last executing test programs: 3m25.645351673s ago: executing program 32 (id=62): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dffbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) 2m37.191828273s ago: executing program 33 (id=480): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 2m3.221952725s ago: executing program 34 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x3d, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x48a, 0x0, 0x45738c86}]}) 1m43.46499577s ago: executing program 0 (id=902): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b19, 0x0) 1m40.341227675s ago: executing program 0 (id=932): r0 = eventfd2(0x0, 0x80001) io_setup(0x2081, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x80, 0x0, 0x1, r0}]) select(0x40, &(0x7f0000000680)={0x7, 0x7fffffffffffffff, 0x80, 0x2, 0x2b, 0xca, 0x3}, 0x0, &(0x7f0000000080)={0xf, 0x8, 0x40, 0xace, 0xffffffffffffffff, 0xac, 0xed6f, 0xe21}, 0x0) read(r0, &(0x7f0000000040)=""/16, 0x10) 1m39.875979371s ago: executing program 7 (id=940): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000740)=""/116, 0x74}], 0x2}, 0xab}], 0x1, 0x20, 0x0) 1m39.669356437s ago: executing program 7 (id=943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8', 0x2) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1m39.341304729s ago: executing program 0 (id=946): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001701000002"], 0x18}}], 0x2, 0x94) 1m39.246051012s ago: executing program 0 (id=948): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) llistxattr(&(0x7f0000000040)='./file0/file2\x00', 0x0, 0x0) 1m38.789626207s ago: executing program 7 (id=952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xfffffff8, 0x21}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 1m38.618965823s ago: executing program 7 (id=953): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x3, 0x455, &(0x7f0000000740)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 1m38.574936584s ago: executing program 0 (id=954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1m38.149884609s ago: executing program 7 (id=957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x182}, '\x00', "5171bb6729655934a2418688ac68db126474cd00000000000000066728d7a040", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m37.485298781s ago: executing program 0 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0x10e661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x22, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x4, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x7ff, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x12, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x4, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x5102fac, 0x1, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x100003, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x401, 0x6, 0x10000, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0xb, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m37.317453527s ago: executing program 35 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0xffffffff, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x2, 0x9, 0x1, 0x1f461e2c, 0x7, 0x10e661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x22, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a6, 0x1004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x8, 0x5, 0x1000, 0x4, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x51, 0x4, 0x8000, 0x9, 0x3fe, 0x7ff, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0xfffffffb, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x14000, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x12, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x1, 0xd, 0x4, 0x5, 0x7fff, 0x0, 0x4, 0xfffffffd, 0x6, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x808, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfb1, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x2, 0x6, 0x1c, 0x80000000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x1ff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x5102fac, 0x1, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x100003, 0x7f, 0x100, 0x9602, 0x4, 0x3, 0x401, 0x6, 0x10000, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0xb, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m35.247879887s ago: executing program 7 (id=979): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001b933000500000000003ac7100003ffffffffd3dbffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 1m34.912696328s ago: executing program 36 (id=979): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0xa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001b933000500000000003ac7100003ffffffffd3dbffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 1m21.420365712s ago: executing program 5 (id=1040): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x1, 0x1, 0x8000000009) 1m20.944212688s ago: executing program 5 (id=1033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_send_signal(r2, 0x7, 0x0, 0x0) 1m20.676810966s ago: executing program 5 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x6de}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) 1m20.525237371s ago: executing program 5 (id=1035): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) llistxattr(&(0x7f0000000040)='./file0/file2\x00', 0x0, 0x0) 1m20.100159296s ago: executing program 5 (id=1036): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 1m17.973305008s ago: executing program 5 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.833428142s ago: executing program 37 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.418838345s ago: executing program 8 (id=1096): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x400000000000000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48085}, 0x10) 1m9.125171125s ago: executing program 8 (id=1099): set_mempolicy(0x2, 0x0, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x80, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x108) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 1m8.852199364s ago: executing program 8 (id=1102): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r1}]) 1m8.68286872s ago: executing program 8 (id=1103): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYRES8, @ANYRESOCT], 0x21, 0x1510, &(0x7f0000000880)="$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") r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac108875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x40000000000003]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 1m8.327711532s ago: executing program 8 (id=1107): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x7) write$ppp(r0, &(0x7f00000008c0)="00003be032c6a4", 0x7) 1m7.413339302s ago: executing program 8 (id=1118): r0 = socket(0x2c, 0x3, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000580), &(0x7f0000000080)=@tcp=r0, 0x1}, 0x20) 1m7.250065278s ago: executing program 38 (id=1118): r0 = socket(0x2c, 0x3, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000580), &(0x7f0000000080)=@tcp=r0, 0x1}, 0x20) 34.887734027s ago: executing program 3 (id=1332): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17c, &(0x7f0000000240)="$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") 33.826430412s ago: executing program 3 (id=1342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="88", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}}], 0x4, 0x60cd8d0) 33.674696277s ago: executing program 3 (id=1344): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x7c, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@end]}}, {0x2000, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506bcba17a29171be64a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 33.539672692s ago: executing program 3 (id=1347): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents64(r0, 0x0, 0x0) syz_clone(0x2000000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 32.70564486s ago: executing program 3 (id=1356): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{@none}, {@none}]}) 31.400460354s ago: executing program 3 (id=1365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 31.207118861s ago: executing program 39 (id=1365): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 6.330937007s ago: executing program 1 (id=1534): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x210011, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f00000079c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) getdents64(r0, &(0x7f0000001140)=""/4116, 0x1014) 5.860384083s ago: executing program 1 (id=1537): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000080)="116b41") 3.935952687s ago: executing program 2 (id=1553): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000400008510000002000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 3.713927515s ago: executing program 2 (id=1554): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 3.555422791s ago: executing program 2 (id=1556): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x2800000, &(0x7f00000004c0)={[{@debug}, {@dioread_nolock}, {@nouid32}, {@debug}, {@usrjquota}, {@bh}, {@delalloc}, {@init_itable}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x0, 0x54, 0x35, 0x31, 0x64, 0x61, 0x30], 0x2d, [0x33, 0x63, 0x6d, 0x63], 0x2d, [0x53, 0x34, 0x64, 0x30], 0x2d, [0x35, 0x30, 0x32, 0x31], 0x2d, [0x61, 0x36, 0x32, 0x37, 0x63, 0x64, 0x36, 0x37]}}}]}, 0x1, 0xbe0, &(0x7f0000004a80)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20) 2.917631362s ago: executing program 2 (id=1558): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 2.768901587s ago: executing program 2 (id=1560): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x2}, 0x8) 2.711758579s ago: executing program 1 (id=1561): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000000180)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.267604803s ago: executing program 1 (id=1566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000800) 1.960698144s ago: executing program 1 (id=1569): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc) mlock(&(0x7f00000f5000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1.813980998s ago: executing program 2 (id=1570): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x11c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0xb) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, 0x0) 1.76886209s ago: executing program 9 (id=1571): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.713256053s ago: executing program 1 (id=1572): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0xf, 0x4, &(0x7f0000000040)={0x14, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}}) 1.658626644s ago: executing program 9 (id=1573): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) 1.513786189s ago: executing program 9 (id=1575): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f0000006200)={0x2020}, 0xffe8) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 1.477372261s ago: executing program 6 (id=1576): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1.368129724s ago: executing program 4 (id=1577): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.305427806s ago: executing program 6 (id=1578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="06030200000314000e00003c", 0xc}], 0x1}, 0x4005) 1.290480967s ago: executing program 9 (id=1579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x40) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="11cb1000", {0x0, 0x80}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0x1}]}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x850) 1.229993018s ago: executing program 4 (id=1580): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001100)) 1.211993849s ago: executing program 6 (id=1581): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0xffffffff, 0x0}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000001480)=""/4078, 0x23}], 0x1) 1.090719703s ago: executing program 4 (id=1582): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0xc1cc6, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x2, 0x0, 0x7cce8c743ee810df, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0x1, 0x6f}, 0xfffffff4, 0x4}) 1.090464673s ago: executing program 9 (id=1583): syz_open_procfs(0x0, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fileset={'fileset', 0x3d, 0xc}}, {@mode={'mode', 0x3d, 0x8009}}, {@longad}, {@uid_forget}, {@undelete}, {@uid_forget}, {@umask={'umask', 0x3d, 0x7fffffff}}]}, 0x11, 0xc6d, &(0x7f0000001980)="$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") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x27841e, 0x0, 0x4, 0x0, &(0x7f0000000280)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000004440)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) rmdir(&(0x7f0000000080)='./bus\x00') 1.070555034s ago: executing program 6 (id=1584): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x6, 0x1ac3149f, 0xfffffffffffffa40}) 638.878878ms ago: executing program 6 (id=1585): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 636.128948ms ago: executing program 4 (id=1595): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='|', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000600)='a', 0x1}], 0x1}}], 0x2, 0x4040840) 514.185633ms ago: executing program 9 (id=1586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x2c, r1, 0x5, 0x0, 0x10000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x9, 0x34, @random="a3266cb9d2"}, @NL80211_ATTR_PBSS={0x4}]}, 0x2c}}, 0x0) 462.500004ms ago: executing program 6 (id=1587): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 352.703328ms ago: executing program 4 (id=1588): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) 0s ago: executing program 4 (id=1589): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ 211.249690][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.441812][ T6137] usb 4-1: USB disconnect, device number 15 [ 211.445503][ T8341] loop9: detected capacity change from 0 to 32768 [ 211.466102][ T8341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1071 (8341) [ 211.500668][ T8341] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 211.510209][ T8341] BTRFS info (device loop9): turning on sync discard [ 211.517244][ T8341] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 211.528184][ T8341] BTRFS info (device loop9): use zstd compression, level 3 [ 211.536366][ T8341] BTRFS info (device loop9): turning on async discard [ 211.537202][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.545061][ T8341] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 211.570665][ T8341] BTRFS info (device loop9): trying to use backup root at mount time [ 211.580946][ T8341] BTRFS info (device loop9): enabling auto defrag [ 211.589524][ T8341] BTRFS info (device loop9): using free space tree [ 211.598337][ T8341] BTRFS info (device loop9): has skinny extents [ 211.823378][ T8354] loop8: detected capacity change from 0 to 1024 [ 211.835797][ T5394] BTRFS warning (device loop9): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 211.842572][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.851340][ T8341] BTRFS warning (device loop9): failed to read root (objectid=2): -5 [ 211.867475][ T5394] BTRFS warning (device loop9): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 211.919086][ T8341] BTRFS warning (device loop9): couldn't read tree root [ 211.940499][ T8341] BTRFS error (device loop9): parent transid verify failed on 5255168 wanted 5 found 7 [ 211.940511][ T8273] device hsr_slave_0 entered promiscuous mode [ 211.940589][ T8341] BTRFS warning (device loop9): couldn't read tree root [ 211.988039][ T8341] BTRFS info (device loop9): enabling ssd optimizations [ 211.996277][ T8341] BTRFS info (device loop9): clearing free space tree [ 212.003676][ T8341] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.011398][ T8354] hfsplus: keylen 65060 too large [ 212.014927][ T8341] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.043328][ T8273] device hsr_slave_1 entered promiscuous mode [ 212.059497][ T8341] BTRFS info (device loop9): creating free space tree [ 212.068393][ T8341] BTRFS info (device loop9): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.079156][ T8341] BTRFS info (device loop9): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 212.092338][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.093871][ T8354] hfsplus: xattr search failed [ 212.124158][ T8273] Cannot create hsr debugfs directory [ 212.235062][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.254395][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.294299][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.458797][ T6137] Bluetooth: hci1: command 0x0419 tx timeout [ 212.465018][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.482956][ T8377] loop3: detected capacity change from 0 to 512 [ 212.501001][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.521214][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.529187][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.548598][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.585584][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.602768][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.611353][ T5390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.677151][ T8377] EXT4-fs (loop3): Ignoring removed nobh option [ 212.716164][ T8377] EXT4-fs (loop3): Ignoring removed orlov option [ 212.729567][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.779480][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.842819][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.887944][ T8377] EXT4-fs error (device loop3): __ext4_iget:4919: inode #11: block 1: comm syz.3.1077: invalid block [ 212.916485][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.987659][ T8377] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1077: couldn't read orphan inode 11 (err -117) [ 213.007074][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.017403][ T6135] Bluetooth: hci3: command 0x041b tx timeout [ 213.042426][ T8377] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000004,nogrpid,sysvgroups,orlov,grpquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 213.061433][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.070267][ T8387] loop8: detected capacity change from 0 to 256 [ 213.128499][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.143936][ T8377] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.1077: Directory hole found for htree leaf block 0 [ 213.145043][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.274296][ T8167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.313826][ T8167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.448107][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.466304][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.508128][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.537491][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.556606][ T8397] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 213.578564][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.627263][ T8397] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 213.636217][ T8401] netlink: 'syz.3.1083': attribute type 29 has an invalid length. [ 213.683577][ T8399] loop8: detected capacity change from 0 to 4096 [ 213.694778][ T8397] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 213.764542][ T8397] netlink: 205184 bytes leftover after parsing attributes in process `syz.3.1083'. [ 213.850040][ T8399] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 213.877878][ T8399] ntfs3: loop8: Failed to load $Extend. [ 214.086589][ T8399] ntfs3: loop8: ino=1b, "file0" directory corrupted [ 214.285308][ T524] ntfs3: loop8: ntfs3_write_inode r=9 failed, -22. [ 214.298889][ T7838] ntfs3: loop8: ntfs_sync_fs r=9 failed, -22. [ 214.306405][ T7838] ntfs3: loop8: ntfs_evict_inode r=9 failed, -22. [ 214.531517][ T5406] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.578022][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.595570][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.695227][ T8167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.752284][ T5406] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.777131][ T6545] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 214.889671][ T5406] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.891876][ T8422] loop9: detected capacity change from 0 to 32768 [ 214.924422][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.938386][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.001673][ T5406] device netdevsim0 left promiscuous mode [ 215.012734][ T5406] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.027312][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 215.027802][ T6545] usb 9-1: Using ep0 maxpacket: 32 [ 215.034406][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.051634][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.067745][ T8422] XFS (loop9): Mounting V5 Filesystem [ 215.079251][ T8167] device veth0_vlan entered promiscuous mode [ 215.094538][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.140072][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.182506][ T8422] XFS (loop9): Ending clean mount [ 215.201745][ T8422] XFS (loop9): Quotacheck needed: Please wait. [ 215.208592][ T6545] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.216150][ T8167] device veth1_vlan entered promiscuous mode [ 215.227941][ T6545] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.240152][ T6545] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 215.250692][ T6545] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.262396][ T6545] usb 9-1: config 0 descriptor?? [ 215.404397][ T8167] device veth0_macvtap entered promiscuous mode [ 215.415774][ T8422] XFS (loop9): Quotacheck: Done. [ 215.424353][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.464644][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.486636][ T26] audit: type=1800 audit(1781288164.351:128): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1088" name="file1" dev="loop9" ino=4422 res=0 errno=0 [ 215.495176][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.583600][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.664636][ T8167] device veth1_macvtap entered promiscuous mode [ 215.718943][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.733412][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 215.749852][ T6545] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 215.764448][ T6545] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 215.785140][ T6545] ft260 0003:0403:6030.000D: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 215.795298][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.844088][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.870381][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.887965][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.901040][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.913822][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.924489][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.935982][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.946703][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.958390][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.967303][ T6545] ft260 0003:0403:6030.000D: failed to retrieve chip version [ 215.979713][ T6545] ft260: probe of 0003:0403:6030.000D failed with error -71 [ 215.989662][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.014632][ T7878] XFS (loop9): Unmounting Filesystem [ 216.036762][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.044980][ T6545] usb 9-1: USB disconnect, device number 3 [ 216.069533][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.096861][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.125983][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.187310][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.219473][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.259036][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.294900][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.323784][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.336886][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.356475][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.375547][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.413359][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.490944][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.528232][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.550658][ T8273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.624944][ T5406] tipc: Disabling bearer [ 216.638306][ T8167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.645390][ T5406] tipc: Left network mode [ 216.665586][ T8167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.706057][ T8167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.726103][ T8167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.741625][ T8273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.758629][ T8467] fido_id[8467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 216.863740][ T8273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.975475][ T8273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.138704][ T6135] Bluetooth: hci3: command 0x0419 tx timeout [ 217.214700][ C1] sd 0:0:1:0: tag#1732 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 217.225671][ C1] sd 0:0:1:0: tag#1732 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 217.410739][ T5404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.435438][ T5404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.541244][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.550011][ T8498] loop8: detected capacity change from 0 to 256 [ 217.654015][ T8498] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 217.778845][ T524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.798912][ T8505] netlink: 'syz.9.1105': attribute type 1 has an invalid length. [ 217.814881][ T524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.881885][ T8509] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 217.893388][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.920022][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.950664][ T8511] loop9: detected capacity change from 0 to 256 [ 218.155064][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.310625][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.366716][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.424979][ T8524] lo speed is unknown, defaulting to 1000 [ 218.432853][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.444436][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.491264][ T5400] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.498527][ T5400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.517893][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.527647][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.536950][ T5400] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.544300][ T5400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.591433][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.654264][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.680412][ T8524] lo speed is unknown, defaulting to 1000 [ 218.703669][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.797246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.824440][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.837842][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.848225][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.874951][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.884915][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.894916][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.904956][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.914841][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.924711][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.956556][ T8524] lo speed is unknown, defaulting to 1000 [ 218.964730][ T8273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.981287][ T8524] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.024466][ T8544] loop9: detected capacity change from 0 to 512 [ 219.026544][ T8524] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 219.096204][ T8544] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 219.096204][ T8544] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 219.096204][ T8544] [ 219.205053][ T8544] EXT4-fs (loop9): Ignoring removed oldalloc option [ 219.247468][ T8544] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 219.267893][ T6448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.299031][ T8524] lo speed is unknown, defaulting to 1000 [ 219.315438][ T8524] lo speed is unknown, defaulting to 1000 [ 219.348092][ T8544] EXT4-fs (loop9): 1 truncate cleaned up [ 219.369662][ T8524] lo speed is unknown, defaulting to 1000 [ 219.376934][ T8544] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,quota,block_validity,lazytime,nouser_xattr,i_version,oldalloc,,errors=continue. Quota mode: writeback. [ 219.392967][ T8524] lo speed is unknown, defaulting to 1000 [ 219.402285][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.471101][ T8524] lo speed is unknown, defaulting to 1000 [ 219.549832][ T8524] lo speed is unknown, defaulting to 1000 [ 219.701214][ T8524] lo speed is unknown, defaulting to 1000 [ 219.721896][ T8524] lo speed is unknown, defaulting to 1000 [ 219.739274][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.754842][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.899438][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.941441][ T8572] loop9: detected capacity change from 0 to 1024 [ 220.048747][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.058795][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.094045][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.129082][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.138545][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.147316][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.189498][ T8273] device veth0_vlan entered promiscuous mode [ 220.205077][ T8273] device veth1_vlan entered promiscuous mode [ 220.233924][ T8572] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,discard,nodioread_nolock,errors=remount-ro,. Quota mode: none. [ 220.246636][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.274860][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.318961][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.335459][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.347139][ T6131] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 220.348536][ T8273] device veth0_macvtap entered promiscuous mode [ 220.366298][ T8572] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.486858][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.525179][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 220.553827][ T8572] EXT4-fs error (device loop9): ext4_map_blocks:741: inode #15: comm syz.9.1122: lblock 0 mapped to illegal pblock 0 (length 1) [ 220.583699][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.600387][ T8572] EXT4-fs (loop9): Remounting filesystem read-only [ 220.619444][ T8273] device veth1_macvtap entered promiscuous mode [ 220.717420][ T6131] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 220.737066][ T5406] device dummy0 left promiscuous mode [ 220.743314][ T6131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.775853][ T6131] usb 4-1: config 0 descriptor?? [ 220.784969][ T5406] device hsr_slave_0 left promiscuous mode [ 220.800126][ T5406] device hsr_slave_1 left promiscuous mode [ 220.815179][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.825063][ T6131] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 220.857275][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.880321][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.897164][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.905306][ T5406] device bridge_slave_1 left promiscuous mode [ 220.917981][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.957749][ T5406] device bridge_slave_0 left promiscuous mode [ 220.964916][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.023259][ T5406] device hsr_slave_0 left promiscuous mode [ 221.038707][ T5406] device hsr_slave_1 left promiscuous mode [ 221.045677][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.053586][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.073656][ T5406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.102096][ T5406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.128699][ T5406] device bridge_slave_1 left promiscuous mode [ 221.136330][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.156276][ T5406] device bridge_slave_0 left promiscuous mode [ 221.163534][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.191227][ T5406] device veth1_macvtap left promiscuous mode [ 221.198733][ T5406] device veth0_macvtap left promiscuous mode [ 221.206044][ T5406] device veth1_vlan left promiscuous mode [ 221.213031][ T5406] device veth0_vlan left promiscuous mode [ 221.226566][ T5406] device veth1_macvtap left promiscuous mode [ 221.245801][ T5406] device veth0_macvtap left promiscuous mode [ 221.256014][ T5406] device veth1_vlan left promiscuous mode [ 221.281696][ T5406] device veth0_vlan left promiscuous mode [ 221.321474][ T8589] loop1: detected capacity change from 0 to 512 [ 221.399563][ T8589] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1128: inode has both inline data and extents flags [ 221.439530][ T8589] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1128: couldn't read orphan inode 15 (err -117) [ 221.507646][ T4232] Bluetooth: hci2: command 0x0409 tx timeout [ 221.515220][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.601050][ T8589] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.717325][ T6131] gspca_stv06xx: I2C: Read error writing address: -71 [ 221.768066][ T6131] usb 4-1: USB disconnect, device number 16 [ 221.949912][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1129'. [ 222.078222][ T5406] team0 (unregistering): Port device team_slave_1 removed [ 222.102419][ T5406] team0 (unregistering): Port device team_slave_0 removed [ 222.120378][ T5406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.145261][ T5406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.317805][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.341599][ T5406] bond0 (unregistering): Released all slaves [ 222.537496][ T5406] team0 (unregistering): Port device team_slave_1 removed [ 222.547471][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.558577][ T5406] team0 (unregistering): Port device team_slave_0 removed [ 222.574242][ T5406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.593220][ T5406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.684443][ T5406] bond0 (unregistering): Released all slaves [ 222.742083][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.755164][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.767607][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.770905][ T4267] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 222.779379][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.801712][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.813771][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.825651][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.837395][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.851636][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.861018][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.871342][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.924643][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.946114][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.961609][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.974813][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.987702][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.999264][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.009851][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.022330][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.034488][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.039191][ T8599] loop9: detected capacity change from 0 to 8192 [ 223.049651][ T8273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.062466][ T4267] usb 4-1: Using ep0 maxpacket: 16 [ 223.068372][ T8273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.080429][ T8273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.090917][ T8273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.106439][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.154009][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.217711][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.271776][ T4267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.302398][ T8607] loop1: detected capacity change from 0 to 256 [ 223.313275][ T4267] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 223.376314][ T8607] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x789ea0b7, utbl_chksum : 0x7319d30d) [ 223.404723][ T4267] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.443452][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.509067][ T4267] usb 4-1: config 0 descriptor?? [ 223.544133][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.565965][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.594849][ T8554] device bridge_slave_0 entered promiscuous mode [ 223.628705][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.637563][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.646273][ T8554] device bridge_slave_1 entered promiscuous mode [ 223.664301][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 223.678620][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.869684][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.942714][ T5390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.959624][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.977063][ T7478] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 223.983098][ T4267] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000E/input/input18 [ 224.003741][ T5390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.057918][ T5390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.081683][ T8554] team0: Port device team_slave_0 added [ 224.093426][ T8554] team0: Port device team_slave_1 added [ 224.110867][ T4267] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 224.116675][ T5390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.152043][ T5390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.246677][ T6545] usb 4-1: USB disconnect, device number 17 [ 224.252654][ T7478] usb 10-1: Using ep0 maxpacket: 16 [ 224.269811][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.317791][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.324915][ T8629] fido_id[8629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 224.325023][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.369357][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.383908][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.391698][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.421822][ T7478] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.440374][ T7478] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.455441][ T7478] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.474667][ T8627] loop1: detected capacity change from 0 to 32768 [ 224.477545][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.493268][ T7478] usb 10-1: config 1 interface 0 has no altsetting 0 [ 224.667394][ T7478] usb 10-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 224.703190][ T8554] device hsr_slave_0 entered promiscuous mode [ 224.717100][ T7478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.729765][ T8554] device hsr_slave_1 entered promiscuous mode [ 224.747206][ T7478] usb 10-1: Product: syz [ 224.776461][ T7478] usb 10-1: Manufacturer: syz [ 224.875692][ T7478] usb 10-1: SerialNumber: syz [ 224.881618][ T8627] JBD2: Ignoring recovery information on journal [ 224.913392][ T8644] loop3: detected capacity change from 0 to 1024 [ 224.915050][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.012732][ T8644] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 225.161590][ T7478] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 225.199608][ T8627] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 225.349231][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.428678][ T4232] usb 10-1: USB disconnect, device number 2 [ 225.606186][ T8664] loop3: detected capacity change from 0 to 512 [ 225.654212][ T8620] usblp0: removed [ 225.706388][ T8666] loop2: detected capacity change from 0 to 2048 [ 225.711360][ T8667] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 225.747509][ T6131] Bluetooth: hci2: command 0x040f tx timeout [ 225.756132][ T8664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 225.763629][ T8667] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 225.786403][ T8666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.788396][ T8667] OCFS2: Returning error to the calling process. [ 225.803115][ T8667] (syz.1.1137,8667,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -5 [ 225.812640][ T8667] (syz.1.1137,8667,1):__ocfs2_claim_clusters:2365 ERROR: status = -5 [ 225.821164][ T8667] (syz.1.1137,8667,1):__ocfs2_claim_clusters:2373 ERROR: status = -5 [ 225.840553][ T8667] (syz.1.1137,8667,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 225.850347][ T8667] (syz.1.1137,8667,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 225.867406][ T8664] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.920006][ T8667] (syz.1.1137,8667,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 225.988699][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.989324][ T8667] (syz.1.1137,8667,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 226.048899][ T8664] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.1141: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 226.090634][ T8667] (syz.1.1137,8667,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 226.119633][ T8667] (syz.1.1137,8667,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 226.175592][ T8667] (syz.1.1137,8667,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 226.198878][ T8667] (syz.1.1137,8667,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 226.319837][ T8667] (syz.1.1137,8667,1):ocfs2_symlink:1911 ERROR: status = -5 [ 226.386301][ T8667] (syz.1.1137,8667,1):ocfs2_symlink:2065 ERROR: status = -5 [ 226.468411][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.479923][ T8671] loop2: detected capacity change from 0 to 1024 [ 226.611623][ T8679] loop3: detected capacity change from 0 to 1024 [ 226.721934][ T524] hfsplus: b-tree write err: -5, ino 3 [ 226.728864][ T8679] EXT4-fs (loop3): Ignoring removed oldalloc option [ 226.769587][ T8554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.804289][ T8679] EXT4-fs (loop3): Ignoring removed oldalloc option [ 226.822369][ T8679] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 226.859403][ T8554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.875027][ T8167] ocfs2: Unmounting device (7,1) on (node local) [ 226.886475][ T8554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.892945][ T8683] loop2: detected capacity change from 0 to 512 [ 226.922316][ T8554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.985783][ T8679] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 227.118029][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.216309][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.417581][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.504325][ T8695] loop9: detected capacity change from 0 to 128 [ 227.514098][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.574261][ T8696] loop2: detected capacity change from 0 to 512 [ 227.597255][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.616339][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.631909][ T8695] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 227.661123][ T8696] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 227.674633][ T8695] hpfs: filesystem error: improperly stopped [ 227.681463][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.710879][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.720368][ T8696] EXT4-fs (loop2): bad block size 16384 [ 227.727346][ T8695] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 227.735554][ T8695] hpfs: You really don't want any checks? You are crazy... [ 227.759626][ T5574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.763383][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.776841][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.791681][ T8695] hpfs: hpfs_map_sector(): read error [ 227.800314][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 227.810863][ T8695] hpfs: code page support is disabled [ 227.827457][ T6135] Bluetooth: hci2: command 0x0419 tx timeout [ 227.839458][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.852447][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.878863][ T8695] hpfs: hpfs_map_4sectors(): unaligned read [ 227.907219][ T8695] hpfs: hpfs_map_4sectors(): unaligned read [ 227.911195][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.913373][ T8695] hpfs: filesystem error: unable to find root dir [ 227.948105][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.955346][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.981937][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.013066][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.034644][ T8696] tipc: Started in network mode [ 228.065147][ T8696] tipc: Node identity 3a00c0c9935ef34f, cluster identity 4711 [ 228.086495][ T8695] hpfs: hpfs_map_4sectors(): unaligned read [ 228.093907][ T8696] tipc: Enabling of bearer rejected, failed to enable media [ 228.118912][ T8695] hpfs: hpfs_map_sector(): read error [ 228.154014][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.181867][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.223623][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.253202][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.298608][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.336440][ T8554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.357640][ T8554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.397579][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.426420][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.446632][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.457763][ T8718] loop3: detected capacity change from 0 to 2048 [ 228.475712][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.497527][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.536084][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.574455][ T8718] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 229.176659][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.196817][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.222854][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.348188][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.504049][ T8752] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.517297][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.549900][ T8752] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.589344][ T23] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 229.609600][ T8753] FAT-fs (loop2): Directory bread(block 64) failed [ 229.656788][ T8753] FAT-fs (loop2): Directory bread(block 65) failed [ 229.660603][ T8752] fscrypt (loop3, inode 12): Unsupported encryption flags (0x10) [ 229.679818][ T8753] FAT-fs (loop2): Directory bread(block 66) failed [ 229.735872][ T8753] FAT-fs (loop2): Directory bread(block 67) failed [ 229.792417][ T8753] FAT-fs (loop2): Directory bread(block 68) failed [ 229.823600][ T8753] FAT-fs (loop2): Directory bread(block 69) failed [ 229.843590][ T8753] FAT-fs (loop2): Directory bread(block 70) failed [ 229.857132][ T8753] FAT-fs (loop2): Directory bread(block 71) failed [ 229.857857][ T8759] set_capacity_and_notify: 3 callbacks suppressed [ 229.857869][ T8759] loop1: detected capacity change from 0 to 4096 [ 229.884976][ T8753] FAT-fs (loop2): Directory bread(block 72) failed [ 229.908251][ T8753] FAT-fs (loop2): Directory bread(block 73) failed [ 229.963740][ T8766] loop3: detected capacity change from 0 to 256 [ 229.980222][ T8759] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 230.008378][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.039585][ T23] usb 10-1: unable to get BOS descriptor or descriptor too short [ 230.055177][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.084331][ T8759] ntfs3: loop1: Failed to load $Extend. [ 230.109087][ T8766] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 230.167683][ T5394] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.247404][ T23] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.283039][ T26] audit: type=1800 audit(1781288179.151:129): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1182" name="file1" dev="loop3" ino=1048725 res=0 errno=0 [ 230.327056][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.356850][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.379537][ T8554] device veth0_vlan entered promiscuous mode [ 230.387685][ T21] net_ratelimit: 1 callbacks suppressed [ 230.387746][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.447303][ T23] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.456907][ T5394] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.468225][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.489051][ T8776] loop2: detected capacity change from 0 to 8 [ 230.503398][ T23] usb 10-1: Product: syz [ 230.531287][ T23] usb 10-1: Manufacturer: syz [ 230.539465][ T23] usb 10-1: SerialNumber: syz [ 230.616965][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.628069][ T23] usb 10-1: bad CDC descriptors [ 230.659152][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.710375][ T8554] device veth1_vlan entered promiscuous mode [ 230.805696][ T8776] loop2: detected capacity change from 0 to 2048 [ 230.867806][ T8776] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 230.912121][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.954674][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.998094][ T8776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.030733][ T8554] device veth0_macvtap entered promiscuous mode [ 231.053388][ T6131] usb 10-1: USB disconnect, device number 3 [ 231.075489][ T8554] device veth1_macvtap entered promiscuous mode [ 231.248394][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.337073][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.382194][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.403608][ T8780] loop1: detected capacity change from 0 to 131072 [ 231.417645][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.428857][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.429131][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.440494][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.440521][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.473204][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.483144][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.493602][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.505193][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.535914][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.558644][ T8780] F2FS-fs (loop1): invalid crc value [ 231.592233][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.605002][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.619754][ T8780] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.656932][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.677936][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.692306][ T8780] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 231.706477][ T8780] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 231.715816][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.747104][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.764956][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.778283][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.799810][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.814906][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.870932][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.881615][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.925322][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.987960][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.048406][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.082856][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.132036][ T5394] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.223917][ T8554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.243281][ T6448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.292987][ T8554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.321775][ T8554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.340306][ T8554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.418116][ T5394] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.508379][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.637178][ T6448] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 232.728281][ T5404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.736743][ T5404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.798297][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.851964][ T5404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.891227][ T5404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.933992][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.077621][ T6448] usb 10-1: unable to get BOS descriptor or descriptor too short [ 233.097189][ T6447] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.117928][ T6448] usb 10-1: not running at top speed; connect to a high speed hub [ 233.176256][ T8836] device syzkaller1 entered promiscuous mode [ 233.197441][ T6448] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.218160][ T8836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 233.238053][ T6448] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 233.267559][ T6448] usb 10-1: config 1 interface 0 has no altsetting 0 [ 233.327534][ T6448] usb 10-1: language id specifier not provided by device, defaulting to English [ 233.487609][ T6448] usb 10-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 233.519565][ T6448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.539814][ T6448] usb 10-1: Product: syz [ 233.570225][ T6448] usb 10-1: Manufacturer: 讀간ࡣ䴊渕ä”ꩆ꧿釼î§ãŽŸàº¬ä¥•èŠ â²†á¤šåµ¤ç¡˜î¯¸çƒ³ã…¹â–㖎ꡚé—෣찠椴핂ë–⒂佘ê£è…³Â€ï²šè®ê½¸æ‰‚넽쯎䳚 [ 233.595610][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.630071][ T6448] usb 10-1: SerialNumber: syz [ 233.687640][ T8812] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.695634][ T6447] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 233.726145][ T6447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.768972][ T6447] usb 4-1: Product: syz [ 233.795567][ T8858] netlink: 'syz.4.1205': attribute type 3 has an invalid length. [ 233.807260][ T6447] usb 4-1: Manufacturer: syz [ 233.814027][ T6447] usb 4-1: SerialNumber: syz [ 233.877195][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 233.988790][ T4267] kernel read not supported for file /input/event2 (pid: 4267 comm: kworker/0:7) [ 234.057526][ T6448] usbtouchscreen: probe of 10-1:1.0 failed with error -71 [ 234.073636][ T6448] usb 10-1: USB disconnect, device number 4 [ 234.182163][ T8850] loop1: detected capacity change from 0 to 32768 [ 234.294747][ T26] audit: type=1800 audit(1781288183.161:130): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1202" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=65 res=0 errno=0 [ 234.434460][ T5394] device hsr_slave_0 left promiscuous mode [ 234.470957][ T5394] device hsr_slave_1 left promiscuous mode [ 234.487962][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.496082][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.542950][ T5394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.571291][ T5394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.604532][ T5394] device bridge_slave_1 left promiscuous mode [ 234.627399][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.647702][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.692289][ T5394] device bridge_slave_0 left promiscuous mode [ 234.719632][ T8889] loop3: detected capacity change from 0 to 64 [ 234.727795][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.761270][ T5394] device veth1_macvtap left promiscuous mode [ 234.783231][ T5394] device veth0_macvtap left promiscuous mode [ 234.793478][ T5394] device veth1_vlan left promiscuous mode [ 234.814949][ T5394] device veth0_vlan left promiscuous mode [ 234.999554][ T8896] binder: 8895:8896 ioctl 4018620d 0 returned -22 [ 235.047530][ T5574] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 235.194269][ T8875] loop4: detected capacity change from 0 to 32768 [ 235.269768][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.311404][ T8908] xt_hashlimit: max too large, truncated to 1048576 [ 235.405362][ T8875] XFS (loop4): Mounting V5 Filesystem [ 235.427341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.440690][ T5574] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 235.453677][ T5574] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 235.533034][ T5574] usb 10-1: config 1 interface 0 has no altsetting 0 [ 235.555960][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.572293][ T8875] XFS (loop4): Ending clean mount [ 235.595982][ T8875] XFS (loop4): Quotacheck needed: Please wait. [ 235.667316][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.757634][ T5574] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 235.777198][ T5574] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.808084][ T5574] usb 10-1: Product: syz [ 235.812478][ T5574] usb 10-1: Manufacturer: syz [ 235.822745][ T5574] usb 10-1: SerialNumber: syz [ 235.836659][ T8875] XFS (loop4): Quotacheck: Done. [ 235.877463][ T8893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 235.896016][ T8893] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 236.070035][ T2425] pvrusb2: request_firmware fatal error with code=-110 [ 236.099958][ T2425] pvrusb2: Failure uploading firmware1 [ 236.142138][ T8554] XFS (loop4): Unmounting Filesystem [ 236.152490][ T2425] pvrusb2: Device initialization was not successful. [ 236.161719][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 236.171001][ T5394] team0 (unregistering): Port device team_slave_1 removed [ 236.180864][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.195906][ T4235] pvrusb2: Device being rendered inoperable [ 236.239476][ T5394] team0 (unregistering): Port device team_slave_0 removed [ 236.281401][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 236.303864][ T5394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.332394][ T5394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.494383][ T5394] bond0 (unregistering): Released all slaves [ 236.530883][ T6447] rtl8150 4-1:1.0: couldn't reset the device [ 236.538805][ T6447] rtl8150: probe of 4-1:1.0 failed with error -5 [ 236.570622][ T6447] usb 4-1: USB disconnect, device number 18 [ 236.713729][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.789159][ T8955] loop1: detected capacity change from 0 to 128 [ 236.909532][ T8961] loop3: detected capacity change from 0 to 512 [ 236.938887][ T8955] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 237.010651][ T5574] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:ac:4d:c2:7b:6c [ 237.042412][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 237.109877][ T5574] rtl8150 10-1:1.0: eth21: rtl8150 is detected [ 237.171438][ T5574] usb 10-1: USB disconnect, device number 5 [ 237.187329][ T8961] EXT4-fs (loop3): 1 truncate cleaned up [ 237.194285][ T8961] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,dax=never,nouid32,,errors=continue. Quota mode: none. [ 237.752925][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.930121][ T8992] loop2: detected capacity change from 0 to 4096 [ 237.982849][ T8999] lo speed is unknown, defaulting to 1000 [ 238.080953][ T9004] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.094866][ T9006] loop3: detected capacity change from 0 to 256 [ 238.310401][ T5574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.501579][ T9016] lo speed is unknown, defaulting to 1000 [ 238.604815][ T9013] loop4: detected capacity change from 0 to 4096 [ 238.699004][ T9013] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 238.787547][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.860789][ T9027] loop2: detected capacity change from 0 to 1024 [ 238.974774][ T26] audit: type=1800 audit(1781288187.841:131): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1242" name="file1" dev="loop2" ino=26 res=0 errno=0 [ 239.018039][ T9013] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 239.342786][ T8554] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 239.361427][ T8554] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 239.399209][ T9048] loop9: detected capacity change from 0 to 512 [ 239.543398][ T9048] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 239.569463][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 239.585362][ T9057] loop2: detected capacity change from 0 to 7 [ 239.625607][ T9057] Dev loop2: unable to read RDB block 7 [ 239.634663][ T9059] device syzkaller1 entered promiscuous mode [ 239.658645][ T9054] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 239.675534][ T9057] loop2: AHDI p1 p2 p3 p4 [ 239.697212][ T9057] loop2: partition table partially beyond EOD, truncated [ 239.759231][ T9057] loop2: p1 start 1601398130 is beyond EOD, truncated [ 239.766806][ T9057] loop2: p2 start 1702059890 is beyond EOD, truncated [ 239.829036][ T6131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.849471][ T9057] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 239.924952][ T9048] EXT4-fs (loop9): failed to open journal device unknown-block(0,0) -6 [ 240.074919][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 240.155633][ T9081] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 240.167267][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 240.185950][ T9048] loop9: detected capacity change from 0 to 512 [ 240.287617][ T9048] EXT4-fs (loop9): error: journal path ./file1 is not a block device [ 240.707549][ T6447] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 240.766393][ T9107] sctp: [Deprecated]: syz.4.1269 (pid 9107) Use of int in max_burst socket option deprecated. [ 240.766393][ T9107] Use struct sctp_assoc_value instead [ 240.802599][ T5574] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 240.886353][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.921964][ T9111] netlink: 868 bytes leftover after parsing attributes in process `syz.4.1270'. [ 241.077270][ T5574] usb 4-1: Using ep0 maxpacket: 32 [ 241.137387][ T6447] usb 2-1: config 2 has an invalid interface number: 230 but max is 0 [ 241.146529][ T6447] usb 2-1: config 2 has no interface number 0 [ 241.183719][ T6447] usb 2-1: config 2 interface 230 has no altsetting 0 [ 241.207305][ T5574] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 241.237107][ T5574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.295811][ T5574] usb 4-1: config 0 descriptor?? [ 241.351130][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.421540][ T9104] loop2: detected capacity change from 0 to 32768 [ 241.457391][ T6447] usb 2-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=bf.41 [ 241.477808][ T6447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.507749][ T6447] usb 2-1: Product: syz [ 241.524997][ T6447] usb 2-1: Manufacturer: syz [ 241.554344][ T6447] usb 2-1: SerialNumber: syz [ 241.577460][ T5574] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 241.606456][ T9104] XFS (loop2): Mounting V5 Filesystem [ 241.616530][ T5574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.662780][ T5574] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 241.679040][ T5574] usb 4-1: media controller created [ 241.724604][ T5574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.770096][ T9104] XFS (loop2): Ending clean mount [ 241.782640][ T9094] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 241.872115][ T5574] az6027: usb out operation failed. (-71) [ 241.907328][ T9104] XFS (loop2): Quotacheck needed: Please wait. [ 241.915370][ T5574] az6027: usb out operation failed. (-71) [ 241.916045][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.936819][ T5574] stb0899_attach: Driver disabled by Kconfig [ 241.954135][ T6447] usb 2-1: USB disconnect, device number 11 [ 241.970854][ T5574] az6027: no front-end attached [ 241.970854][ T5574] [ 242.027158][ T5574] az6027: usb out operation failed. (-71) [ 242.045635][ T5574] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 242.104662][ T5574] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 242.137913][ T9104] XFS (loop2): Quotacheck: Done. [ 242.197531][ T5574] dvb-usb: schedule remote query interval to 400 msecs. [ 242.225361][ T5574] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 242.248513][ T8273] XFS (loop2): Unmounting Filesystem [ 242.275695][ T5574] usb 4-1: USB disconnect, device number 19 [ 242.423143][ T5574] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 242.443057][ T9155] loop4: detected capacity change from 0 to 256 [ 242.493680][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.499257][ T9160] loop1: detected capacity change from 0 to 256 [ 242.588122][ T9160] exfat: Deprecated parameter 'utf8' [ 242.655169][ T9155] FAT-fs (loop4): Directory bread(block 64) failed [ 242.685243][ T9155] FAT-fs (loop4): Directory bread(block 65) failed [ 242.720366][ T9155] FAT-fs (loop4): Directory bread(block 66) failed [ 242.739528][ T9160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 242.765975][ T9155] FAT-fs (loop4): Directory bread(block 67) failed [ 242.785831][ T9162] lo speed is unknown, defaulting to 1000 [ 242.807389][ T9155] FAT-fs (loop4): Directory bread(block 68) failed [ 242.816384][ T9155] FAT-fs (loop4): Directory bread(block 69) failed [ 242.867456][ T9155] FAT-fs (loop4): Directory bread(block 70) failed [ 242.893665][ T9155] FAT-fs (loop4): Directory bread(block 71) failed [ 242.937391][ T9155] FAT-fs (loop4): Directory bread(block 72) failed [ 242.947585][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.987788][ T9155] FAT-fs (loop4): Directory bread(block 73) failed [ 243.009465][ T9171] loop1: detected capacity change from 0 to 512 [ 243.244329][ T9171] EXT4-fs (loop1): 1 truncate cleaned up [ 243.257183][ T9171] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,dax=never,nouid32,,errors=continue. Quota mode: none. [ 243.338110][ T9180] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 243.493604][ T9183] loop4: detected capacity change from 0 to 4096 [ 243.611238][ T9186] loop2: detected capacity change from 0 to 4096 [ 243.689555][ T9186] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 243.692294][ T9193] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.996324][ T9186] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 244.003351][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.096296][ T9206] loop1: detected capacity change from 0 to 256 [ 244.183740][ T8273] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 244.191933][ T9206] exfat: Unknown parameter 'obj_role' [ 244.244842][ T8273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 244.335199][ T9206] loop1: detected capacity change from 0 to 1024 [ 244.361160][ T9206] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 244.437088][ T6447] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 244.817280][ T6447] usb 4-1: config 2 has an invalid interface number: 230 but max is 0 [ 244.840609][ T6447] usb 4-1: config 2 has no interface number 0 [ 244.867459][ T6447] usb 4-1: config 2 interface 230 has no altsetting 0 [ 245.028285][ T4235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.187961][ T9235] loop9: detected capacity change from 0 to 32768 [ 245.200188][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.319958][ T9235] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 245.329478][ T9235] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 245.355833][ T6447] usb 4-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=bf.41 [ 245.381572][ T6447] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.391146][ T6447] usb 4-1: Product: syz [ 245.396102][ T6447] usb 4-1: Manufacturer: syz [ 245.402276][ T6447] usb 4-1: SerialNumber: syz [ 245.428245][ T9235] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 245.450156][ T4267] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 245.460118][ T4267] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 245.514985][ T6545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.537897][ T4267] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms [ 245.550231][ T4267] gfs2: fsid=syz:syz.0: jid=0: Done [ 245.561060][ T9235] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 245.687525][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.692819][ T9206] loop1: detected capacity change from 0 to 32768 [ 245.782169][ T6447] usb 4-1: USB disconnect, device number 20 [ 245.830998][ T9206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1301 (9206) [ 246.029285][ T9206] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 246.029372][ T9206] BTRFS info (device loop1): using free space tree [ 246.029388][ T9206] BTRFS info (device loop1): has skinny extents [ 246.067289][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.697454][ T9206] BTRFS info (device loop1): enabling ssd optimizations [ 247.016275][ T6447] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 247.175793][ T9261] loop4: detected capacity change from 0 to 32768 [ 247.448247][ T6447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.498425][ T6447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.567085][ T6447] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.657073][ T6447] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.715436][ T9292] loop3: detected capacity change from 0 to 40427 [ 247.719910][ T6447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.789659][ T9292] F2FS-fs (loop3): invalid crc value [ 247.796543][ T6447] usb 3-1: config 0 descriptor?? [ 247.810099][ T9292] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 247.941818][ T9292] F2FS-fs (loop3): Start checkpoint disabled! [ 248.016666][ T9292] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 248.083307][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.144257][ T9261] XFS (loop4): Mounting V5 Filesystem [ 248.158897][ T5406] attempt to access beyond end of device [ 248.158897][ T5406] loop3: rw=2049, want=45104, limit=40427 [ 248.269629][ T6447] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 248.288283][ T6447] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 248.309375][ T9261] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 248.375089][ T9328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.389506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.450554][ T4231] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.459643][ T9261] XFS (loop4): Starting recovery (logdev: internal) [ 248.553740][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.563719][ T9261] XFS (loop4): Ending recovery (logdev: internal) [ 248.700874][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1317'. [ 248.707101][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 248.813545][ T6447] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 248.861272][ T6447] XFS (loop4): Unmount and run xfs_repair [ 248.882494][ T6447] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 248.894460][ T6447] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 248.916264][ T4231] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 248.926199][ T6447] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 248.937255][ T4231] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.952738][ T6447] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 248.978260][ T4231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.017175][ T4231] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.037080][ T6447] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 249.067038][ T6447] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 249.083633][ T4231] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.117529][ T6447] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.130314][ T9352] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1319'. [ 249.136663][ T9342] loop3: detected capacity change from 0 to 8192 [ 249.166835][ T4231] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.195646][ T6447] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.213257][ T6447] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 249.237890][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.262347][ T9343] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 249.277245][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.333192][ T9356] loop9: detected capacity change from 0 to 1024 [ 249.379293][ T9342] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 249.402367][ T9342] REISERFS (device loop3): using ordered data mode [ 249.417327][ T9342] reiserfs: using flush barriers [ 249.457083][ T9342] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 249.488576][ T9356] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 249.531760][ T9342] REISERFS (device loop3): checking transaction log (loop3) [ 249.562970][ T9342] REISERFS (device loop3): Using r5 hash to sort names [ 249.577468][ T4231] usb 2-1: usb_control_msg returned -32 [ 249.577635][ T9342] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 249.590078][ T4231] usbtmc 2-1:16.0: can't read capabilities [ 249.772092][ T9342] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 249.817382][ T9342] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 249.864980][ T9342] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 2 0x0 SD] (nlink == 1) not found (pos 0) [ 249.889415][ T9368] REISERFS error (device loop3): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 249.907522][ T9368] REISERFS (device loop3): Remounting filesystem read-only [ 249.915685][ T9368] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 249.931959][ T8554] XFS (loop4): Unmounting Filesystem [ 250.203584][ T9379] loop2: detected capacity change from 0 to 128 [ 250.331229][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.354819][ T9379] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 250.432794][ T9321] usb 3-1: USB disconnect, device number 3 [ 250.451601][ T9379] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.580298][ T4267] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 250.867316][ T4267] usb 10-1: Using ep0 maxpacket: 16 [ 250.903537][ T9394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1328'. [ 250.970910][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 251.054223][ T9395] loop4: detected capacity change from 0 to 4096 [ 251.100153][ T9395] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 251.167671][ T9321] usb 2-1: USB disconnect, device number 12 [ 251.190526][ T4267] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 251.227139][ T4267] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.266539][ T4267] usb 10-1: Product: syz [ 251.296932][ T4267] usb 10-1: Manufacturer: syz [ 251.335972][ T4267] usb 10-1: SerialNumber: syz [ 251.353765][ T4267] usb 10-1: config 0 descriptor?? [ 251.390212][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.430065][ T4267] gspca_main: spca508-2.14.0 probing 041e:4018 [ 251.478403][ T9416] loop3: detected capacity change from 0 to 16 [ 251.492317][ T9395] ntfs3: loop4: Failed to load $Extend. [ 251.582286][ T9416] erofs: (device loop3): mounted with root inode @ nid 36. [ 251.617211][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.637191][ T4267] gspca_spca508: reg_read err -32 [ 251.687263][ T4267] gspca_spca508: reg_read err -32 [ 251.890163][ T9428] loop1: detected capacity change from 0 to 2048 [ 251.970250][ T4267] gspca_spca508: reg_read err -71 [ 251.997423][ T4267] gspca_spca508: reg_read err -71 [ 252.022872][ T4267] gspca_spca508: reg write: error -71 [ 252.044185][ T9428] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 252.101659][ T4267] spca508: probe of 10-1:0.0 failed with error -71 [ 252.110269][ T9428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.123766][ T4267] usb 10-1: USB disconnect, device number 6 [ 252.347076][ T7478] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 252.502693][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.529044][ T9446] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 252.724823][ T9462] loop3: detected capacity change from 0 to 512 [ 252.731779][ T7478] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 252.769066][ T7478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.821873][ T7478] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.825427][ T9462] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 252.847021][ T7478] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.860633][ T7478] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.870659][ T7478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.888771][ T7478] usb 5-1: config 0 descriptor?? [ 252.894658][ T9462] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.1347: corrupted in-inode xattr [ 252.934507][ T9462] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1347: couldn't read orphan inode 15 (err -117) [ 253.042085][ T9474] loop2: detected capacity change from 0 to 1024 [ 253.059261][ T9462] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 253.093299][ T4267] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 253.188541][ T9474] hfsplus: failed to load root directory [ 253.371159][ T7478] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 253.393640][ T4267] usb 10-1: Using ep0 maxpacket: 8 [ 253.408754][ T7478] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 253.470252][ T7478] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 253.502112][ T4196] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 253.528153][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.547733][ T4267] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 253.561470][ T4267] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 253.595136][ T4267] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 253.637114][ T4267] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 253.715648][ T4196] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 253.717287][ T4267] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 253.745215][ T6135] usb 5-1: USB disconnect, device number 8 [ 253.797976][ T4196] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 253.854504][ T4267] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.875773][ T4196] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 253.904256][ T4267] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.916045][ T4196] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 253.942563][ T4267] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.966520][ T4196] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 254.002557][ T4196] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 254.033435][ T4196] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 254.060016][ T4196] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 254.091843][ T4196] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 254.247140][ T4267] usb 10-1: usb_control_msg returned -32 [ 254.253230][ T4267] usbtmc 10-1:16.0: can't read capabilities [ 254.417507][ T9517] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 254.547484][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.642343][ T4267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.728980][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1364'. [ 254.753273][ T4253] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.885825][ T4253] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.905253][ T9541] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 254.907553][ T5574] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 254.978803][ T4253] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.032129][ T9546] loop1: detected capacity change from 0 to 256 [ 255.065368][ T4253] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.163614][ T9546] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 255.207238][ T5574] usb 3-1: Using ep0 maxpacket: 32 [ 255.283873][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.329526][ T5574] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 255.367077][ T5574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.414184][ T9554] loop4: detected capacity change from 0 to 2048 [ 255.446307][ T9556] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 255.467814][ T5574] usb 3-1: config 0 descriptor?? [ 255.523910][ T9558] lo speed is unknown, defaulting to 1000 [ 255.564458][ T9554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.777361][ T5574] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 255.803223][ T5574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.834353][ T7478] usb 10-1: USB disconnect, device number 7 [ 255.847574][ T5574] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 255.857190][ T5574] usb 3-1: media controller created [ 255.874409][ T5574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.986551][ T9530] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 256.008663][ T5574] az6027: usb out operation failed. (-71) [ 256.029809][ T5574] az6027: usb out operation failed. (-71) [ 256.057530][ T5574] stb0899_attach: Driver disabled by Kconfig [ 256.069731][ T9569] lo speed is unknown, defaulting to 1000 [ 256.077842][ T5574] az6027: no front-end attached [ 256.077842][ T5574] [ 256.117378][ T5574] az6027: usb out operation failed. (-71) [ 256.135750][ T5574] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 256.142960][ T9582] loop4: detected capacity change from 0 to 512 [ 256.153097][ T5574] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 256.172140][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 256.206271][ T9582] EXT4-fs (loop4): Test dummy encryption mode enabled [ 256.222962][ T5574] dvb-usb: schedule remote query interval to 400 msecs. [ 256.237629][ T5574] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 256.257936][ T5574] usb 3-1: USB disconnect, device number 4 [ 256.271906][ T9582] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.1375: inode has both inline data and extents flags [ 256.299060][ T9582] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1375: couldn't read orphan inode 15 (err -117) [ 256.323321][ T9582] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 256.344543][ T5574] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 256.518553][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.553580][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.562818][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.566130][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.584321][ T9558] device bridge_slave_0 entered promiscuous mode [ 256.611042][ T9582] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 256.627599][ T7478] net_ratelimit: 1 callbacks suppressed [ 256.627614][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.657278][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.697480][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.728577][ T9558] device bridge_slave_1 entered promiscuous mode [ 256.911809][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.938833][ T9604] lo speed is unknown, defaulting to 1000 [ 257.018869][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.108712][ T7478] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 257.179909][ T9624] loop4: detected capacity change from 0 to 2048 [ 257.202983][ T9624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.230514][ T9558] team0: Port device team_slave_0 added [ 257.285806][ T9558] team0: Port device team_slave_1 added [ 257.340582][ T4253] IPVS: stopping backup sync thread 4673 ... [ 257.373105][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.377541][ T7478] usb 3-1: Using ep0 maxpacket: 8 [ 257.417770][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.490426][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.507195][ T6447] Bluetooth: hci4: command 0x0409 tx timeout [ 257.557427][ T7478] usb 3-1: unable to get BOS descriptor or descriptor too short [ 257.583413][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.607104][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.652091][ T7478] usb 3-1: config 4 interface 0 has no altsetting 0 [ 257.674599][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.683160][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.717111][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.871623][ T9558] device hsr_slave_0 entered promiscuous mode [ 257.907350][ T7478] usb 3-1: string descriptor 0 read error: -22 [ 257.926908][ T7478] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 257.965703][ T7478] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 257.981213][ T9558] device hsr_slave_1 entered promiscuous mode [ 258.012578][ T9558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.029428][ T7478] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 258.033390][ T9558] Cannot create hsr debugfs directory [ 258.129274][ T7478] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 258.170564][ T7478] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 258.207379][ T7478] usb 3-1: media controller created [ 258.258253][ T7478] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.354147][ T4253] device hsr_slave_0 left promiscuous mode [ 258.366629][ T4253] device hsr_slave_1 left promiscuous mode [ 258.385949][ T4253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.395577][ T4253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.413980][ T4253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.429713][ T4253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.464423][ T4253] device bridge_slave_1 left promiscuous mode [ 258.472802][ T6447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.486104][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.494432][ T5574] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 258.515363][ T4253] device bridge_slave_0 left promiscuous mode [ 258.525579][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.537066][ T9626] loop9: detected capacity change from 0 to 65536 [ 258.559311][ T4253] device veth1_macvtap left promiscuous mode [ 258.576896][ T4253] device veth0_macvtap left promiscuous mode [ 258.585127][ T4253] device veth1_vlan left promiscuous mode [ 258.599320][ T4253] device veth0_vlan left promiscuous mode [ 258.679802][ T4267] usb 3-1: USB disconnect, device number 5 [ 258.698013][ T9626] XFS (loop9): Mounting V5 Filesystem [ 258.708597][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.764747][ T9626] XFS (loop9): Ending clean mount [ 258.767414][ T5574] usb 2-1: Using ep0 maxpacket: 32 [ 258.772851][ T9626] XFS (loop9): Quotacheck needed: Please wait. [ 258.902107][ T9626] XFS (loop9): Quotacheck: Done. [ 258.908000][ T5574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.968323][ T5574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.989039][ T5574] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 259.017205][ T5574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.034343][ T5574] usb 2-1: config 0 descriptor?? [ 259.357300][ T4253] team0 (unregistering): Port device team_slave_1 removed [ 259.394137][ T4253] team0 (unregistering): Port device team_slave_0 removed [ 259.422216][ T4253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.441653][ T4253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.530101][ T5574] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 259.554321][ T5574] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 259.579423][ T5574] ft260 0003:0403:6030.0011: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 259.595803][ T4253] bond0 (unregistering): Released all slaves [ 259.598859][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 259.723491][ T9697] device syzkaller1 entered promiscuous mode [ 259.748217][ T6135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.751861][ T5574] ft260 0003:0403:6030.0011: failed to retrieve chip version [ 259.793724][ T5574] ft260: probe of 0003:0403:6030.0011 failed with error -71 [ 259.850493][ T5574] usb 2-1: USB disconnect, device number 13 [ 260.082881][ T9705] fido_id[9705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 260.214322][ T9718] loop2: detected capacity change from 0 to 64 [ 260.360756][ T26] audit: type=1800 audit(1781288210.235:132): pid=9626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1385" name="file0" dev="loop9" ino=36 res=0 errno=0 [ 260.718026][ T5574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.841388][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.877255][ T9321] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 261.014673][ T7878] XFS (loop9): Unmounting Filesystem [ 261.120258][ T4267] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 261.144933][ T9558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.152950][ T9321] usb 5-1: Using ep0 maxpacket: 8 [ 261.170963][ T9558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.192105][ T9558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.218404][ T9558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.351238][ T9558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.369332][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.388947][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.411469][ T4267] usb 3-1: Using ep0 maxpacket: 8 [ 261.418664][ T9558] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.441421][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.461047][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.477576][ T9321] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 261.494127][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.497076][ T9321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.502125][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.521389][ T9321] usb 5-1: Product: syz [ 261.526422][ T9321] usb 5-1: Manufacturer: syz [ 261.542364][ T9321] usb 5-1: SerialNumber: syz [ 261.544784][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.567387][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 261.583791][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.596581][ T9321] usb 5-1: config 0 descriptor?? [ 261.602380][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.606054][ T4267] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.632607][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.640661][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.640952][ T4267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.673661][ T4267] usb 3-1: config 0 descriptor?? [ 261.688359][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.700019][ T5574] Bluetooth: hci4: command 0x040f tx timeout [ 261.730868][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.741943][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.761165][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.775250][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.788766][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.824760][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.846195][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.864339][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.875868][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.896880][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.909000][ T9321] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 261.933518][ T9558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.961187][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.967471][ T4267] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 262.329413][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.346154][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.373207][ T9558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.488784][ T5574] usb 3-1: USB disconnect, device number 6 [ 262.788190][ T9321] usb write operation failed. (-71) [ 262.833489][ T9321] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.834089][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.865642][ T9321] dvbdev: DVB: registering new adapter (Terratec H7) [ 262.897728][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.908042][ T9321] usb 5-1: media controller created [ 262.941428][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.952114][ T9321] usb read operation failed. (-71) [ 262.962048][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.975861][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.994395][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.997188][ T9321] usb write operation failed. (-71) [ 263.010567][ T9558] device veth0_vlan entered promiscuous mode [ 263.027656][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.033530][ T9558] device veth1_vlan entered promiscuous mode [ 263.048267][ T9321] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5 [ 263.068981][ T9321] usb 5-1: USB disconnect, device number 9 [ 263.174815][ T9787] lo speed is unknown, defaulting to 1000 [ 263.222283][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 263.232724][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 263.257659][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.268828][ T5402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.283377][ T9789] lo speed is unknown, defaulting to 1000 [ 263.293334][ T9558] device veth0_macvtap entered promiscuous mode [ 263.356888][ T9558] device veth1_macvtap entered promiscuous mode [ 263.580630][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.623598][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.643520][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.665875][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.700402][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.722841][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.747451][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 263.758584][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.777184][ T5574] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 263.795727][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.819137][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.864943][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.911657][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.924762][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.956760][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.975644][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.022264][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.047096][ T5574] usb 5-1: Using ep0 maxpacket: 16 [ 264.061446][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.083456][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.120904][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.145498][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.174396][ T9558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.193508][ T9558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.197343][ T5574] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 264.205337][ T9558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.226005][ T5574] usb 5-1: config 0 has no interface number 0 [ 264.265677][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.277293][ T5574] usb 5-1: config 0 interface 32 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.300751][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.326778][ T5574] usb 5-1: config 0 interface 32 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.349248][ T9558] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.365128][ T5574] usb 5-1: config 0 interface 32 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 264.387325][ T9558] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.409470][ T5574] usb 5-1: config 0 interface 32 has no altsetting 0 [ 264.410810][ T9558] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.433304][ T9558] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.434136][ T5574] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 264.480212][ T5574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.534512][ T5574] usb 5-1: config 0 descriptor?? [ 264.965907][ T5394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.984518][ T5394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.028244][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.036398][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.076686][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.084577][ T5406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.087743][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.117178][ T5406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.125269][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.168306][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.195968][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.216277][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.233314][ T9861] loop1: detected capacity change from 0 to 4096 [ 265.242532][ T5574] uclogic 0003:5543:0047.0012: unknown main item tag 0x0 [ 265.261643][ T5574] uclogic 0003:5543:0047.0012: item fetching failed at offset 10/40 [ 265.272219][ T5574] uclogic 0003:5543:0047.0012: parse failed [ 265.279996][ T5574] uclogic: probe of 0003:5543:0047.0012 failed with error -22 [ 265.320435][ T5574] usb 5-1: USB disconnect, device number 10 [ 265.437400][ T9873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 265.684165][ T8167] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 265.700202][ T8167] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 265.982688][ T9894] loop1: detected capacity change from 0 to 128 [ 266.045187][ T9894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 266.080530][ T9894] System zones: 1-3, 19-19, 35-36 [ 266.109363][ T9894] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 266.127159][ T9894] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.249883][ T9894] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 131073 (only 1 groups) [ 266.315873][ T9885] loop2: detected capacity change from 0 to 32768 [ 266.497197][ T5574] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.681899][ T9885] XFS (loop2): Mounting V5 Filesystem [ 266.796179][ T9927] loop1: detected capacity change from 0 to 512 [ 266.807289][ T5574] usb 5-1: Using ep0 maxpacket: 8 [ 266.845591][ T9927] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 266.894586][ T9925] loop6: detected capacity change from 0 to 1024 [ 266.898867][ T9885] XFS (loop2): Ending clean mount [ 266.939026][ T5574] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 266.953455][ T9885] XFS (loop2): Quotacheck needed: Please wait. [ 266.961695][ T5574] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.039704][ T5574] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.077761][ T5574] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.172595][ T5574] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.225703][ T9892] loop9: detected capacity change from 0 to 32768 [ 267.228201][ T5574] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.272849][ T5574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.395719][ T9892] JBD2: Ignoring recovery information on journal [ 267.533337][ T9885] XFS (loop2): Quotacheck: Done. [ 267.552337][ T9892] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 267.557190][ T5574] usb 5-1: GET_CAPABILITIES returned 0 [ 267.593812][ T5574] usbtmc 5-1:16.0: can't read capabilities [ 267.804404][ T9892] OCFS2: ERROR (device loop9): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 267.841050][ T9892] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 267.862611][ T8273] XFS (loop2): Unmounting Filesystem [ 267.863913][ T9892] OCFS2: Returning error to the calling process. [ 267.876311][ T9892] (syz.9.1432,9892,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -5 [ 267.897196][ T9901] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 267.907983][ T9892] (syz.9.1432,9892,0):__ocfs2_claim_clusters:2365 ERROR: status = -5 [ 267.927782][ T9892] (syz.9.1432,9892,0):__ocfs2_claim_clusters:2373 ERROR: status = -5 [ 267.941803][ T9892] (syz.9.1432,9892,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5 [ 267.951557][ T9892] (syz.9.1432,9892,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5 [ 267.960788][ T9892] (syz.9.1432,9892,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5 [ 267.986666][ T9892] (syz.9.1432,9892,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5 [ 268.062700][ T9892] (syz.9.1432,9892,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5 [ 268.116352][ T9892] (syz.9.1432,9892,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5 [ 268.118086][ T9956] loop1: detected capacity change from 0 to 512 [ 268.143005][ T9892] (syz.9.1432,9892,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5 [ 268.145176][ T21] usb 5-1: USB disconnect, device number 11 [ 268.176859][ T9892] (syz.9.1432,9892,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5 [ 268.203534][ T9892] (syz.9.1432,9892,0):ocfs2_symlink:1911 ERROR: status = -5 [ 268.247116][ T9892] (syz.9.1432,9892,0):ocfs2_symlink:2065 ERROR: status = -5 [ 268.429853][ T7878] ocfs2: Unmounting device (7,9) on (node local) [ 268.446191][ T9956] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.461893][ T9956] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.195222][ T9993] loop2: detected capacity change from 0 to 128 [ 269.901509][ T9997] loop4: detected capacity change from 0 to 32768 [ 270.006374][ T9997] XFS (loop4): Mounting V5 Filesystem [ 270.116814][ T9997] XFS (loop4): Ending clean mount [ 270.144616][ T9997] XFS (loop4): Quotacheck needed: Please wait. [ 270.239601][ T9997] XFS (loop4): Quotacheck: Done. [ 270.418427][ T8554] XFS (loop4): Unmounting Filesystem [ 270.431951][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1460'. [ 270.459986][T10038] loop9: detected capacity change from 0 to 2048 [ 270.570259][T10038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.847423][T10048] loop2: detected capacity change from 0 to 1024 [ 270.891326][T10050] loop1: detected capacity change from 0 to 1024 [ 270.997604][T10050] EXT4-fs (loop1): Ignoring removed oldalloc option [ 271.114278][T10048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.137151][T10050] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x000000000000169c,barrier=0x0000000000000200,barrier=0x000000000000ffff,oldalloc,nojournal_checksum,,errors=continue. Quota mode: none. [ 271.265158][ T26] audit: type=1800 audit(1781288221.135:133): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1466" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 271.797833][T10080] lo speed is unknown, defaulting to 1000 [ 271.962344][T10094] loop9: detected capacity change from 0 to 256 [ 271.981005][T10087] loop1: detected capacity change from 0 to 4096 [ 272.042345][T10094] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 272.101682][T10054] loop6: detected capacity change from 0 to 32768 [ 272.178824][T10087] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 272.346459][ T9321] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 272.410385][ T9321] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.496061][T10106] loop9: detected capacity change from 0 to 2048 [ 272.544418][T10054] XFS (loop6): Mounting V5 Filesystem [ 272.679057][T10106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.760513][T10054] XFS (loop6): Ending clean mount [ 272.861152][T10054] XFS (loop6): Quotacheck needed: Please wait. [ 272.901141][T10111] fido_id[10111]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0013/report_descriptor': No such file or directory [ 273.334849][T10127] tipc: Started in network mode [ 273.417940][T10127] tipc: Node identity ac1414aa, cluster identity 4711 [ 273.516461][T10127] tipc: Enabled bearer , priority 10 [ 273.540700][T10119] loop2: detected capacity change from 0 to 131072 [ 273.608821][T10119] F2FS-fs (loop2): invalid crc value [ 273.665066][T10119] F2FS-fs (loop2): Found nat_bits in checkpoint [ 273.677549][T10054] XFS (loop6): Quotacheck: Done. [ 273.705216][T10119] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 273.710636][T10141] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1485'. [ 273.734291][ T26] audit: type=1800 audit(1781288223.605:134): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1469" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 273.756683][T10119] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 273.787501][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 273.822948][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 273.924057][T10146] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1486'. [ 274.002032][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 274.089162][ T9558] XFS (loop6): Unmounting Filesystem [ 274.107523][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1486'. [ 274.128432][T10149] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1486'. [ 274.277196][T10151] loop9: detected capacity change from 0 to 8192 [ 274.510350][ T4231] tipc: Node number set to 2886997162 [ 274.811282][T10169] loop1: detected capacity change from 0 to 512 [ 275.023807][T10169] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.1493: invalid block [ 275.223132][T10169] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1493: invalid indirect mapped block 10 (level 1) [ 275.325250][T10169] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1493: invalid indirect mapped block 8 (level 1) [ 275.339140][ T4236] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 275.350573][T10169] EXT4-fs (loop1): 1 truncate cleaned up [ 275.356675][T10169] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.536389][T10191] loop9: detected capacity change from 0 to 128 [ 275.723318][T10195] loop6: detected capacity change from 0 to 512 [ 275.736948][ T4236] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.781856][ T4236] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.808822][T10195] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 275.847420][ T4236] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.871706][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.036188][T10195] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 276.073820][T10195] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.221226][ T4236] usb 5-1: GET_CAPABILITIES returned 0 [ 276.228584][ T4236] usbtmc 5-1:16.0: can't read capabilities [ 276.239848][T10214] loop1: detected capacity change from 0 to 8192 [ 276.431937][ T7478] usb 5-1: USB disconnect, device number 12 [ 276.640059][T10230] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 276.792526][T10236] loop2: detected capacity change from 0 to 512 [ 276.810002][T10237] input: syz0 as /devices/virtual/input/input23 [ 276.959153][T10236] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1511: invalid indirect mapped block 10 (level 1) [ 277.067164][T10236] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1511: invalid indirect mapped block 8 (level 1) [ 277.128792][T10236] EXT4-fs (loop2): 1 truncate cleaned up [ 277.155612][T10236] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.195360][T10252] loop9: detected capacity change from 0 to 1024 [ 277.510267][T10252] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000006,nodioread_nolock,,errors=continue. Quota mode: none. [ 277.657840][T10252] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.746083][T10269] loop2: detected capacity change from 0 to 2048 [ 277.798538][T10252] EXT4-fs (loop9): shut down requested (2) [ 277.896421][T10274] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.183829][T10277] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 278.308818][T10277] Remounting filesystem read-only [ 278.510583][ T8273] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 278.559486][T10255] loop4: detected capacity change from 0 to 32768 [ 278.895621][T10255] XFS (loop4): Mounting V5 Filesystem [ 279.153897][T10255] XFS (loop4): Ending clean mount [ 279.213618][T10255] XFS (loop4): Quotacheck needed: Please wait. [ 279.425291][T10255] XFS (loop4): Quotacheck: Done. [ 279.437657][T10315] loop6: detected capacity change from 0 to 16 [ 279.476125][ T26] audit: type=1800 audit(1781288229.345:135): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1519" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 279.565845][T10315] erofs: (device loop6): mounted with root inode @ nid 36. [ 279.627586][T10285] loop9: detected capacity change from 0 to 32768 [ 279.846009][T10315] lo speed is unknown, defaulting to 1000 [ 279.876668][ T8554] XFS (loop4): Unmounting Filesystem [ 279.961275][T10322] loop1: detected capacity change from 0 to 4096 [ 280.057076][ T5574] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 280.242321][T10322] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 280.394023][ T5574] usb 3-1: Using ep0 maxpacket: 16 [ 280.547453][ T5574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.583691][ T5574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.631416][ T5574] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.687076][ T5574] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.719256][ T5574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.746839][ T5574] usb 3-1: config 0 descriptor?? [ 280.806662][T10346] loop4: detected capacity change from 0 to 512 [ 280.923384][T10346] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.1533: invalid block [ 280.949334][T10355] syz.9.1540 (10355): attempted to duplicate a private mapping with mremap. This is not supported. [ 280.977203][ T4231] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 280.996673][T10346] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1533: invalid indirect mapped block 10 (level 1) [ 281.094961][T10346] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1533: invalid indirect mapped block 8 (level 1) [ 281.165419][T10346] EXT4-fs (loop4): 1 truncate cleaned up [ 281.207345][T10346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.250138][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 281.280940][ T5574] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0014/input/input24 [ 281.417955][ T4231] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 281.437681][ T5574] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 281.475298][ T4231] usb 2-1: config 0 interface 0 has no altsetting 0 [ 281.506228][ T4231] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 281.563888][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.601057][ T4231] usb 2-1: config 0 descriptor?? [ 281.604734][ T7478] usb 3-1: USB disconnect, device number 7 [ 281.720847][T10375] fido_id[10375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 281.909367][T10385] Invalid argument reading file caps for ./file0 [ 282.422401][ T4231] corsair-cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 282.601737][T10417] loop8: detected capacity change from 0 to 8 [ 282.661992][ T4231] corsair-cpro: probe of 0003:1B1C:0C10.0015 failed with error -71 [ 282.675778][T10417] Dev loop8: unable to read RDB block 8 [ 282.686928][T10417] loop8: unable to read partition table [ 282.705146][T10417] loop8: partition table beyond EOD, truncated [ 282.744144][T10417] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 282.878329][ T7478] usb 2-1: USB disconnect, device number 14 [ 282.911462][T10423] fido_id[10423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 282.974202][T10422] loop2: detected capacity change from 0 to 4096 [ 283.067797][T10422] EXT4-fs (loop2): Ignoring removed bh option [ 283.114727][T10422] EXT4-fs (loop2): Unrecognized mount option "fsuuid=7" or missing value [ 283.585442][T10443] loop1: detected capacity change from 0 to 128 [ 283.696103][T10446] loop9: detected capacity change from 0 to 512 [ 283.701317][T10443] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 283.840776][T10446] EXT4-fs (loop9): Ignoring removed bh option [ 283.885674][T10446] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 283.986365][T10446] EXT4-fs (loop9): 1 truncate cleaned up [ 284.041912][T10457] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.057855][T10446] EXT4-fs (loop9): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 284.236392][T10467] loop4: detected capacity change from 0 to 256 [ 284.346648][T10467] FAT-fs (loop4): bogus logical sector size 128 [ 284.382401][T10467] FAT-fs (loop4): Can't find a valid FAT filesystem [ 284.827077][ T4236] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 285.087150][ T4236] usb 2-1: Using ep0 maxpacket: 16 [ 285.216818][T10508] loop6: detected capacity change from 0 to 512 [ 285.217895][ T4236] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.291453][T10509] loop9: detected capacity change from 0 to 2048 [ 285.308165][ T4236] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.336447][ T4236] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.365060][T10509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.405322][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.687691][T10477] loop2: detected capacity change from 0 to 40427 [ 285.820426][T10477] F2FS-fs (loop2): Found nat_bits in checkpoint [ 285.961745][ T4236] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 285.986883][T10477] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 286.044796][T10477] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 286.160055][T10481] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 286.176291][T10481] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 286.187288][T10481] CPU: 1 PID: 10481 Comm: syz.1.1572 Not tainted syzkaller #0 [ 286.201387][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 286.221184][T10481] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 286.231409][T10481] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 76 55 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 58 55 55 fa 4c 8b 3b 4d 8d a7 78 [ 286.277673][T10481] RSP: 0018:ffffc9000308f9a0 EFLAGS: 00010246 [ 286.288712][T10481] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 286.304751][T10481] RDX: ffffc90004af9000 RSI: 0000000000002f64 RDI: 0000000000002f65 [ 286.323677][T10481] RBP: 000000000000000f R08: 000000000000000f R09: 0000000000000004 [ 286.338177][T10481] R10: dffffc0000000000 R11: fffffbfff1b140de R12: dffffc0000000000 [ 286.353580][T10481] R13: 0000000000000001 R14: 0000000000000004 R15: dffffc0000000000 [ 286.372365][T10481] FS: 00007fcaf0aba6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 286.388927][T10481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.405436][T10481] CR2: 0000001b32e1eff8 CR3: 0000000068dfa000 CR4: 00000000003506e0 [ 286.424093][T10481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.440565][T10481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.451933][T10481] Call Trace: [ 286.462856][T10481] [ 286.469696][T10481] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 286.481465][T10481] ? mcp_i2c_xfer+0x420/0x420 [ 286.489241][T10481] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 286.499108][T10481] ? rt_mutex_lock_nested+0x1a4/0x210 [ 286.506795][T10481] ? i2c_smbus_xfer+0x120/0x3b0 [ 286.515710][T10481] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 286.527327][T10481] ? __might_fault+0xb7/0x110 [ 286.538122][T10481] i2c_smbus_xfer+0x272/0x3b0 [ 286.547023][T10481] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 286.561627][T10481] ? __might_fault+0xb3/0x110 [ 286.570660][T10481] i2cdev_ioctl_smbus+0x432/0x680 [ 286.583439][T10481] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 286.591885][T10481] ? __might_fault+0xb3/0x110 [ 286.604293][T10481] ? _copy_from_user+0x111/0x170 [ 286.615458][T10481] i2cdev_ioctl+0x583/0x7b0 [ 286.624996][T10481] ? i2cdev_write+0x120/0x120 [ 286.633656][T10481] ? bpf_lsm_file_ioctl+0x5/0x10 [ 286.646951][T10481] ? security_file_ioctl+0x7c/0xa0 [ 286.658689][T10481] ? i2cdev_write+0x120/0x120 [ 286.674607][T10481] __se_sys_ioctl+0xfa/0x170 [ 286.686902][T10481] do_syscall_64+0x4c/0xa0 [ 286.695376][T10481] ? clear_bhb_loop+0x30/0x80 [ 286.706734][T10481] ? clear_bhb_loop+0x30/0x80 [ 286.720488][T10481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.737148][T10481] RIP: 0033:0x7fcaf2860e59 [ 286.744307][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.783665][T10481] RSP: 002b:00007fcaf0aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.797299][T10481] RAX: ffffffffffffffda RBX: 00007fcaf2ad9fa0 RCX: 00007fcaf2860e59 [ 286.811340][T10481] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000004 [ 286.828937][T10481] RBP: 00007fcaf28f6d6f R08: 0000000000000000 R09: 0000000000000000 [ 286.847507][T10481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.872180][T10481] R13: 00007fcaf2ada038 R14: 00007fcaf2ad9fa0 R15: 00007ffd57e000a8 [ 286.895059][T10481] [ 286.899238][T10481] Modules linked in: [ 287.164300][ T8273] attempt to access beyond end of device [ 287.164300][ T8273] loop2: rw=2049, want=45104, limit=40427 [ 287.297279][ T4235] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 287.299069][T10481] ---[ end trace 9dfad5381b877d05 ]--- [ 287.331637][T10481] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 287.338173][T10481] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 76 55 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 58 55 55 fa 4c 8b 3b 4d 8d a7 78 [ 287.360789][T10481] RSP: 0018:ffffc9000308f9a0 EFLAGS: 00010246 [ 287.368266][T10481] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 287.376865][T10481] RDX: ffffc90004af9000 RSI: 0000000000002f64 RDI: 0000000000002f65 [ 287.396705][T10481] RBP: 000000000000000f R08: 000000000000000f R09: 0000000000000004 [ 287.407312][T10481] R10: dffffc0000000000 R11: fffffbfff1b140de R12: dffffc0000000000 [ 287.417507][T10481] R13: 0000000000000001 R14: 0000000000000004 R15: dffffc0000000000 [ 287.446286][T10481] FS: 00007fcaf0aba6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 287.456881][T10481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.477234][T10481] CR2: 00007fc1a371a6b0 CR3: 0000000068dfa000 CR4: 00000000003506e0 [ 287.486853][T10481] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.495945][T10481] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.504394][T10481] Kernel panic - not syncing: Fatal exception [ 287.511313][T10481] Kernel Offset: disabled [ 287.517405][T10481] Rebooting in 86400 seconds..