last executing test programs: 2m5.631591992s ago: executing program 2 (id=113): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/time_for_children\x00') 2m4.718937514s ago: executing program 2 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x16d, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m4.432222012s ago: executing program 2 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 2m4.276243786s ago: executing program 2 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 2m4.153818499s ago: executing program 2 (id=142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 2m3.579185313s ago: executing program 2 (id=148): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, 0x0, 0xc3219fe22fdf3a2b, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044014}, 0x4010) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2m3.334834449s ago: executing program 32 (id=148): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, 0x0, 0xc3219fe22fdf3a2b, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044014}, 0x4010) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 1m10.402928258s ago: executing program 5 (id=550): sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb30d76c29ca5d1ca9327b1b13f5c020d14d28ff3452cec", 0x58}], 0x1}, 0x8841) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1m10.114934336s ago: executing program 5 (id=552): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xd, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1m9.954187229s ago: executing program 5 (id=554): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="67727071756f74612c646973636172642c696f636861727365743d63703836362c6572726f72733d636f6e74696e75652c696f636861727365743d6575632d6a702c75737271756f74612c6572726f72733d636f6e74696e75652c6e6f71756f74612c696e746567726974792c00f131f25105cba36253eb2d9e2b27575db3fdcb68dc71d8dc4dd8c3e0124649016264f4b3440455a5f90f59676481654fdb0f8957cf46066ddd2a7856bd69366970901d6639ec3f1cc6ab2c20d6ea2bfd1b8ea2608abaf94039f6e1f8c90aac21bf20a1f877f904db7380e7dffea078b8b29c76f648f348df048a3bf3201e410e35e2e28b22e27762c73146ff94177eb6fa15b25527bb2a6041b3b22d0dbf5aa71910cfc11e403f"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) 1m8.29880948s ago: executing program 5 (id=563): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x440, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000001180)=""/4093, 0xffd) 1m7.866147161s ago: executing program 5 (id=569): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) recvfrom(r1, 0x0, 0xffffffffffffff8f, 0x100, 0x0, 0x0) 1m7.618277327s ago: executing program 1 (id=572): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m6.791249347s ago: executing program 5 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000800000/0x100000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000800000/0x100000)=nil}) 1m6.634295862s ago: executing program 33 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000800000/0x100000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000, &(0x7f0000800000/0x100000)=nil}) 1m6.605942812s ago: executing program 1 (id=578): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc0000001900010031bd700000000000ac1e00010000000000000000000000006401010200000000000000000000000000000000000000000a00000000000e99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006000000000044000500ffffffff000000000000000000000000000000013c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000"], 0x25}, 0x8000) 1m5.796973462s ago: executing program 1 (id=586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 1m5.580961988s ago: executing program 1 (id=589): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000280)={[{@prjquota}, {@prjquota}, {@inode32}, {@usrquota}, {@grpquota}, {@quota}, {@uquota}]}, 0xc2, 0x9678, &(0x7f0000009680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1m3.03809367s ago: executing program 1 (id=604): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000005c0)='./file1\x00', 0x26000010) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0x7}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0x6, 0x4}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1m1.505326709s ago: executing program 3 (id=608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000023c0)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x80000000, 0x6, 0x4, 0x2}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.227004345s ago: executing program 1 (id=610): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==") utime(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000280)={&(0x7f0000000240)=[{&(0x7f00000001c0)="91", 0x1}], 0x1, 0x1ff, 0x0, 0x8, 0xffffffffffffffff, 0x91, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)) 1m0.894685193s ago: executing program 34 (id=610): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") utime(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000280)={&(0x7f0000000240)=[{&(0x7f00000001c0)="91", 0x1}], 0x1, 0x1ff, 0x0, 0x8, 0xffffffffffffffff, 0x91, 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000440)) 1m0.867111764s ago: executing program 3 (id=612): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r1, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m0.792289526s ago: executing program 3 (id=613): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) listen(0xffffffffffffffff, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="fe502b6b", 0x4}], 0x1, 0x2, 0x543d, 0x11) 1m0.421210976s ago: executing program 3 (id=614): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 59.968702296s ago: executing program 3 (id=615): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x9, 0x2) mremap(&(0x7f00002f9000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000340000/0x2000)=nil) 59.307221643s ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060"], 0xcfa4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0xfffffffffffffe35, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.200642825s ago: executing program 35 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060"], 0xcfa4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0xfffffffffffffe35, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.326122413s ago: executing program 6 (id=699): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000001b40)="08ba810a10d69bfad8c22e8786d8ad9993d21013", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x4e23, @multicast2}, 0x10) syz_extract_tcp_res(&(0x7f0000000000), 0x518, 0x7f) 42.150781257s ago: executing program 6 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 39.968881111s ago: executing program 6 (id=716): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/32, 0x20}, 0xc5}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 39.62346694s ago: executing program 6 (id=719): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000280)={[{@prjquota}, {@prjquota}, {@inode32}, {@usrquota}, {@grpquota}, {@quota}, {@uquota}]}, 0xc2, 0x9678, &(0x7f0000009680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 36.79083127s ago: executing program 6 (id=736): unshare(0x2a020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000e4ff00000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000004080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 35.011152264s ago: executing program 6 (id=754): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$AUTOFS_IOC_READY(r1, 0x7439, 0x0) 34.7604364s ago: executing program 36 (id=754): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$AUTOFS_IOC_READY(r1, 0x7439, 0x0) 8.949410969s ago: executing program 0 (id=929): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.638696416s ago: executing program 0 (id=935): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1400, 0x2, 0x11, r0, 0x0) r1 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) read(r1, 0x0, 0xfffffea1) 8.47105414s ago: executing program 4 (id=938): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x10, &(0x7f0000000580), 0x1, 0x4f8, &(0x7f0000005e40)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x88000, 0x114) getdents(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 7.438823016s ago: executing program 4 (id=946): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x3) 6.746135373s ago: executing program 0 (id=951): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.789303001s ago: executing program 4 (id=958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000afeb4f"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x4000) 4.578222167s ago: executing program 4 (id=960): r0 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b) keyctl$revoke(0x3, r0) 4.246867715s ago: executing program 9 (id=962): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 3.63590385s ago: executing program 4 (id=966): timerfd_create(0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) getpid() syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x83, 0x1, "e7"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000012c0)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\v3'], 0x0, 0x0}) 3.621390161s ago: executing program 8 (id=967): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000004c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000240)='fuse\x00', &(0x7f0000000280)="7068e5", 0x3) 3.613678051s ago: executing program 0 (id=968): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 3.478426924s ago: executing program 8 (id=969): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x48100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd9f, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0x20a, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000180)={0x2, r2, 0xb, 0x7ffffffe, 0x7f, 0x3, 0x3}) 3.413877706s ago: executing program 0 (id=971): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000300)={0x2, 0x1f40, @loopback}, 0x10) accept(r0, 0x0, 0x0) 3.077897484s ago: executing program 0 (id=973): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @empty, 0x12}}}, 0x30) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2.82305002s ago: executing program 37 (id=973): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @empty, 0x12}}}, 0x30) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 2.81676422s ago: executing program 7 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x20600, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000009b80)={0x40000012}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) 2.81611973s ago: executing program 8 (id=977): openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x8042, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/core_pattern\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r1, r0, 0x0, 0x2) 2.760643622s ago: executing program 8 (id=978): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2.624951315s ago: executing program 7 (id=979): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0) 2.564431606s ago: executing program 8 (id=980): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.566286971s ago: executing program 8 (id=981): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xed81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x1, 0x3, 0xff, {0x9, 0x21, 0xff7d, 0x57, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x7, 0x64}}}}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000180)={0x40, 0x2, 0x9e, {0x9e, 0xc, "b606ff26b1ec3dbe68a0284fb83130778e575b9d61c4c142a88d12571d913c6ecd6f4088775d92cd6405bd6d63f7dcf06fa62e9e7bfeb7cec797228ffcb7083ca8a254200f94827b776a69d14d73f5a1172816e9fe24d1b5da530231713cf466aa675dec0ded7f7e36144d253c6acf0cfedc0901c6d93b8cf167575408384c4a9fa8a9451f5eb472a7803f4691a9e0c17ad38b66dc4f84a210f82986"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) 1.397003535s ago: executing program 4 (id=982): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x6) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.175677751s ago: executing program 9 (id=983): r0 = socket(0x11, 0xa, 0x5) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x400, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x8, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 1.076038604s ago: executing program 9 (id=984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=[@register_looper, @request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 945.723187ms ago: executing program 9 (id=985): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d123766", 0x4, 0x4004085, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm, @mss={0x2, 0x7f528674}, @mss={0x2, 0xffffffff}], 0x4) 837.975499ms ago: executing program 7 (id=986): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) setresuid(0xee01, 0xee00, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) 786.481351ms ago: executing program 9 (id=987): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x100000000000a3) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0xfdffffffffffffff) 665.252554ms ago: executing program 9 (id=988): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f0000000180)=0x58, 0x3fffff) 640.206784ms ago: executing program 7 (id=989): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 451.893189ms ago: executing program 7 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) 0s ago: executing program 7 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r1, r0}, 0xc) kernel console output (not intermixed with test programs): ected capacity change from 0 to 512 [ 131.594027][ T6166] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.612815][ T6171] loop3: detected capacity change from 0 to 256 [ 131.653385][ T6166] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.510: bad orphan inode 13 [ 131.677940][ T6166] ext4_test_bit(bit=12, block=18) = 1 [ 131.692170][ T6166] is_bad_inode(inode)=0 [ 131.696373][ T6166] NEXT_ORPHAN(inode)=0 [ 131.705626][ T6166] max_ino=32 [ 131.708940][ T6166] i_nlink=1 [ 131.712395][ T6166] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.750079][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.782505][ T6166] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 131.800773][ T6166] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.510: bg 0: block 248: padding at end of block bitmap is not set [ 131.819367][ T6166] Quota error (device loop0): write_blk: dquota write failed [ 131.827062][ T6166] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 131.829256][ T5935] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.841119][ T5729] usb 6-1: USB disconnect, device number 5 [ 131.862280][ T6174] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 131.876935][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.880397][ T6166] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.510: Failed to acquire dquot type 1 [ 131.901811][ T6174] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 131.922556][ T6174] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.510: Failed to acquire dquot type 1 [ 131.943841][ T5935] usb 5-1: config 0 descriptor?? [ 131.990069][ T4910] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 132.006870][ T4910] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 1 [ 132.298791][ T5935] usbhid 5-1:0.0: can't add hid device: -71 [ 132.315205][ T5935] usbhid: probe of 5-1:0.0 failed with error -71 [ 132.324347][ T5935] usb 5-1: USB disconnect, device number 7 [ 132.470640][ T6176] loop3: detected capacity change from 0 to 32768 [ 132.512771][ T6176] [ 132.512771][ T6176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.512771][ T6176] [ 132.534874][ T6178] loop0: detected capacity change from 0 to 32768 [ 132.580908][ T6178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.513 (6178) [ 132.600120][ T6176] [ 132.600120][ T6176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.600120][ T6176] [ 132.635043][ T6178] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 132.643553][ T6176] [ 132.643553][ T6176] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.643553][ T6176] [ 132.666877][ T6178] BTRFS info (device loop0): using free space tree [ 132.670898][ T6176] ERROR: (device loop3): diRead: i_ino != di_number [ 132.670898][ T6176] [ 132.677228][ T6178] BTRFS info (device loop0): has skinny extents [ 132.704890][ T6176] ERROR: (device loop3): remounting filesystem as read-only [ 132.723701][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730809][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.756706][ T6183] loop5: detected capacity change from 0 to 4096 [ 132.774827][ T6190] ERROR: (device loop3): diRead: i_ino != di_number [ 132.774827][ T6190] [ 132.808712][ T5935] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 132.923751][ T6178] BTRFS info (device loop0): enabling ssd optimizations [ 133.087802][ T6205] loop3: detected capacity change from 0 to 64 [ 133.094147][ T5935] usb 5-1: Using ep0 maxpacket: 8 [ 133.219129][ T5935] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 133.227271][ T5935] usb 5-1: config 0 has no interface number 0 [ 133.249476][ T5935] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.275982][ T5935] usb 5-1: config 0 interface 52 has no altsetting 0 [ 133.293713][ T5935] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 133.310289][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.326908][ T5935] usb 5-1: config 0 descriptor?? [ 133.580633][ T5935] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input16 [ 133.855597][ T6216] loop0: detected capacity change from 0 to 4096 [ 133.899743][ T23] usb 5-1: USB disconnect, device number 8 [ 133.995699][ T6216] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 134.161598][ T4196] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 134.344159][ T6230] netlink: 148 bytes leftover after parsing attributes in process `syz.0.527'. [ 134.469758][ T6218] loop5: detected capacity change from 0 to 32768 [ 134.518380][ T6218] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.523 (6218) [ 134.579958][ T6218] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 134.628711][ T6218] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.638260][ T6218] BTRFS info (device loop5): use zstd compression, level 3 [ 134.703483][ T6218] BTRFS info (device loop5): using free space tree [ 134.742764][ T6218] BTRFS info (device loop5): has skinny extents [ 134.759889][ T6241] Illegal XDP return value 5, expect packet loss! [ 134.993724][ T6234] loop1: detected capacity change from 0 to 32768 [ 135.083270][ T6218] BTRFS info (device loop5): enabling ssd optimizations [ 135.130906][ T6234] XFS (loop1): Mounting V5 Filesystem [ 135.226843][ T6232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.529 (6232) [ 135.257030][ T6234] XFS (loop1): Ending clean mount [ 135.280538][ T6232] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 135.317514][ T6232] BTRFS info (device loop3): using free space tree [ 135.349482][ T6232] BTRFS info (device loop3): has skinny extents [ 135.437510][ T6281] xt_hashlimit: size too large, truncated to 1048576 [ 135.683744][ T6232] BTRFS info (device loop3): enabling ssd optimizations [ 135.703364][ T4186] XFS (loop1): Unmounting Filesystem [ 136.876201][ T6305] set_capacity_and_notify: 1 callbacks suppressed [ 136.876220][ T6305] loop0: detected capacity change from 0 to 131072 [ 137.013770][ T6305] F2FS-fs (loop0): invalid crc value [ 137.070524][ T6305] F2FS-fs (loop0): Found nat_bits in checkpoint [ 137.135461][ T6305] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 137.173678][ T6305] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 137.688989][ T6329] dwc3 pcspkr: missing memory resource [ 137.882120][ T6336] loop5: detected capacity change from 0 to 512 [ 138.064469][ T6336] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 138.156303][ T6336] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.345419][ T26] audit: type=1800 audit(1786568608.803:9): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.547" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 138.706329][ T6351] loop5: detected capacity change from 0 to 7 [ 138.736725][ T4470] Dev loop5: unable to read RDB block 7 [ 138.743034][ T4470] loop5: AHDI p1 p2 [ 138.753144][ T4470] loop5: partition table partially beyond EOD, truncated [ 138.772196][ T4470] loop5: p1 size 150995456 extends beyond EOD, truncated [ 138.795873][ T6351] Dev loop5: unable to read RDB block 7 [ 138.806236][ T6351] loop5: AHDI p1 p2 [ 138.834446][ T6351] loop5: partition table partially beyond EOD, truncated [ 138.858569][ T6351] loop5: p1 size 150995456 extends beyond EOD, truncated [ 138.988841][ T5716] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.008062][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 139.124232][ T4470] udevd[4470]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 139.220156][ T6361] loop5: detected capacity change from 0 to 1024 [ 139.257690][ T6361] EXT4-fs (loop5): Ignoring removed bh option [ 139.322020][ T6361] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 139.408965][ T5716] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.432429][ T5716] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 139.460746][ T26] audit: type=1800 audit(1786568609.923:10): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.554" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 139.482902][ T5716] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.498726][ T5719] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.521914][ T6361] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.594831][ T6370] loop1: detected capacity change from 0 to 256 [ 139.665371][ T6370] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 139.678952][ T5716] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 139.708380][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 139.737064][ T5716] usb 4-1: Product: syz [ 139.747199][ T5716] usb 4-1: Manufacturer: syz [ 139.799186][ T6349] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 139.830502][ T5716] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 139.853916][ T5716] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 139.923525][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.944738][ T5719] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.976990][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.006413][ T5719] usb 1-1: config 0 descriptor?? [ 140.072771][ T5716] usb 4-1: USB disconnect, device number 10 [ 140.101277][ T5716] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 140.124587][ T5716] garmin_gps 4-1:1.0: device disconnected [ 140.348796][ T5719] usbhid 1-1:0.0: can't add hid device: -71 [ 140.358703][ T5719] usbhid: probe of 1-1:0.0 failed with error -71 [ 140.395804][ T5719] usb 1-1: USB disconnect, device number 7 [ 140.681589][ T26] audit: type=1800 audit(1786568611.143:11): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.554" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 140.858735][ T5719] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.925421][ T6390] loop5: detected capacity change from 0 to 512 [ 140.984009][ T6390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.042175][ T6390] EXT4-fs (loop5): 1 truncate cleaned up [ 141.047884][ T6390] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 141.049390][ T6319] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 141.139742][ T5719] usb 1-1: Using ep0 maxpacket: 8 [ 141.215839][ T6400] device batadv_slave_1 entered promiscuous mode [ 141.269235][ T5719] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 141.277820][ T6399] device batadv_slave_1 left promiscuous mode [ 141.299026][ T5719] usb 1-1: config 0 has no interface number 0 [ 141.305272][ T5719] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.338860][ T5719] usb 1-1: config 0 interface 52 has no altsetting 0 [ 141.347183][ T5719] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 141.376848][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.411483][ T5719] usb 1-1: config 0 descriptor?? [ 141.449554][ T6319] usb 4-1: Using ep0 maxpacket: 32 [ 141.693239][ T5719] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input17 [ 141.738781][ T6319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.753240][ T6319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.763433][ T6319] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.772659][ T6319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.785106][ T6319] usb 4-1: config 0 descriptor?? [ 141.859468][ T6319] hub 4-1:0.0: USB hub found [ 141.953224][ T5719] usb 1-1: USB disconnect, device number 8 [ 141.969241][ T3543] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 142.090142][ T6319] hub 4-1:0.0: 1 port detected [ 142.235385][ T6411] loop4: detected capacity change from 0 to 128 [ 142.418801][ T6319] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 142.426002][ T6319] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 142.563251][ T6319] usbhid 4-1:0.0: can't add hid device: -71 [ 142.571700][ T6319] usbhid: probe of 4-1:0.0 failed with error -71 [ 142.629599][ T6319] usb 4-1: USB disconnect, device number 11 [ 142.823224][ T6427] netlink: 'syz.4.582': attribute type 10 has an invalid length. [ 142.895771][ T6427] team0: Port device dummy0 added [ 142.944043][ T6426] loop0: detected capacity change from 0 to 4096 [ 143.084169][ T6426] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 143.173445][ T6426] ntfs3: loop0: Failed to load $Extend. [ 143.329468][ T6438] netlink: 104 bytes leftover after parsing attributes in process `syz.1.586'. [ 143.526840][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 143.679018][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.699684][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.739109][ T6429] device bridge_slave_0 entered promiscuous mode [ 143.747620][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.879845][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.928447][ T6429] device bridge_slave_1 entered promiscuous mode [ 144.102691][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.132284][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.235899][ T6429] team0: Port device team_slave_0 added [ 144.269110][ T6429] team0: Port device team_slave_1 added [ 144.395054][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.438800][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.464765][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.540742][ T6450] loop1: detected capacity change from 0 to 32768 [ 144.549877][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.585041][ T6469] netlink: 'syz.0.596': attribute type 19 has an invalid length. [ 144.629619][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.636640][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.662590][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.733277][ T6450] XFS (loop1): Mounting V5 Filesystem [ 144.846146][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.881483][ T6450] XFS (loop1): Ending clean mount [ 144.890297][ T5719] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 144.913265][ T6469] netlink: 'syz.0.596': attribute type 19 has an invalid length. [ 144.932440][ T6450] XFS (loop1): Quotacheck needed: Please wait. [ 144.945537][ T6484] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=591197932 (1182395864 ns) > initial count (4398 ns). Using initial count to start timer. [ 144.993512][ T6429] device hsr_slave_0 entered promiscuous mode [ 145.024539][ T6429] device hsr_slave_1 entered promiscuous mode [ 145.034288][ T6487] loop0: detected capacity change from 0 to 512 [ 145.052938][ T6319] Bluetooth: hci4: command 0x0409 tx timeout [ 145.072448][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.080071][ T154] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 145.089254][ T154] XFS (loop1): Unmount and run xfs_repair [ 145.097672][ T154] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 145.108239][ T6429] Cannot create hsr debugfs directory [ 145.137846][ T154] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 145.154669][ T6489] loop4: detected capacity change from 0 to 128 [ 145.182492][ T154] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 145.187028][ T6487] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.226650][ T154] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 145.276751][ T6489] attempt to access beyond end of device [ 145.276751][ T6489] loop4: rw=2049, want=250, limit=128 [ 145.299918][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.305901][ T6489] attempt to access beyond end of device [ 145.305901][ T6489] loop4: rw=2049, want=142, limit=128 [ 145.311004][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.328340][ T6487] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.600: inode has both inline data and extents flags [ 145.332175][ T5719] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 145.357098][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.359455][ T154] 00000030: 00 00 00 00 ac 5e af 00 01 00 00 00 00 00 00 13 .....^.......... [ 145.378964][ T5719] usb 4-1: config 0 descriptor?? [ 145.390350][ T6489] Buffer I/O error on dev loop4, logical block 70, lost async page write [ 145.406180][ T154] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 145.423111][ T6488] attempt to access beyond end of device [ 145.423111][ T6488] loop4: rw=2049, want=142, limit=128 [ 145.438213][ T154] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.449096][ T6487] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.600: couldn't read orphan inode 15 (err -117) [ 145.461862][ T154] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.478096][ T154] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 145.491669][ T154] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 145.509031][ T6487] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 145.550686][ T6450] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 145.744193][ T6450] XFS (loop1): User initiated shutdown received. [ 145.770924][ T6450] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 145.792129][ T6450] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 145.822418][ T6495] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 145.844057][ T6429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.865257][ T6497] loop0: detected capacity change from 0 to 64 [ 145.882944][ T5719] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 145.890730][ T6429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 145.906089][ T5719] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 145.919333][ T6429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 145.936042][ T5719] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 145.970104][ T6429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.993479][ T5719] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 146.011024][ T5719] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 146.101990][ T5719] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 146.392655][ T6494] loop4: detected capacity change from 0 to 32768 [ 146.405106][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.416399][ T6494] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.602 (6494) [ 146.447888][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.466361][ T6494] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 146.481643][ T6494] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 146.496151][ T6494] BTRFS info (device loop4): use zstd compression, level 3 [ 146.517304][ T6494] BTRFS info (device loop4): using free space tree [ 146.540995][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.583276][ T6494] BTRFS info (device loop4): has skinny extents [ 146.598985][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.612461][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.633835][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.655189][ T4186] XFS (loop1): Unmounting Filesystem [ 146.682356][ T5719] playstation 0003:054C:0DF2.000A: Invalid gyro calibration data for axis (3), disabling calibration. [ 146.693482][ T5719] playstation 0003:054C:0DF2.000A: Invalid gyro calibration data for axis (4), disabling calibration. [ 146.705715][ T5719] playstation 0003:054C:0DF2.000A: Invalid gyro calibration data for axis (5), disabling calibration. [ 146.717201][ T5719] playstation 0003:054C:0DF2.000A: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 146.730168][ T5719] playstation 0003:054C:0DF2.000A: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 146.742425][ T5719] playstation 0003:054C:0DF2.000A: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 146.756725][ T5719] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.000A/input/input18 [ 146.774681][ T5719] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.000A/input/input19 [ 146.794218][ T5719] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.000A/input/input20 [ 146.828020][ T6520] xt_hashlimit: size too large, truncated to 1048576 [ 146.840875][ T5719] playstation 0003:054C:0DF2.000A: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 146.948836][ T5719] usb 4-1: USB disconnect, device number 12 [ 146.974179][ T6494] BTRFS info (device loop4): enabling ssd optimizations [ 147.070930][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.119042][ T6322] Bluetooth: hci4: command 0x041b tx timeout [ 147.150606][ T6527] fido_id[6527]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 147.250981][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.276233][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.313456][ T4910] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.320668][ T4910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.329271][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.342033][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.354448][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.361645][ T4910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.371205][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.380667][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.480031][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.538244][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.557717][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.617517][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.648523][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.689691][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.753284][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.790829][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.856977][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.904095][ T6429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.952294][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.961424][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.570054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.577605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.634423][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.706646][ T6548] loop3: detected capacity change from 0 to 256 [ 149.011841][ T6552] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 149.072045][ T6552] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 149.084718][ T4187] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 149.128647][ T4187] FAT-fs (loop3): Filesystem has been set read-only [ 149.136203][ T4187] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 149.248827][ T5936] Bluetooth: hci4: command 0x040f tx timeout [ 149.548519][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.574749][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.742596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.783114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.816895][ T6429] device veth0_vlan entered promiscuous mode [ 149.854220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.889675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.942321][ T6429] device veth1_vlan entered promiscuous mode [ 149.973937][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 150.137794][ T6429] device veth0_macvtap entered promiscuous mode [ 150.164394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.229888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.293268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.339820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.351217][ T6585] loop4: detected capacity change from 0 to 128 [ 150.368322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.491711][ T6429] device veth1_macvtap entered promiscuous mode [ 150.500141][ T6585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 150.508160][ T6585] System zones: 1-3, 19-19, 35-36 [ 150.533517][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.577112][ T6585] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 150.590461][ T6585] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.667191][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.712891][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.765269][ T6551] device bridge_slave_0 entered promiscuous mode [ 150.788816][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.801945][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.812924][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.824539][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.849417][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.868643][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.878512][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.901296][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.914032][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.962740][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.972642][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.984255][ T6322] Bluetooth: hci1: command 0x0409 tx timeout [ 151.000062][ T6551] device bridge_slave_1 entered promiscuous mode [ 151.070088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.109421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.134355][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.158950][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.176633][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.199427][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.210759][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.230871][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.251074][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.273031][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.300935][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.358342][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.360263][ T6321] Bluetooth: hci4: command 0x0419 tx timeout [ 151.376753][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.421620][ T6429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.458661][ T6429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.468454][ T6429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.487451][ T6429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.516724][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.583379][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.672698][ T155] device hsr_slave_0 left promiscuous mode [ 151.690775][ T155] device hsr_slave_1 left promiscuous mode [ 151.710915][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.737371][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.754522][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.777866][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.809523][ T155] device bridge_slave_1 left promiscuous mode [ 151.816466][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.845731][ T155] device bridge_slave_0 left promiscuous mode [ 151.858808][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.897526][ T155] device veth1_macvtap left promiscuous mode [ 151.908976][ T155] device veth0_macvtap left promiscuous mode [ 151.915092][ T155] device veth1_vlan left promiscuous mode [ 151.948714][ T155] device veth0_vlan left promiscuous mode [ 152.391164][ T155] team0 (unregistering): Port device team_slave_1 removed [ 152.413415][ T155] team0 (unregistering): Port device team_slave_0 removed [ 152.434310][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.461671][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.478716][ T5936] Bluetooth: hci0: command 0x0409 tx timeout [ 152.488703][ T6313] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 152.620857][ T155] bond0 (unregistering): Released all slaves [ 152.728741][ T6313] usb 1-1: Using ep0 maxpacket: 8 [ 152.813518][ T6551] team0: Port device team_slave_0 added [ 152.855952][ T6617] loop4: detected capacity change from 0 to 512 [ 152.891508][ T6551] team0: Port device team_slave_1 added [ 152.916153][ T4910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.951675][ T4910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.994445][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.012096][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.029247][ T6313] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 153.048740][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 153.058514][ T6313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.067085][ T6313] usb 1-1: Product: syz [ 153.079466][ T6313] usb 1-1: Manufacturer: syz [ 153.084129][ T6313] usb 1-1: SerialNumber: syz [ 153.106936][ T6313] usb 1-1: config 0 descriptor?? [ 153.139221][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.154837][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.164822][ T6313] gspca_main: sq930x-2.14.0 probing 2770:930c [ 153.178347][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.209509][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.250290][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.267326][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 153.270415][ T4910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.283450][ T4910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.365580][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.406428][ T6551] device hsr_slave_0 entered promiscuous mode [ 153.447239][ T6551] device hsr_slave_1 entered promiscuous mode [ 153.455457][ T6551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.489448][ T6551] Cannot create hsr debugfs directory [ 153.582244][ T6640] loop6: detected capacity change from 0 to 64 [ 153.722956][ T6642] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 153.912547][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.929036][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.937247][ T6583] device bridge_slave_0 entered promiscuous mode [ 153.996946][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.012970][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.027339][ T6583] device bridge_slave_1 entered promiscuous mode [ 154.035808][ T6429] hfs: node 4:3 still has 1 user(s)! [ 154.148955][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.210004][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.254307][ T6551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.290471][ T6583] team0: Port device team_slave_0 added [ 154.297895][ T6551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.323380][ T6583] team0: Port device team_slave_1 added [ 154.336963][ T6551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.368260][ T6551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.408955][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.416647][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.443341][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.468850][ T5729] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.472564][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.494016][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.527569][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.558868][ T5740] Bluetooth: hci0: command 0x041b tx timeout [ 154.568737][ T6313] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 154.644954][ T6583] device hsr_slave_0 entered promiscuous mode [ 154.659832][ T6583] device hsr_slave_1 entered promiscuous mode [ 154.666913][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.675270][ T6583] Cannot create hsr debugfs directory [ 154.790165][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.811001][ T6313] gspca_sq930x: Sensor ov9630 not yet treated [ 154.822069][ T6313] sq930x: probe of 1-1:0.0 failed with error -22 [ 154.845626][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.860814][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.875425][ T6313] usb 1-1: USB disconnect, device number 9 [ 154.888983][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 154.914548][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.916256][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 154.955722][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 154.984406][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.029566][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.058823][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.065976][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.104049][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.132373][ T5716] Bluetooth: hci1: command 0x040f tx timeout [ 155.170430][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.178851][ T5729] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 155.187977][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.203711][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.229216][ T5729] usb 5-1: Product: syz [ 155.233447][ T5729] usb 5-1: Manufacturer: syz [ 155.238071][ T5729] usb 5-1: SerialNumber: syz [ 155.249198][ T4910] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.256314][ T4910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.291104][ T5729] usb 5-1: config 0 descriptor?? [ 155.343887][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.413010][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.425970][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.456230][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.511205][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.527231][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.550936][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.559884][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.569473][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.577923][ T5729] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 155.597178][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.629367][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.656832][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.676874][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.714504][ T6583] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 155.762292][ T6583] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 155.811696][ T6583] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 155.856114][ T6321] usb 5-1: USB disconnect, device number 9 [ 155.888167][ T6583] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 156.096860][ T6687] loop0: detected capacity change from 0 to 4096 [ 156.155450][ T6687] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 156.195340][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.239927][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.257900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.274384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.311619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.342244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.360847][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.382877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.403876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.459977][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.467160][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.544185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.560235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.577109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.647521][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.654820][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.679074][ T5716] Bluetooth: hci0: command 0x040f tx timeout [ 156.757108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.790329][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.852981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.910264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.988811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.015193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.045442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.062696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.082141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.095427][ T6583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.108253][ T6583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.157893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.177807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.199660][ T5715] Bluetooth: hci1: command 0x0419 tx timeout [ 157.262522][ T5729] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.417595][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.427308][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.512838][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.529192][ T5729] usb 5-1: Using ep0 maxpacket: 8 [ 157.540969][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.572712][ T6551] device veth0_vlan entered promiscuous mode [ 157.586928][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.595672][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.629329][ T6551] device veth1_vlan entered promiscuous mode [ 157.649018][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.677763][ T5729] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.693441][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.695484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.723289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.739724][ T5729] usb 5-1: config 0 descriptor?? [ 157.745432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.758945][ T5716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 157.793325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.813270][ T6551] device veth0_macvtap entered promiscuous mode [ 157.867411][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.889233][ T6742] loop6: detected capacity change from 0 to 2048 [ 157.902405][ T6551] device veth1_macvtap entered promiscuous mode [ 157.918959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.927408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.955765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.977687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.012103][ T5729] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.023450][ T6742] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.034558][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.045378][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.058556][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.070036][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.088038][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.098719][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.108796][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.119816][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.131300][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.147861][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.171493][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.198853][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.215632][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.229996][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.268047][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.289833][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.308773][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.320062][ T6752] EXT4-fs (loop6): shut down requested (1) [ 158.330627][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.344337][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.354319][ T26] audit: type=1800 audit(1786568628.803:12): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.646" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 158.379757][ T5716] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 158.391408][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.418705][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 158.435093][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.437687][ T5716] usb 1-1: SerialNumber: syz [ 158.463141][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.487181][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.512247][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.540273][ T6551] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.554797][ T6551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.580465][ T6551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.589703][ T6551] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.614230][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.720133][ T5719] Bluetooth: hci0: command 0x0419 tx timeout [ 158.750404][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.771725][ T5716] usb 1-1: 0:2 : does not exist [ 158.821670][ T5716] usb 1-1: USB disconnect, device number 10 [ 158.858066][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.949287][ T4716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.957162][ T4716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.963916][ T6313] usb 5-1: USB disconnect, device number 10 [ 158.990240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.010031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.049252][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.109173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.133576][ T6583] device veth0_vlan entered promiscuous mode [ 159.140754][ T4470] udevd[4470]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.167924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.180290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.215936][ T4230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.230866][ T4230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.284517][ T6583] device veth1_vlan entered promiscuous mode [ 159.307269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.319108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.336233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.351892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.419577][ T155] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.545038][ T6583] device veth0_macvtap entered promiscuous mode [ 159.564479][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.587116][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.599574][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.635710][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.669534][ T6583] device veth1_macvtap entered promiscuous mode [ 159.804041][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.865070][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.905558][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.939798][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.978856][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.000461][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.054330][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.064951][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.103304][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.124235][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.143589][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.161089][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.199292][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.207574][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.269741][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.340493][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.365228][ T6797] loop0: detected capacity change from 0 to 256 [ 160.442143][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.479222][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.520694][ T6797] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 160.529036][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.581433][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.627585][ T6797] exFAT-fs (loop0): error, invalid size(size(4096) > aligned(9223372036854777344) [ 160.627585][ T6797] [ 160.627719][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.627741][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.693637][ T6797] exFAT-fs (loop0): Filesystem has been set read-only [ 160.712432][ T6775] loop4: detected capacity change from 0 to 32768 [ 160.719953][ T6797] exFAT-fs (loop0): error, invalid size(size(4096) > aligned(9223372036854777344) [ 160.719953][ T6797] [ 160.729068][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.771189][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.836185][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.855082][ T6775] XFS (loop4): Mounting V5 Filesystem [ 160.887660][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.910859][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.918425][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.956935][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.044415][ T6809] netlink: 'syz.7.659': attribute type 10 has an invalid length. [ 161.128093][ T6809] team0: Port device dummy0 added [ 161.178259][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.179131][ T6775] XFS (loop4): Ending clean mount [ 161.213909][ T6775] XFS (loop4): Quotacheck needed: Please wait. [ 161.258935][ T6583] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.268008][ T6583] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.289830][ T6583] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.299104][ T6583] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.402843][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.470408][ T6775] XFS (loop4): Quotacheck: Done. [ 161.648749][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.676979][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.828356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.852794][ T6828] XFS (loop4): User initiated shutdown received. [ 161.883773][ T6828] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 161.961447][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.060771][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.072902][ T6828] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 162.106253][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.132220][ T6314] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 162.221687][ T6836] loop7: detected capacity change from 0 to 2048 [ 162.266646][ T6314] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.316451][ T6836] UDF-fs: error (device loop7): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 162.412822][ T6836] UDF-fs: warning (device loop7): udf_fill_super: No partition found (2) [ 162.432154][ T6842] loop6: detected capacity change from 0 to 256 [ 162.545018][ T6846] netlink: 'syz.8.668': attribute type 3 has an invalid length. [ 162.559476][ T6842] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.636962][ T4192] XFS (loop4): Unmounting Filesystem [ 162.664909][ T6843] fido_id[6843]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.902869][ T6855] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 163.054181][ T6855] team0: Port device dummy0 added [ 163.208130][ T6869] loop6: detected capacity change from 0 to 64 [ 163.268906][ T5936] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 163.519710][ T5936] usb 9-1: Using ep0 maxpacket: 8 [ 163.554800][ T6873] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 163.638879][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.674648][ T5936] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.690804][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.713927][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.725633][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.755412][ T5936] usb 9-1: config 0 descriptor?? [ 163.785009][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.836477][ T6873] device bridge_slave_0 left promiscuous mode [ 163.869675][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.933587][ T6873] device bridge_slave_1 left promiscuous mode [ 163.965936][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.012394][ T6873] bond0: (slave bond_slave_0): Releasing backup interface [ 164.022564][ T5936] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 164.103928][ T6873] bond0: (slave bond_slave_1): Releasing backup interface [ 164.139557][ T6870] loop0: detected capacity change from 0 to 32768 [ 164.180691][ T6870] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.676 (6870) [ 164.255427][ T6873] team0: Port device team_slave_0 removed [ 164.265201][ T6870] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 164.296427][ T6870] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.315648][ T6873] team0: Port device team_slave_1 removed [ 164.338141][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.348698][ T6870] BTRFS info (device loop0): use zstd compression, level 3 [ 164.363166][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.373179][ T6870] BTRFS info (device loop0): using free space tree [ 164.384300][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.395382][ T6870] BTRFS info (device loop0): has skinny extents [ 164.403628][ T6873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.435211][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.679'. [ 164.459479][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.679'. [ 164.497159][ T6877] netlink: 'syz.7.679': attribute type 6 has an invalid length. [ 164.516830][ T5936] usb 9-1: USB disconnect, device number 2 [ 164.522897][ T6873] syz.6.678 (6873) used greatest stack depth: 19664 bytes left [ 164.567355][ T6877] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.576308][ T6877] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.585123][ T6877] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.593937][ T6877] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.620157][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.679'. [ 164.639048][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.679'. [ 164.659712][ T6877] netlink: 'syz.7.679': attribute type 6 has an invalid length. [ 164.811218][ T6870] BTRFS info (device loop0): enabling ssd optimizations [ 165.337482][ T6943] loop6: detected capacity change from 0 to 512 [ 165.419850][ T6943] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.248550][ T6935] loop8: detected capacity change from 0 to 32768 [ 166.320330][ T155] device hsr_slave_0 left promiscuous mode [ 166.327031][ T155] device hsr_slave_1 left promiscuous mode [ 166.361967][ T155] device bridge_slave_1 left promiscuous mode [ 166.413575][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.450686][ T6935] XFS (loop8): Mounting V5 Filesystem [ 166.509813][ T155] device bridge_slave_0 left promiscuous mode [ 166.545654][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.656701][ T155] device hsr_slave_0 left promiscuous mode [ 166.689498][ T155] device hsr_slave_1 left promiscuous mode [ 166.696261][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.714181][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.737137][ T6935] XFS (loop8): Ending clean mount [ 166.793380][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.806106][ T6935] XFS (loop8): Quotacheck needed: Please wait. [ 166.827374][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.849263][ T155] device bridge_slave_1 left promiscuous mode [ 166.855645][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.959775][ T155] device bridge_slave_0 left promiscuous mode [ 166.970883][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.984079][ T6935] XFS (loop8): Quotacheck: Done. [ 167.144004][ T7000] loop7: detected capacity change from 0 to 512 [ 167.169315][ T7001] XFS (loop8): User initiated shutdown received. [ 167.177305][ T155] device veth1_macvtap left promiscuous mode [ 167.188395][ T155] device veth0_macvtap left promiscuous mode [ 167.208330][ T7001] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 167.208470][ T155] device veth1_vlan left promiscuous mode [ 167.236051][ T7001] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 167.273777][ T155] device veth0_vlan left promiscuous mode [ 167.285078][ T155] device veth1_macvtap left promiscuous mode [ 167.291719][ T155] device veth0_macvtap left promiscuous mode [ 167.297831][ T155] device veth1_vlan left promiscuous mode [ 167.304199][ T155] device veth0_vlan left promiscuous mode [ 167.318806][ T7000] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 167.374501][ T7000] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.540259][ T6583] XFS (loop8): Unmounting Filesystem [ 167.687627][ T7011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 167.711373][ T7010] loop7: detected capacity change from 0 to 128 [ 167.749089][ T7010] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 167.855646][ T7010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.090272][ T7016] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.175851][ T7019] loop8: detected capacity change from 0 to 256 [ 168.186947][ T155] team0 (unregistering): Port device team_slave_1 removed [ 168.211898][ T155] team0 (unregistering): Port device team_slave_0 removed [ 168.250965][ T7019] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 168.265151][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.316619][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.434114][ T155] bond0 (unregistering): Released all slaves [ 168.644601][ T155] team0 (unregistering): Port device team_slave_1 removed [ 168.663357][ T155] team0 (unregistering): Port device team_slave_0 removed [ 168.683396][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.701098][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.805775][ T155] bond0 (unregistering): Released all slaves [ 168.880250][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.697'. [ 169.088281][ T7039] loop0: detected capacity change from 0 to 512 [ 169.249235][ T7045] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 169.359986][ T7042] loop4: detected capacity change from 0 to 32768 [ 169.433423][ T7042] Dev loop4 SGI disklabel: csum bad, label corrupted [ 169.570356][ T7039] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.597236][ T7039] EXT4-fs (loop0): shut down requested (2) [ 169.979169][ T7066] IPVS: sed: FWM 3 0x00000003 - no destination available [ 170.291544][ T7076] loop8: detected capacity change from 0 to 2048 [ 170.471965][ T7050] loop6: detected capacity change from 0 to 32768 [ 170.570573][ T7076] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.630519][ T7050] XFS (loop6): Mounting V5 Filesystem [ 170.800266][ T4252] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 170.930086][ T7104] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 170.945339][ T7061] loop7: detected capacity change from 0 to 32768 [ 170.959582][ T4252] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 171.008880][ T7050] XFS (loop6): Ending clean mount [ 171.022996][ T7104] i2c i2c-0: delete_device: Deleting device hd3ss3220 at 0x47 [ 171.038327][ T4252] EXT4-fs (loop8): This should not happen!! Data will be lost [ 171.038327][ T4252] [ 171.070283][ T7050] XFS (loop6): Quotacheck needed: Please wait. [ 171.096818][ T4252] EXT4-fs (loop8): Total free blocks count 0 [ 171.129734][ T4252] EXT4-fs (loop8): Free/Dirty block details [ 171.137470][ T4252] EXT4-fs (loop8): free_blocks=4096 [ 171.147639][ T4252] EXT4-fs (loop8): dirty_blocks=16 [ 171.193818][ T4213] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 171.205816][ T4252] EXT4-fs (loop8): Block reservation details [ 171.219055][ T4252] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 171.248276][ T4213] XFS (loop6): Unmount and run xfs_repair [ 171.254998][ T4213] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 171.264212][ T4213] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 171.282652][ T7061] XFS (loop7): Mounting V5 Filesystem [ 171.290760][ T4230] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 171.322640][ T4213] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 171.368352][ T4213] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 171.379542][ T4230] EXT4-fs (loop8): This should not happen!! Data will be lost [ 171.379542][ T4230] [ 171.419848][ T4213] 00000030: 00 00 00 00 ac 5e af 00 01 00 00 00 00 00 00 13 .....^.......... [ 171.482778][ T7061] XFS (loop7): Ending clean mount [ 171.491340][ T7061] XFS (loop7): Quotacheck needed: Please wait. [ 171.529297][ T4213] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 171.578693][ T4213] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.587616][ T4213] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.600634][ T7061] XFS (loop7): Quotacheck: Done. [ 171.690905][ T4213] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.731448][ T4213] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 171.781039][ T7050] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 171.839074][ T7127] XFS (loop7): User initiated shutdown received. [ 171.873826][ T7127] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 171.943126][ T7127] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 171.948011][ T7050] XFS (loop6): User initiated shutdown received. [ 171.992425][ T7132] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 172.010892][ T7050] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 172.054564][ T7050] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 172.209748][ T6551] XFS (loop7): Unmounting Filesystem [ 172.855790][ T6429] XFS (loop6): Unmounting Filesystem [ 172.887259][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807db17800: rx timeout, send abort [ 172.895807][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807db17800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 173.299584][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 174.028706][ T4234] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.340293][ T7201] binder: 7199:7201 ioctl c0306201 200000000480 returned -14 [ 174.438826][ T4234] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.512759][ T7206] loop0: detected capacity change from 0 to 256 [ 174.519233][ T4234] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 174.575454][ T7202] loop8: detected capacity change from 0 to 4096 [ 174.581475][ T7206] exfat: Deprecated parameter 'namecase' [ 174.601130][ T7206] exfat: Deprecated parameter 'namecase' [ 174.646981][ T7206] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 174.719680][ T4234] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 174.739367][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.747423][ T4234] usb 5-1: Product: syz [ 174.819989][ T4234] usb 5-1: Manufacturer: syz [ 174.850962][ T4234] usb 5-1: SerialNumber: syz [ 174.883275][ T26] audit: type=1804 audit(1786568645.343:13): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.757" name="/newroot/20/file1/file1" dev="loop8" ino=0 res=1 errno=0 [ 174.919261][ T7202] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 175.142874][ T4234] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 175.348955][ T4234] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 175.367750][ T4234] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 175.418696][ T4234] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 175.438886][ T4234] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 175.447374][ T4234] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 175.465769][ T4234] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 175.497926][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.761'. [ 175.655602][ T7211] chnl_net:caif_netlink_parms(): no params data found [ 175.762541][ T7235] loop8: detected capacity change from 0 to 2048 [ 175.813982][ T7235] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 175.897493][ T7235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.925967][ T26] audit: type=1800 audit(1786568646.383:14): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.762" name="file2" dev="loop8" ino=1347 res=0 errno=0 [ 175.961951][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.969401][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.977637][ T7211] device bridge_slave_0 entered promiscuous mode [ 175.987795][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.994982][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.003721][ T7211] device bridge_slave_1 entered promiscuous mode [ 176.040397][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.074750][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.108257][ T7214] loop7: detected capacity change from 0 to 32768 [ 176.124830][ T7211] team0: Port device team_slave_0 added [ 176.151096][ T7211] team0: Port device team_slave_1 added [ 176.214932][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.239183][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.298613][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.321035][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.328043][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.368871][ T26] audit: type=1800 audit(1786568646.823:15): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.759" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 176.395945][ T4234] usb 5-1: USB disconnect, device number 11 [ 176.455986][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.655179][ T155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.694597][ T4252] read_mapping_page failed! [ 176.705314][ T4252] ERROR: (device loop7): txCommit: [ 176.705314][ T4252] [ 176.731401][ T4252] jfs_write_inode: jfs_commit_inode failed! [ 176.781464][ T5307] udevd[5307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.824358][ T155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.903281][ T7211] device hsr_slave_0 entered promiscuous mode [ 176.922890][ T7211] device hsr_slave_1 entered promiscuous mode [ 176.953270][ T7211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.968662][ T7211] Cannot create hsr debugfs directory [ 176.986017][ T155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.039005][ T4234] Bluetooth: hci4: command 0x0409 tx timeout [ 177.083808][ T7261] loop0: detected capacity change from 0 to 128 [ 177.145635][ T155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.241400][ T7261] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.314896][ T7261] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.331503][ T26] audit: type=1800 audit(1786568647.793:16): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.768" name="is_nonrot" dev="configfs" ino=43540 res=0 errno=0 [ 177.446067][ T154] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.578695][ T6321] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 177.718121][ T7277] loop0: detected capacity change from 0 to 2048 [ 177.800713][ T7277] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 177.810201][ T7249] loop8: detected capacity change from 0 to 32768 [ 177.819341][ T6321] usb 8-1: Using ep0 maxpacket: 32 [ 177.843466][ T7249] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.763 (7249) [ 177.865287][ T7277] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 177.883857][ T7211] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 177.913194][ T7277] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 177.924323][ T7211] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 177.933316][ T7277] UDF-fs: Scanning with blocksize 512 failed [ 177.939444][ T6321] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.939473][ T6321] usb 8-1: config 0 has no interface number 0 [ 177.941510][ T6321] usb 8-1: config 0 interface 184 has no altsetting 0 [ 177.961343][ T7277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.978272][ T7211] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 178.006792][ T7249] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 178.038845][ T7249] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.055075][ T7211] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 178.072040][ T7249] BTRFS info (device loop8): use zstd compression, level 3 [ 178.102274][ T7249] BTRFS info (device loop8): using free space tree [ 178.139161][ T7249] BTRFS info (device loop8): has skinny extents [ 178.159843][ T6321] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.210186][ T6321] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.218278][ T6321] usb 8-1: Product: syz [ 178.241912][ T6321] usb 8-1: Manufacturer: syz [ 178.246731][ T6321] usb 8-1: SerialNumber: syz [ 178.253990][ T6321] usb 8-1: config 0 descriptor?? [ 178.299798][ T6321] smsc75xx v1.0.0 [ 178.429204][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.466899][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 178.535707][ T7249] BTRFS info (device loop8): enabling ssd optimizations [ 178.564489][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.583956][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.599407][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.617858][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.630596][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.640029][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.647140][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.658152][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.668077][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.677579][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.684739][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.819356][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.853962][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.907930][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.960410][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.018479][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.040367][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.109120][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.129486][ T5740] Bluetooth: hci4: command 0x041b tx timeout [ 179.153825][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.598905][ T6321] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 179.612004][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.623388][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.633576][ T6321] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.683926][ T7211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.701138][ T6321] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 179.726806][ T6321] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 179.747037][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.777279][ T6321] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 179.809867][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.827825][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.860272][ T7343] netlink: 20 bytes leftover after parsing attributes in process `syz.8.784'. [ 179.869437][ T6321] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 179.890848][ T6321] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 179.948065][ T6321] usb 8-1: USB disconnect, device number 2 [ 180.172936][ T155] device hsr_slave_0 left promiscuous mode [ 180.188998][ T155] device hsr_slave_1 left promiscuous mode [ 180.265113][ T155] device veth1_macvtap left promiscuous mode [ 180.282930][ T155] device veth0_macvtap left promiscuous mode [ 180.299489][ T7359] loop7: detected capacity change from 0 to 128 [ 180.310044][ T155] device veth1_vlan left promiscuous mode [ 180.338499][ T155] device veth0_vlan left promiscuous mode [ 180.361251][ T7359] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 180.460927][ T7359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 180.788300][ T7374] netlink: 36 bytes leftover after parsing attributes in process `syz.7.791'. [ 181.068717][ T5936] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 181.181608][ T7392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.200306][ T5720] Bluetooth: hci4: command 0x040f tx timeout [ 181.326730][ T155] bond0 (unregistering): Released all slaves [ 181.368957][ T5715] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 181.399165][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.406686][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.422162][ T7369] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 181.436964][ T7371] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 181.444526][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.456511][ T5936] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.467059][ T5936] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 181.477213][ T5936] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.499200][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.548904][ T5936] usb 9-1: config 0 descriptor?? [ 181.629006][ T5715] usb 8-1: Using ep0 maxpacket: 16 [ 181.766239][ T7402] loop4: detected capacity change from 0 to 16 [ 181.773184][ T5715] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.798629][ T5715] usb 8-1: config 0 interface 0 has no altsetting 0 [ 182.013978][ T5715] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 182.034536][ T5715] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.046744][ T5715] usb 8-1: Product: syz [ 182.051190][ T5715] usb 8-1: Manufacturer: syz [ 182.055992][ T5715] usb 8-1: SerialNumber: syz [ 182.065896][ T5936] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 182.079393][ T5936] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 182.091462][ T5715] usb 8-1: config 0 descriptor?? [ 182.138149][ T5936] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 182.168179][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.196200][ T7413] loop0: detected capacity change from 0 to 1764 [ 182.204957][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.217022][ T5936] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 182.337746][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.357651][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.368663][ T5936] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 182.376633][ T5936] hid-steam 0003:28DE:1142.000C: No HID_FEATURE_REPORT submitted - nothing to read [ 182.388915][ T7413] isofs_fill_super: get root inode failed [ 182.423949][ T7211] device veth0_vlan entered promiscuous mode [ 182.439997][ T5715] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input21 [ 182.443246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.485429][ T5936] usb 9-1: USB disconnect, device number 3 [ 182.529482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.591775][ T7211] device veth1_vlan entered promiscuous mode [ 182.617972][ T5936] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 182.733573][ T7421] fido_id[7421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 182.772929][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.785191][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.798621][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 182.809189][ T5715] imon:send_packet: packet tx failed (-71) [ 182.824757][ T7211] device veth0_macvtap entered promiscuous mode [ 182.831216][ T5715] imon 8-1:0.0: panel buttons/knobs setup failed [ 182.856001][ T7211] device veth1_macvtap entered promiscuous mode [ 182.921490][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.966240][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.998153][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.049675][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.059971][ T5715] rc_core: IR keymap rc-imon-pad not found [ 183.065916][ T5715] Registered IR keymap rc-empty [ 183.086419][ T5715] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 183.105611][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.124153][ T5715] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 183.161079][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.201599][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.212352][ T5715] imon:send_packet: packet tx failed (-71) [ 183.228817][ T5715] imon 8-1:0.0: remote input dev register failed [ 183.245630][ T5715] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 183.271885][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.305499][ T5720] Bluetooth: hci4: command 0x0419 tx timeout [ 183.320147][ T7439] loop8: detected capacity change from 0 to 16 [ 183.341452][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.403308][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.429079][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.462125][ T7439] erofs: (device loop8): mounted with root inode @ nid 36. [ 183.483175][ T7439] attempt to access beyond end of device [ 183.483175][ T7439] loop8: rw=524288, want=12304, limit=16 [ 183.495378][ T7439] attempt to access beyond end of device [ 183.495378][ T7439] loop8: rw=524288, want=1072, limit=16 [ 183.506806][ T7439] attempt to access beyond end of device [ 183.506806][ T7439] loop8: rw=0, want=12304, limit=16 [ 183.518203][ T26] audit: type=1800 audit(1786568653.973:17): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.806" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 183.524142][ T5715] imon 8-1:0.0: unable to initialize intf0, err 0 [ 183.554588][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.578538][ T7439] erofs: (device loop8): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 2626 of nid 89 [ 183.620063][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.631089][ T5715] imon:imon_probe: failed to initialize context! [ 183.637484][ T5715] imon 8-1:0.0: unable to register, err -19 [ 183.667150][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.716460][ T5715] usb 8-1: USB disconnect, device number 3 [ 183.732489][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.790595][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.804979][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.820887][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.845510][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.878776][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.882456][ T7445] loop7: detected capacity change from 0 to 4096 [ 183.920449][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.942092][ T7417] loop4: detected capacity change from 0 to 40427 [ 183.956744][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.000606][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.010857][ T7445] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 184.039392][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.050119][ T7417] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 184.057915][ T7417] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.099633][ T7211] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.108412][ T7211] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.168335][ T7417] F2FS-fs (loop4): invalid crc value [ 184.178279][ T7211] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.245644][ T7417] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.258659][ T7211] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.468273][ T7417] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 184.474019][ T7445] ntfs3: loop7: failed to convert "c46c" to iso8859-9 [ 184.521929][ T7454] loop8: detected capacity change from 0 to 8192 [ 184.534074][ T7417] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.690444][ T7454] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 184.701052][ T7454] REISERFS (device loop8): using ordered data mode [ 184.707722][ T7454] reiserfs: using flush barriers [ 184.721193][ T7454] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 184.749461][ T7454] REISERFS (device loop8): checking transaction log (loop8) [ 184.805704][ T4230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.825963][ T7469] loop0: detected capacity change from 0 to 16 [ 184.860182][ T4230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.895082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.951159][ T7469] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x3f3bd8e3, 0x7bbbea8c expected [ 184.952891][ T4470] udevd[4470]: incorrect erofs checksum on /dev/loop0 [ 184.996636][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.025755][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.079226][ T7454] REISERFS (device loop8): Using tea hash to sort names [ 185.091793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.133367][ T7454] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 185.492056][ T7479] loop9: detected capacity change from 0 to 2048 [ 185.494043][ T4230] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 185.595200][ T7479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.628851][ T4230] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 185.866805][ T7488] loop7: detected capacity change from 0 to 512 [ 186.113901][ T7497] loop0: detected capacity change from 0 to 2048 [ 186.165683][ T7488] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 186.188332][ T7488] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.383898][ T7497] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 186.418843][ T5729] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 186.748883][ T5729] usb 10-1: Using ep0 maxpacket: 16 [ 186.868932][ T5729] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 186.898026][ T5729] usb 10-1: config 1 has no interface number 0 [ 186.936646][ T5729] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.988639][ T5729] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.018666][ T5729] usb 10-1: config 1 interface 105 has no altsetting 0 [ 187.209527][ T5729] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 187.248942][ T5729] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 187.277605][ T5729] usb 10-1: Product: syz [ 187.302574][ T5729] usb 10-1: Manufacturer: syz [ 187.307416][ T5729] usb 10-1: SerialNumber: syz [ 187.321977][ T7529] device syzkaller1 entered promiscuous mode [ 187.369919][ T7495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.398905][ T7495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.493079][ T7504] loop7: detected capacity change from 0 to 32768 [ 187.621778][ T7504] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 187.840651][ T7495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.865718][ T7495] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.885177][ T7542] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 188.034884][ T6551] ocfs2: Unmounting device (7,7) on (node local) [ 188.231522][ T7524] loop8: detected capacity change from 0 to 40427 [ 188.280705][ T7524] F2FS-fs (loop8): invalid crc value [ 188.308124][ T7524] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 188.354471][ T5729] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 188.558638][ T5715] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.624892][ T7524] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 188.637394][ T7565] loop7: detected capacity change from 0 to 2048 [ 188.648692][ T5729] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 188.708802][ T5729] aqc111 10-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ce:a7:9f:86:44:24 [ 188.740173][ T7565] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.762124][ T5729] usb 10-1: USB disconnect, device number 2 [ 188.787175][ T5729] aqc111 10-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 188.939048][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.971252][ T5715] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.988830][ T5729] aqc111 10-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 189.029842][ T5729] aqc111 10-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 189.049911][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.078169][ T5715] usb 1-1: config 0 descriptor?? [ 189.122580][ T5729] aqc111 10-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 189.466575][ T7577] attempt to access beyond end of device [ 189.466575][ T7577] loop8: rw=2049, want=45112, limit=40427 [ 189.480385][ T5715] usbhid 1-1:0.0: can't add hid device: -71 [ 189.486424][ T5715] usbhid: probe of 1-1:0.0 failed with error -71 [ 189.505876][ T5715] usb 1-1: USB disconnect, device number 11 [ 189.752424][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.9.846'. [ 189.988709][ T5715] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 190.290537][ T7625] loop7: detected capacity change from 0 to 1024 [ 190.378979][ T5729] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 190.402465][ T7625] EXT4-fs (loop7): Ignoring removed bh option [ 190.409173][ T5715] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 190.426349][ T7625] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 190.429409][ T5715] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 190.469225][ T5715] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.476196][ T7625] EXT4-fs (loop7): Ignoring removed bh option [ 190.597878][ T7625] EXT4-fs (loop7): mounted filesystem without journal. Opts: bh,nomblk_io_submit,discard,i_version,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 190.709018][ T5715] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 190.738933][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.747005][ T5715] usb 1-1: Product: syz [ 190.751336][ T5715] usb 1-1: Manufacturer: syz [ 190.756129][ T5715] usb 1-1: SerialNumber: syz [ 190.840269][ T5729] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.860023][ T5729] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.887114][ T5729] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.906880][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.001236][ T7651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.118885][ T6321] Bluetooth: hci2: command 0x0406 tx timeout [ 191.130389][ T5715] Bluetooth: hci3: command 0x0406 tx timeout [ 191.218802][ T5729] usb 5-1: usb_control_msg returned -32 [ 191.224576][ T5740] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 191.232316][ T5729] usbtmc 5-1:16.0: can't read capabilities [ 191.289080][ T5715] usb 1-1: USB disconnect, device number 12 [ 191.341853][ T7661] Mass Storage Function, version: 2009/09/11 [ 191.378895][ T7661] LUN: removable file: (no medium) [ 191.412429][ T26] audit: type=1800 audit(1786568661.873:18): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.861" name="cdrom" dev="configfs" ino=46216 res=0 errno=0 [ 191.524253][ T5740] usb 10-1: Using ep0 maxpacket: 16 [ 191.690056][ T7681] loop7: detected capacity change from 0 to 512 [ 191.728878][ T5740] usb 10-1: unable to get BOS descriptor or descriptor too short [ 191.772530][ T7681] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,stripe=0x0000000000000005,journal_ioprio=0x0000000000000007,. Quota mode: writeback. [ 191.822643][ T7681] ext4 filesystem being mounted at /49/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.838889][ T5740] usb 10-1: config 9 has an invalid interface number: 57 but max is 0 [ 191.847115][ T5740] usb 10-1: config 9 has no interface number 0 [ 191.855310][ T5740] usb 10-1: config 9 interface 57 has no altsetting 0 [ 191.895297][ T7681] EXT4-fs (loop7): shut down requested (1) [ 192.189072][ T5740] usb 10-1: string descriptor 0 read error: -22 [ 192.199870][ T5740] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 192.227245][ T5740] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.615969][ T7704] loop8: detected capacity change from 0 to 256 [ 192.692726][ T7704] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 192.842229][ T7692] loop0: detected capacity change from 0 to 131072 [ 192.907172][ T7692] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 192.915429][ T7692] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 192.964325][ T7692] F2FS-fs (loop0): invalid crc value [ 193.019284][ T7692] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.093033][ T7692] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 193.100235][ T7692] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 193.121533][ T4233] usb 5-1: USB disconnect, device number 12 [ 193.225592][ T26] audit: type=1800 audit(1786568663.683:19): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.868" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 193.379013][ T5740] radio-keene 10-1:9.57: V4L2 device registered as radio48 [ 193.532836][ T26] audit: type=1326 audit(1786568663.993:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.8.875" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe93c520d9 code=0x0 [ 193.617756][ T5715] usb 10-1: USB disconnect, device number 3 [ 193.889105][ T5740] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.171840][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.178193][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.278966][ T5740] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.298425][ T5740] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.339828][ T5740] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.372734][ T5740] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.426934][ T5740] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 194.454218][ T5740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.637337][ T7764] loop9: detected capacity change from 0 to 2048 [ 194.798340][ T7764] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.989901][ T7780] loop0: detected capacity change from 0 to 1024 [ 195.054850][ T7780] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 195.149136][ T7780] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 195.277340][ T155] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 195.353838][ T155] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.408682][ T155] EXT4-fs (loop9): This should not happen!! Data will be lost [ 195.408682][ T155] [ 195.442862][ T155] EXT4-fs (loop9): Total free blocks count 0 [ 195.462513][ T155] EXT4-fs (loop9): Free/Dirty block details [ 195.468888][ T155] EXT4-fs (loop9): free_blocks=4096 [ 195.474356][ T155] EXT4-fs (loop9): dirty_blocks=32 [ 195.487625][ T155] EXT4-fs (loop9): Block reservation details [ 195.495560][ T155] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 195.509695][ T7447] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 384 with max blocks 32 with error 28 [ 195.532441][ T7447] EXT4-fs (loop9): This should not happen!! Data will be lost [ 195.532441][ T7447] [ 195.658899][ T5740] gud 5-1:1.0: DP-1: Failed to add properties (ret=-71) [ 195.676655][ T5740] gud 5-1:1.0: Failed to get connectors (error=-71) [ 195.693690][ T5740] gud: probe of 5-1:1.0 failed with error -71 [ 195.773705][ T5740] usb 5-1: USB disconnect, device number 13 [ 195.849485][ T7808] device-mapper: table: 248:0: thin-pool: target type may not be included in a read-only table [ 195.916325][ T7808] device-mapper: ioctl: error adding target to table [ 195.945215][ T7815] loop8: detected capacity change from 0 to 1024 [ 196.050583][ T7817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.898'. [ 196.158434][ T7815] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.566042][ T7838] loop8: detected capacity change from 0 to 128 [ 196.605882][ T7811] loop7: detected capacity change from 0 to 32768 [ 196.823185][ T7838] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.861633][ T7838] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.893914][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.932277][ T7841] loop0: detected capacity change from 0 to 40427 [ 196.969539][ T7811] XFS (loop7): Mounting V5 Filesystem [ 196.982413][ T6321] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.007757][ T7841] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 197.015709][ T7841] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.031562][ T7841] F2FS-fs (loop0): invalid crc value [ 197.103002][ T7858] loop9: detected capacity change from 0 to 2048 [ 197.120234][ T7841] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.212039][ T7841] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.219248][ T7841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 197.316239][ T7858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.355953][ T6321] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.379315][ T6321] usb 5-1: config 0 has no interface number 0 [ 197.446258][ T7811] XFS (loop7): Ending clean mount [ 197.588921][ T6321] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.628651][ T6321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.657300][ T6321] usb 5-1: Product: syz [ 197.668649][ T6321] usb 5-1: Manufacturer: syz [ 197.673305][ T6321] usb 5-1: SerialNumber: syz [ 197.706810][ T6321] usb 5-1: config 0 descriptor?? [ 197.729629][ T6551] XFS (loop7): Unmounting Filesystem [ 197.968809][ T6321] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 198.043529][ T6321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 198.076756][ T6321] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 198.086374][ T7874] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 198.109170][ T6321] usb 5-1: media controller created [ 198.158939][ T6321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 198.193320][ T7877] loop8: detected capacity change from 0 to 512 [ 198.309049][ T6321] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 198.408969][ T7877] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #2: comm syz.8.914: corrupted xattr block 255 [ 198.416268][ T6321] usb 5-1: USB disconnect, device number 14 [ 198.553734][ T7877] EXT4-fs (loop8): Remounting filesystem read-only [ 198.633461][ T7877] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 198.689664][ T7877] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,noblock_validity,max_batch_time=0x0000000000000000,errors=remount-ro,auto_da_alloc,grpjquota=.init_itable,barrier=0x0000000000000003,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 198.780948][ T7877] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #2: comm syz.8.914: corrupted xattr block 255 [ 198.824589][ T7888] netlink: 240 bytes leftover after parsing attributes in process `syz.7.911'. [ 198.844340][ T7877] EXT4-fs (loop8): Remounting filesystem read-only [ 199.040083][ T26] audit: type=1800 audit(1786568669.503:21): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.919" name="addr_adrfam" dev="configfs" ino=45929 res=0 errno=0 [ 199.223595][ T7901] loop0: detected capacity change from 0 to 128 [ 199.359605][ T26] audit: type=1800 audit(1786568669.823:22): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.921" name="bus" dev="loop0" ino=1048646 res=0 errno=0 [ 199.417114][ T7908] loop4: detected capacity change from 0 to 1024 [ 199.469912][ T7901] attempt to access beyond end of device [ 199.469912][ T7901] loop0: rw=2049, want=140, limit=128 [ 199.625380][ T7912] netlink: 44 bytes leftover after parsing attributes in process `syz.7.926'. [ 199.686009][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.694332][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.806482][ T7914] netlink: 44 bytes leftover after parsing attributes in process `syz.7.926'. [ 199.864912][ T7886] loop9: detected capacity change from 0 to 32768 [ 200.000648][ T26] audit: type=1800 audit(1786568670.463:23): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.917" name="bus" dev="loop9" ino=7 res=0 errno=0 [ 200.323537][ T7928] "syz.7.933" (7928) uses obsolete ecb(arc4) skcipher [ 200.669388][ T7943] loop4: detected capacity change from 0 to 512 [ 200.801437][ T7943] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.937993][ T7957] loop8: detected capacity change from 0 to 1024 [ 200.941229][ T7943] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #2: comm syz.4.938: No space for directory leaf checksum. Please run e2fsck -D. [ 200.968889][ T7943] EXT4-fs error (device loop4): ext4_readdir:223: inode #2: comm syz.4.938: path /199/file2: directory fails checksum at offset 0 [ 201.168691][ T4520] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 201.187794][ T154] hfsplus: b-tree write err: -5, ino 8 [ 201.333708][ T7935] loop0: detected capacity change from 0 to 32768 [ 201.378667][ T7935] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.935 (7935) [ 201.443107][ T7935] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 201.504565][ T7935] BTRFS info (device loop0): setting nodatasum [ 201.534623][ T7935] BTRFS info (device loop0): force zlib compression, level 3 [ 201.548858][ T4520] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 201.557612][ T7935] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 201.577661][ T4520] usb 10-1: config 0 has no interface number 0 [ 201.602646][ T4520] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 201.608961][ T7935] BTRFS info (device loop0): use lzo compression, level 0 [ 201.632561][ T4520] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 201.654780][ T7935] BTRFS info (device loop0): turning on flush-on-commit [ 201.662399][ T7935] BTRFS info (device loop0): enabling auto defrag [ 201.667531][ T4520] usb 10-1: config 0 interface 255 has no altsetting 0 [ 201.676455][ T4520] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 201.694254][ T7935] BTRFS info (device loop0): max_inline at 4096 [ 201.699747][ T4520] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.723516][ T7935] BTRFS info (device loop0): using free space tree [ 201.741042][ T4520] usb 10-1: config 0 descriptor?? [ 201.750486][ T7935] BTRFS info (device loop0): has skinny extents [ 201.820219][ T4520] cp210x 10-1:0.255: cp210x converter detected [ 202.039146][ T7935] BTRFS info (device loop0): enabling ssd optimizations [ 202.163024][ T5736] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 202.205980][ T26] audit: type=1800 audit(1786568672.663:24): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.935" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 202.226905][ T4520] cp210x 10-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 202.478933][ T4520] cp210x 10-1:0.255: GPIO initialisation failed: -19 [ 202.507003][ T4520] usb 10-1: cp210x converter now attached to ttyUSB0 [ 202.593636][ T5736] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.625599][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.661856][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.678623][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.698092][ T7984] loop8: detected capacity change from 0 to 32768 [ 202.729519][ T4233] usb 10-1: USB disconnect, device number 4 [ 202.748081][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.769970][ T4233] cp210x 10-1:0.255: device disconnected [ 202.784830][ T5736] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.800090][ T5736] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.808254][ T5736] usb 5-1: Manufacturer: syz [ 202.854583][ T5736] usb 5-1: config 0 descriptor?? [ 203.052591][ T7984] XFS (loop8): Mounting V5 Filesystem [ 203.134406][ T7984] XFS (loop8): Ending clean mount [ 203.150472][ T7984] XFS (loop8): Quotacheck needed: Please wait. [ 203.239573][ T7984] XFS (loop8): Quotacheck: Done. [ 203.300991][ T4520] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 203.380601][ T5736] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 203.388238][ T5736] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 203.444987][ T5736] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 203.508655][ T4240] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 203.550776][ T4520] usb 8-1: Using ep0 maxpacket: 32 [ 203.561580][ T6583] XFS (loop8): Unmounting Filesystem [ 203.654880][ T8040] device syzkaller1 entered promiscuous mode [ 203.679647][ T5736] usb 5-1: USB disconnect, device number 15 [ 203.689268][ T4520] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 203.803769][ T4240] usb 1-1: Using ep0 maxpacket: 8 [ 203.859795][ T4520] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.879630][ T4520] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.888124][ T4520] usb 8-1: Product: syz [ 203.899240][ T4520] usb 8-1: Manufacturer: syz [ 203.904046][ T4520] usb 8-1: SerialNumber: syz [ 203.945100][ T4520] usb 8-1: config 0 descriptor?? [ 203.964652][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 203.982944][ T8025] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.993175][ T4240] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.018915][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.020765][ T4520] hub 8-1:0.0: bad descriptor, ignoring hub [ 204.058681][ T4520] hub: probe of 8-1:0.0 failed with error -5 [ 204.061195][ T4240] usb 1-1: config 0 descriptor?? [ 204.156952][ T8048] loop9: detected capacity change from 0 to 128 [ 204.282946][ T8048] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.349231][ T8048] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.395965][ T4240] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 204.625069][ T4240] usb 1-1: USB disconnect, device number 13 [ 204.649802][ T4520] usb 8-1: USB disconnect, device number 4 [ 204.763022][ T8068] loop8: detected capacity change from 0 to 1024 [ 204.864830][ T8068] EXT4-fs (loop8): Ignoring removed orlov option [ 204.946657][ T8068] EXT4-fs (loop8): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 205.068898][ T4520] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 205.488995][ T4520] usb 10-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 205.519970][ T4520] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.718863][ T5936] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.839165][ T4520] cxacru 10-1:1.0: invalid response length to cm 0x90: 0 [ 205.908773][ T8113] cxacru 10-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 205.928008][ T8113] cxacru 10-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 206.016132][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 206.149006][ T5936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.168968][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.272370][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 206.293967][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.318477][ T5936] usb 5-1: SerialNumber: syz [ 206.383774][ T5936] usb 5-1: 0:2 : does not exist [ 206.798729][ T5736] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 207.114623][ T7447] device hsr_slave_0 left promiscuous mode [ 207.146733][ T7447] device hsr_slave_1 left promiscuous mode [ 207.153793][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.163074][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.172317][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.180101][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.188297][ T7447] device bridge_slave_1 left promiscuous mode [ 207.195267][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.211655][ T7447] device bridge_slave_0 left promiscuous mode [ 207.219311][ T5736] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.230057][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.237567][ T5736] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.267355][ T5936] usb 5-1: USB disconnect, device number 16 [ 207.276113][ T7447] device veth1_macvtap left promiscuous mode [ 207.300388][ T7447] device veth0_macvtap left promiscuous mode [ 207.317180][ T7447] device veth1_vlan left promiscuous mode [ 207.332035][ T7447] device veth0_vlan left promiscuous mode [ 207.348896][ T5736] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.360482][ T5736] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.382784][ T5736] usb 8-1: SerialNumber: syz [ 207.677364][ T5736] usb 8-1: 0:2 : does not exist [ 207.712557][ T5736] usb 8-1: USB disconnect, device number 5 [ 207.768940][ T4520] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 207.847694][ T5936] usb 10-1: USB disconnect, device number 5 [ 207.921868][ T7447] team0 (unregistering): Port device team_slave_1 removed [ 207.959890][ T7447] team0 (unregistering): Port device team_slave_0 removed [ 207.999670][ T7447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.016636][ T4470] udevd[4470]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.037889][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.144727][ T4520] usb 9-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 208.166369][ T4520] usb 9-1: config 1 interface 0 has no altsetting 0 [ 208.227405][ T8151] loop4: detected capacity change from 0 to 32768 [ 208.293387][ T8151] (syz.4.982,8151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.348514][ T8151] (syz.4.982,8151,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 208.376344][ T7447] team0 (unregistering): Port device dummy0 removed [ 208.410305][ T4520] usb 9-1: string descriptor 0 read error: -22 [ 208.439220][ T4520] usb 9-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 208.464927][ T4520] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.497854][ T7447] bond0 (unregistering): Released all slaves [ 208.509259][ T8149] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.538334][ T8151] JBD2: Ignoring recovery information on journal [ 208.631275][ T8151] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 208.733823][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 208.896705][ T8138] chnl_net:caif_netlink_parms(): no params data found [ 209.089512][ T8151] [ 209.091906][ T8151] ====================================================== [ 209.098942][ T8151] WARNING: possible circular locking dependency detected [ 209.105995][ T8151] syzkaller #0 Not tainted [ 209.110434][ T8151] ------------------------------------------------------ [ 209.117473][ T8151] syz.4.982/8151 is trying to acquire lock: [ 209.123380][ T8151] ffff888073241538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x307/0x770 [ 209.132730][ T8151] [ 209.132730][ T8151] but task is already holding lock: [ 209.140112][ T8151] ffff88802b0ec8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 209.150419][ T8151] [ 209.150419][ T8151] which lock already depends on the new lock. [ 209.150419][ T8151] [ 209.160849][ T8151] [ 209.160849][ T8151] the existing dependency chain (in reverse order) is: [ 209.169886][ T8151] [ 209.169886][ T8151] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 209.178422][ T8151] down_read+0x44/0x2e0 [ 209.183122][ T8151] ocfs2_start_trans+0x3a6/0x6f0 [ 209.188599][ T8151] ocfs2_mknod+0xf70/0x2510 [ 209.193643][ T8151] ocfs2_create+0x192/0x420 [ 209.198677][ T8151] path_openat+0x120a/0x2fb0 [ 209.203802][ T8151] do_filp_open+0x1df/0x400 [ 209.208838][ T8151] do_sys_openat2+0x14b/0x500 [ 209.214043][ T8151] __x64_sys_creat+0x8c/0xb0 [ 209.219165][ T8151] do_syscall_64+0x4c/0xa0 [ 209.224115][ T8151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.230550][ T8151] [ 209.230550][ T8151] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 209.238067][ T8151] ocfs2_start_trans+0x2a7/0x6f0 [ 209.243571][ T8151] ocfs2_write_begin_nolock+0x207c/0x44b0 [ 209.249832][ T8151] ocfs2_write_begin+0x1b4/0x310 [ 209.255307][ T8151] generic_perform_write+0x2b6/0x550 [ 209.261144][ T8151] __generic_file_write_iter+0x261/0x4e0 [ 209.267310][ T8151] ocfs2_file_write_iter+0x171a/0x1ee0 [ 209.273302][ T8151] vfs_write+0x748/0xd70 [ 209.278079][ T8151] ksys_write+0x153/0x260 [ 209.282944][ T8151] do_syscall_64+0x4c/0xa0 [ 209.287894][ T8151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.294325][ T8151] [ 209.294325][ T8151] -> #1 (&oi->ip_alloc_sem){++++}-{3:3}: [ 209.302170][ T8151] down_write+0x38/0x60 [ 209.306864][ T8151] ocfs2_reflink+0x4cb/0x920 [ 209.311991][ T8151] ocfs2_vfs_reflink+0x333/0x450 [ 209.317458][ T8151] ocfs2_reflink_ioctl+0x39c/0x440 [ 209.323099][ T8151] ocfs2_ioctl+0x586/0x7a0 [ 209.328046][ T8151] __se_sys_ioctl+0xfa/0x170 [ 209.333166][ T8151] do_syscall_64+0x4c/0xa0 [ 209.338116][ T8151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.344548][ T8151] [ 209.344548][ T8151] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 209.352376][ T8151] __lock_acquire+0x2c66/0x7b50 [ 209.357764][ T8151] lock_acquire+0x19e/0x400 [ 209.362807][ T8151] down_read+0x44/0x2e0 [ 209.367500][ T8151] ocfs2_init_acl+0x307/0x770 [ 209.372716][ T8151] ocfs2_mknod+0x15de/0x2510 [ 209.377842][ T8151] ocfs2_mkdir+0x192/0x420 [ 209.382797][ T8151] vfs_mkdir+0x386/0x570 [ 209.387588][ T8151] do_mkdirat+0x1dd/0x5c0 [ 209.392456][ T8151] __x64_sys_mkdirat+0x85/0x90 [ 209.397791][ T8151] do_syscall_64+0x4c/0xa0 [ 209.402748][ T8151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.409178][ T8151] [ 209.409178][ T8151] other info that might help us debug this: [ 209.409178][ T8151] [ 209.419445][ T8151] Chain exists of: [ 209.419445][ T8151] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 209.419445][ T8151] [ 209.433380][ T8151] Possible unsafe locking scenario: [ 209.433380][ T8151] [ 209.440875][ T8151] CPU0 CPU1 [ 209.446254][ T8151] ---- ---- [ 209.451626][ T8151] lock(&journal->j_trans_barrier); [ 209.456921][ T8151] lock(sb_internal#2); [ 209.463696][ T8151] lock(&journal->j_trans_barrier); [ 209.471511][ T8151] lock(&oi->ip_xattr_sem); [ 209.476118][ T8151] [ 209.476118][ T8151] *** DEADLOCK *** [ 209.476118][ T8151] [ 209.484270][ T8151] 8 locks held by syz.4.982/8151: [ 209.489315][ T8151] #0: ffff88807a800460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 209.498567][ T8151] #1: ffff888073241808 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 209.509301][ T8151] #2: ffff88805f246d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 209.523162][ T8151] #3: ffff88805f243488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0 [ 209.536842][ T8151] #4: ffff88805f245108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x11c/0x2630 [ 209.550784][ T8151] #5: ffff88807a800650 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf70/0x2510 [ 209.560032][ T8151] #6: ffff88802b0ec8e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0 [ 209.570759][ T8151] #7: ffff88807a71a990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 209.580457][ T8151] [ 209.580457][ T8151] stack backtrace: [ 209.586384][ T8151] CPU: 1 PID: 8151 Comm: syz.4.982 Not tainted syzkaller #0 [ 209.593683][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.603793][ T8151] Call Trace: [ 209.607115][ T8151] [ 209.610066][ T8151] dump_stack_lvl+0x188/0x250 [ 209.614772][ T8151] ? load_image+0x410/0x410 [ 209.619314][ T8151] ? show_regs_print_info+0x20/0x20 [ 209.624536][ T8151] ? print_circular_bug+0x12b/0x1a0 [ 209.629754][ T8151] check_noncircular+0x296/0x330 [ 209.634729][ T8151] ? add_chain_block+0x9b0/0x9b0 [ 209.639690][ T8151] ? mark_lock+0x94/0x320 [ 209.644042][ T8151] ? _find_first_zero_bit+0xd1/0xf0 [ 209.649260][ T8151] ? add_lock_to_list+0x18d/0x280 [ 209.654302][ T8151] __lock_acquire+0x2c66/0x7b50 [ 209.659173][ T8151] ? verify_lock_unused+0x140/0x140 [ 209.664390][ T8151] ? verify_lock_unused+0x140/0x140 [ 209.669616][ T8151] ? __ocfs2_journal_access+0x678/0x860 [ 209.675183][ T8151] lock_acquire+0x19e/0x400 [ 209.679703][ T8151] ? ocfs2_init_acl+0x307/0x770 [ 209.684570][ T8151] ? __might_sleep+0xf0/0xf0 [ 209.689170][ T8151] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 209.696295][ T8151] ? read_lock_is_recursive+0x10/0x10 [ 209.701693][ T8151] ? mutex_unlock+0x10/0x10 [ 209.706235][ T8151] down_read+0x44/0x2e0 [ 209.710424][ T8151] ? ocfs2_init_acl+0x307/0x770 [ 209.715323][ T8151] ocfs2_init_acl+0x307/0x770 [ 209.720022][ T8151] ? ocfs2_acl_chmod+0x330/0x330 [ 209.724988][ T8151] ? dquot_alloc_inode+0x821/0x9b0 [ 209.730233][ T8151] ? ocfs2_journal_access+0x40/0x40 [ 209.735451][ T8151] ? ocfs2_block_signals+0x97/0xe0 [ 209.740581][ T8151] ? ocfs2_init_security_get+0x135/0x1a0 [ 209.746233][ T8151] ocfs2_mknod+0x15de/0x2510 [ 209.750847][ T8151] ? ocfs2_mkdir+0x420/0x420 [ 209.755455][ T8151] ? __lock_acquire+0x13dc/0x7b50 [ 209.760525][ T8151] ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10 [ 209.766752][ T8151] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 209.772511][ T8151] ? __lock_acquire+0x7b50/0x7b50 [ 209.777574][ T8151] ? do_raw_spin_lock+0x128/0x2f0 [ 209.782633][ T8151] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 209.788562][ T8151] ? __lock_acquire+0x7b50/0x7b50 [ 209.793628][ T8151] ? __rwlock_init+0x140/0x140 [ 209.798422][ T8151] ? ocfs2_lookup+0x4a8/0x960 [ 209.803122][ T8151] ? do_raw_spin_unlock+0x11d/0x230 [ 209.808341][ T8151] ? put_pid+0xda/0x120 [ 209.812518][ T8151] ocfs2_mkdir+0x192/0x420 [ 209.816952][ T8151] ? make_kgid+0x650/0x650 [ 209.821381][ T8151] ? ocfs2_symlink+0x2780/0x2780 [ 209.826330][ T8151] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 209.831285][ T8151] ? ocfs2_getattr+0x360/0x360 [ 209.836065][ T8151] ? inode_permission+0xef/0x480 [ 209.841023][ T8151] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 209.846069][ T8151] ? security_inode_mkdir+0xb3/0x100 [ 209.851397][ T8151] vfs_mkdir+0x386/0x570 [ 209.855751][ T8151] do_mkdirat+0x1dd/0x5c0 [ 209.860189][ T8151] ? vfs_mkdir+0x570/0x570 [ 209.864725][ T8151] __x64_sys_mkdirat+0x85/0x90 [ 209.869509][ T8151] do_syscall_64+0x4c/0xa0 [ 209.873945][ T8151] ? clear_bhb_loop+0x30/0x80 [ 209.878653][ T8151] ? clear_bhb_loop+0x30/0x80 [ 209.883348][ T8151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.889271][ T8151] RIP: 0033:0x7f7f4ab9cf47 [ 209.893700][ T8151] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.913319][ T8151] RSP: 002b:00007f7f48df5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 209.921747][ T8151] RAX: ffffffffffffffda RBX: 00007f7f48df5ee0 RCX: 00007f7f4ab9cf47 [ 209.929738][ T8151] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 209.937726][ T8151] RBP: 0000200000000080 R08: 0000200000000140 R09: 0000000000000000 [ 209.945714][ T8151] R10: 0000200000000080 R11: 0000000000000246 R12: 00002000000005c0 [ 209.953699][ T8151] R13: 00007f7f48df5ea0 R14: 0000000000000000 R15: 0000000000000000 [ 209.961689][ T8151] [ 209.964769][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.000362][ T4520] cypress 0003:04B4:ED81.000F: unknown global tag 0xc [ 210.007198][ T4520] cypress 0003:04B4:ED81.000F: item 0 0 1 12 parsing failed [ 210.036341][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.068790][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.080608][ T4520] cypress 0003:04B4:ED81.000F: parse failed [ 210.086577][ T4520] cypress: probe of 0003:04B4:ED81.000F failed with error -22 [ 210.110298][ T8138] device bridge_slave_0 entered promiscuous mode [ 210.125966][ T8151] syz.4.982 (8151) used greatest stack depth: 17984 bytes left [ 210.996044][ T4233] usb 9-1: USB disconnect, device number 4 [ 211.041624][ T8150] ocfs2: Unmounting device (7,4) on (node local) [ 211.588110][ T7447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.598856][ T7447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.653668][ T7447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.664081][ T7447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.702344][ T7447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.712786][ T7447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.782500][ T7447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.792867][ T7447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.875844][ T7447] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.915324][ T7447] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.964340][ T7447] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.054747][ T7447] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.146971][ T7447] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.163055][ T7447] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.235585][ T7447] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.246583][ T7447] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.313157][ T7447] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.327022][ T7447] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.384060][ T7447] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.396586][ T7447] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.476394][ T7447] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.533978][ T7447] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.583915][ T7447] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.632457][ T7447] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.993091][ T7447] device hsr_slave_0 left promiscuous mode [ 214.002877][ T7447] device hsr_slave_1 left promiscuous mode [ 214.009500][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.016939][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.024840][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.036126][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.044203][ T7447] device bridge_slave_1 left promiscuous mode [ 214.050925][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.059455][ T7447] device bridge_slave_0 left promiscuous mode [ 214.065677][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.075168][ T7447] device bridge_slave_0 left promiscuous mode [ 214.081791][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.094551][ T7447] device hsr_slave_0 left promiscuous mode [ 214.101221][ T7447] device hsr_slave_1 left promiscuous mode [ 214.107563][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.121438][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.129752][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.137182][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.145438][ T7447] device bridge_slave_1 left promiscuous mode [ 214.151847][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.160944][ T7447] device bridge_slave_0 left promiscuous mode [ 214.167150][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.179836][ T7447] device hsr_slave_0 left promiscuous mode [ 214.186194][ T7447] device hsr_slave_1 left promiscuous mode [ 214.193839][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.202982][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.211767][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.223416][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.232212][ T7447] device bridge_slave_1 left promiscuous mode [ 214.238440][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.249114][ T7447] device bridge_slave_0 left promiscuous mode [ 214.255311][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.269092][ T7447] device hsr_slave_0 left promiscuous mode [ 214.275555][ T7447] device hsr_slave_1 left promiscuous mode [ 214.282158][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.289860][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.297405][ T7447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.305060][ T7447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.313052][ T7447] device bridge_slave_1 left promiscuous mode [ 214.319306][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.327427][ T7447] device bridge_slave_0 left promiscuous mode [ 214.336670][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.350763][ T7447] device veth1_macvtap left promiscuous mode [ 214.356783][ T7447] device veth0_macvtap left promiscuous mode [ 214.363068][ T7447] device veth1_vlan left promiscuous mode [ 214.368949][ T7447] device veth0_vlan left promiscuous mode [ 214.375268][ T7447] device veth1_macvtap left promiscuous mode [ 214.381407][ T7447] device veth0_macvtap left promiscuous mode [ 214.387473][ T7447] device veth1_vlan left promiscuous mode [ 214.393734][ T7447] device veth0_vlan left promiscuous mode [ 214.400710][ T7447] device veth1_macvtap left promiscuous mode [ 214.406764][ T7447] device veth0_macvtap left promiscuous mode [ 214.412892][ T7447] device veth1_vlan left promiscuous mode [ 214.419133][ T7447] device veth0_vlan left promiscuous mode [ 214.425349][ T7447] device veth1_macvtap left promiscuous mode [ 214.431634][ T7447] device veth0_macvtap left promiscuous mode [ 214.437694][ T7447] device veth1_vlan left promiscuous mode [ 214.443759][ T7447] device veth0_vlan left promiscuous mode [ 214.675527][ T7447] bond1 (unregistering): (slave vlan0): Releasing backup interface [ 214.684143][ T7447] bond1 (unregistering): Released all slaves [ 214.741327][ T7447] team0 (unregistering): Port device team_slave_1 removed [ 214.757001][ T7447] team0 (unregistering): Port device team_slave_0 removed [ 214.767633][ T7447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.782091][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.817806][ T7447] team0 (unregistering): Port device dummy0 removed [ 214.842235][ T7447] bond0 (unregistering): Released all slaves [ 214.915551][ T7447] bond0 (unregistering): Released all slaves [ 215.023257][ T7447] team0 (unregistering): Port device team_slave_1 removed [ 215.037096][ T7447] team0 (unregistering): Port device team_slave_0 removed [ 215.048070][ T7447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.061001][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.116172][ T7447] bond0 (unregistering): Released all slaves [ 215.207100][ T7447] team0 (unregistering): Port device team_slave_1 removed [ 215.219905][ T7447] team0 (unregistering): Port device team_slave_0 removed [ 215.236138][ T7447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.248545][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.283830][ T7447] team0 (unregistering): Port device dummy0 removed [ 215.308257][ T7447] bond0 (unregistering): Released all slaves [ 215.396259][ T7447] team0 (unregistering): Port device team_slave_1 removed [ 215.406987][ T7447] team0 (unregistering): Port device team_slave_0 removed [ 215.421467][ T7447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.435889][ T7447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.487591][ T7447] bond0 (unregistering): Released all slaves