last executing test programs: 1m9.433886451s ago: executing program 1 (id=178): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x4008031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 1m8.024389426s ago: executing program 2 (id=186): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x20, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x36, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x2, 0x5, 0x5, 0x8, 0x90000, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x8001, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x3, 0xd, 0x0, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7f, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x208, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x8000, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x8, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x9, 0xd, 0x2950bfaf, 0x3, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0x1ffff, 0x0, 0x1a, 0x1c, 0x11ffff, 0x7, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0xbd, 0x755a, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x5, 0x4, 0x8006, 0x1, 0x0, 0x6, 0x8, 0x1, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0x6, 0x1, 0x1, 0x9, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m7.841753182s ago: executing program 2 (id=188): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) mlockall(0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) 1m7.767947325s ago: executing program 1 (id=189): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0x3) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207513, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4004}}}, &(0x7f0000000300)) 1m7.573691091s ago: executing program 1 (id=192): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00002a4000/0x4000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 1m7.128454155s ago: executing program 1 (id=195): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x26b) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x2010009, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) 1m6.616070702s ago: executing program 1 (id=199): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000028005080110001"], 0x50}}, 0x0) 1m6.533046694s ago: executing program 2 (id=201): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="99fb5e31c591", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m6.283008603s ago: executing program 2 (id=203): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x4216}}]}, 0x1, 0x1535, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000100)='2', 0xfffffe16, 0x8000c5e) 1m5.988364012s ago: executing program 1 (id=205): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r0}, &(0x7f0000001e40), &(0x7f0000001e80)=r1}, 0x20) 1m5.484923858s ago: executing program 32 (id=205): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061107400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r0}, &(0x7f0000001e40), &(0x7f0000001e80)=r1}, 0x20) 1m5.471463848s ago: executing program 2 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331c8c5c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 1m5.012104603s ago: executing program 2 (id=211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@auto_da_alloc}]}, 0x1, 0x451, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 1m4.372485394s ago: executing program 33 (id=211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@auto_da_alloc}]}, 0x1, 0x451, &(0x7f0000000bc0)="$eJzs281vFOUfAPDv7LblnfZH+Km8qFU04ltLCyIHLxpNPGhiogc81rYQZKGG1kQIUTQGj4bEkxfj0cS/wJNejHoy8ap3Q0IMF9DTmtmdobvL7tIt+1LZzyeZ5XlmZnm+3515Zp+ZpxvA0JpMX5KI7RHxe0SMV6v1O0xW/7l5/eL839cvzidRLr/5V1LZ78b1i/P5rvn7tuWVkYjCp0nsa9Lu8vkLp+dKpcVzWX165cx708vnLzx76szcycWTi2dnjx07cnjm+aOzz3UlzzSvG3s/XNq/59W3r7w+f/zKOz9/m+T5N+TRJZPtNj5eLne5ucHaUVNORgYYCB0pVrtpjFb6/3gUY/Xgjccrnww0OKCnyuVy+b7Wmy+VgXtYEoOOABiM/Is+vf/Nlz4NPTaEay9Wb4DSvG9mS3XLSBSyfUYb7m+7aTIijl/656t0id48hwAAqPN9Ov55ptn4rxC1z4V2ZnMoExHxv4jYFRFHI2J3RPw/orLv/RHxQIftN06S3D7+KVxdV2JrlI7/XsjmturHf/noLyaKWW1HJf/R5MSp0uKh7DM5GKOb0vpMmzZ+ePm3z1ttqx3/pUvafj4WzOK4OrKp/j0Lcytzd5NzrWsfR+wdqeS/OeryT27NBCQRsSci9q6zjVNPfbO/1bY7599GF+aZyl9HPFE9/pca888l7ecnpzdHafHQdH5W3O6XXy+/0ar9u8q/C9Ljv7Xp+X8r/4mkdr52uZP//csn09fLf3zW8p5mvef/WPJW3boP5lZWzs1EjCWvVYOuXT/bsN/s6v5p/gcPNO//u2L1k9gXEelJ/GBEPBQRD2exPxIRj0bEgTafwk8vPfbu+vPvrTT/hY6O/2phLBrXNC8UT//4XV2jE53knx7/I5XSwWzNWq5/a4mr07MZAAAA/qsKEbE9ksLUrXKhMDVV/Rv+3bG1UFpaXnn6xNL7ZxeqvxGYiNFC/qRrvOZ56Ex2W5/XZxvqh7Pnxl8Ut1TqU/NLpYVBJw9DbluL/p/6szjo6ICe83stGF76Pwwv/R+Gl/4Pw6tJ/98yiDiAvqr082bf/x/d+b1jO3sQENBfDf3ftB8MEff/MLzW0/9dM+De0LYvj/UvDqCvlrfEnX8k37dCfiHaKPEotC5EYUOEodCjwoAvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3ybwAAAP//8bbi/A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 23.111052218s ago: executing program 4 (id=440): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 22.775186238s ago: executing program 4 (id=442): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 22.513379187s ago: executing program 4 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 22.244220746s ago: executing program 4 (id=448): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 21.345791985s ago: executing program 4 (id=452): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 20.456285163s ago: executing program 4 (id=458): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80f}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xb9, 0x9d4, 0x81}, 0x10) 19.93574802s ago: executing program 34 (id=458): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80f}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0xb9, 0x9d4, 0x81}, 0x10) 7.094573792s ago: executing program 6 (id=550): unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x87, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000081e040030400001020301090275000301074009080b000201"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xb0a, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) 5.212493362s ago: executing program 6 (id=556): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) migrate_pages(0x0, 0x200, 0x0, &(0x7f00000000c0)=0x3) 3.73431448s ago: executing program 6 (id=567): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) 3.221750886s ago: executing program 0 (id=569): socket$netlink(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r0, &(0x7f0000002680)={0x0, 0x16, 0x1}) 3.10356442s ago: executing program 0 (id=570): openat$rfkill(0xffffff9c, &(0x7f0000000040), 0xca000, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2.425986042s ago: executing program 5 (id=575): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2.300056616s ago: executing program 3 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c9", 0xc}, {&(0x7f0000000340)="448b7c", 0x3}, {0x0}], 0x3) 2.204489409s ago: executing program 0 (id=577): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2200480, &(0x7f0000000080)=ANY=[], 0xfe, 0x161, &(0x7f0000000380)="$eJzs0c1qGmEUxvH/zLyOQhVbakG6aIUuaisFP2h3pTil0i6s0NJNV4JOm4CSECFxFyXbLLwAF/nYhkCuQKOLkKCbuMsVZOM6uxjmHfN9C+fHLGaec95zhplvn8dJg1tfl+rLK26j4VYTv0rFwu/zXi/v5TY0D+7VIQT087CAoq9g2oYqMIxAkJprViw9c5r3nsF5Av8Wa65JPXq9z4kp2goy+OeTb2DwQveZPM7cHAF97qUCJ+pnaWC2DW9tcJ75WcZvw9IXE+/+bL7zuQHNbmp/7+Tn6PjHh/df3M1sofMuHLdS67CDY4SOhv8n1rx9PCp6bz/OZbOfcumMycdT28tbHdT38Cr8NUB580z0PJv4K/UHNoxLPaDZnR4aEWCwdVGqB2++dWvNSoDxulspxwO75dhTEyupvMoMuPtXNF0hFHiYCyGEEEIIIYQQQgghhBBCCCGEEFwFAAD//4rET8k=") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.124786091s ago: executing program 5 (id=578): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) 1.880338849s ago: executing program 0 (id=580): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xc031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001080)={{}, "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"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.880154229s ago: executing program 3 (id=581): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x3, @broadcast, 0xf}]}}}}}}}}, 0x0) 1.86318507s ago: executing program 5 (id=582): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) unshare(0x20060400) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 1.616455968s ago: executing program 3 (id=584): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9}) 1.452116273s ago: executing program 7 (id=585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x81ff) read$rfkill(r0, &(0x7f0000000780), 0x8) 1.403955445s ago: executing program 6 (id=586): r0 = io_uring_setup(0xf69, &(0x7f0000000400)={0x0, 0x1889, 0x400, 0x5, 0x108}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.24049441s ago: executing program 7 (id=587): io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.112556184s ago: executing program 6 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x18) 983.705928ms ago: executing program 3 (id=589): syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000140)='./file2\x00', 0x1608004, &(0x7f0000000000), 0x2, 0xbe8, &(0x7f0000000c00)="$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") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) lremovexattr(&(0x7f0000000240)='./file2\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') 892.525701ms ago: executing program 7 (id=590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040844) 792.729364ms ago: executing program 5 (id=591): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x64, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 791.446484ms ago: executing program 6 (id=592): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGwL+hzNxwDYnAwu76xM4xGCSkD8lPVAS0qYlNY69Nk58qnfNSahsCm2JglSk9oJeNCVRGkVqK1AVqalEI6RGau+aq0bcRK3EhS+gclBSNVVgq3fmeR7PzM7OrLHHnnmfzyfCP3vmfWeeeeed2f1u9J0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGq3/5MyfDBVFUf5X+2NNUVxY/n1VsbP85/y2871CAAAA4Ey9V/vzby9OF+xcxk4N2/zLNf/2vYWFhYXiS++eeP/PFhbSFeuKYmRlUdSui/71Fz9faNwmeK4YHxpu+Pdwl7sf6XL9aJfrx7pcv6LL9Su7XD/e5fpFB2CRVfWfx9Ru7PraX9fUD2lxaTFWu+76Nns9N7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68r/uLeF/DDfe1tiiKkz99Zk9cw1A4xtcXTXdW0/jcvXNvse7dnz6z5ztzb1/VbnY9DItWWhQbN5TrfL4oTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuXfW9d5cpnrjI97PKzzRx3WuTZc9uR1RVHMF0tu0+q5YrhY3XKv6XiP18+I8jbKp/LDxehpnSfrl3GelPu8dV3zedJ6Tsbjvz4ck9El1tD4dLzz1RWLjvsHPU/KR90P52p52w+Wdzo+3vij1aZztdzmmRuWPgfaPndtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1e7rxA2dz4HJuUNHJ2efevq2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1P0/vkA6Q1cVwOgc3hPeaeA7e1LJt4ym58M2z9zoY75PXQfnYP3djuaALh4slzvFym+c3nvnrIH3db3gdjDa8Dtq+p7Z5HYwu43VQbnNy4/K+Zo42/NduDb16L1zTcA6cz6+H5X0+cvPS74Vrw7peuOV0vx6OLDoH4sMaCq+98pL0/d74neG4LD4vri6vuGBFcXx25tjtT+6emzs2XYRxTlzS8Fy1ni+rGx5Tseh8GT7t82Xn3/zyxqvbXL4mHKvxWzs/V+U2WyY6P1e1d/f2x7Pp0k1FGGfZuT6e7b6alcczZYkOx7Pc5vnbzvx7wZRLGt7/xrq9/42Mjdbf/0bS0Rhrev9b/NSM1FZWFCdvW97731j471y//13aJ+9/5bF65PbO50C5zQuTp3sOjHZ8/7suzKGwnptDYhhvyP3v166fr5+mDc9l1/NmdHQsnDej8R6bz5vNi/Ypb628741TH+y82Xhd83PV9H1LBc+b8lj9+VTn86bc5o3pM3/vWBX/2vDesaLbOTA2sqJc71g6Cervdwur4jlwe7GnOFIcLPamfcpnubyviU3LOwdWhP/O9XvHlX1yDpTH6uVNnc+Bcpsfbj673zttDJekbRq+d2r9+cJSmf/q0VO313rYznbmL9f5qS2dfzZUbvP2ltPNGZ2P063hkgvaHKfW189S5/Te4twcpyvDOg9u7fyzqXKbS7ct83zaWRTFm9Nv1n7eFX6++/fH//17TT/3bfcz5Ten33xg8qEfn876AQD44N6v/Tm/ov69ZsP/Y72c//8fAAAAGAgx9w+Hmcj/AAAAUBkx94+Emcj/AAAAUBkx94+GmWSS/x+7c/ur7z1bpE8DXAji9fEwPHh3fbvY8Z4P/163cEp5+Se+Pfbq155d3n0PF0Xxywc+0nb7x+6O66o7Gtf5sebLF7ny2mXd/6MPn9qu8fMTTm6v3358PMs9DWJX+fXJTbXbXffUdG2+8UBRmw/Nv/Bc/fbr/47bn9hc3/4vw4eW7Nw31LT/xrCe68NcFz5T5sGdp45DOeN+r6695p8v+fyp+4v7DW24qPYwX/6D+u3Gz4h66ZL69vFxL7X+f/r6d18tt3/yhvbrf3a4/fpPhNt9K8xf7Khv33jMv9aw/j8K64/3F/e7/Vs/aLv+166ob/9aOC9eCbN1/ff+6Uffa/d8xfvZeVd9v3j/U/+9pbZfvL14+63rH392uul4tN7+G+/Wb2fH4z8badw+Xh7vJ3r0rubzeyg8v0098qIovvvHRdNxLj5e3+8fW9Yfb+/oXe3Xf2vLOo8OXVvb/9TjWdP0uL7x15vaPt64np1/t6bp8bx0Xzh+707+sLzdEw+F8zFc/78/qt9e62eZvnZf8/tN3P6VNfXXbby9yZb1v9Sy/vlry2PXff33v1tf/2v3rGxa/85Ph/Pp/vrstv79f3Vx0/7f/E79+Tj2xMThI7PHD+xtOKqNr+OV46tWX3Dhhy66OLyXtv5715G5x2aOrZtaN1UU6wbwIwN7vf5vhflf9TF/9u+h7sc/q593L36m/nXrpp/X//1SuPzR8HzGr4/f+IuxpvO19Xmfv6c+z3T9t4R1LNcVX//Pa5e14Ykvvn78H/7w7dbvC+LjOXrZeO3xvbz+8tp1Q2/Ur299v+rmPy5rfl3/ZHSqNr8fjutC+GTmDZfX76/19uNnk7z42frrN34nF/cvWj5PZM1I8+M40/X/JHwf84Mrm9//4vnx/WdbPs15TTFULmE+vD8U8/Xr41bxeL948vK29xc/h6eYv+p0lrmk2admJw8eOHz8ycm5mdm5ydmnnt516Mjxw3O7ap9duuvL3fY/9fpeXXt9753ZtqWovdqP1EePne/1H314z947pm7cO7Nv9/F9cw8fnTm2f8/s7J6ZvbM37t63b+aJbvsf2LtjetP2zXdsmth/YO+OO7dv37x94sDhI+Uy6ovqYtvUVyYOH9tV22V2x5bt01u3bpmaOHRk78yOO6amJo5327/2tWmi3PvxiWMzB3fPHTg0MzF74OmZHdPbt23b1PXTHw8d3Te7bvLY8cOTx2dnjk3WH8u6udrF5de+bvuTh9kj4f2uxVD47vwLt25Ln49b+vZXl7yp+ibN354W74TPgopf37r9O+b+sTCTTPI/AAAA5CDm/vDB/6eukP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v4LwkzkfwAAAKiMmPsvDDPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f8/IP1//f9O9P/1/wd5/X3Y/1+l/0+/6bf+f8z9HwozySP/AwAAQBZi7r8ozET+BwAAgMqIuf/iMBP5HwAAACoj5v41YSaZ5H+//1//X//f7//X/9f/P8uaDrH+v/5/J/r/+v+DvP4+7P/7/f/0nX7r/8fc///CTDLJ/wAAAJCDmPs/HGYi/wMAAEBlxNx/SZiJ/A8AAACVEXP/pWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5/7Iwk0zyPwAAAOQg5v7Lw0zkfwAAAKiMmPuvCDOR/wEAAKAyYu6/Mswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3XxVmkkn+BwAAgBzE3H91mIn8DwAAAJURc/9HwkzkfwAAAKiMmPvXhplkkv/1//X/9f/1//X/9f97abD6/8NLXqP/X6f/30z/X/9f/1//n876rf8fc/9Hw0wyyf8AAACQg5j7rwkzkf8BAACgMmLuvzbMRP4HAACAyoi5f12YSSb5X/9f/1//X/9f/1//v5cGq/+/NP3/Ov3/Zvr/+v/6//r/dNZv/f+Y+9eHmWSS/wEAACAHMfdvCDOR/wEAAKAyYu6/LsxE/gcAAIDKiLn/+jCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X17/f0W3G6LS+q3/H3P/DWEmmeR/AAAAyEHM/TeGmcj/AAAAUBkx998UZiL/AwAAQGXE3L8xzCST/K//r/+v/6//r/+v/99L+v+L+v9v/U+h/x/p/+v/D/L69f/9/n+667f+f8z9N4eZZJL/AQAAIAcx998SZiL/AwAAQGXE3H9rmIn8DwAAAJURc/9EmEkm+V//X/9f/1//X/9f/7+Xqtr/T++jfv+//r/+v/6//r/+P0vqt/5/zP23hZlkkv8BAAAgBzH33x5mIv8DAABAZcTcPxlmIv8DAABAZcTcPxVmkkn+1//X/9f/1//X/9f/76Wq9v/P4Pf/6/830P/X/x/k9ev/6//TXb/1/2Punw4zyST/AwAAQA5i7t8UZiL/AwAAQGXE3L85zET+BwAAgMqIuX9LmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9NsuM1l/db/j7l/a5hJJvkfAAAAchBz/7YwE/kfAAAAKiPm/jvCTOR/AAAAqIyY++8MM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP3bw0wyyf8AAACQg5j7PxZmIv8DAABAZcTcf1eYifwPAAAAA6Xd7yGMYu7/eJhJJvlf/7/q/f+Flfr/+v/6/53Xr//fW/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37wgzyST/AwAAQA5i7r87zET+BwAAgMqIuf+eMBP5HwAAACoj5v6dYSaZ5H/9/6r3//3+f/1//f9u69f/7y39f/3/TvT/B7P/H75t0f8/N/3/8aX2b+z/l+eQ/j/9qN/6/zH33xtmkkn+BwAAgBzE3P+JMBP5HwAAACoj5v5PhpnI/wAAAFAZMfd/Kswkk/yv/6//r/+v/6//r//fS/r/+v+d6P8PZv8/0v/3+//1/+mm3/r/MfffF2aSSf4HAACAHMTc/+kwE/kfAAAAKiPm/v8fZiL/AwAAQGXE3H9/mEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/lTCTTPI/AAAA5CDm/gfCTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P+rYSaZ5H/9/3PT/x9Ot6//r/+v/6//r/9/Nun/6/8X+v8f2Pnuzw/6+vX/9f/prt/6/zH3/1qYSSb5HwAAAHIQc/+vh5nI/wAAAFAZMff/RpiJ/A8AAACVEXP/g2EmmeR//X+//1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+h8JM5H8AAACojJj7PxtmIv8DAABAZcTc/7kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3P9wmEkm+R8AAAByEHP/58NM5H8AAACojJj7fyvMRP4HAACAyoi5/7fDTDLJ//r/+v/6//r/+v/6/72k/7+4/1++h53P/v+K5Wyo/78s+v/6//r/+v901m/9/5j7vxBmkkn+BwAAgBzE3P87YSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/SJhJJvlf/1//X/9f/1//X/+/l/T//f7/TvT/9f8Hef36//r/dNdv/f+Y+78YZpJJ/gcAAIAcxNz/e2Em8j8AAABURsz9u8JM5H8AAACojJj7Hw0zyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/bvDTDLJ/wAAAJCDmPu/FGYi/wMAAEBlxNy/J8xE/gcAAIDKiLl/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2PunwkzyST/AwAAQA5i7t8XZiL/AwAAQGXE3L8/zET+BwAAgMqIuf+xMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/IMwkk/wPAAAAOYi5/8thJvI/AAAAVEbM/V8JM5H/AQAAoDJi7j8YZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhZlkkv8BAAAgBzH3Hw4zkf8BAACgMmLuPxJmIv8DAABAZcTcfzTMJJP8r/+v/6//r/+v/6//30v6//r/nej/6/8P8vr1//X/6a7f+v8x9/9+mEkm+R8AAAByEHP/sTAT+R8AAAAqI+b+2TAT+R8AAAAqI+b+uTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfzzMJJP8DwAAADmIuf/xMBP5HwAAACoj5v4nwkzkfwAAAKiMmPufDDPJJP/r/+v/6/+f6v+/sr9++Xnq/9d7fv/H3l3vanZWcRx/y2SAhBCuhSvgErgGLgN3Ke7u7u7u7u7uUCiuSUmYtdaB6XTvc9529332sz6ff1bamUyfdpImv0y+2fp//b/+/0L0//r/g/7/aKfu5/f+fv2//p91o/X/ufvvHbc02f8AAADQQe7++8Qt9j8AAABMI3f/feMW+x8AAACmkbv/fnFLk/2v/9f/6/99/1//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7r9/3NJk/wMAAEAHufsfELfY/wAAADCN3P0PjFvsfwAAAJhG7v4HxS1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9D45bmux/AAAA6CB3/0PiFvsfAAAAppG7/6Fxi/0PAAAA08jd/7C4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k3Wv+fu//hcUuT/Q8AAAAd5O5/RNxi/wMAAMA0cvc/Mm6x/wEAAGAaufsfFbc02f/6f/2//l//r//X/29J/6//X6L/1//v+f36f/0/6zbv/+95/X/vefv/3P3Xxy1N9j8AAAB0kLv/0XGL/Q8AAADTyN3/mLjF/gcAAIBp5O5/bNzSZP/r//X/Z/3/Tdfp//X/+v+zv6//v23o//X/S/T/o/b/5/svof/X/+v/WbN5/7/S+1/917n7Hxe3NNn/AAAA0EHu/sfHLfY/AAAATCN3/xPiFvsfAAAAppG7/4lxS5P9r//X//v+v/5f/6//35L+X/+/RP8/av/v+/+3tv+/xzner/+ng9H6/9z9T4pbmux/AAAA6CB3/5PjFvsfAAAAppG7/ylxi/0PAAAA08jd/9S4pcn+1//r//X/+n/9v/5/S/p//f8S/b/+f8/v9/1//T/rRuv/c/c/LW5psv8BAACgg9z9T49b7H8AAACYRu7+Z8Qt9j8AAABMI3f/M+OWJvtf/6//1//r/29V/39J/6//X6b/1/8v0f/r//f8fv2//p91o/X/ufufFbc02f8AAADQQe7+Z8ct9j8AAABMI3f/c+IW+x8AAACmkbv/uXFLk/2v/9f/6//1/77/r//fkv5/uv7/Ov3/Gf2//l//r/9n2Wj9f+7+58UtTfY/AAAAdJC7//lxi/0PAAAA08jd/4K4xf4HAACAaeTuf2Hc0mT/6//1//p//b/+X/+/Jf3/dP2/7///D/2//l//r/9n2Wj9f+7+F8Uta8Pv8sqPAwAAAMPI3f/iuKXJn/8DAABAB7n7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6/+3pP/X/y/R/1+7/7/zLfzz9P9jvV//r/9n3Wj9f+7+l8UtTfY/AAAAdJC7/+Vxi/0PAAAA08jd/4q4xf4HAACAaeTuf2Xc0mT/31L/f+Ndrvy4/v989P/Xfr/+X/+v/9f/6//1/0v0/77/v+f36//1/6wbrf/P3f+quKXJ/gcAAIAOcve/Om6x/wEAAGAauftfE7fY/wAAADCN3P2vjVua7H/f/9f/6//1//p//f+W9P/6/yX6f/3/nt+v/9f/s260/j93/+vilib7HwAAADrI3f/6uMX+BwAAgGnk7n9D3GL/AwAAwDRy978xbmmy//X/+v+T9/930P8n/X/8vur/9f8XoP/X/x/0/0c7dT+/9/fr//X/rBut/8/d/6a4pcn+BwAAgA5y9785brH/AQAAYBq5+98St9j/AAAAMI3c/W+NW5rsf/2//v/k/b/v/xf9f/y+6v/1/xeg/9f/H/T/Rzt1P7/39+v/9f+sG63/z93/trilyf4HAACADnL3vz1usf8BAABgGrn73xG32P8AAAAwjdz974xbmux//b/+X/+v/9f/6/+3pP/X/y/R/+v/9/x+/b/+n3Wj9f+5+98VtzTZ/wAAANBB7v53xy32PwAAAEwjd/974hb7HwAAAKaRu/+9cUuT/a//33v/f68b4gX6f/2//l//PyT9v/5/if5f/7/n9+v/9f+sG63/z93/vrilyf4HAACADnL3vz9usf8BAABgGrn7PxC32P8AAAAwjdz9H4xbmuz/Hv3/5Zv9tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0filua7H8AAADoIHf/h+MW+x8AAACmkbv/I3GL/Q8AAADTyN3/0bilyf7v0f/fXIP+P/+1bt/+/6a76f/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/FLU32PwAAAHSQu//jcYv9DwAAANPI3f+JuMX+BwAAgGnk7v9k3HD3u57uSbcr/f+0/b/v/+v/9f/6/yHo//X/S/T/+v89v1//r/9n3Wj9f+7+T8Ut/vwfAAAAppG7/9Nxi/0PAAAA08jd/5m4xf4HAACAaeTu/2zc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+5uKXJ/gcAAIAOcvd/Pm6x/wEAAGAaufu/ELfY/wAAADCN3P1fjFua7H/9v/5f/3+b9f+Xr/719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/1Lc0mT/AwAAQAe5+78ct9j/AAAAMI3c/V+JW+x/AAAAmEbu/q/GLU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADANHL3fyNusf8BAABgGrn7vxm3NNn/M/f/Sz9N/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/934hb7HwAAAKaRu/+7cUuT/T9z/79E/3+F/l//f9D/6/83pv/X/y/R/+v/9/x+/b/+n3Wj9f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAEwjd/8P4hb7HwAAAKaRu/+HcUuT/a//1//r//X/+n/9/5b0//r/Jfp//f+e36//1/+zbrT+P3f/j+KWJvsfAAAAOsjd/+O4xf4HAACAaeTu/0ncYv8DAADANHL3/zRuabL/9f/6f/3/UP3/Ha/+dfT/+n/9/zL9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v6fxS1N9j8AAAB0kLv/53GL/Q8AAADTyN3/i7jF/gcAAIBp5O7/ZdzSZP/r//X/+v+j+/9LB9///7/36P/1/9ei/9f/L9H/6//3/H79v/6fdaP1/7n7fxW3NNn/AAAA0EHu/l/HLfY/AAAATCN3/2/iFvsfAAAAppG7/7dxS5P9r//X/+v/h/r+v/5f/6//vyD9v/7/oP8/2qn7+b2/X/+v/2fdaP1/7v4b4pYm+x8AAAA6yN3/u7jF/gcAAIBp5O7/fdxi/wMAAMA0cvffGLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f/6/yn7f9//1//vrf+/dPY/YP3/xej/9f8H/f/RTt3P7/39+n/9P+tG6/9z9/8lbmmy/wEAAKCD3P1/jVvsfwAAAJhG7v6/xS32PwAAAEwjd//f45Ym+1//r//X/+v/9f8D9P++/380/b/+/6D/P9qp+/m9v1//r/9n3Wj9f+7+f8QtTfY/AAAAdJC7/59xi/0PAAAA08jd/6+4xf4HAACAaeTu/3fc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+fAAAA//9nkS0F") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 662.600079ms ago: executing program 7 (id=593): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$FUSE_INIT(r1, &(0x7f0000002680)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0x9, 0x1, 0x7fff, 0x400, 0x8, 0x6, 0x0, 0x0, 0x40, 0x231}}, 0x50) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) 420.497426ms ago: executing program 0 (id=594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l', 0x1}], 0x3}], 0x1, 0x0) 420.308926ms ago: executing program 5 (id=595): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2d5, &(0x7f0000025dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x100) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) 396.354277ms ago: executing program 7 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 356.741738ms ago: executing program 3 (id=597): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa04416, &(0x7f0000000a00)=ANY=[], 0xff, 0x2ca, &(0x7f0000000140)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x70bd29, 0x25dfdbbe, {0x0, 0x0, 0x0, 0x0, 0x51b0b, 0x4}}, 0x20}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 487.36µs ago: executing program 7 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d616373656300001400028005000f0006000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 344.48µs ago: executing program 3 (id=599): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x0, 0x0}) 87.22µs ago: executing program 5 (id=600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000080)=""/47, 0x2f) 0s ago: executing program 0 (id=601): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x29) kernel console output (not intermixed with test programs): .533393][ T4273] device veth0_vlan entered promiscuous mode [ 85.553100][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.571780][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.601981][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.610753][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.625388][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.633924][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.654199][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.678190][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.699935][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.719078][ T4273] device veth1_vlan entered promiscuous mode [ 85.731392][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.749273][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.758606][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.767644][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.779067][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.788406][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.809934][ T4278] device veth0_vlan entered promiscuous mode [ 85.821209][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.846574][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.855356][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.870745][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.904614][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.917245][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.941209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.967044][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 85.968952][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 85.973101][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 85.979232][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 86.025161][ T4278] device veth1_vlan entered promiscuous mode [ 86.034843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.046628][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 86.051845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.062288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.080321][ T4273] device veth0_macvtap entered promiscuous mode [ 86.131091][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.157288][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.176518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.184949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.207837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.219009][ T4273] device veth1_macvtap entered promiscuous mode [ 86.297039][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.305331][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.315292][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.349979][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.367677][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.397961][ T4278] device veth0_macvtap entered promiscuous mode [ 86.424418][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.447447][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.468643][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.481662][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.490525][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.502565][ T4278] device veth1_macvtap entered promiscuous mode [ 86.522288][ T4277] device veth0_vlan entered promiscuous mode [ 86.547255][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.567973][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.579748][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.590220][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.603844][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.613273][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.621534][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.643896][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.657223][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.670837][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.681484][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.693734][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.726315][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.746777][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.758552][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.768269][ T4277] device veth1_vlan entered promiscuous mode [ 86.783847][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.793286][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.808559][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.822397][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.832822][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.856356][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.865141][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.893886][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.911982][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.922595][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.939686][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.953791][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.966030][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.976148][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.986077][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.995725][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.015313][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.023408][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.033347][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.042051][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.052259][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.066694][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.083300][ T4276] device veth0_vlan entered promiscuous mode [ 87.115842][ T4278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129276][ T4278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.147313][ T4278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.156079][ T4278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.180699][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.198761][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.213111][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.238534][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.364273][ T4276] device veth1_vlan entered promiscuous mode [ 87.382327][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.403773][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.417320][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.455595][ T4277] device veth0_macvtap entered promiscuous mode [ 87.539310][ T4277] device veth1_macvtap entered promiscuous mode [ 87.555251][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.592349][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.614122][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.652894][ T4276] device veth0_macvtap entered promiscuous mode [ 87.702221][ T4343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.710910][ T4343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.722733][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.733723][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.763297][ T4276] device veth1_macvtap entered promiscuous mode [ 87.773250][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.789127][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.799234][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.811883][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.822557][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.833417][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.845316][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.867773][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.875664][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.918257][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.929872][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.940562][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.951260][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.961186][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.973594][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.985655][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.993952][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.003576][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.012853][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.021976][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.031790][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.041028][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.049466][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 88.050046][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 88.055496][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 88.061526][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 88.078975][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.089956][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.100431][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.111012][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.122026][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.133636][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.143656][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 88.150159][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.160907][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.172373][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.181416][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.193232][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.204603][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.216027][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.225732][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.234555][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.260936][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.278284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.316593][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.320790][ T4371] loop0: detected capacity change from 0 to 256 [ 88.344970][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.353932][ T4371] ======================================================= [ 88.353932][ T4371] WARNING: The mand mount option has been deprecated and [ 88.353932][ T4371] and is ignored by this kernel. Remove the mand [ 88.353932][ T4371] option from the mount to silence this warning. [ 88.353932][ T4371] ======================================================= [ 88.393002][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.419505][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.436275][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.447146][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.457760][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.469052][ T4371] FAT-fs (loop0): Unrecognized mount option "Í}€" or missing value [ 88.477665][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.492975][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.517900][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.536276][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.575639][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.594401][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.624458][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.642619][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.665484][ T4276] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.695871][ T4276] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.704926][ T4276] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.713773][ T4276] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.919812][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.955668][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.986962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.080457][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.130144][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.137756][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.153470][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.167745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.196385][ T4321] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.211136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.336668][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.344564][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.380353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.407305][ T4321] usb 2-1: Using ep0 maxpacket: 32 [ 89.435389][ T4321] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 89.474753][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.523170][ T4321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.526672][ T4386] use of bytesused == 0 is deprecated and will be removed in the future, [ 89.541760][ T4321] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 89.554514][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.575586][ T4321] usb 2-1: config 0 descriptor?? [ 89.624106][ T4386] use the actual size instead. [ 89.701686][ T4388] loop4: detected capacity change from 0 to 64 [ 89.880803][ T4388] hfs: request for non-existent node 131072 in B*Tree [ 89.919420][ T4388] hfs: request for non-existent node 131072 in B*Tree [ 90.070045][ T4321] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 90.073769][ T127] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.203571][ T4401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.210361][ T4401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.222518][ T4401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.229050][ T4401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.236372][ T4401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.242798][ T4401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.251450][ T4401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.257929][ T4401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.265532][ T4401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 90.272232][ T4401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 90.296997][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 90.320035][ T127] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 90.339601][ T127] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.360258][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.382920][ T127] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.410782][ T127] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.442125][ T127] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.454372][ T4321] logitech 0003:046D:C29C.0001: no inputs found [ 90.465475][ T4329] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.483049][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.519119][ T4321] usb 2-1: USB disconnect, device number 2 [ 90.658593][ T4329] usb 3-1: config 0 has no interfaces? [ 90.674533][ T4329] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 90.710872][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.729454][ T4329] usb 3-1: Product: syz [ 90.737365][ T4404] fido_id[4404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 90.754436][ T4329] usb 3-1: Manufacturer: syz [ 90.761954][ T4329] usb 3-1: SerialNumber: syz [ 90.772919][ T127] usb 4-1: GET_CAPABILITIES returned 0 [ 90.779540][ T4329] usb 3-1: config 0 descriptor?? [ 90.783047][ T127] usbtmc 4-1:16.0: can't read capabilities [ 90.928952][ T4406] loop0: detected capacity change from 0 to 512 [ 91.007117][ T127] usb 4-1: USB disconnect, device number 2 [ 91.042091][ T4321] usb 3-1: USB disconnect, device number 2 [ 91.364166][ T4416] loop4: detected capacity change from 0 to 1024 [ 91.470232][ T4416] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.500538][ T4416] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.661584][ T4412] loop0: detected capacity change from 0 to 32768 [ 91.781127][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 91.818968][ T14] cfg80211: failed to load regulatory.db [ 91.828033][ T4412] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.857206][ T4430] loop2: detected capacity change from 0 to 512 [ 91.864492][ T4430] EXT4-fs: Ignoring removed bh option [ 91.938788][ T4430] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 91.992873][ T4430] EXT4-fs (loop2): 1 truncate cleaned up [ 92.036421][ T4430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.223287][ T4430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.25: bg 0: block 465: padding at end of block bitmap is not set [ 92.268172][ T4430] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 92.310345][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 92.321120][ T4430] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.321120][ T4430] [ 92.359321][ T4430] EXT4-fs (loop2): Total free blocks count 0 [ 92.376735][ T4430] EXT4-fs (loop2): Free/Dirty block details [ 92.395107][ T4430] EXT4-fs (loop2): free_blocks=0 [ 92.426294][ T4430] EXT4-fs (loop2): dirty_blocks=2 [ 92.441935][ T4430] EXT4-fs (loop2): Block reservation details [ 92.476394][ T4430] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 92.636072][ T4325] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 92.951302][ T4457] capability: warning: `syz.4.35' uses 32-bit capabilities (legacy support in use) [ 93.010241][ T4457] program syz.4.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.553015][ T4469] loop0: detected capacity change from 0 to 512 [ 93.609755][ T4444] loop3: detected capacity change from 0 to 32768 [ 93.637508][ T4469] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.42: bad orphan inode 13 [ 93.658055][ T4469] ext4_test_bit(bit=12, block=4) = 1 [ 93.663603][ T4469] is_bad_inode(inode)=0 [ 93.696395][ T4469] NEXT_ORPHAN(inode)=0 [ 93.719707][ T4469] max_ino=32 [ 93.723534][ T4444] XFS (loop3): Mounting V5 Filesystem [ 93.742776][ T4459] loop2: detected capacity change from 0 to 32768 [ 93.756559][ T4469] i_nlink=1 [ 93.759855][ T4469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.800804][ T4459] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.34 (4459) [ 93.841309][ T4469] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.42: Hash code is SIPHASH, but hash not in dirent [ 93.926995][ T4459] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 93.966509][ T4459] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 93.977902][ T4469] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.42: Corrupt directory, running e2fsck is recommended [ 94.003664][ T4459] BTRFS info (device loop2): enabling ssd optimizations [ 94.012584][ T4469] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.42: Hash code is SIPHASH, but hash not in dirent [ 94.065953][ T4459] BTRFS info (device loop2): not using ssd optimizations [ 94.088078][ T4444] XFS (loop3): Ending clean mount [ 94.095474][ T4469] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.42: Corrupt directory, running e2fsck is recommended [ 94.116300][ T4459] BTRFS info (device loop2): turning off barriers [ 94.122807][ T4459] BTRFS info (device loop2): using free space tree [ 94.152270][ T4444] XFS (loop3): Quotacheck needed: Please wait. [ 94.256601][ T4444] XFS (loop3): Quotacheck: Done. [ 94.410112][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 94.572344][ T4277] XFS (loop3): Unmounting Filesystem [ 94.934052][ T4273] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 94.948886][ T4282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.970323][ T4512] loop4: detected capacity change from 0 to 2048 [ 95.166846][ T4282] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.204143][ T4282] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 95.297344][ T4282] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 95.306422][ T4518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.329338][ T4393] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop2 scanned by udevd (4393) [ 95.349246][ T4282] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 95.386419][ T4282] usb 1-1: config 129 has no interface number 0 [ 95.443405][ T4282] usb 1-1: config 129 has no interface number 1 [ 95.466105][ T4282] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.497349][ T4282] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 95.530112][ T4282] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 95.547107][ T4526] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 95.616839][ T4282] usb 1-1: config 129 interface 135 has no altsetting 0 [ 95.623875][ T4282] usb 1-1: config 129 interface 5 has no altsetting 0 [ 95.640435][ T4526] Remounting filesystem read-only [ 95.680884][ T4526] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 95.701460][ T4282] usb 1-1: string descriptor 0 read error: -22 [ 95.716528][ T4282] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 95.737737][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.748555][ T4526] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 95.801850][ T26] audit: type=1800 audit(1781902864.276:2): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.49" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 95.827711][ T4282] usb 1-1: MIDIStreaming interface descriptor not found [ 96.059018][ T4276] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 96.205035][ T4282] usb 1-1: USB disconnect, device number 2 [ 96.313966][ T4540] loop4: detected capacity change from 0 to 128 [ 96.499505][ T4542] Bluetooth: MGMT ver 1.22 [ 96.751851][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 96.777251][ T4525] loop1: detected capacity change from 0 to 32768 [ 96.852260][ T4528] loop3: detected capacity change from 0 to 32768 [ 96.886872][ T26] audit: type=1800 audit(1781902865.366:3): pid=4525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 96.964687][ T4528] JBD2: Ignoring recovery information on journal [ 97.035638][ T4550] loop0: detected capacity change from 0 to 512 [ 97.098779][ T4528] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.124698][ T4550] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 97.175061][ T4550] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 97.189536][ T4550] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.60: iget: bad i_size value: 12154757448730 [ 97.203388][ T4550] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.60: couldn't read orphan inode 13 (err -117) [ 97.217195][ T4550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.444313][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 97.540932][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 98.654451][ T4566] loop2: detected capacity change from 0 to 32768 [ 98.772182][ T4566] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 98.788887][ T4576] loop3: detected capacity change from 0 to 2048 [ 98.842100][ T4578] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.887940][ T4576] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 98.942105][ T4569] loop4: detected capacity change from 0 to 32768 [ 98.972712][ T4576] Remounting filesystem read-only [ 99.015544][ T4569] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 99.025582][ T4576] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 99.065225][ T4576] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 99.087628][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 99.146527][ T26] audit: type=1800 audit(1781902867.626:4): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.68" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 99.263269][ T4277] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 99.462478][ T4534] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 99.698359][ T4582] loop4: detected capacity change from 0 to 4096 [ 99.830177][ T4582] ntfs: volume version 3.1. [ 99.915769][ T4582] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 99.990760][ T4582] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 100.025591][ T4597] __sock_release: fasync list not empty! [ 100.171230][ T4599] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 100.225576][ T4601] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.570932][ T4610] loop2: detected capacity change from 0 to 2048 [ 100.669940][ T4611] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.743211][ T4610] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 100.808232][ T4610] Remounting filesystem read-only [ 100.832442][ T4610] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 100.877830][ T4610] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 100.916939][ T26] audit: type=1800 audit(1781902869.396:5): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.81" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 101.027286][ T4273] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 101.150931][ T4592] loop0: detected capacity change from 0 to 32768 [ 101.253162][ T4592] JBD2: Ignoring recovery information on journal [ 101.408881][ T4592] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 101.437055][ T4607] loop3: detected capacity change from 0 to 32768 [ 101.466133][ T4607] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 101.577860][ T4607] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.730028][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 101.947160][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 102.052405][ T4630] loop0: detected capacity change from 0 to 4096 [ 102.096756][ T4630] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 102.229584][ T4630] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 102.717016][ T4645] capability: warning: `syz.0.91' uses deprecated v2 capabilities in a way that may be insecure [ 102.948120][ T4649] loop1: detected capacity change from 0 to 2048 [ 103.019292][ T4650] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.051296][ T4649] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 103.062598][ T4649] Remounting filesystem read-only [ 103.075496][ T4649] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 103.087291][ T4649] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 103.103196][ T26] audit: type=1800 audit(1781902871.576:6): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.94" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 103.211931][ T4278] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 103.254409][ T4652] loop0: detected capacity change from 0 to 24 [ 103.302239][ T4652] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 103.344278][ T4652] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 103.920698][ T4667] netem: change failed [ 104.362717][ T4662] loop4: detected capacity change from 0 to 32768 [ 104.412072][ T4679] loop0: detected capacity change from 0 to 2048 [ 104.428424][ T4662] JBD2: Ignoring recovery information on journal [ 104.456506][ T4681] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.487074][ T4679] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 104.499794][ T4662] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 104.509077][ T4679] Remounting filesystem read-only [ 104.509438][ T4679] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 104.590843][ T4679] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 104.626396][ T26] audit: type=1800 audit(1781902873.106:7): pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.108" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 104.731886][ T4684] loop2: detected capacity change from 0 to 512 [ 104.749115][ T4274] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 104.762614][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 104.906452][ T4684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.952519][ T4684] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.044583][ T26] audit: type=1800 audit(1781902873.516:8): pid=4684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 105.143951][ T4670] loop1: detected capacity change from 0 to 32768 [ 105.225886][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 105.249072][ T4670] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 105.361347][ T4694] loop0: detected capacity change from 0 to 2048 [ 105.417829][ T4278] ocfs2: Unmounting device (7,1) on (node local) [ 105.472967][ T4695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.537859][ T4694] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 105.623712][ T4694] Remounting filesystem read-only [ 105.648741][ T4694] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 105.689420][ T4700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 105.701829][ T4694] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 105.730592][ T26] audit: type=1800 audit(1781902874.206:9): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.121" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 105.754010][ T4700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 106.014778][ T26] audit: type=1326 audit(1781902874.486:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4702 comm="syz.3.114" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf2979ce59 code=0x0 [ 106.074797][ T4274] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 107.025086][ T4722] net_ratelimit: 1990 callbacks suppressed [ 107.025103][ T4722] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 107.310765][ T4733] loop1: detected capacity change from 0 to 128 [ 107.616370][ T4513] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.814676][ T4513] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 107.822996][ T4513] usb 4-1: config 0 has no interface number 0 [ 107.837493][ T4513] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 107.852185][ T4513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.860566][ T4513] usb 4-1: Product: syz [ 107.864808][ T4513] usb 4-1: Manufacturer: syz [ 107.874838][ T4513] usb 4-1: SerialNumber: syz [ 107.883244][ T4513] usb 4-1: config 0 descriptor?? [ 107.994441][ T4738] loop4: detected capacity change from 0 to 2048 [ 108.040349][ T4743] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.065192][ T4738] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 108.094940][ T4513] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 108.109735][ T4738] Remounting filesystem read-only [ 108.131003][ T4738] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 108.143439][ T4513] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.163206][ T4738] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 108.183682][ T4513] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 108.203683][ T26] audit: type=1800 audit(1781902876.676:11): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.127" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 108.224270][ T4513] usb 4-1: media controller created [ 108.282083][ T4513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.383810][ T4276] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 108.705625][ T4751] loop1: detected capacity change from 0 to 1024 [ 108.852178][ T4751] hfsplus: walked past end of dir [ 108.973388][ T4753] loop4: detected capacity change from 0 to 4096 [ 109.016321][ T4753] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 109.150010][ T4753] ntfs3: loop4: ino=0, attr_set_size [ 109.175333][ T4753] ntfs3: loop4: MFT: r=0, expect seq=0 instead of 1! [ 109.437946][ T4513] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 109.667616][ T4513] usb 4-1: USB disconnect, device number 3 [ 109.693275][ T4764] loop2: detected capacity change from 0 to 256 [ 109.759369][ T4767] loop0: detected capacity change from 0 to 256 [ 110.042931][ T4770] loop0: detected capacity change from 0 to 128 [ 110.110851][ T4770] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 110.128587][ T4774] netlink: 48 bytes leftover after parsing attributes in process `syz.2.142'. [ 110.178256][ T4770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.295724][ T4776] loop4: detected capacity change from 0 to 2048 [ 110.417198][ T4778] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.439415][ T4779] loop2: detected capacity change from 0 to 256 [ 110.457162][ T4776] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 110.512985][ T4776] Remounting filesystem read-only [ 110.546529][ T4776] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 110.585409][ T4776] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 110.653026][ T26] audit: type=1800 audit(1781902879.126:12): pid=4776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.145" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 110.676388][ T4779] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 110.735210][ T4779] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 110.789991][ T4786] program syz.0.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.821199][ T26] audit: type=1800 audit(1781902879.296:13): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 110.874940][ T4276] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 110.995620][ T4788] loop1: detected capacity change from 0 to 16 [ 111.027532][ T4788] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 112.099783][ T4793] loop2: detected capacity change from 0 to 32768 [ 112.833700][ T4828] loop2: detected capacity change from 0 to 2048 [ 112.872694][ T4828] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.911713][ T4828] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.013930][ T4828] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.032626][ T4832] loop3: detected capacity change from 0 to 2048 [ 113.122328][ T4832] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 113.143256][ T4828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.165: bg 0: block 234: padding at end of block bitmap is not set [ 113.210036][ T4828] EXT4-fs (loop2): Remounting filesystem read-only [ 113.224850][ T4832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.428919][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 113.596293][ T4844] bridge0: port 3(syz_tun) entered blocking state [ 113.627222][ T4844] bridge0: port 3(syz_tun) entered disabled state [ 113.669284][ T4825] loop0: detected capacity change from 0 to 32768 [ 113.678844][ T4844] device syz_tun entered promiscuous mode [ 113.714081][ T4844] bridge0: port 3(syz_tun) entered blocking state [ 113.720993][ T4844] bridge0: port 3(syz_tun) entered forwarding state [ 114.501504][ T4851] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 114.510087][ T4851] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 114.537051][ T4851] F2FS-fs (loop4): invalid crc value [ 114.559945][ T4825] XFS (loop0): Mounting V5 Filesystem [ 114.580212][ T4851] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.685858][ T4851] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 114.693306][ T4851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 114.759149][ T26] audit: type=1326 audit(1781902883.236:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 114.807887][ T4825] XFS (loop0): Ending clean mount [ 114.891683][ T26] audit: type=1326 audit(1781902883.276:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.026473][ T26] audit: type=1326 audit(1781902883.276:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.057503][ T4274] XFS (loop0): Unmounting Filesystem [ 115.152401][ T26] audit: type=1326 audit(1781902883.276:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.284459][ T26] audit: type=1326 audit(1781902883.276:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.436307][ T26] audit: type=1326 audit(1781902883.276:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.589467][ T26] audit: type=1326 audit(1781902883.276:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.705044][ T26] audit: type=1326 audit(1781902883.276:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.814694][ T26] audit: type=1326 audit(1781902883.276:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.881718][ T4880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 115.906444][ T26] audit: type=1326 audit(1781902883.276:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.2.177" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5baab9ce59 code=0x7ffc0000 [ 115.937328][ T4882] netlink: 340 bytes leftover after parsing attributes in process `syz.3.184'. [ 117.022149][ T4907] set_capacity_and_notify: 1 callbacks suppressed [ 117.022199][ T4907] loop1: detected capacity change from 0 to 512 [ 117.210341][ T4907] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.195: corrupted in-inode xattr [ 117.256923][ T4907] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.195: couldn't read orphan inode 15 (err -117) [ 117.286687][ T4907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.428877][ T4278] EXT4-fs error (device loop1): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 117.480929][ T4278] EXT4-fs error (device loop1): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 117.923525][ T4930] loop2: detected capacity change from 0 to 256 [ 117.953187][ T4930] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 117.998138][ T4278] EXT4-fs (loop1): unmounting filesystem. [ 118.005603][ T4932] loop3: detected capacity change from 0 to 256 [ 118.123016][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.497045][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.631310][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.712108][ T4934] bridge0: port 3(syz_tun) entered disabled state [ 118.774707][ T4940] loop4: detected capacity change from 0 to 1024 [ 118.810716][ T4934] device syz_tun left promiscuous mode [ 118.861487][ T4940] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.209: Failed to acquire dquot type 0 [ 118.863221][ T4934] bridge0: port 3(syz_tun) entered disabled state [ 118.903840][ T4940] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 118.937500][ T4940] EXT4-fs (loop4): 1 truncate cleaned up [ 118.970640][ T4940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.055800][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.427539][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 119.599634][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.609857][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.621571][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.629724][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.645053][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.654559][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.795932][ T4958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.213'. [ 119.944754][ T4961] program syz.4.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.037883][ T4963] program syz.0.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.457699][ T4513] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.676410][ T4513] usb 5-1: Using ep0 maxpacket: 8 [ 120.692630][ T4513] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.711197][ T4946] chnl_net:caif_netlink_parms(): no params data found [ 120.726418][ T4290] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.757267][ T4290] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.765868][ T4290] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.773321][ T4513] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.787643][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.795249][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.802602][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.846477][ T4513] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.866281][ T4513] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.890737][ T4513] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.916249][ T4513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.138803][ T4513] usb 5-1: GET_CAPABILITIES returned 0 [ 121.144420][ T4513] usbtmc 5-1:16.0: can't read capabilities [ 121.283940][ T4974] loop0: detected capacity change from 0 to 32768 [ 121.331938][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 121.331955][ T26] audit: type=1800 audit(1781902889.806:32): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.220" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 121.374352][ T4322] usb 5-1: USB disconnect, device number 2 [ 121.503730][ T4946] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.512648][ T4946] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.521496][ T4946] device bridge_slave_0 entered promiscuous mode [ 121.625815][ T4946] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.639860][ T4946] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.651500][ T4946] device bridge_slave_1 entered promiscuous mode [ 121.726873][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 121.755561][ T46] device hsr_slave_0 left promiscuous mode [ 121.764658][ T46] device hsr_slave_1 left promiscuous mode [ 121.772435][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.780473][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.810169][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.818353][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.845210][ T46] device bridge_slave_1 left promiscuous mode [ 121.853934][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.869293][ T46] device bridge_slave_0 left promiscuous mode [ 121.875667][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.950119][ T46] device veth1_macvtap left promiscuous mode [ 121.971280][ T46] device veth0_macvtap left promiscuous mode [ 121.979770][ T46] device veth1_vlan left promiscuous mode [ 121.985952][ T46] device veth0_vlan left promiscuous mode [ 122.518928][ T46] team0 (unregistering): Port device team_slave_1 removed [ 122.559077][ T46] team0 (unregistering): Port device team_slave_0 removed [ 122.599228][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.646422][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.846566][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 122.927250][ T46] bond0 (unregistering): Released all slaves [ 123.037039][ T4946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.049460][ T4946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.084469][ T4946] team0: Port device team_slave_0 added [ 123.148219][ T4946] team0: Port device team_slave_1 added [ 123.190599][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.204283][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.230481][ T4946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.243613][ T4946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.250747][ T4946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.276859][ T4946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.321704][ T4946] device hsr_slave_0 entered promiscuous mode [ 123.329092][ T4946] device hsr_slave_1 entered promiscuous mode [ 123.335995][ T4946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.343831][ T4946] Cannot create hsr debugfs directory [ 123.483839][ T4979] chnl_net:caif_netlink_parms(): no params data found [ 123.693824][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.708114][ T4979] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.719123][ T4979] device bridge_slave_0 entered promiscuous mode [ 123.737785][ T4946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.765425][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.786490][ T4979] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.794917][ T4979] device bridge_slave_1 entered promiscuous mode [ 123.806417][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 123.813473][ T4946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.857514][ T4946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.906051][ T4946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.931056][ T4979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.951811][ T4979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.054005][ T4979] team0: Port device team_slave_0 added [ 124.109963][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.150776][ T4979] team0: Port device team_slave_1 added [ 124.217082][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.248209][ T4979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.255233][ T4979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.282785][ T4979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.324728][ T4979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.339410][ T4979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.367532][ T4979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.398887][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.419422][ T4946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.475067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.484622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.515444][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.537239][ T4946] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.548865][ T4979] device hsr_slave_0 entered promiscuous mode [ 124.563323][ T4979] device hsr_slave_1 entered promiscuous mode [ 124.570212][ T4979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.586662][ T4979] Cannot create hsr debugfs directory [ 124.596446][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.605203][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.616103][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.623299][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.664845][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.674123][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.683849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.693841][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.701048][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.717767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.732669][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.744358][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.763211][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.804161][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.815698][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.832618][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.844778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.862145][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.894358][ T4946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.906983][ T4946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.915101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.924353][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.933108][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 125.407089][ T4979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 125.435410][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.443217][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.480453][ T4979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 125.492680][ T4979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 125.513947][ T4979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.554385][ T4946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.792767][ T4979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.837684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.845952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.856271][ T4979] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.891405][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 125.962400][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.988823][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.002269][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.009497][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.069788][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 126.087362][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 126.103058][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.112858][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.120076][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.186533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 126.200869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 126.221286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 126.231948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 126.281856][ T46] device hsr_slave_0 left promiscuous mode [ 126.291654][ T46] device hsr_slave_1 left promiscuous mode [ 126.303538][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.313702][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.325505][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.333389][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.347083][ T46] device bridge_slave_1 left promiscuous mode [ 126.354452][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.363800][ T46] device bridge_slave_0 left promiscuous mode [ 126.376214][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.422483][ T46] device veth1_macvtap left promiscuous mode [ 126.429579][ T46] device veth0_macvtap left promiscuous mode [ 126.435737][ T46] device veth1_vlan left promiscuous mode [ 126.446550][ T46] device veth0_vlan left promiscuous mode [ 127.017202][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 127.288043][ T46] team0 (unregistering): Port device team_slave_1 removed [ 127.326293][ T46] team0 (unregistering): Port device team_slave_0 removed [ 127.364339][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.404733][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.688524][ T46] bond0 (unregistering): Released all slaves [ 127.770661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 127.779098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.788563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.797293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.805832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.829566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.838493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.854338][ T4979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 127.921329][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.935882][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.978016][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 128.001332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.024313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.038228][ T4946] device veth0_vlan entered promiscuous mode [ 128.059546][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.075694][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.090039][ T4946] device veth1_vlan entered promiscuous mode [ 128.175574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 128.207063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 128.229560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.239631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.252605][ T4946] device veth0_macvtap entered promiscuous mode [ 128.296816][ T4946] device veth1_macvtap entered promiscuous mode [ 128.350814][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.382740][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.406423][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.426462][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.446467][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.465790][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.492910][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.526417][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 128.534791][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.557439][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.576953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.597658][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.610611][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.622180][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.632901][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.646323][ T4946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.666238][ T4946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.690404][ T4946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.701728][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.717305][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.724841][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.747132][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.764116][ T4979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.784031][ T4946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.793325][ T4946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.802634][ T4946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.822687][ T4946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.955188][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.979803][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.011269][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.057075][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.064981][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.085916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.093792][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 130.107140][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.126642][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.147199][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.177450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.227309][ T4979] device veth0_vlan entered promiscuous mode [ 130.235144][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.253141][ T5099] loop3: detected capacity change from 0 to 2048 [ 130.262297][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.282661][ T5099] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 130.320632][ T4979] device veth1_vlan entered promiscuous mode [ 130.468185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 130.506815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 130.547025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.597825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.648422][ T4979] device veth0_macvtap entered promiscuous mode [ 130.681741][ T5106] loop0: detected capacity change from 0 to 2048 [ 130.694547][ T4979] device veth1_macvtap entered promiscuous mode [ 130.724398][ T5106] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 130.761423][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.778271][ T5106] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 130.809156][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.830261][ T5106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.849919][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.864305][ T5111] loop4: detected capacity change from 0 to 1024 [ 130.890581][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.907822][ T5111] EXT4-fs: Ignoring removed orlov option [ 130.939869][ T26] audit: type=1800 audit(1781902899.416:33): pid=5106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.229" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 130.976556][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.008182][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.027078][ T5111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.073554][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.102842][ T5117] loop3: detected capacity change from 0 to 1024 [ 131.168607][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.247362][ T4979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.255631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 131.283145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.314200][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 131.348046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.400567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.465654][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.496277][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.542288][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.596393][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.638770][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.671448][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.711514][ T4979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.758529][ T4979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.798962][ T4979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.813233][ T5132] loop0: detected capacity change from 0 to 512 [ 131.827528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.843176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.867068][ T5132] EXT4-fs: Ignoring removed bh option [ 131.902787][ T4979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.934807][ T5132] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.945685][ T4979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.981651][ T4979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.990608][ T5132] EXT4-fs: Ignoring removed bh option [ 132.021541][ T4979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.059375][ T5132] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.180120][ T5132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.198574][ T5141] nr0: tun_chr_ioctl cmd 1074025677 [ 132.204159][ T5141] nr0: linktype set to 804 [ 132.281986][ T5132] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.362492][ T5147] loop4: detected capacity change from 0 to 256 [ 132.408443][ T5147] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 132.437335][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.456323][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.522802][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.609648][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.621470][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 132.657212][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.702893][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.770171][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.777022][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.032987][ T5164] program syz.6.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.284705][ T5169] loop0: detected capacity change from 0 to 2048 [ 133.293697][ T5173] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 133.344478][ T5169] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.466623][ T5177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.305811][ T5170] loop3: detected capacity change from 0 to 32768 [ 134.395738][ T5170] jfs_rename did not expect dtDelete to return rc = -2 [ 134.447380][ T5170] ERROR: (device loop3): jfs_rename: [ 134.447380][ T5170] [ 134.497150][ T5202] sctp: [Deprecated]: syz.5.264 (pid 5202) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.497150][ T5202] Use struct sctp_sack_info instead [ 134.514943][ T5170] ERROR: (device loop3): remounting filesystem as read-only [ 134.807619][ T5211] loop5: detected capacity change from 0 to 256 [ 134.829714][ T5209] loop0: detected capacity change from 0 to 1024 [ 134.856083][ T5211] exfat: Deprecated parameter 'namecase' [ 134.884025][ T5211] exfat: Deprecated parameter 'utf8' [ 134.909955][ T5211] exfat: Deprecated parameter 'namecase' [ 134.915714][ T5211] exfat: Deprecated parameter 'namecase' [ 135.021645][ T5211] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 135.062409][ T5209] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.296839][ T5190] loop4: detected capacity change from 0 to 32768 [ 135.393783][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 135.522488][ T5221] loop6: detected capacity change from 0 to 512 [ 135.622458][ T5221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 135.677347][ T5227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'. [ 135.688851][ T5221] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.838854][ T5221] EXT4-fs error (device loop6): ext4_orphan_get:1431: comm syz.6.269: bad orphan inode 131083 [ 135.939672][ T5221] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 136.003897][ T5221] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.269: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 136.133362][ T5221] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 136.251796][ T5241] loop4: detected capacity change from 0 to 1024 [ 136.361169][ T4979] EXT4-fs (loop6): unmounting filesystem. [ 136.439235][ T5241] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 136.487470][ T5241] EXT4-fs (loop4): orphan cleanup on readonly fs [ 136.503334][ T5241] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.277: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.521070][ T5241] EXT4-fs (loop4): Remounting filesystem read-only [ 136.528442][ T5241] EXT4-fs (loop4): 1 orphan inode deleted [ 136.534389][ T5241] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.585594][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 136.820801][ T5254] input: syz0 as /devices/virtual/input/input5 [ 137.078317][ T5261] input: syz1 as /devices/virtual/input/input8 [ 137.313128][ T5225] loop5: detected capacity change from 0 to 40427 [ 137.389731][ T5225] F2FS-fs (loop5): invalid crc value [ 137.427643][ T5225] F2FS-fs (loop5): Found nat_bits in checkpoint [ 137.669314][ T5225] F2FS-fs (loop5): Start checkpoint disabled! [ 137.733723][ T5225] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 138.179273][ T4325] kworker/u4:5: attempt to access beyond end of device [ 138.179273][ T4325] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 139.750510][ T5306] loop6: detected capacity change from 0 to 32768 [ 139.796378][ T4324] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 139.804077][ T4282] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.858258][ T5306] XFS (loop6): Mounting V5 Filesystem [ 139.876793][ T5308] loop3: detected capacity change from 0 to 32768 [ 139.910884][ T26] audit: type=1800 audit(1781902908.386:34): pid=5308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 139.969869][ T5306] XFS (loop6): Ending clean mount [ 140.007221][ T4282] usb 1-1: Using ep0 maxpacket: 16 [ 140.015373][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.033384][ T4282] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 140.061578][ T4324] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.082231][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.099345][ T4324] usb 6-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 140.126295][ T4282] usb 1-1: Product: syz [ 140.130560][ T4282] usb 1-1: Manufacturer: syz [ 140.135208][ T4282] usb 1-1: SerialNumber: syz [ 140.146340][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.170174][ T4324] usb 6-1: config 0 descriptor?? [ 140.396203][ T4979] XFS (loop6): Unmounting Filesystem [ 140.586961][ T4324] hid (null): unknown global tag 0xe [ 140.595560][ T4324] hid (null): global environment stack underflow [ 140.625394][ T4324] hid (null): unknown global tag 0x52 [ 140.676566][ T4324] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 140.693891][ T4324] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 140.719921][ T4324] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 140.740297][ T4324] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 140.781118][ T4324] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 140.809920][ T4324] wacom 0003:056A:5000.0002: unknown main item tag 0x0 [ 140.830194][ T4324] wacom 0003:056A:5000.0002: ignoring exceeding usage max [ 140.860410][ T4324] wacom 0003:056A:5000.0002: unknown global tag 0xe [ 140.867564][ T4324] wacom 0003:056A:5000.0002: item 0 1 1 14 parsing failed [ 140.875515][ T4324] wacom 0003:056A:5000.0002: parse failed [ 140.882671][ T4324] wacom: probe of 0003:056A:5000.0002 failed with error -22 [ 140.906428][ T4324] usb 6-1: USB disconnect, device number 2 [ 141.013026][ T4282] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 141.026663][ T4282] usb 1-1: USB disconnect, device number 3 [ 141.126830][ T5365] binder: 5364:5365 ioctl 541b 0 returned -22 [ 141.662867][ T5381] pimreg: tun_chr_ioctl cmd 1074025677 [ 141.688304][ T5381] pimreg: linktype set to 0 [ 142.657776][ T5407] device bond_slave_0 entered promiscuous mode [ 142.664483][ T5407] device bond_slave_1 entered promiscuous mode [ 142.714073][ T5407] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.748062][ T5407] device bond_slave_0 left promiscuous mode [ 142.754151][ T5407] device bond_slave_1 left promiscuous mode [ 142.873729][ T5411] loop4: detected capacity change from 0 to 256 [ 143.714728][ T5436] loop6: detected capacity change from 0 to 256 [ 143.752088][ T5435] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.336'. [ 144.451005][ T1182] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 144.650952][ T1182] usb 7-1: Using ep0 maxpacket: 16 [ 144.659981][ T1182] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.694111][ T5429] loop3: detected capacity change from 0 to 40427 [ 144.702125][ T1182] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.729834][ T5429] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 144.750995][ T1182] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 144.783533][ T5429] F2FS-fs (loop3): invalid crc value [ 144.793912][ T5432] loop4: detected capacity change from 0 to 32768 [ 144.804005][ T1182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.821616][ T5429] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.830463][ T1182] usb 7-1: Product: syz [ 144.834708][ T1182] usb 7-1: Manufacturer: syz [ 144.883715][ T5432] jfs_unlink: dtDelete returned -2 [ 144.893048][ T1182] usb 7-1: SerialNumber: syz [ 145.050816][ T5429] F2FS-fs (loop3): recover fsync data on readonly fs [ 145.102938][ T5429] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.134811][ T1182] usb 7-1: unit 3 not found! [ 145.140614][ T1182] usb 7-1: unit 7 not found! [ 145.159466][ T1182] usb 7-1: unit 0 not found! [ 145.272754][ T1182] usb 7-1: USB disconnect, device number 2 [ 145.538484][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.620491][ T5496] loop5: detected capacity change from 0 to 256 [ 146.687491][ T5496] FAT-fs (loop5): Directory bread(block 64) failed [ 146.706295][ T5496] FAT-fs (loop5): Directory bread(block 65) failed [ 146.728997][ T5496] FAT-fs (loop5): Directory bread(block 66) failed [ 146.749909][ T5496] FAT-fs (loop5): Directory bread(block 67) failed [ 146.784458][ T5496] FAT-fs (loop5): Directory bread(block 68) failed [ 146.812070][ T5496] FAT-fs (loop5): Directory bread(block 69) failed [ 146.833221][ T5496] FAT-fs (loop5): Directory bread(block 70) failed [ 146.877603][ T5496] FAT-fs (loop5): Directory bread(block 71) failed [ 146.894586][ T5496] FAT-fs (loop5): Directory bread(block 72) failed [ 146.931509][ T5496] FAT-fs (loop5): Directory bread(block 73) failed [ 147.189213][ T5481] loop4: detected capacity change from 0 to 40427 [ 147.241561][ T5481] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 147.263265][ T5479] loop6: detected capacity change from 0 to 40427 [ 147.278788][ T5481] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 147.310341][ T5479] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 147.339833][ T5479] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 147.357339][ T5479] F2FS-fs (loop6): invalid crc value [ 147.368559][ T5481] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.377129][ T5479] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 147.543433][ T5494] loop0: detected capacity change from 0 to 32768 [ 147.624579][ T5481] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 147.659448][ T5494] JBD2: Ignoring recovery information on journal [ 147.669873][ T5481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.727210][ T5479] F2FS-fs (loop6): Start checkpoint disabled! [ 147.802498][ T5479] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 147.825415][ T5494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.859090][ T5479] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 148.004263][ T4343] kworker/u4:7: attempt to access beyond end of device [ 148.004263][ T4343] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.057967][ T26] audit: type=1800 audit(1781903172.535:35): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.352" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 148.078064][ T4347] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 148.087634][ T5479] VFS:Filesystem freeze failed [ 148.095869][ T4274] ocfs2: Unmounting device (7,0) on (node local) [ 148.296235][ T4347] usb 6-1: Using ep0 maxpacket: 32 [ 148.303587][ T4347] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 148.321662][ T4347] usb 6-1: config 0 has no interface number 0 [ 148.332168][ T4347] usb 6-1: config 0 interface 12 has no altsetting 0 [ 148.351010][ T4347] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 148.361286][ T4347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.369786][ T4347] usb 6-1: Product: syz [ 148.374137][ T4347] usb 6-1: Manufacturer: syz [ 148.404633][ T4347] usb 6-1: SerialNumber: syz [ 148.455090][ T4347] usb 6-1: config 0 descriptor?? [ 148.888023][ T5526] loop0: detected capacity change from 0 to 2048 [ 148.951581][ T5526] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.998746][ T5526] NILFS (loop0): mounting unchecked fs [ 149.055828][ T5526] NILFS (loop0): recovery complete [ 149.090503][ T4397] udevd[4397]: incorrect nilfs2 checksum on /dev/loop0 [ 149.124388][ T5529] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.289050][ T4347] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 149.317382][ T4347] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.335006][ T4347] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.355292][ T4347] f81534: probe of 6-1:0.12 failed with error -71 [ 149.417571][ T4347] usb 6-1: USB disconnect, device number 3 [ 149.795834][ T5543] loop6: detected capacity change from 0 to 512 [ 149.945391][ T5543] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 150.576352][ T5556] loop6: detected capacity change from 0 to 256 [ 150.661577][ T5556] FAT-fs (loop6): Directory bread(block 64) failed [ 150.690458][ T5556] FAT-fs (loop6): Directory bread(block 65) failed [ 150.721927][ T5556] FAT-fs (loop6): Directory bread(block 66) failed [ 150.747181][ T5556] FAT-fs (loop6): Directory bread(block 67) failed [ 150.781790][ T5556] FAT-fs (loop6): Directory bread(block 68) failed [ 150.809583][ T5556] FAT-fs (loop6): Directory bread(block 69) failed [ 150.836223][ T4347] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.837050][ T5556] FAT-fs (loop6): Directory bread(block 70) failed [ 150.899758][ T5556] FAT-fs (loop6): Directory bread(block 71) failed [ 150.942078][ T5556] FAT-fs (loop6): Directory bread(block 72) failed [ 150.968538][ T5556] FAT-fs (loop6): Directory bread(block 73) failed [ 151.036366][ T4347] usb 5-1: Using ep0 maxpacket: 16 [ 151.047177][ T4347] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.064163][ T5540] loop0: detected capacity change from 0 to 40427 [ 151.086277][ T4347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.103590][ T5540] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 151.118558][ T4347] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 151.154916][ T5540] F2FS-fs (loop0): invalid crc value [ 151.166687][ T4347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.192972][ T5540] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.202520][ T4347] usb 5-1: Product: syz [ 151.217078][ T4347] usb 5-1: Manufacturer: syz [ 151.237020][ T4347] usb 5-1: SerialNumber: syz [ 151.280819][ T4347] usb 5-1: config 0 descriptor?? [ 151.495640][ T5540] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.532941][ T4347] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 151.751803][ T4274] syz-executor: attempt to access beyond end of device [ 151.751803][ T4274] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.146321][ T4347] rc_core: IR keymap rc-imon-pad not found [ 152.152272][ T4347] Registered IR keymap rc-empty [ 152.176343][ T4347] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 152.226442][ T4347] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 152.248380][ T5560] loop3: detected capacity change from 0 to 40427 [ 152.289827][ T4347] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 152.309404][ T5560] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 152.334240][ T4347] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 152.365912][ T5560] F2FS-fs (loop3): invalid crc value [ 152.381363][ T4347] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:3> initialized [ 152.392213][ T5560] F2FS-fs (loop3): Found nat_bits in checkpoint [ 152.484870][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 152.515779][ T5585] device syz_tun entered promiscuous mode [ 152.523526][ T4347] usb 5-1: USB disconnect, device number 3 [ 152.566764][ T5585] device macvtap1 entered promiscuous mode [ 152.652297][ T5585] device syz_tun left promiscuous mode [ 152.662839][ T5560] F2FS-fs (loop3): recover fsync data on readonly fs [ 152.697799][ T5560] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 152.704528][ T5560] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 152.750680][ T5560] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 152.873565][ T5560] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 153.294634][ T5602] loop0: detected capacity change from 0 to 1024 [ 153.383294][ T5602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 153.827269][ T5594] loop6: detected capacity change from 0 to 32768 [ 153.850738][ T5594] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.380 (5594) [ 153.900528][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 153.977998][ T5594] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 154.047272][ T5594] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 154.096923][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.389'. [ 154.107658][ T5594] BTRFS info (device loop6): using free space tree [ 154.313480][ T5645] loop4: detected capacity change from 0 to 1024 [ 154.321174][ T5645] EXT4-fs: inline encryption not supported [ 154.367436][ T5645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.471643][ T5594] BTRFS info (device loop6): enabling ssd optimizations [ 154.541980][ T5645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.690595][ T26] audit: type=1800 audit(1781903179.165:36): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.390" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 155.022133][ T5663] loop0: detected capacity change from 0 to 512 [ 155.039648][ T26] audit: type=1800 audit(1781903179.515:37): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.380" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 155.178868][ T5663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.197054][ T5663] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.205745][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 155.227338][ T4979] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 155.549357][ T4321] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.593945][ T4321] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.612445][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 155.618740][ T4321] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.04 Device [syz0] on syz1 [ 155.723751][ T5679] netlink: 'syz.5.397': attribute type 3 has an invalid length. [ 155.968620][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 156.128863][ T5687] loop0: detected capacity change from 0 to 4096 [ 156.142309][ T5682] fido_id[5682]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.416339][ T4514] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.495762][ T4274] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 156.527400][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 156.616238][ T4514] usb 4-1: Using ep0 maxpacket: 16 [ 156.624256][ T4514] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.680252][ T4514] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.730041][ T4514] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 156.736827][ T5708] loop0: detected capacity change from 0 to 1024 [ 156.773785][ T4514] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.783925][ T4514] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 156.813681][ T5710] loop5: detected capacity change from 0 to 2048 [ 156.848174][ T4514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.859955][ T5708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.891252][ T4514] usb 4-1: config 0 descriptor?? [ 156.934040][ T5710] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 157.029840][ T5710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.068306][ T5717] EXT4-fs (loop0): shut down requested (1) [ 157.256126][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 157.315991][ T4514] hid (null): invalid report_size -2146972904 [ 157.328229][ T4514] hid (null): unknown global tag 0xd [ 157.376254][ T4514] hid (null): invalid report_count 32517 [ 157.476525][ T5726] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 157.514764][ T5726] netlink: 'syz.0.410': attribute type 2 has an invalid length. [ 157.535096][ T4514] usb 4-1: USB disconnect, device number 4 [ 157.653039][ T5697] loop6: detected capacity change from 0 to 32768 [ 157.761553][ T5733] loop0: detected capacity change from 0 to 256 [ 157.775741][ T5697] XFS (loop6): Mounting V5 Filesystem [ 157.873441][ T5697] XFS (loop6): Ending clean mount [ 158.119010][ T4979] XFS (loop6): Unmounting Filesystem [ 158.152942][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 158.598460][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 158.956338][ T5677] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 159.011486][ T5762] vcan0: tx address claim with dlc 0 [ 159.158069][ T5677] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.192867][ T5677] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.220781][ T5677] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.241624][ T5677] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 159.284445][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.323452][ T5677] usb 4-1: config 0 descriptor?? [ 159.704389][ T5793] loop6: detected capacity change from 0 to 128 [ 159.739439][ T5793] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 159.761983][ T5677] hid-steam 0003:28DE:1102.0005: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 159.897879][ T5677] hid-steam 0003:28DE:1102.0006: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.3-1/input0 [ 160.056993][ T5677] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' connected [ 160.113234][ T5677] input: Steam Controller as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1102.0005/input/input11 [ 160.244634][ T5677] usb 4-1: USB disconnect, device number 5 [ 160.409142][ T5677] hid-steam 0003:28DE:1102.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 160.672519][ T5806] fido_id[5806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 160.704161][ T5805] loop6: detected capacity change from 0 to 8192 [ 160.710898][ T5811] loop5: detected capacity change from 0 to 512 [ 160.754991][ T5814] loop3: detected capacity change from 0 to 8 [ 160.842592][ T5811] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 160.974318][ T5811] EXT4-fs error (device loop5): ext4_get_first_dir_block:3583: inode #12: comm syz.5.435: Directory block failed checksum [ 161.122158][ T5821] raw_sendmsg: syz.4.440 forgot to set AF_INET. Fix it! [ 161.166912][ T4946] EXT4-fs (loop5): unmounting filesystem. [ 161.976087][ T5845] loop5: detected capacity change from 0 to 256 [ 162.010135][ T5846] loop4: detected capacity change from 0 to 512 [ 162.073091][ T5846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.127951][ T5846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 162.146388][ T5845] FAT-fs (loop5): Directory bread(block 64) failed [ 162.153012][ T5845] FAT-fs (loop5): Directory bread(block 65) failed [ 162.167408][ T5846] System zones: 1-12 [ 162.172704][ T5846] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.448: bad orphan inode 131072 [ 162.271221][ T5845] FAT-fs (loop5): Directory bread(block 66) failed [ 162.278463][ T5845] FAT-fs (loop5): Directory bread(block 67) failed [ 162.280789][ T5846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.285529][ T5845] FAT-fs (loop5): Directory bread(block 68) failed [ 162.329721][ T5850] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 162.336637][ T5845] FAT-fs (loop5): Directory bread(block 69) failed [ 162.349034][ T5845] FAT-fs (loop5): Directory bread(block 70) failed [ 162.357668][ T5845] FAT-fs (loop5): Directory bread(block 71) failed [ 162.365144][ T5845] FAT-fs (loop5): Directory bread(block 72) failed [ 162.372587][ T5845] FAT-fs (loop5): Directory bread(block 73) failed [ 162.386271][ T5814] loop3: detected capacity change from 0 to 32768 [ 162.397101][ T4325] Bluetooth: hci5: Frame reassembly failed (-84) [ 162.404190][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 162.485856][ T5846] overlayfs: upper fs needs to support d_type. [ 162.523984][ T5814] XFS (loop3): Mounting V5 Filesystem [ 162.670192][ T5814] XFS (loop3): Ending clean mount [ 162.746020][ T4276] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /100/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 162.850602][ T4277] XFS (loop3): Unmounting Filesystem [ 163.067391][ T5867] loop5: detected capacity change from 0 to 64 [ 163.554194][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 163.782423][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.832606][ T5883] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 164.097983][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.230590][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.368474][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.376802][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 164.387469][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 164.711629][ T5901] sctp: [Deprecated]: syz.3.467 (pid 5901) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.711629][ T5901] Use struct sctp_sack_info instead [ 164.741149][ T5903] Bluetooth: MGMT ver 1.22 [ 164.768358][ T5903] Bluetooth: hci1: too big key_count value 65510 [ 165.400188][ T5925] loop6: detected capacity change from 0 to 64 [ 165.427297][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.439414][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.457551][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.487000][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.496101][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.503618][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.216430][ T5677] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 166.417959][ T5677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.446222][ T5677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.467714][ T5677] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 166.488872][ T5677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.508554][ T5677] usb 7-1: config 0 descriptor?? [ 166.535598][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 166.606414][ T4513] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.798844][ T4513] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.824551][ T4513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.869041][ T4513] usb 6-1: config 0 descriptor?? [ 166.945461][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 166.970374][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 167.006513][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 167.021765][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 167.027165][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.036572][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.044324][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 167.054827][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.062260][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 167.071243][ T5677] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 167.086600][ T5923] device bridge_slave_0 entered promiscuous mode [ 167.088509][ T5677] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 167.105289][ T5677] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 167.150876][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.163897][ C1] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71 [ 167.184965][ T5673] usb 7-1: USB disconnect, device number 3 [ 167.224052][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.236459][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 167.244105][ T5923] device bridge_slave_1 entered promiscuous mode [ 167.244421][ T4321] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.297076][ T4321] usb 1-1: config 179 has no interface number 0 [ 167.303639][ T4321] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 167.349638][ T4321] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 167.391679][ T4321] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.443244][ T4321] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 167.470550][ T5971] fido_id[5971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 167.488435][ T4321] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.542402][ T4321] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.567910][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 167.571277][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.629394][ T5963] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 167.642547][ T9] device hsr_slave_0 left promiscuous mode [ 167.654038][ T9] device hsr_slave_1 left promiscuous mode [ 167.663981][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.675286][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.703338][ T4513] usb 6-1: Cannot set autoneg [ 167.704882][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.713008][ T4513] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 167.734214][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.748887][ T9] device bridge_slave_1 left promiscuous mode [ 167.755308][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.772303][ T9] device bridge_slave_0 left promiscuous mode [ 167.782359][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.797359][ T4513] usb 6-1: USB disconnect, device number 4 [ 167.877635][ T4321] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 167.935198][ T9] device veth1_macvtap left promiscuous mode [ 167.954658][ T9] device veth0_macvtap left promiscuous mode [ 167.963572][ T9] device veth1_vlan left promiscuous mode [ 167.975055][ T9] device veth0_vlan left promiscuous mode [ 168.085585][ T4513] usb 1-1: USB disconnect, device number 4 [ 168.091598][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 168.099939][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 168.113887][ T4513] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 168.596300][ T4321] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.788956][ T4321] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 168.803978][ T4321] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 168.823245][ T4321] usb 6-1: config 220 has no interface number 2 [ 168.833039][ T4321] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 168.859358][ T4321] usb 6-1: config 220 interface 0 has no altsetting 0 [ 168.874644][ T4321] usb 6-1: config 220 interface 76 has no altsetting 0 [ 168.878831][ T9] team0 (unregistering): Port device team_slave_1 removed [ 168.882786][ T4321] usb 6-1: config 220 interface 1 has no altsetting 0 [ 168.900302][ T4321] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 168.909769][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.919276][ T4321] usb 6-1: Product: syz [ 168.923760][ T4321] usb 6-1: Manufacturer: syz [ 168.928570][ T4321] usb 6-1: SerialNumber: syz [ 168.993898][ T9] team0 (unregistering): Port device team_slave_0 removed [ 169.041827][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.050640][ T4513] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 169.112898][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.175202][ T4321] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 169.182700][ T4321] usb 6-1: No valid video chain found. [ 169.189540][ T4321] usb 6-1: selecting invalid altsetting 0 [ 169.229320][ T4321] usb 6-1: selecting invalid altsetting 0 [ 169.235131][ T4321] usbtest: probe of 6-1:220.1 failed with error -22 [ 169.253134][ T4321] usb 6-1: USB disconnect, device number 5 [ 169.267978][ T4513] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 169.299293][ T4513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 169.310294][ T4513] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 169.325018][ T4513] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 169.334448][ T4513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.354471][ T4513] usb 1-1: config 0 descriptor?? [ 169.366755][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.646380][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 169.663127][ T9] bond0 (unregistering): Released all slaves [ 169.781157][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.798994][ T4513] corsair 0003:1B1C:1B3E.0008: ignoring exceeding usage max [ 169.814953][ T4513] corsair 0003:1B1C:1B3E.0008: unknown main item tag 0x4 [ 169.840019][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.874193][ T4513] corsair 0003:1B1C:1B3E.0008: hidraw0: USB HID v0.01 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 170.012272][ T4513] usb 1-1: USB disconnect, device number 5 [ 170.020107][ T5923] team0: Port device team_slave_0 added [ 170.046936][ T5923] team0: Port device team_slave_1 added [ 170.048539][ T5991] syz.3.490[5991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.052716][ T5991] syz.3.490[5991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.175952][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.236474][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.368307][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.402959][ T5995] fido_id[5995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 170.418202][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.435427][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.477518][ T6002] loop6: detected capacity change from 0 to 64 [ 170.606642][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.762627][ T5923] device hsr_slave_0 entered promiscuous mode [ 170.811847][ T5923] device hsr_slave_1 entered promiscuous mode [ 170.834421][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.838772][ T6010] loop0: detected capacity change from 0 to 8 [ 170.872069][ T5923] Cannot create hsr debugfs directory [ 170.953588][ T6010] SQUASHFS error: zlib decompression failed, data probably corrupt [ 170.975824][ T6010] SQUASHFS error: Failed to read block 0x9b: -5 [ 171.001803][ T6010] SQUASHFS error: Unable to read metadata cache entry [99] [ 171.026666][ T6010] SQUASHFS error: Unable to read inode 0x127 [ 171.591282][ T5923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.648196][ T5923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.678198][ T5923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.712611][ T5923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.726524][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 171.833716][ T6041] process 'syz.6.510' launched './file0' with NULL argv: empty string added [ 172.057024][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.093060][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.107066][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.124912][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.152889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.176805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.205860][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.213092][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.272041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.331950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.387721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.416876][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.424080][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.476035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.507827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.557405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.598594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.637308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.661715][ T6058] loop3: detected capacity change from 0 to 4096 [ 172.723871][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.765628][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.798622][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.888444][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.951757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.028408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.091135][ T4277] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 173.116438][ T4277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 173.227874][ T6078] loop0: detected capacity change from 0 to 2048 [ 173.340660][ T6078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.493937][ T6093] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 173.806278][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 173.817567][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 174.143501][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.164340][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.201897][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.859315][ T6131] loop0: detected capacity change from 0 to 4096 [ 174.992669][ T26] audit: type=1326 audit(1781903199.465:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.5.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1363d9ce59 code=0x0 [ 175.276896][ T4274] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 175.283807][ T4274] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 175.730861][ T6161] vivid-000: disconnect [ 175.775074][ T6159] vivid-000: reconnect [ 175.796755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.807154][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.862934][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.872626][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.886608][ T48] Bluetooth: hci2: command 0x0411 tx timeout [ 175.958952][ T5923] device veth0_vlan entered promiscuous mode [ 175.966999][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.980640][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.040510][ T5923] device veth1_vlan entered promiscuous mode [ 176.134374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.147797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.182685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.203100][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.216014][ T5923] device veth0_macvtap entered promiscuous mode [ 176.247184][ T5923] device veth1_macvtap entered promiscuous mode [ 176.305217][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.326367][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.346183][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.366200][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.388705][ T6156] loop0: detected capacity change from 0 to 32768 [ 176.398564][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.457732][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.491975][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.504015][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.519142][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.532815][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.549387][ T6156] XFS (loop0): Mounting V5 Filesystem [ 176.553836][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.615140][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.623453][ T6156] XFS (loop0): Ending clean mount [ 176.640895][ T6156] XFS (loop0): Quotacheck needed: Please wait. [ 176.681641][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.730805][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.743637][ T6156] XFS (loop0): Quotacheck: Done. [ 176.787612][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.846016][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.892605][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.936259][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.988371][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.020225][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.086387][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.125878][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.144752][ T4274] XFS (loop0): Unmounting Filesystem [ 177.183037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.205625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.272171][ T5923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.298932][ T5923] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.324980][ T5923] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.352844][ T5923] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.431207][ T6164] loop5: detected capacity change from 0 to 32768 [ 177.516477][ T5683] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 177.618867][ T6164] XFS (loop5): Mounting V5 Filesystem [ 177.736413][ T5683] usb 7-1: Using ep0 maxpacket: 8 [ 177.743576][ T5683] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.766796][ T5683] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 177.788180][ T5683] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 177.798143][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.806623][ T5683] usb 7-1: Product: syz [ 177.810948][ T5683] usb 7-1: Manufacturer: syz [ 177.815623][ T5683] usb 7-1: SerialNumber: syz [ 177.820518][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.843761][ T6164] XFS (loop5): Ending clean mount [ 177.872621][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.932915][ T27] kernel read not supported for file /rfkill (pid: 27 comm: kworker/1:1) [ 177.993870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 178.005097][ T6178] loop3: detected capacity change from 0 to 32768 [ 178.040889][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.055838][ T6178] [ 178.055838][ T6178] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.055838][ T6178] [ 178.082195][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.125711][ T4946] XFS (loop5): Unmounting Filesystem [ 178.143455][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.161185][ T5683] usb 7-1: USB disconnect, device number 4 [ 178.357724][ T4328] ERROR: (device loop3): diWrite: ixpxd invalid [ 178.357724][ T4328] [ 178.413049][ T4328] ERROR: (device loop3): txCommit: [ 178.413049][ T4328] [ 178.435339][ T4328] jfs_write_inode: jfs_commit_inode failed! [ 178.464414][ T4277] [ 178.464414][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.464414][ T4277] [ 178.487252][ T4277] [ 178.487252][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.487252][ T4277] [ 178.666595][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 178.969702][ T6217] loop3: detected capacity change from 0 to 256 [ 178.994360][ T6219] Zero length message leads to an empty skb [ 179.081835][ T6221] loop0: detected capacity change from 0 to 164 [ 179.105388][ T6217] FAT-fs (loop3): Directory bread(block 64) failed [ 179.141669][ T6217] FAT-fs (loop3): Directory bread(block 65) failed [ 179.204135][ T6217] FAT-fs (loop3): Directory bread(block 66) failed [ 179.226385][ T6221] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 179.247969][ T6217] FAT-fs (loop3): Directory bread(block 67) failed [ 179.254696][ T6217] FAT-fs (loop3): Directory bread(block 68) failed [ 179.302293][ T6221] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 179.312035][ T6217] FAT-fs (loop3): Directory bread(block 69) failed [ 179.354321][ T6217] FAT-fs (loop3): Directory bread(block 70) failed [ 179.370843][ T6221] rock: directory entry would overflow storage [ 179.381579][ T6217] FAT-fs (loop3): Directory bread(block 71) failed [ 179.396265][ T6217] FAT-fs (loop3): Directory bread(block 72) failed [ 179.397457][ T6221] rock: sig=0x4f50, size=4, remaining=3 [ 179.403308][ T6217] FAT-fs (loop3): Directory bread(block 73) failed [ 179.446395][ T6221] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.084408][ T6238] loop5: detected capacity change from 0 to 4096 [ 180.534749][ T4328] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 181.115282][ T6257] loop3: detected capacity change from 0 to 32768 [ 181.628692][ T5683] kernel read not supported for file /dsp1 (pid: 5683 comm: kworker/1:10) [ 181.973929][ T6295] loop0: detected capacity change from 0 to 16 [ 181.987370][ T6295] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 182.529504][ T6315] loop3: detected capacity change from 0 to 512 [ 182.573765][ T6315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.606366][ T4288] Bluetooth: hci5: command 0x1003 tx timeout [ 182.614995][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.768600][ T6315] EXT4-fs (loop3): 1 truncate cleaned up [ 182.774421][ T6315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.124980][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 183.506886][ T6335] loop3: detected capacity change from 0 to 4096 [ 183.820355][ T6349] loop5: detected capacity change from 0 to 64 [ 184.097750][ T4328] ------------[ cut here ]------------ [ 184.103300][ T4328] kernel BUG at fs/hfs/inode.c:449! [ 184.147501][ T4328] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 184.153676][ T4328] CPU: 1 PID: 4328 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 184.161272][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.171373][ T4328] Workqueue: writeback wb_workfn (flush-7:5) [ 184.177430][ T4328] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 184.183017][ T4328] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 91 2e 87 ff e9 43 fe ff ff e8 d7 06 36 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 184.202667][ T4328] RSP: 0018:ffffc900040173a0 EFLAGS: 00010293 [ 184.208770][ T4328] RAX: ffffffff824c1a39 RBX: ffff88801e740e98 RCX: ffff88801fe80000 [ 184.216767][ T4328] RDX: 0000000000000000 RSI: ffffffff8cd25960 RDI: 0000000000000000 [ 184.224765][ T4328] RBP: ffffc90004017530 R08: ffff88801fe80000 R09: 0000000000000003 [ 184.232765][ T4328] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 184.240761][ T4328] R13: 1ffff92000802e78 R14: 0000000000000000 R15: ffff88801e740e58 [ 184.248755][ T4328] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 184.257714][ T4328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.264319][ T4328] CR2: 00007ff6a35456b8 CR3: 0000000060eae000 CR4: 00000000003506e0 [ 184.272363][ T4328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.280374][ T4328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.288378][ T4328] Call Trace: [ 184.291679][ T4328] [ 184.294630][ T4328] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 184.300034][ T4328] ? __writeback_single_inode+0x4bc/0x1170 [ 184.305883][ T4328] ? __rwlock_init+0x140/0x140 [ 184.310679][ T4328] __writeback_single_inode+0x76c/0x1170 [ 184.316350][ T4328] writeback_sb_inodes+0xad5/0x17f0 [ 184.321600][ T4328] ? queue_io+0x570/0x570 [ 184.325960][ T4328] ? move_expired_inodes+0x722/0x770 [ 184.331283][ T4328] ? rcu_is_watching+0x11/0xa0 [ 184.336081][ T4328] ? queue_io+0x37a/0x570 [ 184.340444][ T4328] wb_writeback+0x470/0xd40 [ 184.344987][ T4328] ? percpu_ref_tryget+0x250/0x250 [ 184.350129][ T4328] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.356152][ T4328] ? __lock_acquire+0x7bd0/0x7bd0 [ 184.361224][ T4328] ? _raw_spin_unlock_irq+0x1f/0x40 [ 184.366455][ T4328] wb_workfn+0x423/0xee0 [ 184.370737][ T4328] ? inode_wait_for_writeback+0x220/0x220 [ 184.376492][ T4328] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.382507][ T4328] ? __lock_acquire+0x7bd0/0x7bd0 [ 184.387566][ T4328] ? read_lock_is_recursive+0x10/0x10 [ 184.392969][ T4328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.398896][ T4328] ? _raw_spin_unlock+0x40/0x40 [ 184.403777][ T4328] ? _raw_spin_unlock_irq+0x1f/0x40 [ 184.409008][ T4328] ? process_one_work+0x7b4/0x1160 [ 184.414147][ T4328] process_one_work+0x8ab/0x1160 [ 184.419128][ T4328] ? worker_detach_from_pool+0x240/0x240 [ 184.424796][ T4328] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.429850][ T4328] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.435427][ T4328] ? wq_worker_running+0x97/0x190 [ 184.440473][ T4328] worker_thread+0xaf5/0x12a0 [ 184.445190][ T4328] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.451116][ T4328] kthread+0x29d/0x330 [ 184.455231][ T4328] ? worker_clr_flags+0x1a0/0x1a0 [ 184.460282][ T4328] ? kthread_blkcg+0xd0/0xd0 [ 184.464891][ T4328] ret_from_fork+0x1f/0x30 [ 184.469346][ T4328] [ 184.472393][ T4328] Modules linked in: [ 184.656622][ T6340] loop6: detected capacity change from 0 to 32768 [ 184.731297][ T4328] ---[ end trace 0000000000000000 ]--- [ 184.740438][ T4328] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 184.758300][ T4328] Code: 87 ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 91 2e 87 ff e9 43 fe ff ff e8 d7 06 36 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 184.782116][ T4328] RSP: 0018:ffffc900040173a0 EFLAGS: 00010293 [ 184.789084][ T4328] RAX: ffffffff824c1a39 RBX: ffff88801e740e98 RCX: ffff88801fe80000 [ 184.797421][ T4328] RDX: 0000000000000000 RSI: ffffffff8cd25960 RDI: 0000000000000000 [ 184.805532][ T4328] RBP: ffffc90004017530 R08: ffff88801fe80000 R09: 0000000000000003 [ 184.814050][ T4328] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 184.830950][ T4328] R13: 1ffff92000802e78 R14: 0000000000000000 R15: ffff88801e740e58 [ 184.848093][ T4328] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 184.867083][ T4328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.881508][ T4328] CR2: 00007fc5a1776fe8 CR3: 0000000071835000 CR4: 00000000003506e0 [ 184.900106][ T4328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.914989][ T4328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.923502][ T4328] Kernel panic - not syncing: Fatal exception [ 184.930182][ T4328] Kernel Offset: disabled [ 184.934522][ T4328] Rebooting in 86400 seconds..