: executing program 3 (id=929): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000002400)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002480)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) 4m8.852708767s ago: executing program 3 (id=933): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000002000)={[{@dmask={'dmask', 0x3d, 0x3ba}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@sys_tz}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) 4m8.135321018s ago: executing program 32 (id=933): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000002000)={[{@dmask={'dmask', 0x3d, 0x3ba}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@sys_tz}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) 2m46.705740275s ago: executing program 4 (id=1497): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') r1 = fanotify_init(0x0, 0x101000) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) getdents64(r0, 0x0, 0x0) 2m46.550068664s ago: executing program 4 (id=1498): unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}, {0x4, 0x9}], 0x2, 0x0) unshare(0x20060400) 2m46.324679947s ago: executing program 4 (id=1500): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee00, 0xee00, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x40044}}], 0x1, 0x4) 2m46.28419216s ago: executing program 4 (id=1501): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000000)=""/39, 0x27) 2m45.815353297s ago: executing program 4 (id=1505): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) 2m43.653578393s ago: executing program 4 (id=1518): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2m42.965867453s ago: executing program 33 (id=1518): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2m27.732136722s ago: executing program 1 (id=1606): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 2m27.460113818s ago: executing program 1 (id=1608): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x4, 0x1002, 0x5, 0x8, 0x1, 0x6, 0x140000, 0x2000001, 0x1a44b, 0x3, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0x191fa504, 0x8, 0x5, 0x3, 0xfffffff8]}) poll(&(0x7f0000000140)=[{r0, 0x1000}], 0x1, 0x8) 2m27.08888897s ago: executing program 1 (id=1610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) 2m26.709987361s ago: executing program 1 (id=1612): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x791, &(0x7f0000001740)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) io_setup(0x8, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000980)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x0, 0x800, r0, 0x0, 0x0, 0x401201004}]) 2m25.960335455s ago: executing program 1 (id=1616): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) 2m25.429709857s ago: executing program 1 (id=1619): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 2m10.278333113s ago: executing program 34 (id=1619): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4010044) 4.941535212s ago: executing program 5 (id=2452): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0xf8) 3.381762723s ago: executing program 5 (id=2462): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r1, &(0x7f0000000000)=""/178, 0xb2) 3.202792523s ago: executing program 6 (id=2463): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'dvmrp0\x00', 0xc00}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 3.124013558s ago: executing program 5 (id=2464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2.900742171s ago: executing program 5 (id=2465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) 2.814682785s ago: executing program 6 (id=2466): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @local, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @local, 0x3}], 0x1c) 2.613174788s ago: executing program 6 (id=2468): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.329555333s ago: executing program 0 (id=2476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.219277369s ago: executing program 2 (id=2477): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x9fef}, {0x6, 0xfc}]}) write$ppp(r0, &(0x7f0000000140)="1e08", 0x2) 1.20735064s ago: executing program 0 (id=2478): epoll_create1(0x80000) r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1.189961871s ago: executing program 6 (id=2479): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.179007471s ago: executing program 5 (id=2480): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev, 0x3}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 980.810083ms ago: executing program 0 (id=2481): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x70e, 0x200400, 0x4, 0xc7cc, 0x3, "40000868245eb03100", 0x23fffd, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd) 937.658345ms ago: executing program 5 (id=2482): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtLOLKF4gLHl4C3PSGi76RIvEKEC+ASDZXlaAMGvucZLxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R9e6ETEjV+kB05G/F/0IroR83W9GPXMtbx8PyJOxWZzPBcRvdmIev3Nf56JuBwRH5+IWN9YWaofvrjPflw5f+/Op9/91t9+/fu1Uz9+80cfDrf/4P8vffSb+xEnv//aR5/eP5htBwAAgFJUVVV10tv80+n9fbftTgEAE5GP/1WSH1er1Wr1gda/605Xf9SF1k3VaPebRUSsNtepXzM4HQ8AR8xqfNJ2F2iR/IvWj4in2u4EMNU6bXeAQ7G+sbLUSfl2mseDxa32/HfKbfmvdh7e37HbdJzha0wm9fO1Fr14dpf+zE+oD9Mk598dzv/GVvsgLXfY+U/KbvkPtm59Kk7Ovzec/5Bt+f8hIo5s/t2R+Zcq599/nPxXe0d4/5c/AAAAAADHX/77/8mWz//OPvmm7Mte538XJ9QHAAAAAAAAADhoTzr+30PG/wMAAICpVb9Xr/3xxKPHdvsstvrx652Ip4eWBwqTbpZZaLsfAAAAAAAAAAAAAFCS/tY1vNc7ETMR8fTCQlVV9VfTcP24nnT9o6707YeStf1LHgAAtnx8It3Lnwfg60TMRcT19Fl/MwsLC1U1N79QLVTzs/n17GB2rppvvK/N0/qx2cE+XhD3B1X9zeYa6zWNe788rn34+9XPNah6++jYZLQcOgDF2zoarTsiHTNV9Uy0/SqHo8H+f/zY/9mPtn9OAQAAgMNXVVXVSR/nfTqd8++23SkAYBLm8vF/+LyAWq1Wq9Xq41c3VaPdbxYRsdpcp37NYDh+ADhiVuOTtrtAi+RftH5EnGq7E8BU67TdAQ7F+sbKUifl22keD9L47vlakG35r3Y218vrj5qOM3yNyaR+vtaiF8/u0p/nJtSHaZLz7w7nf2OrfZCWO+z8J2W3/OvtPNlCf9qW8+8N5z/k+OTfHZl/qXL+/cfKvyd/AAAAAACYYvnv/yfLPf/by/1ZnFAfAAAAAAAAAOCgrW+sLOX7XvP5/8+OWK7TnHP/57GR8+/sO3/3/x4nOf/ucP5DF+T0GvMP3niU/z83VpY+vPePz+Tp1Oc/0xvUzz3T6fb66ZqfauatuBW3YznO71i+v639wo72mW3tF8e0X9rRPqjb53P72ViKn8btePNh++yYC6PmxrRXY9pz/j37f5Fy/v3GV53/QmrvDE1rDz7o7tjvm9NRz3Ptz/9+cefeNXlr0Xu4bU319p1poT+b/ydPDeLnd5fvnP3lzXv37lyINNn26MVIkwOW859JXzn/l17Yas+/95v764MPBo+d/7RYi/6u+b/QmK+39+UJ960NOf9B+sr55yPQ6P3/KOe/+/7/Sgv9AQAAAAAAAAAAAAAAgL1UVbV5i+i1iLia7v9p695MAGCifvu9NFMloVar1Wq1+tjWTdVorzeLmNu+ztWI+NWobwYATLP/RMTf2+4ErZF/wfLn/dXTz7XdGWCi7r73/k9u3r69fOdu2z0BAAAAAAAAAP5XefzPxcb4z5vXAQ2NG71t/Nc3YvHIjv/ZHfQ2xzpPG/R87D3+95nYe/zv/pjnmxnTPhjTPjumfW5M+8gbPRpy/s+njHP+p9OGlTT+60st9KdtOf8zaaznnP8XhpZr5l/96Sjn392W/7l77/zs3N333n/11js3315+e/ndC+evXr505fKlK1fOvXXr9vL5rX9b7PHhyvnnsa9dB1qWnH/OXP5lyfl/PtXyL0vO/8VUy78sOf/8ek/+Zcn55/c+8i9Lzv/lVMu/LDn/L6Za/mXJ+b+SavmXJef/pVTLvyw5/1dTLf+y5PzPplr+Zcn5n0u1/MuS889nuORflpx/vrJB/mXJ+V9MtfzLkvO/lGr5lyXnfznV8i9Lzv9KquVflpz/1VTLvyw5/y+nWv5lyfl/JdXyL0vO/7VUy78sOf+vplr+Zcn5fy3V8i9Lzv/rqZZ/WXL+30i1/MuS8/9mquVflpz/66mWf1keff6/mQnP/OsvEVPQDTOlzrz7172Wafs3EwAAAAAAAAAAAAAwbBJXGre9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2UHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Ge/7LUTiEtCCMGQteMEQzbeXX8lJhgcIDQNLU0DoaUNdYy9/gB/1buGJIqaTZO2QURqpPYivSgFRBFSWyVCSKVSiiIVqb1rrkC5Qa2UC0tNKhNBJaokW5057/vuzOzszPpj7Tnn/H5R/PfOnJl558yZ2X3WemYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm34+PSfD2RZlv/f+GNdll2Z/31Ntif/cm7n5V4hAAAAcKHebPz5D1elE/Ys40JN2/zb+/7jB/Pz8/PZF18/89Zfzs+nM8aybGh1ljXOi/79V7+cb94meCIbHRhs+nqwx80P9Th/uMf5Iz3OX9Xj/NU9zh/tcf6iHbDImuL3MY0r29T467pil2bXZCON8zZ1uNQTA6sHB+PvchoGGpeZHzmYHcmOZtPZ5KLLDDT+y7IXNuS3dXcWb2uw6bbWZ1l29ueP7o9rGAj7eFPWcmMNzY/da3dmY6///NH935199d2dZs/dsGilWbZ5Y77OJ7Ns4ddV2UC2Ou2TuM7BpnWu77DOoZZ1DjQul/+9fZ1nl7nOeL9Hwzpf6rLO9eG0h27MsmwuW3Kbdk9kg9natltN+3u0OCLy68gfyndkw+d0nGxYxnGSX+aVG1uPk/ZjMu7/DWGfDC+xhuaH47XHVy3a7+d7nOT3uh+O1fy6781vdHS0+VerLcdqvs2jNy19DHR87DocA+lYbjoGNvY6BgZXDTWOgcGFNW9sOQamFl1mMBto3NaZm7ofAxOzx05OzDz8yK1Hju07NH1o+vjU5M7t23Zs37Zjx8TBI0enJ4s/z22XlsjabDAdgxvDa008Bt/ftm3zITn/rYv3PBjtk+dBft8/e3O+oCsHsyWO8XybJzdf+PMgfd9veh4MNz0POr6mdngeDC/jeZBvc3bz8r5nDjf932kNK/VauK7pGLic3w/z23zgA0u/Fq4P63rqg+f6/XBo0TEQ79ZAeO7lp6Sf90ZvD/tl8XFxfX7GFauy0zPTp7Y8tG929tRUFsYlcXXTY9V+vKxtuk/ZouNl8JyPlz1//8bN13c4fV3YV6O3dH+s8m22j3d/rBqv7q37c1VW7M+WU7dmYVxkl3p/dvpulu/PlCW67M98mydvvfCfBVMuaXr9G+n1+jc0Mly8/g2lvTHS8vq3+KEZaqwsy87eurzXv5Hw/6V+/bumT17/8n31wJbux0C+zVMT53oMDHd9/bsxzIGwng+ExDDalPvfapw/VxymTY9lz+NmeHgkHDfD8RZbj5ttiy6TX1t+25snz++42Xxj62PV8nNLBY+bfF/91WT34ybf5sWpC3/tWBP/2vTasarXMTAytCpf70g6CIrXu/k18RjYku3PTmRHswPpMvmjnN/W+NblHQOrwv+X+rXjuj45BvJ99ezW7sdAvs2Pt13cn502h1PSNk0/O7X/fmGpzH/98ML1te+2i53583V+4iefTqd1yhD5Nq9uP9ec0X0/3RJOuaLDfmp//ix1TB/ILs1+ui6s8+iO7r+byre5Zucyj6c9WZa9PPVy4/dd4fe73z/9kx+0/N630++UX556+Z6J+356LusHAOD8vdX4c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/8O27nnvzsSy9G+B8EM+Pu+HejxTbxY73XPh6bH5BfvrHvjPy3NceW95tD2ZZ9sY97+m4/eGPxHUVTsZ1fqj19EWuu2FZt//g/QvbNb9/wtldxfXH+7PcwyB2lV+Y2Nq43rGHpxrzxXuyxrxv7qkniusvvo7bn9lWbP834U1L9hwcaLn85rCeTWGOhfeUuXfPwn7IZ7zcc+vf969Xf27h9uLlBja+vXE3n/3j4nrje0Q9c3WxfbzfS63/X77+vefy7R+6qfP6HxvsvP4z4XpfCfNXu4vtm/f515rW/6dh/fH24uW2fPtHHdf//LuK7Z8Px8U3w2xf/51/8d43Oz1e8Xb23FFcLt7+5P9ub1wuXl+8/vb1jz421bI/2q//xdeL69n9lV8MNW8fT4+3Ez14R+vxPRAe35YeeZZl3/uzrGU/Zx8uLvfPbeuP13fyjs7rv6VtnScHbmhcfuH+rGu5X9/4u60d729cz55/XNdyf565K+y/1yd+nF/vmfvC8RjO/7+Xiutrfy/T5+9qfb2J239zXfG8jdc30bb+Z9rWP3dDvu96r//u14v1P//R1S3r3/PJcDzdXcxe6z/0t1e1XP5b3y0ej1NfHT9+Yub0kQNNe7X5ebx6dM3aK65829uvCq+l7V/vPTF7ePrU2OTYZJaNlfAtA1d6/d8O83+KMXfxb6Hw018Ux93Tnyq+b73/l8XXz4TTHwyPZ/z++I2/Hmk5Xtsf97mPFvNC1//BsI7letfX/+uGZW145gsvnP6nP3m1/eeCeH9OvnO0cf+e3XBt47yBF4vz21+vevnPd7Y+r382PNmYPwz7dT68M/PGa4vba7/++N4kT3+meP7Gn+Ti5bO29xNZN9R6Py50/T8LP8f86LrW1794fPzwsbZ3c16XDeRLmAuvD9lccX7cKu7vp89e2/H24vvwZHPvPpdlLmnm4ZmJo0eOn35oYnZ6ZnZi5uFH9h47cfr47N7Ge5fu/VKvyy88v9c2nt8HpnduzxrP9hPFWGGXe/0n799/4LbJmw9MH9x3+uDs/SenTx3aPzOzf/rAzM37Dh6c/mqvyx85sHtq665tt20dP3TkwO7bd+3atmv8yPET+TKKRfWwc/LL48dP7W1cZGb39l1TO3Zsnxw/duLA9O7bJifHT/e6fON703h+6a+Mn5o+um/2yLHp8Zkjj0zvntq1c+fWnu/+eOzkwZmxiVOnj0+cnpk+NVHcl7HZxsn5975el6ceZk6E17s2A+Gn88/fsjO9P27uO48veVXFJq0/nmavhfeCit/fen0dc/9ImElN8j8AAADUQcz94Y3/F86Q/wEAAKAyYu5fHWYi/wMAAEBlxNxfJP/R9PHvdcn/F6v//7j+f4P+v/5/pv+f6P/r/2f6//r/Pej/6/+Xef36//r/9NZv/f+Q+7M1Webf/wEAAKCiYu5fG2Yi/wMAAEBlxNx/RZiJ/A8AAACVEXP/lWEmNcn/Pv9f/1//v1v/P26r/5/p//dD/3/Tf+v/L6L/r/+f6f+ft8vdny/7+vuw/79G/59+02/9/5j73xZmUpP8DwAAAHUQc//bw0zkfwAAAKiMmPuvCjOR/wEAAKAyYu5fF2ZSk/yv/6//r//v8//1/0vT//f5/x3o/+v/Z/r/5+1y9+fLvv4+7P/7/H/6Tr/1/2Pu/7Uwk5rkfwAAAKiDmPvfEWYi/wMAAEBlxNx/dZiJ/A8AAACVEXP/NWEmNcn/9ez/v5Jlmf5/pv+v/9+2Tv1//f+VoP+v/9+N/r/+f5nXr/+v/09v/db/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v7rwkxqkv/r2f/3+f/6/wX9/9Z16v/r/6+EWvf/3zis/9+D/r/+f5nXr/+v/09v/db/j7n/3WEmNcn/AAAAUAcx918fZiL/AwAAQGXE3P+eMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqVz9/8Elz/H5/wX9/1YXr/8/t7AA/f/SrF//X/+f3vqt/x9z/3vDTGqS/wEAAKAOYu5/X5iJ/A8AAACVEXP/DWEm8j8AAABURsz9Y2EmNcn/+v/6//r/+v/6//r/K6lc/f+l6f8X9P9b+fx//X/9f/1/uuu3/n/M/RvCTGqS/wEAAKAOYu7fGGYi/wMAAEBlxNx/Y5iJ/A8AAACVEXP/pjCTyuT/t3U9V/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7r8pzKQy+R8AAACIuf/mMBP5HwAAACoj5v73h5nI/wAAAFAZMfdvDjOpSf7X/9f/1/8vcf9/SP8/0//ve/r/+v/d6P/r/5d5/fr/+v/01m/9/5j7PxBmUpP8DwAAAHUQc/8Hw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu4fDzOpSf7X/9f/1/8vcf/f5/+3rF//vz/p/5el/z/S+qX+/7Lo/+v/6//r/9Ndv/X/Y+6/NcykJvkfAAAA6iDm/i1hJvI/AAAAVEbM/RNhJvI/AAAAVEbM/ZNhJjXJ//r/+v/6//r/+v/6/ytJ/78s/f82+v/Lov+v/6//r/9Pd/3W/4+5fyrMpCb5HwAAAOog5v6tYSbyPwAAAFRGzP3bwkzkfwAAAKiMmPu3h5nUJP+XpP+/JRWg9P/1//X/9f/1/0tF/1//vxv9f/3/Mq9f/1//n1aDHU7rt/5/zP07wkxqkv8BAACgDmLu3xlmspD/1136VQEAAAAXU8z9t4WZ+Pd/AAAAqIyY+28PM6lJ/i9J/9/n/+v/6/830f/X/y8T/X/9/270//X/y7x+/X/9f3rrt/5/zP27wkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/x1hJvI/AAAAlEqnzyGMYu7/cJhJTfK//n/V+//zq/X/9f/1/7uvX/9/Zen/6/93o/+v/1/m9ev/6//TW7/1/2Pu3x1mUpP8DwAAAHUQc/9HwkzkfwAAAKiMmPs/GmYi/wMAAEBlxNy/J8ykJvlf/7/q/X+f/6//r//fa/36/ytL/1//vxv9/3L2/8OPLfr/fdT/z48h/X/6Ub/1/2PuvzPMpCb5HwAAAOog5v6PhZnI/wAAAFAZMfd/PMxE/gcAAIDKiLn/E2EmNcn/+v/6//r/+v/l7P+P6P+XhP7/ivX/Gy+F+v8F/f/zc7n782Vffz/1/33+P/2q3/r/MfffFWZSk/wPAAAAdRBz/yfDTOR/AAAAqIyY+389zET+BwAAgMqIuf/uMJOa5H/9f/1//X/9/3L2/33+f1no//v8/270//X/y7x+/X/9f3rrt/5/zP2/EWZSk/wPAAAAdRBz/z1hJvI/AAAAVEbM/Z8KM5H/AQAAoGRWLXlOzP2/GWZSk/xfvv7/WCn7/4Pp+vX/9f/1//X/9f8vJv1//f9M//+8Xe7+fNnXr/+v/09v/db/j7n/t8JMapL/AQAAoA5i7v90mIn8DwAAAJURc/9vh5nI/wAAAFAZMfffG2ZSk/x/sfv/7Zfvxuf/6/9n+v/6//r/+v8XSP9f/z/T/z9vl7s/X+L1xx9F9P/1/+mh3/r/Mff/TphJTfI/AAAA1EHM/feFmcj/AAAA0KcOn/MlYu7/TJiJ/A8AAACVEXP/Z8NMapL/y/f5//r/+v/6//r/+v9lov+v/9+N/r/+f5nX7/P/9f/prd/6/zH33x9mUpP8DwAAAHUQc//nwkzkfwAAAKiMmPt/N8xE/gcAAIDKiLn/98JMapL/9f/1//X/9f/1//X/V5L+/+L+f/4apv9f0P/X/y/z+vX/9f/prd/6/zH3fz7MpCb5HwAAAOog5v7fDzOR/wEAAKAyYu7/gzAT+R8AAAAqI+b+B8JMapL/9f/1//X/9f/1//X/V5L+v8//70b/X/+/zOvX/9f/p7d+6//H3P+FMJOa5H8AAACog5j7/zDMRP4HAACAyoi5f2+YifwPAAAAlRFz/4NhJjXJ//r/+v/6//r/+v/6/ytJ/1//vxv9f/3/Mq9f/1//n976rf8fc/++MJM9rTcDAAAAlFfM/V8MM6nJv/8DAABAHcTcvz/MRP4HAACAyoi5/0CYSU3yv/6//r/+v/6//r/+/0rS/9f/70b/X/+/zOvX/9f/p7d+6//H3D8dZlKT/A8AAAB1EHP/wTAT+R8AAAAqI+b+Q2Em8j8AAABURsz9h8NMapL/9f/1//X/a9v/f+n7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+4+EmdQk/wMAAEAdxNz/pTAT+R8AAAAqI+b+L4eZyP8AAABQGTH3Hw0zqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4f+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/mNhJjXJ/wAAAFAHMfcfDzOR/wEAAKAyYu4/EWYi/wMAAEBlxNx/MsykJvlf///c+v8DS3QD9f87r1//vwL9/yb6//r/50P/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/KsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afDTGqS//+fvfte8qys9jjcNGcOQ1HeA+UdeAVegtdgleUlmAOYMSvmnDAnzIo555wxZ1EUc6zSonuthQw9e/cw/et597ue5w8Wp+EULwVW+a3xUxsAAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/98l/b/+f4n+X/+/5ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//l//r//X/+v/d0n/r/9fov/X/2/5/fp//T/rRuv/c/c/PG5psv8BAACgg9z9j4hb7H8AAACYRu7+R8Yt9j8AAABMI3f/NXFLk/2v/9f/6/832P//n/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7/9q4pcn+BwAAgA5y9z8qbrH/AQAAYHPuef+jf567/9Fxi/0PAAAA08jd/5i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/7FxS5P9DwAAAB3k7n9c3GL/AwAAwDRy9z8+brH/AQAAYOvO5O/k7n9C3NJk/+v/T6//v0z/r//X/+v/9f8nTv+v/9/T/99tl7qf3/r79f/6f9btvP+/z3UH97j9f+7+6+KWJvsfAAAAOsjd/8S4xf4HAACAaeTuf1LcYv8DAADANHL3PzluabL/9f++/39H//+fy/T/+n/9/x0/1/+fDP2//n+J/l//v+X36//1/6zbef+/0vuf+3/n7n9K3NJk/wMAAEAHufufGrfY/wAAADCN3P1Pi1vsfwAAAJhG7v6nxy1N9r/+X//v+//6f/2//n+X9P/D9v/n/kfvzvT/x6L/1/+fr/+/9zHer/+ng9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7//q4xf4HAACAaeTuf1bc0mT/6//1//p//f+d+//9lv3/7T/T/++G/n/Y/n+Z/v9Y9P/6f9//1/+zbLT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9u2b9ULzpd+n/9v/5f/39R3/+/fI7+3/f/d0f/r/9fov/X/2/5/fp//T/rRuv/c/c/P27x6/8AAAAwh/292v0viFvsfwAAAJhG7v4Xxi32PwAAAEwjd/+L4pYm+1//r//X/+v/L6r/n+T7//r/3dH/6/+XHLf/39P/19+L/n+c9+v/9f+sG63/z93/4rilyf4HAACADnL3vyRusf8BAABgGrn7Xxq32P8AAAAwjdz9L4tbmux//b/+X/+v/9f/6/93Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/Vdxy7v7fP81XnR79v/5f/6//1//r/3dJ/6//X6L/P7r/P3uev57+f6z36//1/6wbrf/P3X9D3OLX/wEAAGAauftfHbfY/wAAADCN3P2viVvsfwAAAJhG7v7Xxi1N9v/5+v/brjr84/r/49H/H/1+/b/+X/+v/9f/6/+X6P99/3/L79f/6/9ZN1r/n7v/dXFLk/0PAAAAHeTuf33cYv8DAADANHL3vyFusf8BAABgGrn73xi3NNn/J//9/6v1//p//X9c/b/+X/+v/9f/L9P/6/+3/H79v/6fdaP1/7n73xS3NNn/AAAA0EHu/jfHLfY/AAAATCN3/1viFvsfAAAAppG7/61xS5P9f/L9v+//6/8vsP/f1/8n/X/8c9X/6/8vwFb7/339/wH9v/5/y+/X/+v/WTda/5+7/8aDqddv/wMAAEAHNx789uze2+IW+x8AAACmkbv/7XGL/Q8AAADTyN3/jrilyf7X/+v/L3n/7/v/Rf8f/1z1//r/C7DV/t/3/w/p//X/W36//l//z7rR+v/c/e+MW5rsfwAAAOggd/+74hb7HwAAAKYRu//wf/xu/wMAAMCU3n3w27N774lbmuz/xv3/1Rfb/1/5P7+v/z/6/fr/E+n/bzz33z39v/5/S/T/+v8l+n/9/5bfP07/Hz+4Rv/PeEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/pviFvsfAAAAppG7//1xS5P937j/n+T7//e9NV6g/5+3//f9/7j6f/3/UfT/E/T/t//XL/1//fX1/9t5/zj9v+//M67R+v/c/R+IW5rsfwAAAOggd/8H4xb7HwAAAKaRu/9DcYv9DwAAANPI3f/huKXJ/tf/b73/9/1//b/+X/8/Nv2//n+J7//r/7f8fv2//p91o/X/ufs/Erc02f8AAADQQe7+j8Yt9j8AAABMI3f/x+IW+x8AAACmkbv/43FLk/2v/9f/76r/v/0vov9v0v9fe0X++fp//f9d6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/ELU32PwAAAHSQu/+TcYv9DwAAANPI3f+puMX+BwAAgGnk7v903HCve1y6J52sM+f5eeS6+n/9v+//6/99/1//v0v6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLX/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5/s/3/lfr/O79f/z8m/b/+f4n+X/+/5fcfu/+/+ej/f/0/HYzW/+fu/0Lc0mT/AwAAQAe5+78Yt9j/AAAAMI3c/V+KW+x/AAAAmEbu/i/HLU32v/5f/6//32z/7/v/57xf/z8m/b/+/9AtR/5U/6//3/L7ff9f/8+60fr/3P1fiVua7H8AAADoIHf/V+MW+x8AAACmkbv/a3GL/Q8AAADTyN3/9bilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt+v/9f/s260/j93/zfilib7HwAAADrI3f/NuMX+BwAAgGnk7v9W3GL/AwAAwDRy9387bmmy/2fu/5f+NP3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+sG63/z93/nbilyf4HAACADnL3fzdusf8BAABgGrn7b45b7H8AAACYRu7+78UtTfb/zP3/Ev3/If2//n9P/6//3zH9v/5/if5f/7/l9+v/9f+su0T9/5m98/T/ufu/H7c02f8AAADQQe7+H8Qt9j8AAABMI3f/D+MW+x8AAACmkbv/R3HLPPv/fjct/EH9/4n3/wf/Eun/9f97+n/9v/7/gP5f/79E/6//3/L79f/6f9aN9v3/3P0/jlvm2f8AAADQXu7+n8Qt9j8AAABMI3f/T+MW+x8AAACmkbv/Z3FLk/2v//f9f/1/q/7/8j39v/7/lOn/9f9L9P/6/y2/X/+v/2fdaP1/7v6fxy05/K66O3+XAAAAwEhy9/8ibmny6/8AAADQQe7+X8Yt9j8AAABMI3f/r+KWJvtf/6//1/+36v99/1//f+r0//r/Jfp//f+W35/9f/57p//X/3NXo/X/uft/Hbc02f8AAADQQe7+W+IW+x8AAACmkbv/N3GL/Q8AAADTyN3/27ilyf7X/+v/9f/6f/2//n+X9P/6/yX6f/3/lt/v+//6f9aN1v/n7r81bmmy/wEAAKCD3P2/i1vsfwAAAJhG7v7fxy32PwAAAEwjd/9tcUuT/a//1/9P2f9fof/X/+v/R6H/1/8v0f/r/7f8fv2//p91o/X/ufv/ELc02f8AAADQQe7+P8Yt9j8AAABMI3f/n+IW+x8AAACmkbv/z3FLk/2v/9f/X3j/f6b+voft/33/X/+v/x/GvP3//+v/j+r/z17Y+7v3/9ffcPhj/f8236//1/+zbrT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAaeTu/1vcYv8DAADANHL3/z1uabL/9f/6/ym//6//1//r/4cxb//v+/++/+/7//p//b/+nzWj9f+5+/8RtzTZ/wAAANBB7v5/xi32PwAAAEwjd/+/4hb7HwAAAKaRu//fcUuT/a//1//r//X/+n/9/y7p//X/S/T/+v8tv1//r/9n3Wj9f+7+/wYAAP//lgIt2A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 817.168512ms ago: executing program 2 (id=2483): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x11e95000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb180018"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28) 759.722886ms ago: executing program 0 (id=2484): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 740.589847ms ago: executing program 6 (id=2485): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x3ff}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x60}}, 0x0) 634.241933ms ago: executing program 2 (id=2486): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 560.515228ms ago: executing program 0 (id=2487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 436.797455ms ago: executing program 6 (id=2488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 357.767009ms ago: executing program 2 (id=2489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x128, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xf8, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0xdc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_IPT={0x9c, 0x2, 0x0, 0x0, {{0x100, 0x9, 0x319}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x5e, 0x5, "404ed3d434fb1f48a30cc0474d3c5260844ef8d653aa690f08733679c0f9bd6e29e13b09adea5ceb607c74a62934f395f716bdc5b2d344210a255c16f0fddd15bf1303af3d0414041b90743b0add6ab90d0ba1b39a9b13161873"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x1e2}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/199, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 357.335119ms ago: executing program 0 (id=2490): syz_mount_image$vfat(&(0x7f0000000dc0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x0, 0x11ed, &(0x7f0000002480)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 176.58927ms ago: executing program 2 (id=2491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x5a303}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0xff}, @IFLA_BRPORT_PRIORITY={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 2 (id=2492): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000000), 0x1, 0x9768, &(0x7f00000097c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$FS_IOC_GETFSMAP(r0, 0x40105870, &(0x7f0000001f40)=ANY=[]) kernel console output (not intermixed with test programs): .489483][T11119] BTRFS warning (device loop0): try to load backup roots slot 2 [ 346.523407][ T11] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 346.537873][T11172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 346.564415][T11172] System zones: 1-12 [ 346.568785][T11172] EXT4-fs (loop5): orphan cleanup on readonly fs [ 346.595906][T11119] BTRFS warning (device loop0): couldn't read tree root [ 346.602965][T11119] BTRFS warning (device loop0): try to load backup roots slot 3 [ 346.613618][T11172] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1737: bg 0: block 361: padding at end of block bitmap is not set [ 346.709510][T11172] EXT4-fs (loop5): Remounting filesystem read-only [ 346.717496][T11172] EXT4-fs (loop5): 1 truncate cleaned up [ 346.724922][T11172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 346.782585][T11032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.791512][T11128] overlayfs: upper fs does not support tmpfile. [ 346.801915][T11119] BTRFS info (device loop0): enabling ssd optimizations [ 346.829049][T11119] BTRFS info (device loop0): auto enabling async discard [ 346.845358][ T5779] Bluetooth: hci4: command tx timeout [ 346.885652][T11119] BTRFS info (device loop0): rebuilding free space tree [ 346.908245][T11128] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 346.932643][T11119] BTRFS info (device loop0): checking UUID tree [ 346.942671][T11172] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.1737: error -117 reading directory block [ 346.959408][T11128] overlayfs: failed to set xattr on upper [ 347.005483][T11184] EXT4-fs warning (device loop5): dx_probe:823: inode #2: lblock 0: comm syz.5.1737: error -117 reading directory block [ 347.013778][T11128] overlayfs: ...falling back to redirect_dir=nofollow. [ 347.078149][T11128] overlayfs: ...falling back to index=off. [ 347.107797][T11128] overlayfs: ...falling back to uuid=null. [ 347.127638][T11128] overlayfs: upper fs missing required features. [ 347.180660][T10291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 347.346884][ T5767] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 347.497297][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 347.850589][T11201] loop5: detected capacity change from 0 to 1024 [ 347.926248][T11201] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 348.026699][T11201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.306873][T11032] veth0_vlan: entered promiscuous mode [ 348.332587][T10291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.354759][T11214] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 348.441617][T11217] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1744'. [ 348.586760][T11032] veth1_vlan: entered promiscuous mode [ 348.642721][T11032] veth0_macvtap: entered promiscuous mode [ 348.684798][T11032] veth1_macvtap: entered promiscuous mode [ 348.852432][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.888882][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.919757][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.930497][ T5083] Bluetooth: hci4: command tx timeout [ 348.968639][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.987998][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.024149][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.066020][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.091067][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.123325][T11032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.160196][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.203748][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.228668][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.253779][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.270114][T11233] loop2: detected capacity change from 0 to 4096 [ 349.276652][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.294316][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.318439][T11032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.330807][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.345990][T11032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.432913][T11032] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.473040][T11032] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.497767][T11032] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.533650][T11032] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.801122][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.837416][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.933380][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.955393][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.052770][T11225] loop0: detected capacity change from 0 to 40427 [ 350.090439][T11225] F2FS-fs (loop0): invalid crc value [ 350.096214][T11242] loop2: detected capacity change from 0 to 4096 [ 350.115087][T11225] F2FS-fs (loop0): Found nat_bits in checkpoint [ 350.202795][T11242] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 350.237621][T11242] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 350.276780][T11225] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 350.429307][T11225] syz.0.1746: attempt to access beyond end of device [ 350.429307][T11225] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 350.528069][T11225] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 350.570461][T11254] loop5: detected capacity change from 0 to 128 [ 350.630423][T11254] FAT-fs (loop5): Directory bread(block 414) failed [ 350.668699][T11254] FAT-fs (loop5): Directory bread(block 415) failed [ 350.700351][T11254] FAT-fs (loop5): Directory bread(block 416) failed [ 350.723273][T11254] FAT-fs (loop5): Directory bread(block 417) failed [ 350.753125][T11254] FAT-fs (loop5): Directory bread(block 418) failed [ 350.783584][T11254] FAT-fs (loop5): Directory bread(block 419) failed [ 350.794429][T11254] FAT-fs (loop5): Directory bread(block 420) failed [ 350.801175][T11254] FAT-fs (loop5): Directory bread(block 421) failed [ 350.911977][T11254] FAT-fs (loop5): Directory bread(block 414) failed [ 350.935475][T11254] FAT-fs (loop5): Directory bread(block 415) failed [ 351.991796][T11265] loop5: detected capacity change from 0 to 1024 [ 352.245757][ T11] hfsplus: b-tree write err: -5, ino 4 [ 352.636003][ T24] block nbd1: Possible stuck request ffff8880223f8200: control (read@1024,1024B). Runtime 30 seconds [ 352.650660][ T24] block nbd1: Possible stuck request ffff8880223f8400: control (read@2048,1024B). Runtime 30 seconds [ 352.662657][ T24] block nbd1: Possible stuck request ffff8880223f8600: control (read@3072,1024B). Runtime 30 seconds [ 352.674539][ T24] block nbd1: Possible stuck request ffff8880223f8000: control (read@0,1024B). Runtime 30 seconds [ 353.496318][T11278] loop6: detected capacity change from 0 to 40427 [ 353.520462][T11278] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 353.549564][T11278] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 353.573247][T11283] loop2: detected capacity change from 0 to 40427 [ 353.583230][T11278] F2FS-fs (loop6): invalid crc value [ 353.605276][T11283] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 353.648489][T11283] F2FS-fs (loop2): Image doesn't support compression [ 353.670764][T11283] F2FS-fs (loop2): Image doesn't support compression [ 353.697138][T11283] F2FS-fs (loop2): invalid crc value [ 353.710938][T11291] loop5: detected capacity change from 0 to 32768 [ 353.801249][T11283] F2FS-fs (loop2): Found nat_bits in checkpoint [ 353.974394][T11278] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 353.981531][T11278] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 354.016494][T11283] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 354.227110][T11278] syz.6.1766: attempt to access beyond end of device [ 354.227110][T11278] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 354.337026][ T5768] syz-executor: attempt to access beyond end of device [ 354.337026][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.377116][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 354.385405][T11296] f2fs_ckpt-7:6: attempt to access beyond end of device [ 354.385405][T11296] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.480553][T11296] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 355.936314][T11343] loop2: detected capacity change from 0 to 1024 [ 356.472822][T11357] loop0: detected capacity change from 0 to 256 [ 357.619459][T11370] loop0: detected capacity change from 0 to 32768 [ 358.269527][T11392] loop0: detected capacity change from 0 to 512 [ 358.306166][T11394] loop6: detected capacity change from 0 to 64 [ 358.386549][T11394] hfs: unable to locate alternate MDB [ 358.415563][T11394] hfs: continuing without an alternate MDB [ 358.439736][T11392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.443163][T11382] loop5: detected capacity change from 0 to 32768 [ 358.470741][T11382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1808 (11382) [ 358.515987][T11382] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.552622][T11392] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.576632][T11382] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 358.618229][T11382] BTRFS info (device loop5): using free space tree [ 358.664192][ T27] audit: type=1800 audit(1769432594.742:32): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1811" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 358.844589][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.872110][T11382] BTRFS info (device loop5): enabling ssd optimizations [ 358.894289][T11382] BTRFS info (device loop5): auto enabling async discard [ 358.977148][T11413] loop2: detected capacity change from 0 to 8192 [ 359.025933][T11413] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 359.084078][T11413] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 359.133886][T11413] REISERFS (device loop2): using ordered data mode [ 359.141796][T11413] reiserfs: using flush barriers [ 359.164226][T11413] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.182295][T11413] REISERFS (device loop2): checking transaction log (loop2) [ 359.484520][T11413] REISERFS (device loop2): Using tea hash to sort names [ 359.520759][T11413] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 359.588924][T11413] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 359.682363][T11426] loop0: detected capacity change from 0 to 2048 [ 359.792469][T11426] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 359.870609][T11426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.998107][ T1096] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 360.361325][T11433] loop0: detected capacity change from 0 to 256 [ 360.411858][T11433] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7c19779b, utbl_chksum : 0xe619d30d) [ 360.492473][T10291] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.918224][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 360.935350][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.152199][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 361.250648][T11447] overlayfs: missing 'lowerdir' [ 361.492153][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 361.735635][T11432] loop6: detected capacity change from 0 to 40427 [ 361.813832][T11432] F2FS-fs (loop6): build fault injection attr: rate: 25, type: 0x7ffff [ 361.836351][T11432] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x7698c [ 361.870824][T11458] loop2: detected capacity change from 0 to 512 [ 361.889629][T11432] F2FS-fs (loop6): invalid crc value [ 361.920799][T11432] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 361.950179][T11432] F2FS-fs (loop6): Found nat_bits in checkpoint [ 361.965745][T11458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.059681][T11432] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 362.086378][T11458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 362.099897][T11458] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.148026][T11432] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 362.181720][T11458] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 362.201187][T11458] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 362.221712][T11458] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1832: Failed to acquire dquot type 0 [ 362.321865][T11470] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 362.373910][T11432] F2FS-fs (loop6): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x14d/0x550 [ 362.414379][T11470] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 362.443776][T11470] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.1832: Failed to acquire dquot type 0 [ 362.554745][T11032] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 362.567389][T11032] F2FS-fs (loop6): invalid blkaddr: 512, type: 10, run fsck to fix. [ 362.581614][T11032] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0 [ 362.598504][T11032] F2FS-fs (loop6): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 362.658847][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 363.700409][T11511] loop5: detected capacity change from 0 to 2048 [ 363.850738][T11511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.091073][T10291] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.252174][T11530] Cannot find set identified by id 2 to match [ 364.809028][T11547] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1863'. [ 364.991463][T11549] loop6: detected capacity change from 0 to 512 [ 365.035044][T11549] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1872: invalid indirect mapped block 4294967295 (level 1) [ 365.054314][T11549] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1872: invalid indirect mapped block 4294967295 (level 1) [ 365.070172][T11549] EXT4-fs (loop6): 2 truncates cleaned up [ 365.078515][T11549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.153810][T11549] EXT4-fs (loop6): shut down requested (0) [ 365.342422][T11032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.561315][T11561] loop2: detected capacity change from 0 to 8 [ 365.624473][T11565] sctp: [Deprecated]: syz.6.1867 (pid 11565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.624473][T11565] Use struct sctp_sack_info instead [ 365.914485][T11574] loop0: detected capacity change from 0 to 256 [ 366.003768][T11574] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.341135][T11588] loop2: detected capacity change from 0 to 64 [ 366.458555][ T27] audit: type=1800 audit(1769432602.522:33): pid=11588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1879" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 366.824418][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 367.028152][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 367.048863][ T5821] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 367.064290][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 367.085235][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.103897][ T5083] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4 [ 367.115058][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 367.122160][ T23] pvrusb2: ********** [ 367.139331][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 367.160021][ T23] pvrusb2: Important functionality might not be entirely working. [ 367.168992][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 367.180756][ T23] pvrusb2: ********** [ 367.273678][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 367.286441][ T5821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.305407][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 367.320309][ T5821] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 367.335462][ T2319] pvrusb2: Invalid write control endpoint [ 367.342930][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.390695][ T5821] usb 3-1: config 0 descriptor?? [ 367.499258][ T2319] pvrusb2: Invalid write control endpoint [ 367.510616][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 367.544160][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 367.551788][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 367.599401][ T2319] pvrusb2: Device being rendered inoperable [ 367.621411][ T8] usb 6-1: USB disconnect, device number 3 [ 367.627566][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 367.643310][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 367.665038][ T2319] pvrusb2: Attached sub-driver cx25840 [ 367.682031][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 367.703935][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 367.858169][ T5821] logitech 0003:046D:C623.000D: item fetching failed at offset 8/69 [ 367.887576][ T5821] logitech 0003:046D:C623.000D: parse failed [ 367.903688][ T5821] logitech: probe of 0003:046D:C623.000D failed with error -22 [ 368.106410][ T8] usb 3-1: USB disconnect, device number 15 [ 368.179395][T11618] loop6: detected capacity change from 0 to 32768 [ 368.300393][ T27] audit: type=1800 audit(1769432604.372:34): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1890" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 368.603334][T11614] loop0: detected capacity change from 0 to 65536 [ 368.670245][T11624] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1894'. [ 368.695838][T11614] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 368.826644][T11614] XFS (loop0): Ending clean mount [ 368.899783][T11614] XFS (loop0): Quotacheck needed: Please wait. [ 369.022504][T11614] XFS (loop0): Quotacheck: Done. [ 369.269676][ T5767] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 369.487000][T11622] loop5: detected capacity change from 0 to 32768 [ 369.538107][T11622] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 369.744848][T11622] XFS (loop5): Ending clean mount [ 369.952463][T10291] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 370.614597][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1906'. [ 371.298351][T11679] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 371.365192][T11681] loop6: detected capacity change from 0 to 512 [ 371.395069][T11681] ext3: Unexpected value for 'inlinecrypt' [ 371.518141][T11685] loop5: detected capacity change from 0 to 256 [ 371.927142][T11693] program syz.5.1919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.951698][T11695] loop2: detected capacity change from 0 to 1024 [ 372.183856][ T1096] hfsplus: b-tree write err: -5, ino 4 [ 372.339277][T11683] loop0: detected capacity change from 0 to 32768 [ 372.453685][T11683] ERROR: (device loop0): dbAllocBits: leaf page corrupt [ 372.453685][T11683] [ 372.482943][T11683] ERROR: (device loop0): remounting filesystem as read-only [ 372.811887][T11691] loop6: detected capacity change from 0 to 32768 [ 372.867673][T11691] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 373.062609][T11691] XFS (loop6): Ending clean mount [ 373.122265][T11691] XFS (loop6): Quotacheck needed: Please wait. [ 373.273959][T11691] XFS (loop6): Quotacheck: Done. [ 373.450499][T11032] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 373.478602][T11716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.647602][T11716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.805488][T11716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.987326][T11716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.164601][T11716] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.198936][T11716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.267157][T11716] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.315432][T11716] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.080236][T11750] loop0: detected capacity change from 0 to 512 [ 375.123733][T11750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.165583][T11750] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.474472][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.522622][T11756] loop2: detected capacity change from 0 to 1024 [ 375.670241][T11758] loop5: detected capacity change from 0 to 4096 [ 375.729307][T11758] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 376.133811][ T1195] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 376.335550][ T1195] usb 7-1: Using ep0 maxpacket: 16 [ 376.345865][ T1195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.373705][ T1195] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.409873][ T1195] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.463705][ T1195] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.481860][ T1195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.508113][ T1195] usb 7-1: config 0 descriptor?? [ 376.861746][T11771] loop2: detected capacity change from 0 to 32768 [ 376.891150][T11771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1950 (11771) [ 376.927851][ T1195] microsoft 0003:045E:07DA.000E: report is too long [ 376.945211][ T1195] microsoft 0003:045E:07DA.000E: item 0 4 0 11 parsing failed [ 376.968845][ T1195] microsoft 0003:045E:07DA.000E: parse failed [ 376.991315][ T1195] microsoft: probe of 0003:045E:07DA.000E failed with error -22 [ 377.001793][T11771] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 377.032101][T11772] loop5: detected capacity change from 0 to 32768 [ 377.048063][T11771] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 377.076813][T11771] BTRFS info (device loop2): using free space tree [ 377.131606][ T1195] usb 7-1: USB disconnect, device number 2 [ 377.296133][T11774] loop0: detected capacity change from 0 to 32768 [ 377.307975][T11771] BTRFS info (device loop2): enabling ssd optimizations [ 377.325171][T11771] BTRFS info (device loop2): auto enabling async discard [ 377.410683][T11774] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 377.583739][T11774] XFS (loop0): Ending clean mount [ 377.684427][ T5768] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.166627][T11815] loop6: detected capacity change from 0 to 16 [ 378.186482][T11815] erofs: (device loop6): mounted with root inode @ nid 36. [ 378.223390][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 378.334856][ T27] audit: type=1800 audit(1769432614.412:35): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1957" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 378.617723][T11824] loop5: detected capacity change from 0 to 128 [ 379.289533][T11823] loop6: detected capacity change from 0 to 40427 [ 379.355282][T11823] F2FS-fs (loop6): Found nat_bits in checkpoint [ 379.592077][T11841] loop5: detected capacity change from 0 to 2048 [ 379.604362][T11823] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 379.704033][T11841] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 379.713785][ T27] audit: type=1800 audit(1769432615.772:36): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1959" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 379.736610][T11841] UDF-fs: Scanning with blocksize 512 failed [ 379.769693][T11841] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.840863][T11032] syz-executor: attempt to access beyond end of device [ 379.840863][T11032] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 379.900138][T11032] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 380.196501][T11855] loop5: detected capacity change from 0 to 64 [ 380.222905][T11855] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 380.394479][T11859] loop0: detected capacity change from 0 to 128 [ 380.735908][T11863] loop5: detected capacity change from 0 to 1024 [ 381.139669][T11871] loop5: detected capacity change from 0 to 1024 [ 381.721304][T11896] loop2: detected capacity change from 0 to 128 [ 381.756975][T11896] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 381.797914][T11896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.963775][ T5822] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 382.062962][T11882] loop6: detected capacity change from 0 to 40427 [ 382.103748][T11882] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 382.122082][T11882] F2FS-fs (loop6): build fault injection attr: rate: 27487, type: 0x7ffff [ 382.143605][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 382.149996][T11882] F2FS-fs (loop6): heap/no_heap options were deprecated [ 382.160247][T11882] F2FS-fs (loop6): Image doesn't support compression [ 382.168058][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.180486][T11882] F2FS-fs (loop6): Unrecognized mount option "e" or missing value [ 382.189537][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.207224][ T5822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 382.244159][ T5822] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 382.288137][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.327753][ T5822] usb 6-1: config 0 descriptor?? [ 382.678277][ T1195] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 382.698934][ T24] block nbd1: Possible stuck request ffff8880223f8200: control (read@1024,1024B). Runtime 60 seconds [ 382.710135][ T24] block nbd1: Possible stuck request ffff8880223f8400: control (read@2048,1024B). Runtime 60 seconds [ 382.722401][ T24] block nbd1: Possible stuck request ffff8880223f8600: control (read@3072,1024B). Runtime 60 seconds [ 382.733626][ T24] block nbd1: Possible stuck request ffff8880223f8000: control (read@0,1024B). Runtime 60 seconds [ 382.837589][ T5822] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0010/input/input25 [ 382.851752][ T1195] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.930392][ T5822] microsoft 0003:045E:07DA.0010: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 383.019397][ T5822] usb 6-1: USB disconnect, device number 4 [ 383.166679][T11909] fido_id[11909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 383.281894][T11902] loop2: detected capacity change from 0 to 32768 [ 383.325658][T11902] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 383.349175][T11902] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.463801][T11902] XFS (loop2): Ending clean mount [ 383.506069][T11902] XFS (loop2): Quotacheck needed: Please wait. [ 383.563318][ T5822] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 383.603953][ T5822] XFS (loop2): Unmount and run xfs_repair [ 383.609875][ T5822] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 383.625636][ T5822] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 383.646139][ T5822] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 383.655691][ T5822] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 383.666075][ T5822] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 383.676056][ T5822] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 383.690846][ T5822] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 383.702183][ T5822] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.711441][ T5822] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 383.721151][ T11] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 383.791884][T11902] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 383.929464][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 383.994535][ T1195] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 384.194194][ T1195] usb 7-1: Using ep0 maxpacket: 32 [ 384.208947][ T1195] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 384.228734][ T1195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.254947][ T1195] usb 7-1: config 0 descriptor?? [ 384.495689][ T1195] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 384.515463][ T1195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.572122][ T1195] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 384.593160][ T1195] usb 7-1: media controller created [ 384.650590][ T1195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.686659][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2000'. [ 384.703818][ T1195] az6027: usb out operation failed. (-71) [ 384.704417][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2000'. [ 384.724315][ T1195] az6027: usb out operation failed. (-71) [ 384.730114][ T1195] stb0899_attach: Driver disabled by Kconfig [ 384.739370][ T1195] az6027: no front-end attached [ 384.739370][ T1195] [ 384.747423][ T1195] az6027: usb out operation failed. (-71) [ 384.753317][ T1195] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 384.763791][T11936] macvlan0: entered allmulticast mode [ 384.784067][T11936] veth1_vlan: entered allmulticast mode [ 384.792628][ T1195] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 384.826316][ T1195] dvb-usb: schedule remote query interval to 400 msecs. [ 384.865634][ T1195] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 384.899546][ T1195] usb 7-1: USB disconnect, device number 3 [ 385.052261][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 385.124928][ T1195] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 385.213363][ T5822] hid-generic 0005:15C2:3010.0011: item fetching failed at offset 0/1 [ 385.286900][ T5822] hid-generic: probe of 0005:15C2:3010.0011 failed with error -22 [ 385.445103][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2008'. [ 385.645561][T11957] loop0: detected capacity change from 0 to 8192 [ 385.669171][T11957] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 385.742325][T11957] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 385.766038][T11957] REISERFS (device loop0): using journaled data mode [ 385.772801][T11957] reiserfs: using flush barriers [ 385.820417][T11957] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 385.863377][T11957] REISERFS (device loop0): checking transaction log (loop0) [ 385.932571][T11957] REISERFS (device loop0): Using r5 hash to sort names [ 385.943252][T11968] loop5: detected capacity change from 0 to 128 [ 385.966334][T11957] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 385.991010][T11968] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 386.041546][T11957] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 386.140588][ T27] audit: type=1800 audit(1769432622.212:37): pid=11968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2013" name="file1" dev="loop5" ino=94 res=0 errno=0 [ 386.209335][T11957] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 386.280844][T11968] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 386.865173][T11964] loop6: detected capacity change from 0 to 32768 [ 386.940637][T11964] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 386.954826][T11987] loop2: detected capacity change from 0 to 1024 [ 386.972536][T11987] EXT4-fs: Ignoring removed orlov option [ 386.981383][T11987] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 387.055579][T11987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.113724][T11964] XFS (loop6): Ending clean mount [ 387.282936][T11032] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 387.297696][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.578555][T12003] netlink: 428 bytes leftover after parsing attributes in process `syz.5.2028'. [ 387.623623][T12003] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2028'. [ 387.997609][T12011] netlink: 'syz.6.2030': attribute type 4 has an invalid length. [ 388.049781][T12014] (null): rxe_set_mtu: Set mtu to 256 [ 388.075688][T12014] lo speed is unknown, defaulting to 1000 [ 388.089271][T12013] loop5: detected capacity change from 0 to 2048 [ 388.101725][T12014] lo speed is unknown, defaulting to 1000 [ 388.118859][T12013] UDF-fs: bad mount option "uid=fortšt" or missing value [ 388.128577][T12005] loop2: detected capacity change from 0 to 32768 [ 388.152462][T12014] lo speed is unknown, defaulting to 1000 [ 388.181750][T12005] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 388.239322][T12005] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 388.386516][T12005] (syz.2.2027,12005,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 388.537882][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 388.614024][ T5821] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 388.642181][T12014] infiniband syz0: set down [ 388.648859][ T1195] lo speed is unknown, defaulting to 1000 [ 388.657487][T12014] infiniband syz0: added lo [ 388.724593][T12014] RDS/IB: syz0: added [ 388.730437][T12014] smc: adding ib device syz0 with port count 1 [ 388.737860][T12014] smc: ib device syz0 port 1 has pnetid [ 388.750020][ T5822] lo speed is unknown, defaulting to 1000 [ 388.769630][T12014] lo speed is unknown, defaulting to 1000 [ 388.813810][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 388.829421][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.858948][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.893942][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.926749][ T5821] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.941713][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.956017][ T5821] usb 6-1: config 0 descriptor?? [ 389.196920][T12014] lo speed is unknown, defaulting to 1000 [ 389.273935][T12027] input: syz0 as /devices/virtual/input/input27 [ 389.387688][ T5821] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 389.414124][ T5821] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 389.443585][ T5821] microsoft 0003:045E:07DA.0012: no inputs found [ 389.450042][ T5821] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 389.586669][T12014] lo speed is unknown, defaulting to 1000 [ 389.678836][ T1195] usb 6-1: USB disconnect, device number 5 [ 389.902986][T12014] lo speed is unknown, defaulting to 1000 [ 390.122533][T12014] lo speed is unknown, defaulting to 1000 [ 390.795605][T12038] Falling back ldisc for ptm0. [ 391.555969][T12052] loop6: detected capacity change from 0 to 256 [ 391.598014][T12052] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 392.377888][ T5842] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 392.522929][T12055] loop5: detected capacity change from 0 to 32768 [ 392.601118][ T5842] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 392.620643][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.647036][ T5842] usb 7-1: Product: syz [ 392.654706][ T5842] usb 7-1: Manufacturer: syz [ 392.659388][ T5842] usb 7-1: SerialNumber: syz [ 392.686865][ T5842] usb 7-1: config 0 descriptor?? [ 393.022412][T12072] loop0: detected capacity change from 0 to 256 [ 393.038424][T12074] loop2: detected capacity change from 0 to 1024 [ 393.113260][ T5842] airspy 7-1:0.0: Board ID: 00 [ 393.129464][T12072] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 393.141806][ T5842] airspy 7-1:0.0: Firmware version: [ 393.215429][ T27] audit: type=1800 audit(1769432629.292:38): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2056" name="file1" dev="loop0" ino=1048640 res=0 errno=0 [ 393.275461][T12076] loop5: detected capacity change from 0 to 256 [ 393.324713][T12076] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 393.359729][T12072] syz.0.2056: attempt to access beyond end of device [ 393.359729][T12072] loop0: rw=34817, sector=256, nr_sectors = 8 limit=256 [ 393.397110][T12076] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 393.526539][ T5842] airspy 7-1:0.0: usb_control_msg() failed -71 request 0e [ 393.544066][ T27] audit: type=1800 audit(1769432629.602:39): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2055" name="file2" dev="loop5" ino=1048641 res=0 errno=0 [ 393.587000][ T5842] airspy 7-1:0.0: Registered as swradio24 [ 393.592998][ T5842] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 393.612571][ T5842] usb 7-1: USB disconnect, device number 4 [ 393.622706][T12080] loop2: detected capacity change from 0 to 256 [ 394.057192][T12089] loop0: detected capacity change from 0 to 2048 [ 394.082038][T12089] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 394.110595][T12093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.128603][T12089] syz.0.2064: attempt to access beyond end of device [ 394.128603][T12089] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 395.249244][T12097] loop5: detected capacity change from 0 to 32768 [ 395.281028][T12097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2067 (12097) [ 395.355755][T12097] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.392374][T12097] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 395.429841][T12097] BTRFS info (device loop5): using free space tree [ 395.561359][T12133] loop6: detected capacity change from 0 to 512 [ 395.586626][T12135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2080'. [ 395.618160][T12097] BTRFS info (device loop5): enabling ssd optimizations [ 395.654042][T12097] BTRFS info (device loop5): auto enabling async discard [ 395.682969][T12097] BTRFS info (device loop5): checking UUID tree [ 395.693955][T12133] EXT4-fs (loop6): 1 truncate cleaned up [ 395.705873][T12133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.789115][T12145] cgroup: fork rejected by pids controller in /syz2 [ 395.876121][T12133] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2079: invalid indirect mapped block 234881024 (level 0) [ 395.988212][T10291] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 396.053408][T11032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.390655][ T5778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (5778) [ 397.139323][T12158] bridge0: port 3(vlan2) entered blocking state [ 397.151425][T12158] bridge0: port 3(vlan2) entered disabled state [ 397.158527][T12158] vlan2: entered allmulticast mode [ 397.173972][T12158] bridge0: entered allmulticast mode [ 397.181952][T12158] vlan2: left allmulticast mode [ 397.192392][T12158] bridge0: left allmulticast mode [ 397.722913][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.736158][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.755779][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.767695][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.776703][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 397.784270][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.815594][T12173] loop5: detected capacity change from 0 to 8192 [ 397.846312][T12173] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 397.872139][T12175] lo speed is unknown, defaulting to 1000 [ 397.881419][T12173] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 397.902490][T12173] REISERFS (device loop5): using ordered data mode [ 397.922379][T12173] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 397.939960][T12173] REISERFS (device loop5): checking transaction log (loop5) [ 397.960038][T12173] REISERFS (device loop5): Using r5 hash to sort names [ 397.981730][T12173] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 398.002949][T12173] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 398.633199][T12175] chnl_net:caif_netlink_parms(): no params data found [ 398.815914][T12175] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.826181][T12175] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.833482][T12175] bridge_slave_0: entered allmulticast mode [ 398.857240][T12175] bridge_slave_0: entered promiscuous mode [ 398.876666][T12175] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.885801][T12175] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.893082][T12175] bridge_slave_1: entered allmulticast mode [ 398.902818][T12175] bridge_slave_1: entered promiscuous mode [ 398.946264][T12175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.981998][T12175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.099525][T12175] team0: Port device team_slave_0 added [ 399.126742][T12175] team0: Port device team_slave_1 added [ 399.197500][T12175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.224492][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.283839][T12175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.305965][T12175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.321334][T12199] cgroup: fork rejected by pids controller in /syz5 [ 399.337346][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.393671][T12175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.501914][T12175] hsr_slave_0: entered promiscuous mode [ 399.542811][T12175] hsr_slave_1: entered promiscuous mode [ 399.549580][T12175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.563814][T12175] Cannot create hsr debugfs directory [ 399.796974][T12197] loop6: detected capacity change from 0 to 32768 [ 399.884085][ T5779] Bluetooth: hci0: command tx timeout [ 399.890251][T12197] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 399.973845][T12197] XFS (loop6): Ending clean mount [ 399.991975][T12197] XFS (loop6): Quotacheck needed: Please wait. [ 400.136816][T12197] XFS (loop6): Quotacheck: Done. [ 400.202929][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.258935][T11032] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.366031][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.480559][T12175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.541990][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.731728][T12175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.788737][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.810469][T12212] loop0: detected capacity change from 0 to 1024 [ 400.903272][ T27] audit: type=1800 audit(1769432636.972:40): pid=12212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2104" name="file2" dev="loop0" ino=22 res=0 errno=0 [ 400.961824][T12175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.059900][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.076767][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.092363][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.122279][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.135905][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 401.143426][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 401.205462][T12175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.222996][ T49] hfsplus: b-tree write err: -5, ino 4 [ 401.349916][T12217] loop0: detected capacity change from 0 to 2048 [ 401.367475][T12213] lo speed is unknown, defaulting to 1000 [ 401.454456][T12217] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.979155][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.987475][ T5083] Bluetooth: hci0: command tx timeout [ 402.589751][T12175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.679115][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.707584][T12239] loop0: detected capacity change from 0 to 256 [ 402.749598][T12239] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 402.763236][T12239] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 402.811925][T12175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.831733][ T27] audit: type=1800 audit(1769432638.902:41): pid=12239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2110" name="file2" dev="loop0" ino=1048643 res=0 errno=0 [ 403.037297][T12175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.076898][T12175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.137178][T12244] loop0: detected capacity change from 0 to 128 [ 403.227098][T12244] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 403.249130][ T5779] Bluetooth: hci3: command tx timeout [ 403.266539][T12228] loop6: detected capacity change from 0 to 40427 [ 403.275983][T12244] hpfs: filesystem error: improperly stopped [ 403.282087][T12244] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 403.315076][T12228] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 403.322972][T12228] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 403.359602][T12244] hpfs: You really don't want any checks? You are crazy... [ 403.395434][T12244] hpfs: hpfs_map_sector(): read error [ 403.401134][T12244] hpfs: code page support is disabled [ 403.408192][T12228] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 403.453228][T12228] F2FS-fs (loop6): Found nat_bits in checkpoint [ 403.475835][T12244] hpfs: hpfs_map_4sectors(): unaligned read [ 403.481967][T12244] hpfs: hpfs_map_4sectors(): unaligned read [ 403.519223][T12244] hpfs: filesystem error: unable to find root dir [ 403.602638][T12244] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 403.635257][T12228] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 403.642388][T12228] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 404.043888][ T5779] Bluetooth: hci0: command tx timeout [ 404.428266][T12213] chnl_net:caif_netlink_parms(): no params data found [ 404.576414][T12175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.703223][T12277] loop0: detected capacity change from 0 to 256 [ 404.781245][T12277] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ac714, utbl_chksum : 0xe619d30d) [ 405.005250][T12175] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.117412][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2114'. [ 405.129077][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2114'. [ 405.138544][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2114'. [ 405.178932][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.186231][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.300318][T12213] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.309850][T12213] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.317848][T12213] bridge_slave_0: entered allmulticast mode [ 405.337134][ T5779] Bluetooth: hci3: command tx timeout [ 405.388943][T12213] bridge_slave_0: entered promiscuous mode [ 405.444308][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.451569][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.489899][T12286] loop0: detected capacity change from 0 to 4096 [ 405.509241][ T59] hsr_slave_0: left promiscuous mode [ 405.515695][ T59] hsr_slave_1: left promiscuous mode [ 405.542382][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.573822][T12286] NILFS (loop0): invalid segment: Checksum error in segment payload [ 405.574842][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.581882][T12286] NILFS (loop0): trying rollback from an earlier position [ 405.622909][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.653652][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.668806][ T59] bridge_slave_1: left allmulticast mode [ 405.691097][ T59] bridge_slave_1: left promiscuous mode [ 405.704366][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.705999][T12286] NILFS (loop0): recovery complete [ 405.726504][ T59] bridge_slave_0: left allmulticast mode [ 405.732196][ T59] bridge_slave_0: left promiscuous mode [ 405.783373][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.792592][T12289] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 405.861041][ T59] veth1_macvtap: left promiscuous mode [ 405.867575][ T59] veth0_macvtap: left promiscuous mode [ 405.873271][ T59] veth1_vlan: left promiscuous mode [ 405.878983][ T59] veth0_vlan: left promiscuous mode [ 406.123843][ T5779] Bluetooth: hci0: command tx timeout [ 407.212020][ T59] team0 (unregistering): Port device team_slave_1 removed [ 407.300949][ T59] team0 (unregistering): Port device team_slave_0 removed [ 407.381588][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.404335][ T5779] Bluetooth: hci3: command tx timeout [ 407.465810][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.089519][ T59] bond0 (unregistering): Released all slaves [ 408.255893][T12213] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.268930][T12213] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.283380][T12213] bridge_slave_1: entered allmulticast mode [ 408.292322][T12213] bridge_slave_1: entered promiscuous mode [ 408.349951][T12213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.369549][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'. [ 408.407239][T12213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.579699][T12301] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 408.588478][T12301] binder: 12299:12301 ioctl 4018620d 2000000000c0 returned -1 [ 408.615016][T12213] team0: Port device team_slave_0 added [ 408.633003][T12301] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 408.657853][T12301] binder: 12299:12301 ioctl 4018620d 200000000040 returned -1 [ 408.687226][T12213] team0: Port device team_slave_1 added [ 408.800263][T12302] loop0: detected capacity change from 0 to 4096 [ 408.816599][T12213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.855739][T12302] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 408.883319][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.998701][T12213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.016225][T12309] netlink: 'syz.6.2124': attribute type 3 has an invalid length. [ 409.031926][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.062616][T12213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.075152][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2124'. [ 409.103580][T12213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.129587][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.148805][T12302] ntfs: (device loop0): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 409.213905][T12302] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 409.251342][T12213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.272703][T12302] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 409.379840][T12302] ntfs: (device loop0): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 409.434055][T12302] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 409.477738][T12302] ntfs: volume version 3.1. [ 409.484445][ T5779] Bluetooth: hci3: command tx timeout [ 409.602527][T12213] hsr_slave_0: entered promiscuous mode [ 409.641766][T12213] hsr_slave_1: entered promiscuous mode [ 409.658661][T12213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.672614][T12213] Cannot create hsr debugfs directory [ 409.943107][T12175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.456365][T12175] veth0_vlan: entered promiscuous mode [ 410.478761][T12318] loop6: detected capacity change from 0 to 40427 [ 410.499557][T12318] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 410.547961][T12318] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 410.571637][T12318] F2FS-fs (loop6): invalid crc value [ 410.597680][T12318] F2FS-fs (loop6): Found nat_bits in checkpoint [ 410.768108][T12318] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 410.801160][T12318] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 410.810446][T12175] veth1_vlan: entered promiscuous mode [ 410.912141][T12336] f2fs_ckpt-7:6: attempt to access beyond end of device [ 410.912141][T12336] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 410.941127][T12342] loop0: detected capacity change from 0 to 4096 [ 410.947886][T12336] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 410.971571][T12343] syz.6.2125: attempt to access beyond end of device [ 410.971571][T12343] loop6: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 410.994124][T12343] syz.6.2125: attempt to access beyond end of device [ 410.994124][T12343] loop6: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 411.024863][ T27] audit: type=1800 audit(1769432647.092:42): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2125" name="/" dev="loop6" ino=8 res=0 errno=0 [ 411.227465][T12175] veth0_macvtap: entered promiscuous mode [ 411.257898][T12175] veth1_macvtap: entered promiscuous mode [ 411.407578][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.460010][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.472234][T12347] loop0: detected capacity change from 0 to 64 [ 411.496410][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.528806][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.564434][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.594493][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.610785][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.630386][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.665383][T12175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.826099][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.859864][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.899916][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.926399][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.942055][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.954971][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.973584][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.990064][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.013484][T12175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.071436][T12175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.093595][T12175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.102421][T12175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.114270][T12175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.333941][T12213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.412815][T12213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.473083][T12213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.501308][T12213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.512042][T12310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.531928][T12310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.646971][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.684235][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.775521][ T24] block nbd1: Possible stuck request ffff8880223f8200: control (read@1024,1024B). Runtime 90 seconds [ 412.787726][ T24] block nbd1: Possible stuck request ffff8880223f8400: control (read@2048,1024B). Runtime 90 seconds [ 412.799270][ T24] block nbd1: Possible stuck request ffff8880223f8600: control (read@3072,1024B). Runtime 90 seconds [ 412.800098][T12365] loop0: detected capacity change from 0 to 4096 [ 412.810859][ T24] block nbd1: Possible stuck request ffff8880223f8000: control (read@0,1024B). Runtime 90 seconds [ 413.024905][T12365] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 413.106207][T12213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.136386][T12383] mkiss: ax0: crc mode is auto. [ 413.146484][T12365] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 413.319143][ T27] audit: type=1800 audit(1769432649.392:43): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2138" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 413.348223][T12213] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.385506][T12365] ntfs3: loop0: ino=1e, attr_set_size [ 413.410726][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.418010][T12310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.548406][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.555671][T12310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.369307][T12213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.443235][T12382] loop6: detected capacity change from 0 to 40427 [ 414.481283][T12382] F2FS-fs (loop6): invalid crc value [ 414.509979][T12382] F2FS-fs (loop6): Found nat_bits in checkpoint [ 414.725761][T12382] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 414.764411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 415.198022][T12429] loop2: detected capacity change from 0 to 256 [ 415.407699][T11032] syz-executor: attempt to access beyond end of device [ 415.407699][T11032] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 415.415832][T12213] veth0_vlan: entered promiscuous mode [ 415.469933][T11032] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 415.521553][T12213] veth1_vlan: entered promiscuous mode [ 415.655663][T12213] veth0_macvtap: entered promiscuous mode [ 415.698328][T12213] veth1_macvtap: entered promiscuous mode [ 415.802170][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.832749][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.863212][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.896841][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.943349][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.964102][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.993689][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.053665][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.104766][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.131491][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.181537][T12213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.226179][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.273862][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.303562][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.350952][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.383557][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.416940][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.456460][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.483581][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.514657][T12213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.546109][T12213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.578804][T12213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.646697][T12213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.700528][T12213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.736063][T12213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.774110][T12213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.092865][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.119170][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.133835][T12443] loop2: detected capacity change from 0 to 32768 [ 417.190088][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.223331][T12443] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 417.244279][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.403036][T12472] loop6: detected capacity change from 0 to 1024 [ 417.444043][T12472] EXT4-fs: Ignoring removed nomblk_io_submit option [ 417.538964][T12472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.718745][T12443] XFS (loop2): Ending clean mount [ 417.927083][T11032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.014753][T12175] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.211630][T12491] loop5: detected capacity change from 0 to 2048 [ 418.412137][T12491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.645937][T12213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.152901][T12510] loop5: detected capacity change from 0 to 32768 [ 420.261889][T12510] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 420.328787][T12516] loop6: detected capacity change from 0 to 32768 [ 420.428053][T12516] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 420.438009][T12510] XFS (loop5): Ending clean mount [ 420.477107][T12510] XFS (loop5): Quotacheck needed: Please wait. [ 420.603586][T12529] loop0: detected capacity change from 0 to 32768 [ 420.633419][T12529] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2170 (12529) [ 420.688761][T12510] XFS (loop5): Quotacheck: Done. [ 420.741950][T12529] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 420.789740][T12516] XFS (loop6): Ending clean mount [ 420.798817][T12529] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 420.844523][T12516] XFS (loop6): Quotacheck needed: Please wait. [ 420.856687][T12529] BTRFS info (device loop0): turning off barriers [ 420.881630][T12529] BTRFS info (device loop0): enabling ssd optimizations [ 420.888701][T12529] BTRFS info (device loop0): using spread ssd allocation scheme [ 420.957899][T12529] BTRFS info (device loop0): enabling auto defrag [ 420.965883][ T42] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x18d/0x250, xfs_agfl block 0x3 [ 420.993624][T12529] BTRFS info (device loop0): not using ssd optimizations [ 421.017658][T12213] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 421.027285][ T42] XFS (loop6): Unmount and run xfs_repair [ 421.027375][ T42] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 421.027394][ T42] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 421.033202][T12529] BTRFS info (device loop0): not using spread ssd allocation scheme [ 421.035266][T12529] BTRFS info (device loop0): ignoring data csums [ 421.056083][ T42] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 421.092245][T12529] BTRFS info (device loop0): force zlib compression, level 3 [ 421.107288][T12529] BTRFS info (device loop0): enabling ssd optimizations [ 421.115186][ T42] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 421.126614][T12529] BTRFS info (device loop0): using spread ssd allocation scheme [ 421.172424][T12529] BTRFS info (device loop0): using free space tree [ 421.182177][ T42] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 421.194325][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.225160][ T42] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 421.263308][ T42] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 421.309819][ T42] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 421.351918][ T42] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 421.411584][ T42] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x21e/0x3d0" at daddr 0x3 len 1 error 74 [ 421.479344][T12516] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 421.858949][T11032] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 421.868541][T12544] loop2: detected capacity change from 0 to 40427 [ 421.903994][T12544] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 421.919477][T12544] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 421.937680][T12544] F2FS-fs (loop2): invalid crc_offset: 266236 [ 421.978109][ T5767] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 421.990574][T12544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 422.232861][T12544] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 422.243432][T12544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 422.345665][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.397146][T12544] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 422.846932][T12587] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 423.058671][T12573] loop5: detected capacity change from 0 to 32768 [ 423.197491][T12593] netlink: 'syz.2.2181': attribute type 4 has an invalid length. [ 423.234911][T12573] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 423.250773][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.319252][T12596] (null): rxe_set_mtu: Set mtu to 256 [ 423.326001][T12596] rdma_rxe: rxe_newlink: failed to add lo [ 423.475115][T12573] (syz.5.2175,12573,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 423.505903][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.750022][T12213] ocfs2: Unmounting device (7,5) on (node local) [ 424.264297][T12611] loop2: detected capacity change from 0 to 4096 [ 424.296387][T12615] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.334116][T12617] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 424.359135][T12611] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 424.499527][T12620] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 424.523553][T12620] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 424.546705][T12621] loop5: detected capacity change from 0 to 256 [ 424.560355][T12611] ntfs3: loop2: ino=0, "file1" failed to extend initialized size to 100003. [ 424.627984][T12621] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 424.669651][T12621] syz.5.2194: attempt to access beyond end of device [ 424.669651][T12621] loop5: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 424.699810][T12621] syz.5.2194: attempt to access beyond end of device [ 424.699810][T12621] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 424.753824][ T27] audit: type=1800 audit(1769433429.215:44): pid=12621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2194" name="file1" dev="loop5" ino=1048652 res=0 errno=0 [ 424.794901][T12624] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 424.826028][T12624] exFAT-fs (loop5): Filesystem has been set read-only [ 424.879245][T12621] exFAT-fs (loop5): hint_cluster is invalid (1), rewind to the first cluster [ 424.952261][T12621] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 424.975155][T12621] exFAT-fs (loop5): error, failed to bmap (inode : ffff88805b2421e0 iblock : 9, err : -5) [ 425.014936][T12621] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 425.045587][T12621] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 425.066369][T12628] mkiss: ax0: crc mode is auto. [ 425.346042][T12637] loop2: detected capacity change from 0 to 512 [ 425.376029][T12633] loop5: detected capacity change from 0 to 4096 [ 425.404436][T12637] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.2201: inode has both inline data and extents flags [ 425.418863][T12633] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 425.488252][T12633] ntfs: (device loop5): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 425.509151][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2202'. [ 425.527677][T12633] ntfs: (device loop5): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 425.548415][T12633] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 425.562278][T12637] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2201: couldn't read orphan inode 15 (err -117) [ 425.578570][T12633] ntfs: (device loop5): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 425.590781][T12633] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 425.605541][T12637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.631973][T12633] ntfs: volume version 3.1. [ 425.938411][T12175] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.140553][T12647] loop5: detected capacity change from 0 to 2048 [ 426.206529][T12647] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 426.214265][T12647] UDF-fs: Scanning with blocksize 512 failed [ 426.284681][T12647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.572040][T12659] mkiss: ax0: crc mode is auto. [ 426.613763][T12655] loop6: detected capacity change from 0 to 8192 [ 426.658675][T12655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 426.691300][T12655] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 426.741362][T12655] REISERFS (device loop6): using ordered data mode [ 426.747918][T12655] reiserfs: using flush barriers [ 426.827204][T12655] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 426.899372][T12655] REISERFS (device loop6): checking transaction log (loop6) [ 426.967812][T12655] REISERFS (device loop6): Using r5 hash to sort names [ 426.976099][T12655] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 427.003314][T12669] loop2: detected capacity change from 0 to 4096 [ 427.015854][T12669] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 427.174897][T12669] ntfs: (device loop2): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 427.212667][T12669] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 427.242151][T12669] ntfs: volume version 3.1. [ 428.709935][T12691] loop2: detected capacity change from 0 to 32768 [ 428.781763][T12691] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 428.917209][T12737] loop6: detected capacity change from 0 to 128 [ 428.952792][T12691] XFS (loop2): Ending clean mount [ 428.962691][T12691] XFS (loop2): Quotacheck needed: Please wait. [ 429.142081][T12741] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2230'. [ 429.174148][T12691] XFS (loop2): Quotacheck: Done. [ 429.277630][T12175] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 430.478717][T12769] loop2: detected capacity change from 0 to 64 [ 430.510159][T12769] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 431.242580][T12784] loop6: detected capacity change from 0 to 2364 [ 431.308525][ T5778] blk_print_req_error: 229 callbacks suppressed [ 431.308545][ T5778] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.853863][T12804] loop6: detected capacity change from 0 to 4096 [ 431.897239][T12804] __ntfs_error: 3 callbacks suppressed [ 431.897257][T12804] ntfs: (device loop6): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 431.921388][T12804] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 431.939521][T12804] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 431.976041][T12804] ntfs: (device loop6): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 432.047199][T12804] ntfs: volume version 3.1. [ 432.094669][T12804] ntfs: (device loop6): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-4. You might want to try to use the mount option nls=utf8. [ 432.139208][T12804] ntfs: (device loop6): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 432.815282][T12814] loop6: detected capacity change from 0 to 32768 [ 432.821933][ T5822] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 432.853482][T12814] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 432.904223][T12814] XFS (loop6): Ending clean mount [ 432.930778][T12814] XFS (loop6): Quotacheck needed: Please wait. [ 432.998036][ T5821] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 433.012539][T12814] XFS (loop6): Quotacheck: Done. [ 433.047297][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.058585][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.068889][ T5822] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 433.079030][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.090457][ T5822] usb 6-1: config 0 descriptor?? [ 433.204537][ T5821] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 433.218448][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.227121][ T5821] usb 3-1: Product: syz [ 433.231384][ T5821] usb 3-1: Manufacturer: syz [ 433.236507][ T5821] usb 3-1: SerialNumber: syz [ 433.255071][T11032] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.273842][ T5821] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 433.416550][ T787] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.533775][ T5822] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 433.585755][ T5822] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 433.610554][ T5822] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 433.634315][ T5822] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 433.643745][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.666184][ T5822] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 433.721390][ T5822] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 433.743380][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.835357][ T5822] playstation 0003:054C:0DF2.0013: Invalid byte count transferred, expected 20 got 0 [ 433.846362][ T5822] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense pairing info: -22 [ 433.865024][ T5822] playstation 0003:054C:0DF2.0013: Failed to get MAC address from DualSense [ 433.900504][ T5822] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 433.932490][ T5822] playstation: probe of 0003:054C:0DF2.0013 failed with error -22 [ 434.076721][ T5821] usb 3-1: USB disconnect, device number 16 [ 434.089652][ T5859] usb 6-1: USB disconnect, device number 6 [ 434.662335][T12840] loop2: detected capacity change from 0 to 1024 [ 434.777236][ T787] usb 3-1: Service connection timeout for: 256 [ 434.783514][ T787] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 434.794191][ T787] ath9k_htc: Failed to initialize the device [ 434.804398][ T5821] usb 3-1: ath9k_htc: USB layer deinitialized [ 434.869257][ T27] audit: type=1800 audit(1769433439.830:45): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2266" name="file2" dev="loop2" ino=22 res=0 errno=0 [ 434.940597][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2269'. [ 435.011324][T12851] loop5: detected capacity change from 0 to 128 [ 435.058528][ T42] hfsplus: b-tree write err: -5, ino 4 [ 435.183573][T12854] loop6: detected capacity change from 0 to 8 [ 435.200741][T12854] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 435.249515][ T5783] udevd[5783]: incorrect cramfs checksum on /dev/loop6 [ 435.472871][ T1195] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 435.665529][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 435.699073][ T1195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.727262][ T1195] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 435.749638][ T1195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.778788][ T1195] usb 3-1: config 0 descriptor?? [ 435.795964][ T1195] hub 3-1:0.0: USB hub found [ 435.984840][ T1195] hub 3-1:0.0: 1 port detected [ 436.034974][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 436.050508][T12871] loop6: detected capacity change from 0 to 128 [ 436.089964][T12871] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.104612][T12871] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.176159][ T1195] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 436.193428][ T1195] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 436.212739][ T1195] usbhid 3-1:0.0: can't add hid device: -71 [ 436.229500][ T1195] usbhid: probe of 3-1:0.0 failed with error -71 [ 436.252373][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 436.269578][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.278222][ T9] usb 6-1: Product: syz [ 436.286115][T11032] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.296110][ T1195] usb 3-1: USB disconnect, device number 17 [ 436.302255][ T9] usb 6-1: Manufacturer: syz [ 436.306891][ T9] usb 6-1: SerialNumber: syz [ 436.340046][ T9] usb 6-1: config 0 descriptor?? [ 436.796384][T12883] loop6: detected capacity change from 0 to 512 [ 436.849652][T12883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.865115][T12883] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.015984][T11032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.124051][ T9] usb 6-1: f81604_write: reg: 105 data: 56 failed: -EPROTO [ 437.168926][ T9] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 437.176590][ T9] f81604: probe of 6-1:0.0 failed with error -71 [ 437.229052][ T9] usb 6-1: USB disconnect, device number 7 [ 437.510875][ T5859] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 437.704533][ T5859] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 437.719589][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.730037][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.742766][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.761504][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.777615][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.797214][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.807303][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.823871][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.842920][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.853321][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.870491][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.882026][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 437.935567][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 437.955826][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 437.981099][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.008101][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.031344][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.063507][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.089055][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.120877][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.151791][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.169779][ T5859] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 438.179147][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 438.201604][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 438.228097][ T5859] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 438.251892][ T5859] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 438.290962][ T5859] usb 3-1: Product: syz [ 438.296379][ T5859] usb 3-1: Manufacturer: syz [ 438.307008][ T5859] usb 3-1: SerialNumber: syz [ 438.326487][ T5859] usb 3-1: config 0 descriptor?? [ 438.352214][ T5859] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 438.685121][T12910] loop6: detected capacity change from 0 to 128 [ 438.712160][T12910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 438.727804][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 438.731096][ T5842] usb 3-1: USB disconnect, device number 18 [ 438.759102][T12910] hpfs: filesystem error: improperly stopped [ 438.786014][ T5842] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 438.792446][T12910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 438.810827][T12910] hpfs: You really don't want any checks? You are crazy... [ 438.830603][T12910] hpfs: hpfs_map_sector(): read error [ 438.842849][T12903] loop5: detected capacity change from 0 to 40427 [ 438.850596][T12910] hpfs: code page support is disabled [ 438.865385][T12903] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 438.878520][T12910] hpfs: hpfs_map_4sectors(): unaligned read [ 438.888738][T12903] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 438.898262][T12910] hpfs: hpfs_map_4sectors(): unaligned read [ 438.909171][T12903] F2FS-fs (loop5): Image doesn't support compression [ 438.917075][T12910] hpfs: filesystem error: unable to find root dir [ 438.945676][T12903] F2FS-fs (loop5): invalid crc value [ 438.967121][T12903] F2FS-fs (loop5): Found nat_bits in checkpoint [ 439.127757][T12903] F2FS-fs (loop5): Start checkpoint disabled! [ 439.142602][T12903] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 439.272617][T12903] F2FS-fs (loop5): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 439.352481][T12908] loop0: detected capacity change from 0 to 32768 [ 439.632015][ T42] kworker/u4:2: attempt to access beyond end of device [ 439.632015][ T42] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 439.668937][ T42] F2FS-fs (loop5): Remounting filesystem read-only [ 439.688257][ T42] F2FS-fs (loop5): Remounting filesystem read-only [ 439.707969][ T42] F2FS-fs (loop5): Remounting filesystem read-only [ 439.905308][T12924] loop0: detected capacity change from 0 to 8 [ 440.263385][ T1195] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 440.454338][ T1195] usb 7-1: Using ep0 maxpacket: 8 [ 440.464419][ T1195] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 440.475222][T12934] loop0: detected capacity change from 0 to 4096 [ 440.499258][ T1195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.528627][ T1195] usb 7-1: Product: syz [ 440.549175][ T1195] usb 7-1: Manufacturer: syz [ 440.578217][ T1195] usb 7-1: SerialNumber: syz [ 440.613758][ T1195] usb 7-1: config 0 descriptor?? [ 440.857862][ T1195] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 440.987504][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 441.187397][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 441.199132][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 441.212152][T12953] loop0: detected capacity change from 0 to 512 [ 441.219801][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.249934][ T9] usb 6-1: config 0 descriptor?? [ 441.291695][T12953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.441189][ T1195] gspca_sunplus: reg_w_riv err -71 [ 441.454888][ T1195] sunplus: probe of 7-1:0.0 failed with error -71 [ 441.480528][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 441.504764][ T1195] usb 7-1: USB disconnect, device number 5 [ 441.522555][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 441.552408][T12953] overlayfs: invalid origin (0000) [ 441.567507][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 441.579897][ T9] usb 6-1: media controller created [ 441.618588][ T24] block nbd1: Possible stuck request ffff8880223f8200: control (read@1024,1024B). Runtime 120 seconds [ 441.629983][ T24] block nbd1: Possible stuck request ffff8880223f8400: control (read@2048,1024B). Runtime 120 seconds [ 441.632529][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.641059][ T24] block nbd1: Possible stuck request ffff8880223f8600: control (read@3072,1024B). Runtime 120 seconds [ 441.641092][ T24] block nbd1: Possible stuck request ffff8880223f8000: control (read@0,1024B). Runtime 120 seconds [ 441.772792][ T9] az6027: usb out operation failed. (-71) [ 441.799546][ T9] az6027: usb out operation failed. (-71) [ 441.805360][ T9] stb0899_attach: Driver disabled by Kconfig [ 441.835509][ T9] az6027: no front-end attached [ 441.835509][ T9] [ 441.855113][ T9] az6027: usb out operation failed. (-71) [ 441.861366][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 441.877028][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.889211][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 441.961521][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 441.982386][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 442.036539][ T9] usb 6-1: USB disconnect, device number 8 [ 442.192318][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 443.221242][T12990] loop2: detected capacity change from 0 to 256 [ 443.365163][T12990] FAT-fs (loop2): Directory bread(block 64) failed [ 443.397476][T12990] FAT-fs (loop2): Directory bread(block 65) failed [ 443.406950][T12990] FAT-fs (loop2): Directory bread(block 66) failed [ 443.413542][T12990] FAT-fs (loop2): Directory bread(block 67) failed [ 443.447842][T12990] FAT-fs (loop2): Directory bread(block 68) failed [ 443.464123][T12990] FAT-fs (loop2): Directory bread(block 69) failed [ 443.470879][T12990] FAT-fs (loop2): Directory bread(block 70) failed [ 443.492845][T12990] FAT-fs (loop2): Directory bread(block 71) failed [ 443.528889][T12990] FAT-fs (loop2): Directory bread(block 72) failed [ 443.547506][T12990] FAT-fs (loop2): Directory bread(block 73) failed [ 443.755647][T12978] loop5: detected capacity change from 0 to 40427 [ 443.778911][T12978] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 443.785949][T12978] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 443.832829][T12978] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x7ffff [ 443.856035][T12978] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 443.856762][ T787] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 443.878277][T12978] F2FS-fs (loop5): invalid crc value [ 443.911154][T12978] F2FS-fs (loop5): Found nat_bits in checkpoint [ 444.075161][ T787] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 444.093149][T12978] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 444.100362][T12978] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 444.113183][T13007] loop0: detected capacity change from 0 to 4096 [ 444.120003][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.129379][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.142338][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.151507][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.165344][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.197658][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.215173][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.234644][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.269705][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.280291][T13007] ntfs: volume version 3.1. [ 444.295913][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.326896][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.362033][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.406144][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.434552][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.446812][T12213] syz-executor: attempt to access beyond end of device [ 444.446812][T12213] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 444.473362][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.481864][T12213] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 444.505762][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.520837][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.544891][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.580351][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.620614][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.676483][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.703670][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 444.713407][ T787] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 444.754148][ T787] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.777220][ T787] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 444.796799][ T787] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 444.829141][ T787] usb 7-1: Product: syz [ 444.833400][ T787] usb 7-1: Manufacturer: syz [ 444.843883][ T787] usb 7-1: SerialNumber: syz [ 444.860130][ T787] usb 7-1: config 0 descriptor?? [ 444.881781][ T787] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 444.927225][T13012] loop0: detected capacity change from 0 to 2048 [ 445.064457][T13014] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.233571][T13014] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 445.252774][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 445.263518][T13014] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 445.273664][ T5821] usb 7-1: USB disconnect, device number 6 [ 445.284445][ T5821] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 445.326596][T13014] Remounting filesystem read-only [ 445.336310][ T1096] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 445.369075][ T1096] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 445.394033][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.413244][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.448261][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.485559][ T1096] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 445.498736][ T1096] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 445.534699][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.545995][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.555763][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.566366][ T1096] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 445.578159][ T1096] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 445.585522][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.605723][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2336'. [ 445.614923][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.624797][ T1096] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.663990][T13012] NILFS (loop0): mounting fs with errors [ 445.682114][T13012] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 445.697482][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2336'. [ 445.697560][T13012] Remounting filesystem read-only [ 445.769300][ T5767] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 445.783044][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 445.784829][T13025] loop2: detected capacity change from 0 to 4096 [ 445.798945][ T5767] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 445.822159][ T5767] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 445.843523][ T5767] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 445.859231][T13026] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 445.872677][ T5767] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 445.903678][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 445.910462][ T5767] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 445.950712][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 445.968643][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.008924][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.038655][ T5767] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 446.067603][T13025] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 446.083630][ T5767] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 446.112278][ T5767] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 446.150572][T13025] Remounting filesystem read-only [ 446.178415][ T5767] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 446.185791][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.207197][T13028] loop5: detected capacity change from 0 to 4096 [ 446.235257][ T5767] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 446.264166][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.281618][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.325107][ T5767] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 446.341851][ T5767] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 446.357937][T12175] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 446.391506][T13028] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 446.398635][T12175] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 446.398663][T12175] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 446.398864][T12175] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 446.398883][T12175] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 446.518369][T12175] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 446.541501][T12175] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 446.560832][T12175] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 446.568035][T12175] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 446.579477][T12175] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 446.587337][T12175] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 446.614763][T12175] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 446.622345][T12175] NILFS (loop2): discard dirty block: blocknr=13, size=4096 [ 446.642788][T12175] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 446.650915][T12175] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 446.664263][T12175] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 446.681575][T12175] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 446.711106][T12175] NILFS (loop2): discard dirty page: offset=270336, ino=3 [ 446.735647][T12175] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 446.875677][T12213] ntfs3: loop5: ino=9, ntfs_sync_fs failed, -22. [ 447.107316][T13043] loop5: detected capacity change from 0 to 512 [ 447.265953][T13043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.292663][T13043] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.328800][T13049] [U] [ 447.334797][T13049] [U] )˝0 [ 447.337933][T13049] [U] [ 447.340674][T13049] [U] [ 447.343419][T13049] [U] [ 447.369134][T13049] [U] [ 447.371935][T13049] [U] [ 447.374680][T13049] [U] [ 447.377425][T13049] [U] [ 447.413905][T13049] [U] [ 447.416779][T13049] [U] [ 447.419524][T13049] [U] [ 447.448053][T13046] [U] [ 447.567933][T12213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.042236][T13063] gre0: entered promiscuous mode [ 448.051883][T13062] gre0: left promiscuous mode [ 448.262077][T13050] loop2: detected capacity change from 0 to 32768 [ 448.284502][T13050] [ 448.284502][T13050] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.284502][T13050] [ 448.326702][T13050] jfs_create: dtInsert returned -EIO [ 448.348837][T13050] ERROR: (device loop2): jfs_create: [ 448.348837][T13050] [ 448.360205][T13072] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2357'. [ 448.387289][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2357'. [ 448.419242][T13072] tmpfs: Bad value for 'size' [ 448.521791][T12175] [ 448.521791][T12175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.521791][T12175] [ 448.559898][T12175] [ 448.559898][T12175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 448.559898][T12175] [ 448.870189][T13085] loop6: detected capacity change from 0 to 512 [ 449.001216][T13085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.035661][T13085] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 449.291155][T11032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.435306][T13103] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 449.446085][T13103] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 449.636039][T13105] netlink: 488 bytes leftover after parsing attributes in process `syz.6.2371'. [ 450.026544][T13094] loop5: detected capacity change from 0 to 32768 [ 450.085891][T13094] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.228786][T13094] XFS (loop5): Ending clean mount [ 450.436069][T12213] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 450.711889][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.756998][T13114] loop2: detected capacity change from 0 to 40427 [ 450.832588][T13114] F2FS-fs (loop2): invalid crc value [ 450.877315][T13114] F2FS-fs (loop2): Found nat_bits in checkpoint [ 450.958719][T13129] loop6: detected capacity change from 0 to 256 [ 451.061322][T13129] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 451.121303][T13114] F2FS-fs (loop2): Start checkpoint disabled! [ 451.171434][T13114] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 451.541307][ T49] kworker/u4:3: attempt to access beyond end of device [ 451.541307][ T49] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 451.568935][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 451.690744][T13131] loop5: detected capacity change from 0 to 32768 [ 451.782264][T13131] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 451.900410][T13131] XFS (loop5): Ending clean mount [ 451.936745][T13131] XFS (loop5): Quotacheck needed: Please wait. [ 452.053448][T13134] loop6: detected capacity change from 0 to 32768 [ 452.080253][T13131] XFS (loop5): Quotacheck: Done. [ 452.131951][T13134] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 452.299113][T13134] XFS (loop6): Ending clean mount [ 452.396084][T11032] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 452.457233][T12213] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 452.520372][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.647462][ C1] vkms_vblank_simulate: vblank timer overrun [ 452.931841][ T1195] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 453.085041][T13159] loop6: detected capacity change from 0 to 32768 [ 453.103552][T13159] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2385 (13159) [ 453.124517][T13159] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.144917][ T1195] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 453.153803][T13159] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 453.162668][ T1195] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 453.177919][T13159] BTRFS info (device loop6): using free space tree [ 453.187782][ T1195] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 453.214585][ T1195] usb 3-1: config 220 has no interface number 2 [ 453.241079][ T1195] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 453.293031][ T1195] usb 3-1: config 220 interface 0 has no altsetting 0 [ 453.312348][ T1195] usb 3-1: config 220 interface 76 has no altsetting 0 [ 453.319298][ T1195] usb 3-1: config 220 interface 1 has no altsetting 0 [ 453.343927][T13159] BTRFS info (device loop6): enabling ssd optimizations [ 453.348803][ T1195] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 453.366224][ T1195] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.369779][T13159] BTRFS info (device loop6): auto enabling async discard [ 453.390797][ T1195] usb 3-1: Product: syz [ 453.395136][ T1195] usb 3-1: Manufacturer: syz [ 453.400585][ T1195] usb 3-1: SerialNumber: syz [ 453.617089][T13186] use of bytesused == 0 is deprecated and will be removed in the future, [ 453.626404][T13186] use the actual size instead. [ 453.698992][ T1195] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 453.708446][ T1195] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 453.715311][ T1195] usb 3-1: No valid video chain found. [ 453.721136][ T1195] usb 3-1: selecting invalid altsetting 0 [ 453.738161][ T1195] usb 3-1: selecting invalid altsetting 0 [ 453.757908][ T1195] usbtest: probe of 3-1:220.1 failed with error -22 [ 453.809303][ T1195] usb 3-1: USB disconnect, device number 19 [ 453.963451][T11032] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 456.128687][T13218] loop2: detected capacity change from 0 to 32768 [ 456.171542][T13218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 456.341905][T13218] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 456.368100][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.423584][T13218] CIFS mount error: No usable UNC path provided in device string! [ 456.423584][T13218] [ 456.445437][T13218] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 457.202179][T13208] loop6: detected capacity change from 0 to 262144 [ 457.256163][T13208] F2FS-fs (loop6): invalid crc value [ 457.294392][T13208] F2FS-fs (loop6): Found nat_bits in checkpoint [ 457.364338][T13208] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 457.461916][ T27] audit: type=1800 audit(1769433463.526:46): pid=13208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2399" name="bus" dev="loop6" ino=10 res=0 errno=0 [ 457.574850][T12175] ocfs2: Unmounting device (7,2) on (node local) [ 459.236570][T13233] loop2: detected capacity change from 0 to 131072 [ 459.245725][T13233] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 459.252582][T13233] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 459.284970][T13233] F2FS-fs (loop2): invalid crc value [ 459.372400][T13233] F2FS-fs (loop2): Found nat_bits in checkpoint [ 459.448452][T13233] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 459.456750][T13233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 459.599869][T13233] fscrypt (loop2, inode 8): Error -61 getting encryption context [ 461.550939][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 461.570966][T13287] loop2: detected capacity change from 0 to 1024 [ 461.761482][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 461.778956][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 461.802764][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.823515][ T49] hfsplus: b-tree write err: -5, ino 4 [ 461.830180][ T9] usb 6-1: Product: syz [ 461.851829][ T9] usb 6-1: Manufacturer: syz [ 461.870520][ T9] usb 6-1: SerialNumber: syz [ 461.880278][ T9] usb 6-1: config 0 descriptor?? [ 461.919301][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 462.703351][ T5859] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 462.743952][ T9] gspca_sq930x: ucbus_write failed -71 [ 462.895692][ T5859] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.913109][ T5859] usb 7-1: config 0 has no interface number 0 [ 462.923900][ T5859] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.948200][ T5859] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.973670][T13332] loop0: detected capacity change from 0 to 512 [ 462.986656][ T5859] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 462.990807][ T9] gspca_sq930x: Sensor ov9630 not yet treated [ 463.017745][T13332] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.2437: corrupted in-inode xattr: invalid ea_ino [ 463.035746][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.055531][ T9] sq930x: probe of 6-1:0.0 failed with error -22 [ 463.064460][T13332] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.2437: couldn't read orphan inode 15 (err -117) [ 463.082592][ T5859] usb 7-1: config 0 descriptor?? [ 463.114048][ T9] usb 6-1: USB disconnect, device number 9 [ 463.131270][T13332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.356047][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.649353][T13345] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 463.738356][ T5859] uclogic 0003:28BD:0094.0014: pen parameters not found [ 463.773446][ T5859] uclogic 0003:28BD:0094.0014: interface is invalid, ignoring [ 463.831069][ T5859] usb 7-1: USB disconnect, device number 7 [ 464.050806][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 464.140858][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.609035][T13374] macvlan0: entered promiscuous mode [ 464.632164][T13374] macvlan1: entered promiscuous mode [ 464.670366][T13374] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 464.678819][T13374] Cannot create hsr debugfs directory [ 464.689142][T13374] hsr1: entered promiscuous mode [ 464.917911][T13357] loop2: detected capacity change from 0 to 40427 [ 464.954374][T13357] F2FS-fs (loop2): Invalid log blocks per segment (83886089) [ 464.970401][T13357] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 464.996831][T13357] F2FS-fs (loop2): invalid crc value [ 465.029596][T13357] F2FS-fs (loop2): Found nat_bits in checkpoint [ 465.227646][T13357] F2FS-fs (loop2): Start checkpoint disabled! [ 465.256780][T13357] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 465.263903][T13357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 465.290470][T13388] loop6: detected capacity change from 0 to 1024 [ 465.346375][T13388] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 465.519036][T13388] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 2: comm syz.6.2460: lblock 2 mapped to illegal pblock 2 (length 1) [ 465.591871][T13388] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 465.625414][T13388] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 48: comm syz.6.2460: lblock 0 mapped to illegal pblock 48 (length 1) [ 465.684302][T13388] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 465.705289][T13388] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.2460: Failed to acquire dquot type 0 [ 465.753637][T13388] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 465.768220][ T42] kworker/u4:2: attempt to access beyond end of device [ 465.768220][ T42] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 465.788643][T13388] EXT4-fs error (device loop6): ext4_evict_inode:252: inode #11: comm syz.6.2460: mark_inode_dirty error [ 465.801978][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 465.811121][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 465.820235][T13388] EXT4-fs warning (device loop6): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 465.847311][T13388] EXT4-fs (loop6): 1 orphan inode deleted [ 465.854467][T13388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.877466][ T1096] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 465.950574][ T1096] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 466.008338][ T1096] EXT4-fs error (device loop6): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 0 [ 466.128849][T11032] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.151811][ T59] EXT4-fs error (device loop6): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 466.182969][ T59] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 466.192407][ T59] EXT4-fs error (device loop6): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 0 [ 466.246408][T11032] EXT4-fs error (device loop6): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 466.283232][T11032] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 466.302669][T11032] EXT4-fs error (device loop6): ext4_quota_off:7233: inode #3: comm syz-executor: mark_inode_dirty error [ 466.538741][T13390] loop0: detected capacity change from 0 to 32768 [ 467.028985][T13407] loop6: detected capacity change from 0 to 8192 [ 467.057493][T13407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 467.133201][T13407] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 467.175011][T13412] loop2: detected capacity change from 0 to 1024 [ 467.207628][T13407] REISERFS (device loop6): using ordered data mode [ 467.236901][T13407] reiserfs: using flush barriers [ 467.252035][T13407] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 467.287583][T13407] REISERFS (device loop6): checking transaction log (loop6) [ 467.306772][T13412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.338347][T13417] program syz.0.2471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.400097][T13412] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.499726][T13412] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 467.619319][T12175] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 467.638198][T13407] REISERFS (device loop6): Using tea hash to sort names [ 467.655825][T13407] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 467.696084][T13407] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 467.874136][T13407] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 467.887859][T13426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2475'. [ 467.974595][T13407] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 468.489673][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2479'. [ 468.727638][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.167086][T13455] loop0: detected capacity change from 0 to 8192 [ 469.420102][T13441] loop5: detected capacity change from 0 to 32768 [ 469.510152][T13441] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 469.510152][T13441] [ 469.578266][T13441] ERROR: (device loop5): remounting filesystem as read-only [ 469.602095][T13441] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 469.602095][T13441] [ 469.658069][ T29] INFO: task syz.1.1619:10667 blocked for more than 143 seconds. [ 469.676717][ T29] Not tainted syzkaller #0 [ 469.681740][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.716508][ T29] task:syz.1.1619 state:D stack:27784 pid:10667 ppid:5775 flags:0x00004004 [ 469.747471][ T29] Call Trace: [ 469.759271][ T29] [ 469.767937][ T29] __schedule+0x1553/0x45a0 [ 469.784295][ T29] ? asan.module_dtor+0x20/0x20 [ 469.809491][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 469.815513][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 469.822343][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 469.833351][ T29] schedule+0xbd/0x170 [ 469.843489][ T29] schedule_preempt_disabled+0x13/0x20 [ 469.854262][ T29] __mutex_lock+0x6a9/0xcc0 [ 469.863552][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 469.871989][ T29] ? blkdev_get_by_dev+0x121/0x600 [ 469.878164][ T29] ? mutex_lock_nested+0x20/0x20 [ 469.883272][ T29] ? iput+0x343/0x920 [ 469.890838][ T29] ? ilookup+0x1c4/0x200 [ 469.895291][ T29] ? disk_block_events+0xa7/0x120 [ 469.900467][ T29] ? blkdev_get_by_dev+0xf7/0x600 [ 469.906135][ T29] blkdev_get_by_dev+0x121/0x600 [ 469.911246][ T29] blkdev_open+0x152/0x360 [ 469.917874][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 469.922645][ T29] do_dentry_open+0x8c6/0x1500 [ 469.933026][ T29] path_openat+0x27f1/0x3230 [ 469.937825][ T29] ? do_sys_openat2+0xda/0x1d0 [ 469.961694][ T29] ? verify_lock_unused+0x140/0x140 [ 469.967759][ T29] ? do_filp_open+0x430/0x430 [ 469.978187][ T29] ? __virt_addr_valid+0x18c/0x540 [ 469.987636][ T29] do_filp_open+0x1f5/0x430 [ 469.997871][ T29] ? vfs_tmpfile+0x490/0x490 [ 470.004958][ T29] ? _raw_spin_unlock+0x28/0x40 [ 470.014353][ T29] ? alloc_fd+0x58f/0x630 [ 470.022861][ T29] do_sys_openat2+0x134/0x1d0 [ 470.032339][ T29] ? do_sys_open+0xe0/0xe0 [ 470.036958][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 470.043182][ T29] ? lock_chain_count+0x20/0x20 [ 470.058281][ T29] ? lock_chain_count+0x20/0x20 [ 470.064012][ T29] __x64_sys_openat+0x139/0x160 [ 470.072315][ T29] do_syscall_64+0x55/0xa0 [ 470.080724][ T29] ? clear_bhb_loop+0x40/0x90 [ 470.086641][ T29] ? clear_bhb_loop+0x40/0x90 [ 470.096456][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.102563][ T29] RIP: 0033:0x7f90c415b78e [ 470.111632][ T29] RSP: 002b:00007f90c4f6fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 470.123913][ T29] RAX: ffffffffffffffda RBX: 00007f90c4f706c0 RCX: 00007f90c415b78e [ 470.133391][ T29] RDX: 0000000000002400 RSI: 00007f90c4f6fc00 RDI: ffffffffffffff9c [ 470.141566][ T29] RBP: 00007f90c4f6fc00 R08: 0000000000000000 R09: 0000000000000000 [ 470.150464][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 470.163572][ T29] R13: 00007f90c4416038 R14: 00007f90c4415fa0 R15: 00007ffc00580308 [ 470.175204][ T29] [ 470.178538][ T29] [ 470.178538][ T29] Showing all locks held in the system: [ 470.196661][ T29] 1 lock held by ksoftirqd/1/22: [ 470.202588][ T29] 1 lock held by khungtaskd/29: [ 470.207673][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 470.225172][ T29] 2 locks held by kworker/u4:7/2920: [ 470.231392][T12213] ------------[ cut here ]------------ [ 470.232868][ T29] #0: ffff888018bfe538 ( [ 470.237023][T12213] kernel BUG at fs/jfs/inode.c:175! [ 470.237073][ T29] (wq_completion)iou_exit [ 470.254644][T12213] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 470.265115][T12213] CPU: 0 PID: 12213 Comm: syz-executor Not tainted syzkaller #0 [ 470.272795][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.282911][T12213] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 470.288504][T12213] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 49 f0 df fe e9 16 fe ff ff e8 0f c9 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 470.308153][T12213] RSP: 0018:ffffc90005a67ac0 EFLAGS: 00010293 [ 470.314261][T12213] RAX: ffffffff82ff4a11 RBX: ffff88805f13f330 RCX: ffff888022f91e00 [ 470.322279][T12213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805f13f330 [ 470.330289][T12213] RBP: 0000000000000001 R08: ffffffff911be62f R09: 1ffffffff2237cc5 [ 470.336019][T13461] loop2: detected capacity change from 0 to 32768 [ 470.338285][T12213] R10: dffffc0000000000 R11: fffffbfff2237cc6 R12: dffffc0000000000 [ 470.352724][T12213] R13: dffffc0000000000 R14: ffff88805f13efb8 R15: ffff88805f13f368 [ 470.360735][T12213] FS: 000055556ba9d500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 470.369696][T12213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.376330][T12213] CR2: 0000001b30416ff8 CR3: 000000005578c000 CR4: 00000000003506f0 [ 470.384356][T12213] Call Trace: [ 470.387673][T12213] [ 470.390638][T12213] ? evict+0x4c4/0x8d0 [ 470.394755][T12213] ? jfs_write_inode+0x220/0x220 [ 470.399809][T12213] evict+0x4ca/0x8d0 [ 470.403755][T12213] ? proc_nr_inodes+0x230/0x230 [ 470.408657][T12213] ? do_raw_spin_unlock+0x121/0x230 [ 470.413935][T12213] ? do_raw_spin_unlock+0x121/0x230 [ 470.419203][T12213] evict_inodes+0x606/0x6a0 [ 470.423765][T12213] ? clear_inode+0x150/0x150 [ 470.428417][T12213] generic_shutdown_super+0x97/0x2b0 [ 470.433758][T12213] kill_block_super+0x44/0x90 [ 470.438483][T12213] deactivate_locked_super+0x97/0x100 [ 470.443911][T12213] cleanup_mnt+0x43b/0x4d0 [ 470.448377][T12213] task_work_run+0x1d4/0x260 [ 470.453026][T12213] ? task_work_cancel+0x220/0x220 [ 470.456460][ T29] ){+.+.}-{0:0} [ 470.458082][T12213] ? exit_to_user_mode_loop+0x3b/0x110 [ 470.458119][T12213] exit_to_user_mode_loop+0xe6/0x110 [ 470.461781][ T29] , at: process_scheduled_works+0x96f/0x15d0 [ 470.467056][T12213] exit_to_user_mode_prepare+0xee/0x180 [ 470.467086][T12213] syscall_exit_to_user_mode+0x1a/0x50 [ 470.489436][T12213] do_syscall_64+0x61/0xa0 [ 470.493910][T12213] ? clear_bhb_loop+0x40/0x90 [ 470.498625][ T29] #1: ffffc9000c1e7d00 [ 470.498639][T12213] ? clear_bhb_loop+0x40/0x90 [ 470.502824][ T29] ((work_completion)(&ctx->exit_work) [ 470.507507][T12213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.507529][T12213] RIP: 0033:0x7fb9fdd9c117 [ 470.507545][T12213] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 470.507560][T12213] RSP: 002b:00007ffea59f60b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 470.507579][T12213] RAX: 0000000000000000 RBX: 00007fb9fde0471f RCX: 00007fb9fdd9c117 [ 470.525257][ T29] ){+.+.}-{0:0} [ 470.543011][T12213] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea59f6170 [ 470.543028][T12213] RBP: 00007ffea59f6170 R08: 00007ffea59f7170 R09: 00000000ffffffff [ 470.543040][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea59f7200 [ 470.543052][T12213] R13: 00007fb9fde0471f R14: 00000000000734e1 R15: 00007ffea59f7240 [ 470.543074][T12213] [ 470.543094][T12213] Modules linked in: [ 470.559834][T12213] ---[ end trace 0000000000000000 ]--- [ 470.582622][ T24] block nbd1: Possible stuck request ffff8880223f8200: control (read@1024,1024B). Runtime 150 seconds [ 470.607520][T12213] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 470.609021][ T24] block nbd1: Possible stuck request ffff8880223f8400: control (read@2048,1024B). Runtime 150 seconds [ 470.609051][ T24] block nbd1: Possible stuck request ffff8880223f8600: control (read@3072,1024B). Runtime 150 seconds [ 470.647891][ T24] block nbd1: Possible stuck request ffff8880223f8000: control (read@0,1024B). Runtime 150 seconds [ 470.648694][ T29] , at: process_scheduled_works+0x96f/0x15d0 [ 470.676608][T13461] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 470.691013][ T29] 2 locks held by getty/5530: [ 470.696006][ T29] #0: ffff888031aba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 470.706903][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 470.711001][T12213] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 49 f0 df fe e9 16 fe ff ff e8 0f c9 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 470.717672][ T29] 1 lock held by udevd/5912: [ 470.741611][ T29] #0: ffff8880222d34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 470.751911][ T29] 1 lock held by syz.1.1619/10667: [ 470.757062][ T29] #0: ffff8880222d34c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 470.768062][ T29] 1 lock held by syz-executor/12213: [ 470.777888][ T29] 3 locks held by syz.2.2492/13461: [ 470.783240][ T29] #0: ffff888019e52418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 470.792371][ T29] #1: ffff88807ce809c0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120 [ 470.803637][ T29] #2: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: blk_cgroup_congested+0x1f/0x220 [ 470.813801][ T29] [ 470.816168][ T29] ============================================= [ 470.816168][ T29] [ 470.825090][ T29] NMI backtrace for cpu 0 [ 470.829474][ T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G D syzkaller #0 [ 470.838198][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.843238][T12213] RSP: 0018:ffffc90005a67ac0 EFLAGS: 00010293 [ 470.848269][ T29] Call Trace: [ 470.848280][ T29] [ 470.848287][ T29] dump_stack_lvl+0x18c/0x250 [ 470.848320][ T29] ? show_regs_print_info+0x20/0x20 [ 470.848353][ T29] ? load_image+0x400/0x400 [ 470.848381][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 470.848411][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 470.848440][ T29] ? _printk+0xde/0x130 [ 470.848460][ T29] ? load_image+0x400/0x400 [ 470.895049][ T29] ? load_image+0x400/0x400 [ 470.899596][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 470.905695][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 470.911735][ T29] watchdog+0xf3d/0xf80 [ 470.915925][ T29] ? watchdog+0x1e1/0xf80 [ 470.920302][ T29] kthread+0x2fa/0x390 [ 470.924388][ T29] ? hungtask_pm_notify+0x90/0x90 [ 470.929433][ T29] ? kthread_blkcg+0xd0/0xd0 [ 470.934037][ T29] ret_from_fork+0x48/0x80 [ 470.938473][ T29] ? kthread_blkcg+0xd0/0xd0 [ 470.943078][ T29] ret_from_fork_asm+0x11/0x20 [ 470.947882][ T29] [ 470.952639][ T29] Sending NMI from CPU 0 to CPUs 1: [ 470.957904][ C1] NMI backtrace for cpu 1 [ 470.957917][ C1] CPU: 1 PID: 1096 Comm: kworker/u4:6 Tainted: G D syzkaller #0 [ 470.957934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.957945][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 470.957967][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x7/0x120 [ 470.957992][ C1] Code: ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 c3 90 f3 0f 1e fa 48 8b 06 <48> 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 02 7f 1e 48 85 c9 74 [ 470.958006][ C1] RSP: 0018:ffffc90004a5f4d0 EFLAGS: 00000202 [ 470.958019][ C1] RAX: 0000000000000003 RBX: ffffffff8f89cd1f RCX: ffff888024278000 [ 470.958031][ C1] RDX: ffffc90004a5fad0 RSI: ffffffff8cfa07b0 RDI: 0000000000000002 [ 470.958042][ C1] RBP: ffffc90004a5f5f8 R08: ffff888024278000 R09: 0000000000000008 [ 470.958053][ C1] R10: 0000000000000009 R11: 0000000000000000 R12: ffffc90004a5f5a8 [ 470.958064][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffffff8f89cd1e [ 470.958075][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 470.958088][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.958099][ C1] CR2: 00007f425a3e0000 CR3: 0000000078c76000 CR4: 00000000003506e0 [ 470.958114][ C1] Call Trace: [ 470.958119][ C1] [ 470.958125][ C1] unwind_next_frame+0xe46/0x2970 [ 470.958147][ C1] ? consume_skb+0xb2/0x110 [ 470.958172][ C1] ? consume_skb+0xb2/0x110 [ 470.958195][ C1] ? stack_trace_save+0x100/0x100 [ 470.958215][ C1] arch_stack_walk+0x144/0x190 [ 470.958234][ C1] ? consume_skb+0xb2/0x110 [ 470.958275][ C1] stack_trace_save+0xaa/0x100 [ 470.958304][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 470.958325][ C1] ? chacha_block_generic+0xc8/0xdd0 [ 470.958350][ C1] ? __crypto_xor+0x1760/0x1760 [ 470.958374][ C1] kasan_set_track+0x4e/0x70 [ 470.958391][ C1] ? kasan_set_track+0x4e/0x70 [ 470.958407][ C1] ? kasan_save_free_info+0x2e/0x50 [ 470.958428][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 470.958445][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 470.958460][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 470.958483][ C1] ? skb_release_data+0x634/0x800 [ 470.958506][ C1] ? consume_skb+0xb2/0x110 [ 470.958550][ C1] ? __kmem_cache_free+0xba/0x1e0 [ 470.958578][ C1] kasan_save_free_info+0x2e/0x50 [ 470.958599][ C1] ____kasan_slab_free+0x126/0x1e0 [ 470.958619][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 470.958635][ C1] ? rcu_is_watching+0x15/0xb0 [ 470.958657][ C1] ? skb_release_data+0x634/0x800 [ 470.958681][ C1] __kmem_cache_free+0xba/0x1e0 [ 470.958706][ C1] skb_release_data+0x634/0x800 [ 470.958736][ C1] consume_skb+0xb2/0x110 [ 470.958761][ C1] nsim_dev_trap_report_work+0x76f/0xb00 [ 470.958788][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 470.958809][ C1] process_scheduled_works+0xa5d/0x15d0 [ 470.958842][ C1] ? assign_work+0x430/0x430 [ 470.958863][ C1] ? assign_work+0x3d0/0x430 [ 470.958885][ C1] worker_thread+0xa55/0xfc0 [ 470.958905][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 470.958923][ C1] ? _raw_spin_unlock+0x40/0x40 [ 470.958938][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 470.958963][ C1] kthread+0x2fa/0x390 [ 470.958977][ C1] ? pr_cont_work+0x560/0x560 [ 470.958997][ C1] ? kthread_blkcg+0xd0/0xd0 [ 470.959012][ C1] ret_from_fork+0x48/0x80 [ 470.959030][ C1] ? kthread_blkcg+0xd0/0xd0 [ 470.959046][ C1] ret_from_fork_asm+0x11/0x20 [ 470.959074][ C1] [ 471.002718][T12213] [ 471.017191][ C1] vkms_vblank_simulate: vblank timer overrun [ 471.045301][T13461] XFS (loop2): Ending clean mount [ 471.082587][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 471.090239][ T29] Kernel Offset: disabled