last executing test programs: 14.23754952s ago: executing program 0 (id=3069): pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffb, 0x1}, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 13.20615099s ago: executing program 0 (id=3073): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/13, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 10.135673149s ago: executing program 3 (id=3078): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0xfb83e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) readv(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) 9.728168403s ago: executing program 1 (id=3080): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0xffa2) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x5) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000001340)={0x2, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004c80)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x0, 0x11a8, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000101010100"], 0x64}}, 0x0) 9.179009235s ago: executing program 2 (id=3081): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sigaltstack(0x0, 0x0) 9.031772603s ago: executing program 1 (id=3082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c6e6f646973636172642c67727071756f74612c696f636861727365743d63703933322c6e6f646973636172642c71756f74612c6e6f71756f74612c6e6f696e746567726974792c004d5afe2de1b3a136431fa8ea7b501ecb08f40540fff494c16f9b0781a740588d55fa"], 0x1, 0x614f, &(0x7f000000ccc0)="$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") accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.974071737s ago: executing program 0 (id=3083): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x16c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)={0x80000018}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 7.844129773s ago: executing program 0 (id=3084): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000002c0)={0x1, "c5c2a91e002b1b800000ffe73d5eff0010ffffffe70000ffe700", 0x1, 0x7, 0x1, 0x1000000, 0x0, 0x2}) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) syz_emit_ethernet(0x1df, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) syz_open_dev$media(&(0x7f0000000480), 0x2000802, 0xb244035fa49c2b6) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/uts\x00') unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0xa, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) 7.03926861s ago: executing program 1 (id=3085): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x20001, 0xcb) io_setup(0x4fe, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) poll(0x0, 0x0, 0x9) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) 6.757738286s ago: executing program 3 (id=3086): pipe2(&(0x7f0000000000), 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x4, 0x4}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x7fff, 0x9, 0x0, 0x204, 0x7fffffff}, 0x0, 0x0) 6.312593762s ago: executing program 3 (id=3087): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2b, 0x801, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 6.091552945s ago: executing program 2 (id=3088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000005400)={[{@nobarrier}, {@nodatasum}, {@check_int_data}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@barrier}, {@nossd}, {@acl}, {@nodiscard}]}, 0xfb, 0x5195, &(0x7f0000000240)="$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") io_uring_setup(0x1020, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, r3) 5.639058651s ago: executing program 3 (id=3089): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r3 = dup(r0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 5.230679605s ago: executing program 2 (id=3090): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0xffa2) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x5) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000001340)={0x2, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000004c80)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x0, 0x0, 0x11a8, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000101010100"], 0x64}}, 0x0) 4.626613991s ago: executing program 2 (id=3091): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 4.355276906s ago: executing program 0 (id=3092): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}], 0x1}) 3.500477086s ago: executing program 1 (id=3093): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0x0, 0x7ffffff5, 0x3, 0x0, 0x0, 0x473f, 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.114974778s ago: executing program 2 (id=3094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c6e6f646973636172642c67727071756f74612c696f636861727365743d63703933322c6e6f646973636172642c71756f74612c6e6f71756f74612c6e6f696e746567726974792c004d5afe2de1b3a136431fa8ea7b501ecb08f40540fff494c16f9b0781a740588d55fa"], 0x1, 0x614f, &(0x7f000000ccc0)="$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") accept(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.08821857s ago: executing program 1 (id=3095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c6e6f646973636172642c67727071756f74612c696f636861727365743d63703933322c6e6f646973636172642c71756f74612c6e6f71756f74612c6e6f696e746567726974792c004d5afe2de1b3a136431fa8ea7b501ecb08f40540fff494c16f9b0781a740588d55fa"], 0x1, 0x614f, &(0x7f000000ccc0)="$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") r3 = socket$pptp(0x18, 0x1, 0x2) accept(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x1a14800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 522.42148ms ago: executing program 3 (id=3096): pipe2(&(0x7f0000000000), 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x4, 0x4}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x7fff, 0x9, 0x0, 0x204, 0x7fffffff}, 0x0, 0x0) 357.646649ms ago: executing program 0 (id=3097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 92.662784ms ago: executing program 3 (id=3098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000005400)={[{@nobarrier}, {@nodatasum}, {@check_int_data}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@barrier}, {@nossd}, {@acl}, {@nodiscard}]}, 0xfb, 0x5195, &(0x7f0000000240)="$eJzs3U2IVeUfB/DnzoszKjj3L/zBVlkEUi0c3EREdJUJKopuuRiMwKlFkC6cBIkWktiit4W3pKiF5EpqkczCCGrjQgojcBsa5sKNYiC5aKcx95znzL3PmXvuHV+aST8fmDnnOb/zPOe5l7OY79FzTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAQwvO/f3a4vTKyeP309amz56cbuw5unb6yf2r9mRBq7e21vL5z2zMvv7F95wvjscPMS9myXu91yKzrhayxqmvjfL/un9dCCKPJAMP58um1pVE7V/eWB6x049KeY5v3NTadONIavnb53KnyR2fe+HJPYLnk59XFhXOp0f49lOxRtDtOvVrXKZr1T0+4f+VDAABLMtlsL4o/R/M/cYv2gbSetBtJu5W0418Irc7GzcjGXdVrnhvT+jLNs5FFhbGe80zq+fdftJtp/6SdRI0lzLN71zzSjPea52xSX655AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwkD7818mBV/fT1qbPnpxu7Dm6dvrJ/av2ZEOrt7bWsXFvz/pHGX99uO37wxy1fnbj43KPDeb+4HOnYOfwWVx6fCOH1jsrFOOyldSE0uwvtZviyXHizvfJsLAAAAHA3ua/9e6hoZ3FwtKtda6fJWsfWGBZvXNpzbPO+xqYTR1rD1y6fO7W08WpFkI2RszxeY9HxinZ94afWEYxDqNcWG2+hHnfdWxqnWjpimucfuzD5d1X/Uv6vV+f/+M11XQeQ/wEAAFiiJE8PnNdXfP5fdLw7n/+/e/WPT6r6l/L/xq5DlvJ/nHHM/0Ph5vI/AAAArGR3Ov83SuNU65f/x14c/bqqfyn/Tw6W/0c6px03/honvHsihMl+UwcAAAB6iP/uvnBpIeb17MpBmteffOTQ+arxSvm/MVj+H72tnwoAAAC4FUe/2PFQVb2U/5uD5f+xOzprAAAAYCne/nD8g6p6Kf/PtPP/6rzcM/+vyZf5nQ/ZRYOf4v9CODwRwvj8ymxW+Dm0nioKAAAAwG0Sc/qfn+76oWq/Uv6frX7+f3zSQbz/v+v5f6X7/zsK2VP/nvBgAAAAAO5F5fv54+PxszcX9Hr//qD3/9+/+tArVccv5f8Dg+X/W3j/3413q97/BwAAADfhv/b+vx2lcar1e/7//z9655eq/qX83xos/8fl2s6Pd7JWy76f9yZC2DC/kj9N8Jt4uN1JYW60o9DWTHpsjz3ywtxYR6FtNumxZSKEB+ZXDiSF/8VCKylcXZcXjiaFM7GQnw9F4XhSOBnPtM/X5dNNC9/Hwkz+OeIdFGuLWyKSHtd69ZgvLNrjXHFwAACAe0oMz3mWHe1uhjTKztX67bCm3w5D/XYY7rfDSLJDumOv7WGmuxC3t85uWtr7/48Olv/jV7EqW/S6/z/E+//z9xoW9//PxEI9KczFQjN9YkAzHiMLux/HY9SbeY+rG4oCAAAA3NXidYHhZZ4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8A97dx9b11kfDvyxfe1rO47jtvxE6Q+BgaUlgzhOUl60dcLpOg2VMZzRUU2INaFxi4lLQpMOUvGSJqAOVbBuVII/hpoKoZU/2kW0CFhhzSpRVK28iGkIWlHRrS0ClbECKoMiMt17znN87nN8r68TO7W7z0eK73Pv93k9996T+5xz7nMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hhMffs9fd4r/5uQlDz1y+dQ7j+y4/Mn3X3L2N0OYbj7ek4V7hm/81NTP7rj4ziP3bLv17scufcVAXi6Ph3WNP735nQ/FWh9bH8IXekKopYHNI1mgP78/Eut74UgIZ4X5QFFiZjgrkTYcvjoUwrEwHyiq+tJQCCOlwGXfvu/ejzYStwyFsDGEUG9p4+n5iofSxs8fyBofTgP7alnglyczReCLvVkATlt8MxQv+uPTrRnGFi7X5vXXv2wde3alw+uLibH2+X6yY4U7VTKQPjB9Wk9bpTpWROXtccK7bQ282yrb+WZPW/mDVP4J5eR8qB5698xctfu6uYPxkd4wMdHXrqYVep6/99T7rlxKes28DmMHxpbldfixb2y8o2/TG79+9+aNT9z+yqM/Pt1ufre0ScvplVYP+WtuzTyP0ZT9yRp4+1U+JY370BVCuOodv/OmTvEHfpvM/8c6z//jyzne9rbkjrU+M5rNzeMjIzHx09Fsbg4AAABrxlo4arpv4iuvLRXfUE/qq8z/x7s7/x9P+eeT+Wy0J0KYaiaObgjh3ObjWeCzsbm3bwjhJc3UdGtgRxI4EcILmolNRVVJicFYYjwJ/HA0D0wlgftjYDoJfCYGbk4CH4qB40ngyhg4kQQujoEw2zqO3x3Nx9F1YCgGdmUb8Xi8CuHno7G1ZFs9XFQFAACwTPLZYX/r3dK1DqebIU4vjw8tliFegd02Qz2pIZ3BFtOqtjXUQussv1JDb6WGD7ZmKMZ9uPPw85oHi4I9i/WtchlGT2uGT/3ir94cOqjM/yc7z//rC3Skp3L+P4Sdzb8xd28emSviu6ZDOHpFSA9HAAAAAKdg3f88+ulO8cr8f6q76//jN/v7SpnDg/EwxN4NIUy2BrJqf78ayM56r8sDAAAAsBYU5+OLc+Gz+W12iXY6n67mn15i/njif2rB/AMnvryrU38r8//p7q7/H269zTpxf+zFxzeEMFgKfC32shFoGo+BH7yuNZCP//64AW6KVeUXJhRV3RRL7IqBySRwrF2JbxUlzm0N5E9W0fjRYhyzeYlSAAAAAM64eDggnpeP1/+/9Nfb3tOpXGX+v2tp1/8358GVy/vn1oWwpRZCX/rFgAeHs4UBY2CkJ098ZTirqy+t6obhEC5qDCyt6tF8/f9ausbgt4eyqmLg3Jfe/tT5jcSnh0LYUg585623vaqROJgEisb/fCiEFzdGmzb++cGs8f608U8MhvCiUqCo6u2DITQaG0iruq+e/45BWtU/1kM4pxQoqnp1PYRDAYA1Kv5Xuqf84IFD1+/dPTc3c+0KJuIx/KFw1ezczMSV++b21Nv0aU/S55ZljG6ojqnbX755OF+i6C137RzpJl18T3Cy3FZ+HL9y4WB+P34W6m+Oc1t/y93t6ZBf/rJqE6H0SardkHsXGWr/aQ55uFzZ/JNYaSfmHwjrwuB1B2aunXjv7oMHr92a/e02+7bsb1/R+ca22ppuq+GF+tbFy6PtalmJU91WF5Qr2XLwmv1bDhy6fvPsNbuvnrl65l1bX71t8sLJ7ZOvuXBLY1ST2d9FhnrBQlUnQz15W5fjWsahnlcrVXIm9hoSqzcxsDq6IbHqEvvWXdDx/+TK/H9/5/l/3OvEPX++PkO78/9j8TR/9vj8af5dMXCs2/P/Y+3O5hcXBowngcMxcNhpfgAAAJ4b4iQ/Hs2MR6V/tOnzT3QqV5n/H+7u+//LtP5/sXT9pe2W+d8US0y2W/8/Xea/WP//cLv1/9Nl/ov1/489C+v/X1cEkk3yc+v/AwAAzwVnbv3/RZf3T38goJKhurx/kqG2WIZFl/Hv9gcClrz+//f/4y/+K3RQmf/f3N3838L9AAAAsHp84E/e8/86xSvz/2Pdzf/P/Pp/od31/+PtAtPtFgYsrf83GHwxAAAAgLWj3fp/YzcOX9GpXGX+f7y7+X+87KK3JXes9ZnRbE27kK5p99PR4isDAAAAsDb0homJ/i7ztqyMuuPU2/xevhRop3TZo3/02NKu/29+of3x18Rut5v/t3wv42Pf2HhH36Y3fv2ZuzdvfOL2Vx798fz5fwAAAGDldHtcAgAAAAAAAAAAAAAAePY9+u9HtneKV77/H3Y2H2+3/l/83b/4/YLnteSOtS6+/l9+/7I33HmouWThg6MhvKwc2Htk71kh/23+C8qBe9+26fmNxJG0xJcfufjxRuKKNPD6zWc/3UhclAR2xUUSX5AG4q8qPr0+CcTlFf8tDcTtcTwNDOSBj6zPxtGTbqsfjWTbqifdVg+NhLChFCi21RdGsjZ60gHekgSKAb47DcQB/mke6E17dee6rFcxMBKL3rou6xUAAKtW/BTYH66anZuZjB/h4+15tdbbqGXJshvKkQ9W4p08nC9N9pa7do50k+5LP4vO/9Z4f6g3hrC18nG1nKWnOcrlqWWRTfe8NkNebLW33jblUkvddAPtRzSUjWjiyn1ze/oXHfj2xbNsqy2aZWtlslPO0tvcpF3U0kVfuhhRl9umiy7H+71hYqIvyfV7MTgWWiz2iuj2+/rldf7avQrKed712NFfdqqvMv8f627+Xy+P6+n8xwAOx1/W+5sNlvkHAACAlfWRHb/6ZPz35hsf+E6nvJX5/3h38/94BCs/FZwd7TgRf///6IYQzm0+ngU+G5t7+4YQXtJMTccS2Q/qXxpLTGaBz8YDJptiiV3TrVUNxsDxJPDD0TxwIgncHwP5UYrbQ34o529HQ3hVM7WztcT+WGIsCbwpBsaTwEQMTIbWoz7rY2AqKfHk+jwwnQT+NQbCbOu2umt9vq0AAACWIp+i9LfeDek873htsQw9i2UYDtnv07fN0LtYDfXFMrQbRbz/uZihv6e6FYpYWutQUkslQ/wx/CX3q5IhfKs1Z1qw0nS8/qC43qCnNcM9r63VQweV+f9kd/P/4dbbrPX74/x//vf/ssDXYvc+Hi8dH4+BH7yuNZAfGLg/TnZvKqqazkvkk/abYompGBhPAvtjYCoJ7NqZB449vzWQz7SLxo8Wjc/mJUoBAAAAOOPiAYJ4mCbO/2898OF1ncpV5v9T3c3/Y3vryo19KNb62PoQvtAz35sisHkkC8TjGCPx6/EvHAnhrNIBjqLEzHBWYiBpOHx1KPuG+kBa1ZeGsi8fxPuXffu+ez/aSNwyFMLG0tGXoo3v17M2htLA+QNZYDgN7KtlgXjkpwh8sTcLwGkrjgrGF1R+qUthbOFybV5/z5XfBE2HVzkGukC+hb5ztVIqB1zzY6qFpT1tHY/fsmwqb48T3m1r8d025t1W/iCVf0I5OR+qh949M1ftvm7uYHyk/E3WihV6nsvfUu0mvQyvw8On3tvF1dMOTCa7j8mFyy38OuyJ1X3sGxvv6Nv0xq/fvXnjE7e/8uiPu+5GG/GLwve9/19GvlvavCutHvLX3Jrbn0yvyP5kcMkde3at/qcteXeP+28ghLDzyU/c1Clemf9Pdzf/ryW3Tb+KG/PAhhBeXtq4D8bN/4cbsv1gKZDtJc+pBrJT7v852nbPCQAAAMutONxRHC+YzW+zC8LTeXI1//QS88fjFVML5u+238N/+baNneKV+f+uzvP/waSbzcPMz63z/0PO/7NCzul4MU7K+f8FrfZD0ZVD+4dP61D0KZwpsAM6Bc7/L2i1v9u6Ov+/wHvoOX7ix/l/5/8X4vz/Is7Q+f+1ZrU/bZU9/P4z/aFrVXriD77yUKd4Zf6/v7v5v/X/Fl60r1j/b1cSKNb/299u/b/Dndf/GwxLWf/PDAAAAKhos9BcOs87PrxYhnT1vkqGRRcIXHSJwfTk8/Ku/9d2jb21vP7f4+d9/9dhIf/8k+w2nf8f7m7+H18O68qtr5X1/8Z3tqnq5hjYb2FAAAAAVqN2BwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4dt3zd/+9p1P8gd9e8tAjl0+988iOy598/yVnfzOE2ebjPVm4Z/jGT0397I6L7zxyz7Zb737s0lfU83L9+e3/z7LVy4VCeGY0hGOlR0Zi4qejjTvzgcvecOehWiPx4GgILysH9h7Ze1Yj8ZnREC4oB+5926bnNxJH0hJffuTixxuJK9LA6zef/XQjcVEe6ImDi939+/VZd3vS7n50fQgbSoGiu+9c31pV0cYf54HetI1/GMnaiIGRWPSTI1kbMTAXS8wOhrClFkJfWtUD9ayqvrSqf6pnVfWlVX2gHsJFIYRaWtUjA1lVtXTk3xzIqoqBc196+1PnNxLHBkLYUg585623vaqReHcSKBr/s4EQXtx4yaSNfy6/7S8a78sSt/SH8KIQwkBa4he1rLsDaXcfrYVwTilQNP6OWgiHAs8JcefTskc7cOj6vbvn5mauXcHEQN7WULhqdm5m4sp9c3vqSZ/a6SmlT95w6mN/+Kn3Xdm4fctdO0e6Sdfycv3NLm/rb7m7fbX3PvZruFzJ/PNRqT/mHwjrwuB1B2aunXjv7oMHr92a/V0g+29OLpB9W/Y33wvl22rrWtlWF5Qr2XLwmv1bDhy6fvPsNbuvnrl65l1bX71t8sLJ7ZOvuXBLY1ST2d/lGOptjb+1MzrU88rNLfk9HWtZ8d2GhMQqSQyEVdGNM5vobdm7Ta72HXnlg/58R/tDvbmDTqcVtXKWnuYol2PQO051yKfwOaXdoGtxRFsrE4fKoLctkOWG1izbK5OJ+VqGsizNz3WVyWG5sd7mJo33e8PERF+77TDWere8eX9yGpv3e/mm6zYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAsQAAAACAMH/rMHo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FIAAAD//zCqJB0=") io_uring_setup(0x1020, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(0x0, r3) 50.323087ms ago: executing program 1 (id=3099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) 0s ago: executing program 2 (id=3100): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f00000002c0)={0x1, "c5c2a91e002b1b800000ffe73d5eff0010ffffffe70000ffe700", 0x1, 0x7, 0x1, 0x1000000, 0x0, 0x2}) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) syz_emit_ethernet(0x1df, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) syz_open_dev$media(&(0x7f0000000480), 0x2000802, 0xb244035fa49c2b6) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000140)='ns/uts\x00') unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(r5, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0xa, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) kernel console output (not intermixed with test programs): irst mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1132.687515][T13573] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1132.696488][T13573] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1132.704794][T13573] BTRFS info (device loop1): enabling ssd optimizations [ 1132.711933][T13573] BTRFS info (device loop1): setting datacow [ 1132.718135][T13573] BTRFS info (device loop1): doing ref verification [ 1132.726162][T13573] BTRFS info (device loop1): force clearing of disk cache [ 1132.733648][T13573] BTRFS info (device loop1): turning off barriers [ 1132.740228][T13573] BTRFS info (device loop1): using spread ssd allocation scheme [ 1132.748141][T13573] BTRFS info (device loop1): using free space tree [ 1133.400701][T13573] BTRFS info (device loop1): auto enabling async discard [ 1133.422582][T13573] BTRFS info (device loop1): rebuilding free space tree [ 1135.313589][ T5767] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1136.442693][T13617] loop2: detected capacity change from 0 to 512 [ 1136.534241][T13617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1136.607873][T13617] ext4 filesystem being mounted at /527/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1137.669071][T13627] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2151: corrupted inode contents [ 1137.724819][T13627] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.2151: mark_inode_dirty error [ 1137.746596][T13627] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2151: corrupted inode contents [ 1137.768448][T13627] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2151: mark_inode_dirty error [ 1137.833926][T13626] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1138.094423][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.194700][T13695] fuse: Bad value for 'fd' [ 1151.175421][T13747] fuse: Bad value for 'fd' [ 1155.344320][T13780] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2196'. [ 1155.979794][T13782] loop1: detected capacity change from 0 to 32768 [ 1157.053544][T13794] mkiss: ax0: crc mode is auto. [ 1160.833896][T13820] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2209'. [ 1161.817428][T13829] fuse: Bad value for 'fd' [ 1162.859484][T13841] mkiss: ax0: crc mode is auto. [ 1165.978578][T13882] mkiss: ax0: crc mode is auto. [ 1166.035743][T13881] fuse: Bad value for 'fd' [ 1167.319377][T12059] syz_tun (unregistering): left allmulticast mode [ 1167.821651][T13905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1167.835783][T13905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1167.874193][T13905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1167.885226][T13905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1167.893208][T13905] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1167.902709][T13905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1168.092306][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.211901][T13914] mkiss: ax0: crc mode is auto. [ 1168.849141][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.154769][T13909] fuse: Bad value for 'fd' [ 1169.498142][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.734033][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1169.759182][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.962742][ T5774] Bluetooth: hci1: command tx timeout [ 1170.052558][T13928] vlan2: entered promiscuous mode [ 1170.058432][T13928] vlan2: entered allmulticast mode [ 1170.065635][T13928] hsr_slave_1: entered allmulticast mode [ 1170.522407][T13903] chnl_net:caif_netlink_parms(): no params data found [ 1172.033755][ T5774] Bluetooth: hci1: command tx timeout [ 1172.355427][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.420745][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.471360][T13903] bridge_slave_0: entered allmulticast mode [ 1172.490457][T13953] fuse: Bad value for 'fd' [ 1172.505685][T13903] bridge_slave_0: entered promiscuous mode [ 1173.472707][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.494049][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.522771][T13903] bridge_slave_1: entered allmulticast mode [ 1173.540296][T13903] bridge_slave_1: entered promiscuous mode [ 1173.824322][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.077098][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1174.113627][ T5774] Bluetooth: hci1: command tx timeout [ 1174.507491][T13903] team0: Port device team_slave_0 added [ 1174.675784][T13903] team0: Port device team_slave_1 added [ 1174.955763][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.988620][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.087864][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.155293][T13972] loop1: detected capacity change from 0 to 8 [ 1175.406162][T13972] SQUASHFS error: Failed to read block 0x6fc: -5 [ 1175.412769][T13972] SQUASHFS error: Unable to read metadata cache entry [6fa] [ 1175.554841][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.593743][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.685878][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1176.088239][T13903] hsr_slave_0: entered promiscuous mode [ 1176.101212][T13903] hsr_slave_1: entered promiscuous mode [ 1176.114817][T13903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1176.146302][T13903] Cannot create hsr debugfs directory [ 1176.213586][ T5774] Bluetooth: hci1: command tx timeout [ 1176.606196][T13988] mkiss: ax0: crc mode is auto. [ 1177.523751][ T42] dummy0: left promiscuous mode [ 1177.549194][T13991] loop1: detected capacity change from 0 to 512 [ 1177.580539][ T42] hsr_slave_0: left promiscuous mode [ 1177.620746][ T42] hsr_slave_1: left promiscuous mode [ 1177.684710][T13991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.731504][T13991] ext4 filesystem being mounted at /586/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.744102][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.751668][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.822229][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.853546][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.914335][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.923515][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.025790][ T42] bridge_slave_1: left allmulticast mode [ 1178.031475][ T42] bridge_slave_1: left promiscuous mode [ 1178.059818][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.192761][T14001] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2257: corrupted inode contents [ 1178.206257][T14001] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2257: mark_inode_dirty error [ 1178.221430][T14001] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2257: corrupted inode contents [ 1178.252472][T14001] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2257: mark_inode_dirty error [ 1178.803890][T14001] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1178.834353][ T42] bridge_slave_0: left allmulticast mode [ 1178.840861][ T42] bridge_slave_0: left promiscuous mode [ 1178.852807][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.942766][ T42] veth1_macvtap: left promiscuous mode [ 1178.949535][ T42] veth0_macvtap: left promiscuous mode [ 1178.963602][ T42] veth1_vlan: left promiscuous mode [ 1178.969490][ T42] veth0_vlan: left promiscuous mode [ 1179.413923][T14008] fuse: Bad value for 'fd' [ 1180.883656][ T5849] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1181.120315][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1181.211047][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1181.279327][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.283763][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 1181.344645][ T5849] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1181.353074][ T5849] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1181.363772][ T5849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1181.372958][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1181.388346][ T5849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1181.399306][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1181.412499][ T5849] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1181.421844][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.429504][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.448441][ T5849] usb 1-1: config 0 descriptor?? [ 1181.749642][ T5849] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1181.789291][ T5849] usb 1-1: USB disconnect, device number 5 [ 1181.943624][ T5849] usblp0: removed [ 1182.191055][ T42] bond0 (unregistering): Released all slaves [ 1182.333716][ T5849] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1182.343100][T13999] bridge0: port 3(netdevsim0) entered blocking state [ 1182.354932][T13999] bridge0: port 3(netdevsim0) entered disabled state [ 1182.361917][T13999] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1182.370991][T13999] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1182.379421][T13999] bridge0: port 3(netdevsim0) entered blocking state [ 1182.387571][T13999] bridge0: port 3(netdevsim0) entered forwarding state [ 1182.517081][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.553894][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 1182.575221][ T5849] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1182.598792][ T5849] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1182.623663][ T5849] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1182.653410][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1182.678594][ T5849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1182.762303][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1182.803702][ T5849] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1182.812975][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.909325][ T5849] usb 1-1: config 0 descriptor?? [ 1183.075579][T13480] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1183.343286][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.439587][ T5849] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1183.469867][T13480] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1183.604778][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.684159][T13480] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.811561][T13480] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1183.873763][T13480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.886142][ C0] usblp0: nonzero read bulk status received: -71 [ 1183.905359][ T5757] usb 1-1: USB disconnect, device number 6 [ 1183.925383][T14015] usblp0: error -71 reading from printer [ 1184.017773][ T42] IPVS: stop unused estimator thread 0... [ 1184.089341][T14014] usblp0: removed [ 1184.223789][T13480] usb 3-1: usb_control_msg returned -32 [ 1184.229733][T13480] usbtmc 3-1:16.0: can't read capabilities [ 1185.055882][T13903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1185.074084][T13903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1185.103864][T13903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1185.118754][T14049] fuse: Bad value for 'fd' [ 1185.137194][T13903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1185.600014][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1185.631720][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1185.686515][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.693902][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.761120][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.769728][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.782892][T13480] usb 3-1: USB disconnect, device number 7 [ 1186.162991][T13903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1187.508783][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.810124][T14091] loop2: detected capacity change from 0 to 32768 [ 1188.842596][T14091] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2274 (14091) [ 1188.866142][T14091] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1188.877423][T14091] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1188.886760][T14091] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1188.895080][T14091] BTRFS info (device loop2): enabling ssd optimizations [ 1188.902082][T14091] BTRFS info (device loop2): setting datacow [ 1188.908268][T14091] BTRFS info (device loop2): doing ref verification [ 1188.914943][T14091] BTRFS info (device loop2): force clearing of disk cache [ 1188.922159][T14091] BTRFS info (device loop2): turning off barriers [ 1188.928652][T14091] BTRFS info (device loop2): using spread ssd allocation scheme [ 1188.936437][T14091] BTRFS info (device loop2): using free space tree [ 1189.826652][T13903] veth0_vlan: entered promiscuous mode [ 1189.843651][T14091] BTRFS info (device loop2): auto enabling async discard [ 1189.870615][T14091] BTRFS info (device loop2): rebuilding free space tree [ 1189.946592][T13903] veth1_vlan: entered promiscuous mode [ 1190.259159][ T5776] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1190.307698][T13903] veth0_macvtap: entered promiscuous mode [ 1190.360324][T13903] veth1_macvtap: entered promiscuous mode [ 1190.528917][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.598929][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.647739][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.730953][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.797784][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1190.833160][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1190.857847][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.875562][T14123] netlink: 'syz.2.2277': attribute type 4 has an invalid length. [ 1191.158305][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.210443][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.243712][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.277740][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.303585][ T5817] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1191.326138][T13903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.386314][T13903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.441285][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.542525][ T5817] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1191.559354][T13903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.578031][ T5817] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.613609][T13903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.622411][T13903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.643546][ T5817] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1191.662977][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.673223][T13903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.729943][ T5817] hub 3-1:4.0: USB hub found [ 1191.976460][ T5817] hub 3-1:4.0: 2 ports detected [ 1191.997246][ T5817] usb 3-1: selecting invalid altsetting 1 [ 1192.050883][ T5817] hub 3-1:4.0: Using single TT (err -22) [ 1192.254130][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.271099][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.361461][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.382533][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.529053][T14144] fuse: Bad value for 'fd' [ 1193.316362][ T5817] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 1193.343792][ T5817] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 1195.409673][T14167] loop1: detected capacity change from 0 to 32768 [ 1195.469637][T14167] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2284 (14167) [ 1195.645608][T14167] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1195.656036][T14167] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1195.664816][T14167] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1195.673016][T14167] BTRFS info (device loop1): enabling ssd optimizations [ 1195.680147][T14167] BTRFS info (device loop1): setting datacow [ 1195.686236][T14167] BTRFS info (device loop1): doing ref verification [ 1195.692849][T14167] BTRFS info (device loop1): force clearing of disk cache [ 1195.700058][T14167] BTRFS info (device loop1): turning off barriers [ 1195.706632][T14167] BTRFS info (device loop1): using spread ssd allocation scheme [ 1195.714390][T14167] BTRFS info (device loop1): using free space tree [ 1196.021348][T14186] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2285'. [ 1196.466483][T14167] BTRFS info (device loop1): auto enabling async discard [ 1196.478096][T14167] BTRFS info (device loop1): rebuilding free space tree [ 1196.997973][ T5767] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1197.423893][T13480] usb 3-1: USB disconnect, device number 8 [ 1197.496076][ T5757] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1198.602647][ T5757] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1198.673555][ T5757] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1198.718784][ T5757] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1198.738097][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.792836][T14201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1198.865629][ T5757] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1198.958678][T14213] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1199.287461][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 1199.336296][ T23] usb 1-1: USB disconnect, device number 7 [ 1199.848714][T14221] fuse: Bad value for 'fd' [ 1203.031889][T14239] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1204.357836][T14255] loop3: detected capacity change from 0 to 32768 [ 1209.929049][T14273] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2308'. [ 1210.190225][T14272] loop1: detected capacity change from 0 to 32768 [ 1210.238172][T14272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2307 (14272) [ 1210.414393][T14272] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1210.425017][T14272] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1210.434009][T14272] BTRFS info (device loop1): setting nodatacow, compression disabled [ 1210.442130][T14272] BTRFS info (device loop1): enabling ssd optimizations [ 1210.449161][T14272] BTRFS info (device loop1): setting datacow [ 1210.455300][T14272] BTRFS info (device loop1): doing ref verification [ 1210.461927][T14272] BTRFS info (device loop1): force clearing of disk cache [ 1210.469196][T14272] BTRFS info (device loop1): turning off barriers [ 1210.475700][T14272] BTRFS info (device loop1): using spread ssd allocation scheme [ 1210.484091][T14272] BTRFS info (device loop1): using free space tree [ 1210.661652][T14272] BTRFS info (device loop1): auto enabling async discard [ 1210.672658][T14272] BTRFS info (device loop1): rebuilding free space tree [ 1210.815630][T14303] fuse: Bad value for 'fd' [ 1211.927384][ T5767] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1213.329531][T14315] loop2: detected capacity change from 0 to 32768 [ 1216.774981][T14340] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2318'. [ 1217.703754][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1217.953620][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 1217.984430][ T5817] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1218.043559][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.060549][ T5817] usb 2-1: config 0 descriptor?? [ 1218.180532][ T5817] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1218.189126][ T5817] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1218.208119][ T5817] dvb_usb_anysee: probe of 2-1:0.0 failed with error -22 [ 1218.386091][T11732] usb 2-1: USB disconnect, device number 5 [ 1219.009434][T14360] fuse: Bad value for 'fd' [ 1219.952819][T14366] loop3: detected capacity change from 0 to 512 [ 1220.033213][T14366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.051037][T14366] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.401360][T14371] bridge0: port 3(netdevsim0) entered blocking state [ 1220.408637][T14371] bridge0: port 3(netdevsim0) entered disabled state [ 1220.416600][T14371] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1220.425624][T14371] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1220.434059][T14371] bridge0: port 3(netdevsim0) entered blocking state [ 1220.440898][T14371] bridge0: port 3(netdevsim0) entered forwarding state [ 1220.452236][T14371] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.2326: corrupted inode contents [ 1220.464772][T14371] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #2: comm syz.3.2326: mark_inode_dirty error [ 1220.477322][T14371] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #2: comm syz.3.2326: corrupted inode contents [ 1220.489664][T14371] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.2326: mark_inode_dirty error [ 1220.526364][T14371] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 1220.793716][T13903] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.983580][T14376] syzkaller0: entered promiscuous mode [ 1221.022547][T14376] syzkaller0: entered allmulticast mode [ 1222.525455][T14380] loop3: detected capacity change from 0 to 32768 [ 1224.410666][T13905] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1224.422000][T13905] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1224.431338][T13905] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1224.443702][T13905] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1224.452166][T13905] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1224.460039][T13905] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1225.140650][T14391] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2330'. [ 1226.513701][T13905] Bluetooth: hci0: command tx timeout [ 1228.603719][T13905] Bluetooth: hci0: command tx timeout [ 1230.331370][ T2921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.606737][ T5757] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1230.690494][T13905] Bluetooth: hci0: command tx timeout [ 1231.004775][T14422] loop3: detected capacity change from 0 to 32768 [ 1231.115869][T14422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2338 (14422) [ 1231.129583][ T2921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.140658][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.166572][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.181310][T14422] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1231.191841][T14422] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1231.200704][T14422] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1231.209057][T14422] BTRFS info (device loop3): enabling ssd optimizations [ 1231.216234][T14422] BTRFS info (device loop3): setting datacow [ 1231.222301][T14422] BTRFS info (device loop3): doing ref verification [ 1231.229017][T14422] BTRFS info (device loop3): force clearing of disk cache [ 1231.236564][T14422] BTRFS info (device loop3): turning off barriers [ 1231.243068][T14422] BTRFS info (device loop3): using spread ssd allocation scheme [ 1231.251084][T14422] BTRFS info (device loop3): using free space tree [ 1231.307990][ T5757] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1231.333507][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.355085][ T5757] usb 3-1: config 0 descriptor?? [ 1231.394474][T14422] BTRFS info (device loop3): auto enabling async discard [ 1231.403366][T14422] BTRFS info (device loop3): rebuilding free space tree [ 1231.501940][ T2921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.747746][ T2921] bridge0: port 3(netdevsim0) entered disabled state [ 1231.820146][ T2921] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1231.845370][T13903] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1231.870128][ T2921] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1231.908167][ T5757] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 1231.915742][ T2921] bridge0: port 3(netdevsim0) entered disabled state [ 1231.957298][ T2921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.963881][ T5757] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1232.111604][ T5757] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 1232.751733][T14418] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 1232.778285][T13905] Bluetooth: hci0: command tx timeout [ 1232.811167][ T5757] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 1232.866113][T11471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (11471) [ 1232.923833][ T5757] usb 3-1: USB disconnect, device number 9 [ 1233.243723][ T2921] tipc: Left network mode [ 1234.762808][T14381] chnl_net:caif_netlink_parms(): no params data found [ 1235.096113][T14472] blktrace: Concurrent blktraces are not allowed on loop5 [ 1237.301823][T14381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.310033][T14381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.333906][T14381] bridge_slave_0: entered allmulticast mode [ 1237.340934][T14381] bridge_slave_0: entered promiscuous mode [ 1237.684530][T14381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.692954][T14381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.707355][T14381] bridge_slave_1: entered allmulticast mode [ 1238.165092][T14381] bridge_slave_1: entered promiscuous mode [ 1238.195052][T14381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.208048][T14381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.361740][T14497] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1238.522481][T14381] team0: Port device team_slave_0 added [ 1238.531425][T14381] team0: Port device team_slave_1 added [ 1238.860646][T14381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.883270][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.913714][ T5849] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1238.976731][T14381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.082485][T14381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.132568][T14381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.173816][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 1239.195808][ T5849] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 1239.217221][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.223898][T14381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1239.278943][ T5849] usb 1-1: config 0 descriptor?? [ 1239.306732][ T5849] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state [ 1239.326637][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.333058][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.411248][ T5849] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1239.441617][ T5849] dvb_usb_anysee: probe of 1-1:0.0 failed with error -22 [ 1239.625447][ T5757] usb 1-1: USB disconnect, device number 8 [ 1239.785104][T14381] hsr_slave_0: entered promiscuous mode [ 1239.835254][T14381] hsr_slave_1: entered promiscuous mode [ 1240.156497][ T2921] hsr_slave_0: left promiscuous mode [ 1240.186958][ T2921] hsr_slave_1: left promiscuous mode [ 1240.207252][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1240.231471][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1240.424289][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1240.542181][T14530] blktrace: Concurrent blktraces are not allowed on loop5 [ 1240.976888][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.201379][ T2921] bridge_slave_1: left allmulticast mode [ 1241.234570][ T2921] bridge_slave_1: left promiscuous mode [ 1241.252349][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.160661][ T2921] bridge_slave_0: left allmulticast mode [ 1242.167953][ T2921] bridge_slave_0: left promiscuous mode [ 1242.178888][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.251627][ T2921] veth1_macvtap: left promiscuous mode [ 1242.258396][ T2921] veth0_macvtap: left promiscuous mode [ 1242.264457][ T2921] veth1_vlan: left promiscuous mode [ 1242.274238][ T2921] veth0_vlan: left promiscuous mode [ 1245.702208][T14553] loop3: detected capacity change from 0 to 32768 [ 1245.824128][T14553] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1245.834912][T14553] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1245.843749][T14553] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1245.851945][T14553] BTRFS info (device loop3): enabling ssd optimizations [ 1245.859082][T14553] BTRFS info (device loop3): setting datacow [ 1245.865275][T14553] BTRFS info (device loop3): doing ref verification [ 1245.872014][T14553] BTRFS info (device loop3): force clearing of disk cache [ 1245.879287][T14553] BTRFS info (device loop3): turning off barriers [ 1245.881583][ C0] vkms_vblank_simulate: vblank timer overrun [ 1245.886702][T14553] BTRFS info (device loop3): using spread ssd allocation scheme [ 1245.899831][T14553] BTRFS info (device loop3): using free space tree [ 1246.047202][T14553] BTRFS info (device loop3): auto enabling async discard [ 1246.056318][T14553] BTRFS info (device loop3): rebuilding free space tree [ 1246.431445][T13903] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1246.539818][ T2921] team0 (unregistering): Port device team_slave_1 removed [ 1246.702638][ T2921] team0 (unregistering): Port device team_slave_0 removed [ 1246.979847][ T2921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.078508][ T2921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.689984][ T2921] bond0 (unregistering): Released all slaves [ 1249.092855][ T2921] IPVS: stop unused estimator thread 0... [ 1249.246496][T14596] blktrace: Concurrent blktraces are not allowed on loop7 [ 1251.169783][T14381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1251.198913][T14381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1251.270568][T14381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1251.290147][T14381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1251.320874][T14613] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2363'. [ 1251.688079][T14381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.772171][T14381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.891822][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.899184][T11680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.961148][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.968462][T11680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.213382][T14628] loop2: detected capacity change from 0 to 32768 [ 1252.227171][T14628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2364 (14628) [ 1252.262866][T14628] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1252.273307][T14628] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1252.282316][T14628] BTRFS info (device loop2): setting nodatacow, compression disabled [ 1252.290733][T14628] BTRFS info (device loop2): enabling ssd optimizations [ 1252.297892][T14628] BTRFS info (device loop2): setting datacow [ 1252.304211][T14628] BTRFS info (device loop2): doing ref verification [ 1252.310965][T14628] BTRFS info (device loop2): force clearing of disk cache [ 1252.318240][T14628] BTRFS info (device loop2): turning off barriers [ 1252.324913][T14628] BTRFS info (device loop2): using spread ssd allocation scheme [ 1252.332809][T14628] BTRFS info (device loop2): using free space tree [ 1254.304465][T14628] BTRFS info (device loop2): auto enabling async discard [ 1254.357000][T14628] BTRFS info (device loop2): rebuilding free space tree [ 1254.701994][T14381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.783138][ T5776] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1254.886665][T14381] veth0_vlan: entered promiscuous mode [ 1254.941893][T14381] veth1_vlan: entered promiscuous mode [ 1255.111944][T14381] veth0_macvtap: entered promiscuous mode [ 1255.161988][T14381] veth1_macvtap: entered promiscuous mode [ 1256.520351][T14680] Falling back ldisc for ttyS3. [ 1256.807031][T14381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.873512][T14381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.911076][T14381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.943877][T14381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.205253][T14381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.475021][T14381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.633942][T14381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.787157][T14381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.870033][T14381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.953868][T14381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.993953][T14381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.044250][T14381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.106074][T14381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.645542][T14381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.657061][T14381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.666425][T14381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.675732][T14381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.687964][T14381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.215833][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.263840][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.327065][T11680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.373625][T11680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.281685][ T5849] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1261.509542][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 1261.536000][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.559188][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.592362][ T5849] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1261.620007][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.650806][ T5849] usb 2-1: config 0 descriptor?? [ 1261.676289][ T5849] hub 2-1:0.0: USB hub found [ 1262.172678][T14731] loop3: detected capacity change from 0 to 32768 [ 1263.659272][ T5849] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1265.074621][T14731] read_mapping_page failed! [ 1265.079883][T14731] jfs_mount: dbMount failed w/rc = -5 [ 1265.610611][T14731] Mount JFS Failure: -5 [ 1265.614937][T14731] jfs_mount failed w/return code = -5 [ 1265.805381][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 1265.823739][ T5849] usbhid: probe of 2-1:0.0 failed with error -71 [ 1265.934360][ T5849] usb 2-1: USB disconnect, device number 6 [ 1266.392883][T14747] mkiss: ax0: crc mode is auto. [ 1267.701370][T14753] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1271.333141][T14785] loop2: detected capacity change from 0 to 32768 [ 1271.385854][T14785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2386 (14785) [ 1271.403675][T14785] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1271.414908][T14785] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1271.423835][T14785] BTRFS info (device loop2): turning off barriers [ 1271.430312][T14785] BTRFS info (device loop2): setting nodatasum [ 1271.436654][T14785] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 1271.449601][T14785] BTRFS error (device loop2): open_ctree failed: -22 [ 1272.792061][T11471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (11471) [ 1273.428977][T14800] mkiss: ax0: crc mode is auto. [ 1274.996480][T14810] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2391'. [ 1279.347644][T14845] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1284.998317][ T2946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.061851][ T2946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.368070][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1286.646450][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1286.658355][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1286.673783][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1286.690651][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1286.700307][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1287.200353][ T2946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.547275][ T2946] bridge0: port 3(netdevsim0) entered disabled state [ 1288.674956][ T2946] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1288.698596][ T2946] bridge0: port 3(netdevsim0) entered disabled state [ 1288.728611][ T2946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.927186][ T5774] Bluetooth: hci2: command tx timeout [ 1289.057374][T14920] ptrace attach of "./syz-executor exec"[14381] was attempted by "./syz-executor exec"[14920] [ 1290.671648][T14895] chnl_net:caif_netlink_parms(): no params data found [ 1290.993627][T13905] Bluetooth: hci2: command tx timeout [ 1292.703546][T13905] Bluetooth: hci1: command 0x0406 tx timeout [ 1293.083708][ T5774] Bluetooth: hci2: command tx timeout [ 1293.274323][T14895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.313736][T14895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.333692][T14895] bridge_slave_0: entered allmulticast mode [ 1293.341349][T14895] bridge_slave_0: entered promiscuous mode [ 1293.534517][T14895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.573611][T14895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.580939][T14895] bridge_slave_1: entered allmulticast mode [ 1293.624926][T14895] bridge_slave_1: entered promiscuous mode [ 1294.605283][T14895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.936782][T14895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.163723][ T5774] Bluetooth: hci2: command tx timeout [ 1295.484578][T14895] team0: Port device team_slave_0 added [ 1296.345363][T14895] team0: Port device team_slave_1 added [ 1296.524408][T14895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.531430][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.633495][T14895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.699808][T14895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.738311][T14895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.797688][T14994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2438'. [ 1296.864910][T14895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.195760][T14895] hsr_slave_0: entered promiscuous mode [ 1297.202950][T14895] hsr_slave_1: entered promiscuous mode [ 1297.210309][T14895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1297.220444][T14895] Cannot create hsr debugfs directory [ 1297.318337][ T2946] hsr_slave_0: left promiscuous mode [ 1297.326562][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.335299][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.354267][ T2946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.361985][ T2946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.374527][ T2946] bridge_slave_1: left allmulticast mode [ 1297.380252][ T2946] bridge_slave_1: left promiscuous mode [ 1297.404402][ T2946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.444849][ T2946] bridge_slave_0: left allmulticast mode [ 1297.458735][ T2946] bridge_slave_0: left promiscuous mode [ 1297.483708][ T2946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.637802][ T2946] veth1_macvtap: left promiscuous mode [ 1297.665084][ T2946] veth0_macvtap: left promiscuous mode [ 1297.685586][ T2946] veth1_vlan: left promiscuous mode [ 1297.704786][ T2946] veth0_vlan: left promiscuous mode [ 1299.944267][ T2946] team0 (unregistering): Port device team_slave_1 removed [ 1300.047588][ T2946] team0 (unregistering): Port device team_slave_0 removed [ 1300.162003][ T2946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.234870][T15027] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2444'. [ 1300.238448][ T2946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.759460][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.782765][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.956035][ T2946] bond0 (unregistering): Released all slaves [ 1302.757301][ T2946] IPVS: stop unused estimator thread 0... [ 1304.498722][T14895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1304.547563][T14895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1304.627810][T14895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1304.666645][T15074] syz_tun: left allmulticast mode [ 1304.675164][T14895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1304.834990][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 1305.838918][T14895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.921517][T14895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.952335][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.959601][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.012183][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.019462][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.161060][T14895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1306.917515][T15119] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2460'. [ 1307.256947][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1307.705726][T14895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.895138][T14895] veth0_vlan: entered promiscuous mode [ 1307.937607][T14895] veth1_vlan: entered promiscuous mode [ 1308.120113][T14895] veth0_macvtap: entered promiscuous mode [ 1308.209311][T14895] veth1_macvtap: entered promiscuous mode [ 1308.396905][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.463598][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.552237][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.608976][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.647419][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.711863][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.774235][T14895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.862376][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.943718][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.993508][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.049353][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.102279][T14895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.170099][T14895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.225592][T14895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.238402][T14895] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.248138][T14895] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.263847][T14895] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.272653][T14895] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.041856][T15161] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2473'. [ 1310.163250][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.214584][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.001095][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.095570][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.910364][T15190] loop3: detected capacity change from 0 to 32768 [ 1317.154124][T11732] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1318.392923][T11732] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1318.438278][T11732] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1318.458551][T11732] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1318.499406][T11732] usb 1-1: config 1 interface 0 has no altsetting 1 [ 1318.654180][T11732] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1318.705757][T11732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.790139][T11732] usb 1-1: Product: syz [ 1318.899566][T11732] usb 1-1: Manufacturer: syz [ 1318.933957][T11732] usb 1-1: SerialNumber: syz [ 1319.059791][T11732] smsusb:smsusb_probe: board id=8, interface number 0 [ 1319.273936][T11732] smsusb:smsusb_probe: Device initialized with return code -19 [ 1319.537147][T15205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 1319.722621][T15234] netlink: 'syz.0.2483': attribute type 13 has an invalid length. [ 1319.881092][T15234] gretap0: refused to change device tx_queue_len [ 1319.914205][T15234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1320.411350][T15245] loop2: detected capacity change from 0 to 32768 [ 1322.974747][T15245] read_mapping_page failed! [ 1322.979361][T15245] jfs_mount: Failed to read AGGREGATE_I [ 1322.985057][T15245] Mount JFS Failure: -5 [ 1322.989236][T15245] jfs_mount failed w/return code = -5 [ 1327.831706][ T5870] usb 1-1: USB disconnect, device number 9 [ 1328.126695][T15277] loop2: detected capacity change from 0 to 512 [ 1328.423715][T15277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.621578][T15277] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.136126][T15291] bridge0: port 3(netdevsim0) entered blocking state [ 1329.143025][T15291] bridge0: port 3(netdevsim0) entered disabled state [ 1329.150338][T15291] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1329.159575][T15291] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1329.168285][T15291] bridge0: port 3(netdevsim0) entered blocking state [ 1329.175493][T15291] bridge0: port 3(netdevsim0) entered forwarding state [ 1329.199594][T15291] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2499: corrupted inode contents [ 1329.212186][T15291] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.2499: mark_inode_dirty error [ 1329.229373][T15291] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2499: corrupted inode contents [ 1329.253507][T15291] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2499: mark_inode_dirty error [ 1329.286872][T15291] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1329.713737][T15303] syz.1.2504 uses obsolete (PF_INET,SOCK_PACKET) [ 1331.331436][ T5818] IPVS: starting estimator thread 0... [ 1331.507220][T15327] IPVS: using max 27 ests per chain, 64800 per kthread [ 1331.908311][T14895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.053842][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1334.631986][T15353] blktrace: Concurrent blktraces are not allowed on loop5 [ 1338.236643][T15396] loop7: detected capacity change from 0 to 16384 [ 1338.462807][T15400] loop7: detected capacity change from 16384 to 16383 [ 1340.772708][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1340.877846][T15422] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.888171][T15422] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.897333][T15422] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.906432][T15422] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1340.941450][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1340.967607][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1340.980827][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1341.453505][ T5818] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1341.636247][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.654790][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.678225][ T5818] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1341.825666][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.626153][ T5818] usb 3-1: config 0 descriptor?? [ 1343.066619][ T5818] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 1343.114342][ T5818] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1343.263266][ T5818] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 1343.866122][T15433] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 1343.904696][ T5818] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 1343.942143][ T5818] usb 3-1: USB disconnect, device number 10 [ 1347.019450][T15477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1348.916408][ T5817] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1348.938088][T13905] Bluetooth: hci0: command 0x0406 tx timeout [ 1349.158920][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.173740][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.202226][ T5817] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1349.239864][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.259936][ T5817] usb 2-1: config 0 descriptor?? [ 1349.467815][ T6370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.711622][ T5817] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 1349.730399][ T6370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.753731][T13905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1349.765940][T13905] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1349.775382][T13905] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1349.785328][T13905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1349.796586][T13905] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1349.808639][T13905] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1349.832520][ T5817] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1349.926415][ T6370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.966526][ T5817] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 1350.083481][ T6370] bridge0: port 3(netdevsim0) entered disabled state [ 1350.119405][ T6370] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1350.128991][ T6370] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1350.140376][ T6370] bridge0: port 3(netdevsim0) entered disabled state [ 1350.157190][ T6370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.176674][ T5817] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 1350.207131][ T5817] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 1350.279163][ T5817] usb 2-1: USB disconnect, device number 7 [ 1351.731184][T15504] chnl_net:caif_netlink_parms(): no params data found [ 1351.873710][ T5774] Bluetooth: hci3: command tx timeout [ 1352.444953][T15531] loop1: detected capacity change from 0 to 2048 [ 1352.806352][T15531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1353.656822][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.664362][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.671784][T15504] bridge_slave_0: entered allmulticast mode [ 1353.716428][T15504] bridge_slave_0: entered promiscuous mode [ 1353.755441][T15504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.772998][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.783188][T15504] bridge_slave_1: entered allmulticast mode [ 1353.815238][T15504] bridge_slave_1: entered promiscuous mode [ 1353.954009][ T5774] Bluetooth: hci3: command tx timeout [ 1354.346791][T15504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.387271][T15504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1354.873658][T15504] team0: Port device team_slave_0 added [ 1355.938279][T15504] team0: Port device team_slave_1 added [ 1356.036106][ T5774] Bluetooth: hci3: command tx timeout [ 1356.133516][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1356.189545][T15504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.198100][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.226382][T15504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.290933][T15504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.337139][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.396334][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.424004][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.434324][T15504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.445334][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1356.472759][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.537510][ T23] usb 4-1: config 0 descriptor?? [ 1356.975723][ T23] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 1357.084236][ T23] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1357.149156][T15504] hsr_slave_0: entered promiscuous mode [ 1357.172938][ T23] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 1357.281178][T15504] hsr_slave_1: entered promiscuous mode [ 1357.340072][T15504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1357.363619][T15504] Cannot create hsr debugfs directory [ 1357.373990][ T23] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 1357.443841][ T23] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 1357.480522][ T6370] hsr_slave_0: left promiscuous mode [ 1357.519489][ T23] usb 4-1: USB disconnect, device number 3 [ 1357.636600][ T6370] hsr_slave_1: left promiscuous mode [ 1357.686712][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1357.695210][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1357.712290][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1357.725071][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1357.758671][ T6370] bridge_slave_1: left allmulticast mode [ 1357.781696][ T6370] bridge_slave_1: left promiscuous mode [ 1357.802756][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.846761][ T6370] bridge_slave_0: left allmulticast mode [ 1357.852546][ T6370] bridge_slave_0: left promiscuous mode [ 1357.861992][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.954222][ T6370] veth1_macvtap: left allmulticast mode [ 1357.965494][ T6370] veth1_macvtap: left promiscuous mode [ 1357.980832][ T6370] veth0_macvtap: left promiscuous mode [ 1357.998675][ T6370] veth1_vlan: left promiscuous mode [ 1358.019758][ T6370] veth0_vlan: left promiscuous mode [ 1358.113673][ T5774] Bluetooth: hci3: command tx timeout [ 1359.482312][ T5818] IPVS: starting estimator thread 0... [ 1359.613783][T15611] IPVS: using max 27 ests per chain, 64800 per kthread [ 1360.867078][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 1360.973541][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 1361.082315][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1361.151889][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1361.683169][ T6370] bond0 (unregistering): Released all slaves [ 1362.207866][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.214432][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.537519][T15640] xt_hashlimit: size too large, truncated to 1048576 [ 1362.638220][ T6370] IPVS: stop unused estimator thread 0... [ 1363.483588][T10087] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1364.445057][T10087] usb 2-1: device descriptor read/64, error -71 [ 1364.744371][T10087] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1364.938572][T15504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1364.945749][T10087] usb 2-1: device descriptor read/64, error -71 [ 1365.025976][T15504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1365.057197][T15504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1365.218900][T10087] usb usb2-port1: attempt power cycle [ 1365.283084][T15504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1365.459782][T15504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.527688][T15504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.643797][T10087] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1365.686923][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.694170][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.884244][T10087] usb 2-1: device descriptor read/8, error -71 [ 1365.909181][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.916500][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.224420][T10087] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1366.274640][T10087] usb 2-1: device descriptor read/8, error -71 [ 1366.422433][T10087] usb usb2-port1: unable to enumerate USB device [ 1366.990817][T15504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.215201][T15504] veth0_vlan: entered promiscuous mode [ 1367.267030][T15504] veth1_vlan: entered promiscuous mode [ 1367.963306][T15504] veth0_macvtap: entered promiscuous mode [ 1368.049069][T15504] veth1_macvtap: entered promiscuous mode [ 1368.139434][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.233511][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.303603][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.378849][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.483616][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1368.533683][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.575386][T15504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.652096][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1368.733072][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1368.849922][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.034475][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.227073][T15504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.435159][T15504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.447602][T15504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.472569][T15504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.481887][T15504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.491258][T15504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.501739][T15504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.804164][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.877661][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.044926][T11680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.070107][T11680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.323506][T11732] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1370.442243][T15742] loop2: detected capacity change from 0 to 32768 [ 1371.917232][T11732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1371.983743][T11732] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1371.992741][T11732] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1372.123757][ T5818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1372.141846][T11732] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1372.424948][T15754] loop2: detected capacity change from 0 to 32768 [ 1372.497195][T11732] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1372.516141][T11732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.534299][T11732] usb 2-1: Product: syz [ 1372.753502][ T5818] usb 4-1: config 0 has no interfaces? [ 1372.796536][T11732] usb 2-1: Manufacturer: syz [ 1372.978451][T11732] usb 2-1: SerialNumber: syz [ 1372.983180][ T5818] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1373.027721][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.085248][ T5818] usb 4-1: config 0 descriptor?? [ 1374.208846][T15762] loop2: detected capacity change from 0 to 32768 [ 1374.274869][T15762] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1374.285190][T15762] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1374.294069][T15762] BTRFS info (device loop2): turning off barriers [ 1374.300563][T15762] BTRFS info (device loop2): setting nodatasum [ 1374.306850][T15762] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 1374.323581][T15762] BTRFS error (device loop2): open_ctree failed: -22 [ 1375.293952][T11732] usb 2-1: can't set config #1, error -71 [ 1375.348624][T11732] usb 2-1: USB disconnect, device number 12 [ 1376.568597][T11471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (11471) [ 1376.655467][T15776] loop7: detected capacity change from 0 to 16384 [ 1376.977260][T15777] loop7: detected capacity change from 16384 to 16383 [ 1376.984341][ T5818] usb 4-1: can't set config #0, error -71 [ 1377.028669][ T5818] usb 4-1: USB disconnect, device number 4 [ 1377.229206][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 1379.734581][T10087] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1380.757523][T10087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.887895][T10087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.927931][T10087] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1380.946509][T10087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.980711][T10087] usb 3-1: config 0 descriptor?? [ 1381.435534][T10087] usbhid 3-1:0.0: can't add hid device: -71 [ 1381.441595][T10087] usbhid: probe of 3-1:0.0 failed with error -71 [ 1381.479123][T10087] usb 3-1: USB disconnect, device number 11 [ 1381.643466][ T5817] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1382.389657][ T5817] usb 2-1: config 0 has no interfaces? [ 1382.402066][ T5817] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1382.451489][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.501213][ T5817] usb 2-1: config 0 descriptor?? [ 1382.719399][T10087] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1384.154458][T10087] usb 3-1: Using ep0 maxpacket: 16 [ 1384.167901][T10087] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1384.181053][T10087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.217622][T10087] usb 3-1: Product: syz [ 1384.227631][T10087] usb 3-1: Manufacturer: syz [ 1384.241841][T10087] usb 3-1: SerialNumber: syz [ 1384.551422][T10087] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1384.742046][T10087] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1384.811816][T10087] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1384.837567][T10087] usb 3-1: media controller created [ 1384.899652][T10087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1384.983757][T10087] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1385.083895][T10087] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 1385.110555][T10087] usb 3-1: USB disconnect, device number 12 [ 1386.903732][ T5757] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1387.142713][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.486020][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.499885][ T5757] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1387.512043][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.642423][ T5757] usb 3-1: config 0 descriptor?? [ 1388.123974][T11732] usb 2-1: USB disconnect, device number 13 [ 1388.158376][ T5757] usbhid 3-1:0.0: can't add hid device: -71 [ 1388.173515][ T5757] usbhid: probe of 3-1:0.0 failed with error -71 [ 1388.219533][ T5757] usb 3-1: USB disconnect, device number 13 [ 1388.585240][T15879] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1388.633098][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 1392.657744][T11732] IPVS: starting estimator thread 0... [ 1392.773712][T15920] IPVS: using max 16 ests per chain, 38400 per kthread [ 1393.898469][T15928] loop2: detected capacity change from 0 to 512 [ 1393.986728][T15928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.036003][T15928] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1395.535738][T15939] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2645: corrupted inode contents [ 1395.647157][T15939] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.2645: mark_inode_dirty error [ 1395.676796][T15939] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2645: corrupted inode contents [ 1395.691607][T15939] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2645: mark_inode_dirty error [ 1395.791216][T15939] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1396.058159][T14895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.935495][T15993] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2664'. [ 1402.067274][T16013] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2672'. [ 1402.441457][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1403.353552][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 1403.372991][ T23] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1403.386279][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.396346][ T23] usb 3-1: Product: syz [ 1403.400648][ T23] usb 3-1: Manufacturer: syz [ 1403.412599][ T23] usb 3-1: SerialNumber: syz [ 1403.420602][ T23] usb 3-1: config 0 descriptor?? [ 1403.943129][T16029] blktrace: Concurrent blktraces are not allowed on loop7 [ 1404.298474][ T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1404.313837][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1404.326742][ T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1404.345668][ T23] usb 3-1: media controller created [ 1404.347987][T16031] dtv5100: wlen = 2f, aborting. [ 1404.388653][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1404.491144][ T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1404.533039][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1404.651670][T16037] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1405.321224][T16047] loop1: detected capacity change from 0 to 512 [ 1405.366569][T16047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.417274][T16047] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.956901][T16058] bridge0: port 3(netdevsim0) entered blocking state [ 1405.964490][T16058] bridge0: port 3(netdevsim0) entered disabled state [ 1405.971417][T16058] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1405.980366][T16058] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1405.988369][T16058] bridge0: port 3(netdevsim0) entered blocking state [ 1405.995217][T16058] bridge0: port 3(netdevsim0) entered forwarding state [ 1406.148507][T16058] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2684: corrupted inode contents [ 1406.176459][T16058] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2684: mark_inode_dirty error [ 1406.189916][T16058] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2684: corrupted inode contents [ 1406.203404][T16058] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2684: mark_inode_dirty error [ 1406.246776][T16057] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1406.407365][ T23] usb 3-1: USB disconnect, device number 14 [ 1406.523041][T14381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.640733][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1406.864640][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2687'. [ 1407.826338][T16081] netlink: 'syz.3.2691': attribute type 72 has an invalid length. [ 1409.215983][T16083] loop1: detected capacity change from 0 to 32768 [ 1410.913690][T13905] Bluetooth: hci2: command 0x0406 tx timeout [ 1411.101806][T16098] bridge0: port 3(netdevsim0) entered blocking state [ 1411.109134][T16098] bridge0: port 3(netdevsim0) entered disabled state [ 1411.117263][T16098] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1411.132311][T16098] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1411.143383][T16098] bridge0: port 3(netdevsim0) entered blocking state [ 1411.150244][T16098] bridge0: port 3(netdevsim0) entered forwarding state [ 1413.445412][T16117] netlink: 'syz.2.2701': attribute type 72 has an invalid length. [ 1413.673157][T16119] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2697'. [ 1419.581520][T16150] netlink: 'syz.2.2710': attribute type 72 has an invalid length. [ 1420.888643][T16156] loop3: detected capacity change from 0 to 32768 [ 1420.944404][T16156] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2711 (16156) [ 1420.961435][T16156] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1420.972028][T16156] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1420.980855][T16156] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1420.989159][T16156] BTRFS info (device loop3): enabling ssd optimizations [ 1420.996592][T16156] BTRFS info (device loop3): setting datacow [ 1421.002642][T16156] BTRFS info (device loop3): doing ref verification [ 1421.009460][T16156] BTRFS info (device loop3): force clearing of disk cache [ 1421.019241][T16156] BTRFS info (device loop3): turning off barriers [ 1421.025906][T16156] BTRFS info (device loop3): using spread ssd allocation scheme [ 1421.033621][T16156] BTRFS info (device loop3): using free space tree [ 1421.124018][T16156] BTRFS info (device loop3): auto enabling async discard [ 1421.180560][T16156] BTRFS info (device loop3): rebuilding free space tree [ 1421.515888][T13903] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1421.650063][T16176] netlink: set zone limit has 8 unknown bytes [ 1421.701392][T11455] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (11455) [ 1421.766541][T16176] GUP no longer grows the stack in syz.2.2712 (16176): 200000005000-200000008000 (200000004000) [ 1421.867735][T16176] CPU: 0 PID: 16176 Comm: syz.2.2712 Not tainted syzkaller #0 [ 1421.875497][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1421.885621][T16176] Call Trace: [ 1421.889002][T16176] [ 1421.892077][T16176] dump_stack_lvl+0x18c/0x250 [ 1421.896832][T16176] ? show_regs_print_info+0x20/0x20 [ 1421.902094][T16176] ? load_image+0x400/0x400 [ 1421.906665][T16176] ? find_vma+0x134/0x1b0 [ 1421.911100][T16176] fixup_user_fault+0x642/0x700 [ 1421.916016][T16176] fault_in_user_writeable+0x71/0xd0 [ 1421.921382][T16176] futex_lock_pi+0x274/0x9a0 [ 1421.926151][T16176] ? fixup_pi_state_owner+0x5e0/0x5e0 [ 1421.931631][T16176] ? userfaultfd_unmap_prep+0x3d0/0x3d0 [ 1421.937406][T16176] ? mas_find_setup+0x493/0x590 [ 1421.942329][T16176] do_futex+0x23d/0x3e0 [ 1421.946573][T16176] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1421.952537][T16176] __se_sys_futex+0x3a9/0x440 [ 1421.957329][T16176] ? __x64_sys_futex+0xf0/0xf0 [ 1421.962169][T16176] ? __x64_sys_futex+0x21/0xf0 [ 1421.967099][T16176] do_syscall_64+0x55/0xa0 [ 1421.971598][T16176] ? clear_bhb_loop+0x40/0x90 [ 1421.976333][T16176] ? clear_bhb_loop+0x40/0x90 [ 1421.981068][T16176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1421.987152][T16176] RIP: 0033:0x7f3d5c19aeb9 [ 1421.991666][T16176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.011434][T16176] RSP: 002b:00007f3d5cf8e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1422.019917][T16176] RAX: ffffffffffffffda RBX: 00007f3d5c416180 RCX: 00007f3d5c19aeb9 [ 1422.027955][T16176] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1422.036175][T16176] RBP: 00007f3d5c208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1422.044392][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1422.052513][T16176] R13: 00007f3d5c416218 R14: 00007f3d5c416180 R15: 00007ffdfdf0d378 [ 1422.060546][T16176] [ 1422.391653][T16187] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2714'. [ 1423.615966][T16193] loop3: detected capacity change from 0 to 32768 [ 1423.664461][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.670850][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.894743][T16201] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2720'. [ 1429.173513][ T5818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1429.386012][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.532430][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1429.718726][T16208] loop3: detected capacity change from 0 to 2048 [ 1430.446762][T16208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1430.470762][ T5818] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1430.482563][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.694716][ T5818] usb 2-1: config 0 descriptor?? [ 1431.179969][ T5818] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 1431.237004][ T5818] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1431.375533][ T5818] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 1432.125536][T16219] loop2: detected capacity change from 0 to 32768 [ 1432.134270][ T5818] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 1432.153825][ T5818] usb 2-1: USB disconnect, device number 14 [ 1432.161174][T16219] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 11 [ 1433.236743][T16223] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1434.433965][T16234] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2729'. [ 1435.066889][T16246] loop3: detected capacity change from 0 to 2048 [ 1435.127885][T16246] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1436.893610][T11732] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1437.168235][T16257] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2734'. [ 1437.535983][T11732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.550787][T11732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.641095][T11732] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1437.664062][T11732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.703021][T11732] usb 3-1: config 0 descriptor?? [ 1438.136978][T11732] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 1438.204948][T11732] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1438.376411][T11732] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 1439.958753][T11732] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 1439.983950][T11732] usb 3-1: USB disconnect, device number 15 [ 1440.394098][T16273] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2739'. [ 1440.969197][T16289] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2743'. [ 1442.103575][T11732] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1442.306845][T11732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.341081][T11732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.373522][T11732] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1442.393425][T11732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.425151][T11732] usb 1-1: config 0 descriptor?? [ 1442.842146][T11732] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1442.886447][T11732] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1443.039971][T11732] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 1443.443890][T11732] cp2112 0003:10C4:EA90.0009: error setting SMBus config [ 1443.477529][T11732] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71 [ 1443.520525][T11732] usb 1-1: USB disconnect, device number 11 [ 1443.895074][T16323] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2755'. [ 1444.657775][T16331] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2759'. [ 1445.096977][T11732] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1445.700473][T11732] usb 1-1: Using ep0 maxpacket: 16 [ 1446.160264][T11732] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1446.169534][T11732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.198119][T11732] usb 1-1: Product: syz [ 1446.234333][T11732] usb 1-1: Manufacturer: syz [ 1446.239466][T11732] usb 1-1: SerialNumber: syz [ 1446.261185][T11732] usb 1-1: config 0 descriptor?? [ 1446.604188][T10087] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1446.719354][T11732] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1446.741988][T11732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1446.761715][T11732] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1446.770564][T11732] usb 1-1: media controller created [ 1446.807664][T11732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1446.827396][T10087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1446.849609][T10087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1446.862016][T10087] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1446.871354][T10087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.899103][T10087] usb 3-1: config 0 descriptor?? [ 1447.231968][T16363] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2769'. [ 1447.341047][T10087] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1447.365377][T10087] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1447.399319][T11732] zl10353_read_register: readreg error (reg=127, ret==0) [ 1447.409272][T11732] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1447.448584][T11732] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1447.488935][T11732] usb 1-1: USB disconnect, device number 12 [ 1447.554533][T10087] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 1447.656362][T11732] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1448.082902][T10087] cp2112 0003:10C4:EA90.000A: error setting SMBus config [ 1448.111413][T10087] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 1448.122644][T10087] usb 3-1: USB disconnect, device number 16 [ 1450.352747][T16399] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2780'. [ 1451.075925][T16402] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1452.037981][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1452.761703][T16423] loop1: detected capacity change from 0 to 2048 [ 1452.976208][T16423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1453.202065][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.227274][T16422] blktrace: Concurrent blktraces are not allowed on loop5 [ 1453.399173][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.458580][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1453.593459][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.612593][ T23] usb 4-1: config 0 descriptor?? [ 1454.066507][ T23] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1454.143118][ T23] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1454.257509][ T23] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 1454.380407][T16430] sctp: [Deprecated]: syz.0.2788 (pid 16430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.380407][T16430] Use struct sctp_sack_info instead [ 1454.670525][ T23] cp2112 0003:10C4:EA90.000B: error setting SMBus config [ 1454.695581][ T23] cp2112: probe of 0003:10C4:EA90.000B failed with error -71 [ 1454.726557][ T23] usb 4-1: USB disconnect, device number 5 [ 1455.028972][T16437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2790'. [ 1456.698426][T16454] random: crng reseeded on system resumption [ 1457.266387][T16463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2799'. [ 1457.733609][ T5757] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1457.955644][ T5757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.984210][ T5757] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.011466][ T5757] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1458.035587][ T5757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.067713][ T5757] usb 1-1: config 0 descriptor?? [ 1458.522328][ T5757] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1458.546818][ T5757] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1458.721511][ T5757] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 1458.924494][ T5757] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 1458.950688][ T5757] cp2112: probe of 0003:10C4:EA90.000C failed with error -32 [ 1458.999185][ T5757] usb 1-1: USB disconnect, device number 13 [ 1459.371517][T16477] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2802'. [ 1461.373720][T13480] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1461.580111][T13480] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1461.593515][T13480] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1461.605008][T13480] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1461.614610][T13480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.628966][T16485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1461.641155][T13480] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1461.859707][ T23] usb 3-1: USB disconnect, device number 17 [ 1462.441689][T16518] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2813'. [ 1462.969628][T16509] blktrace: Concurrent blktraces are not allowed on loop3 [ 1465.933654][T13480] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1466.137310][T13480] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1466.161455][T13480] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1466.171774][T13480] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1466.184835][T13480] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.206010][T16553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1466.519785][T13480] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1466.860334][T13480] usb 3-1: USB disconnect, device number 18 [ 1469.378499][T16586] blktrace: Concurrent blktraces are not allowed on loop3 [ 1470.574886][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1470.774426][ T5870] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1470.803806][ T5870] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1470.821494][ T5870] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1470.832392][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.880368][T16595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1470.912022][ T5870] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1472.809307][T10087] usb 1-1: USB disconnect, device number 14 [ 1473.541476][T16619] loop3: detected capacity change from 0 to 2048 [ 1473.652971][T16619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1476.050791][T16637] blktrace: Concurrent blktraces are not allowed on loop5 [ 1478.497654][T16629] Bluetooth: hci3: command 0x0406 tx timeout [ 1479.444908][ T5870] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1479.650309][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1479.690615][ T5870] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1479.743681][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1479.752913][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.820962][T16647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1479.836974][ T5870] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1480.182095][T11732] usb 4-1: USB disconnect, device number 6 [ 1480.885237][T16665] loop2: detected capacity change from 0 to 2048 [ 1481.542556][T16665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1482.125363][T16666] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1482.436842][T16675] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2861'. [ 1483.313202][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'. [ 1484.033521][T11732] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1484.213622][T10087] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1484.243412][T11732] usb 3-1: Using ep0 maxpacket: 16 [ 1484.253680][T11732] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1484.270360][T11732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.278713][T11732] usb 3-1: Product: syz [ 1484.282937][T11732] usb 3-1: Manufacturer: syz [ 1484.287789][T11732] usb 3-1: SerialNumber: syz [ 1484.299399][T11732] usb 3-1: config 0 descriptor?? [ 1484.430264][T10087] usb 4-1: config 0 has no interfaces? [ 1484.447792][T10087] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1484.470425][T10087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.491507][T10087] usb 4-1: Product: syz [ 1484.515424][T10087] usb 4-1: Manufacturer: syz [ 1484.530427][T10087] usb 4-1: SerialNumber: syz [ 1484.552267][T10087] usb 4-1: config 0 descriptor?? [ 1484.711844][T11732] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1484.731270][T11732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1484.745344][T11732] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1484.753679][T11732] usb 3-1: media controller created [ 1484.793090][T11732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.820068][T16687] syzkaller0: entered promiscuous mode [ 1484.840125][T16687] syzkaller0: entered allmulticast mode [ 1484.864006][T16687] bridge0: port 3(netdevsim0) entered disabled state [ 1484.893681][T16687] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1484.902469][T16687] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1484.915969][T16687] bridge0: port 3(netdevsim0) entered disabled state [ 1484.955573][T16687] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.986700][T11732] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1485.004368][T11732] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1485.090087][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.096970][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.183738][T13480] usb 4-1: USB disconnect, device number 7 [ 1485.228831][T16685] dtv5100: wlen = 0, aborting. [ 1485.549772][ T5757] usb 3-1: USB disconnect, device number 19 [ 1485.787517][T16704] loop1: detected capacity change from 0 to 2048 [ 1485.856413][T16704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1486.326397][ T5757] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1486.812428][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'. [ 1486.943414][ T5757] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1487.153584][ T5757] usb 1-1: Using ep0 maxpacket: 16 [ 1487.170606][ T5757] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1487.189013][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.213528][ T5757] usb 1-1: Product: syz [ 1487.223920][ T5757] usb 1-1: Manufacturer: syz [ 1487.233120][ T5757] usb 1-1: SerialNumber: syz [ 1487.413934][T16729] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1487.489950][ T5757] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1487.521688][ T5757] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1487.559955][ T5757] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1487.583046][ T5757] usb 1-1: media controller created [ 1487.813462][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1487.835323][ T5757] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1488.020882][T16737] loop1: detected capacity change from 0 to 2048 [ 1488.802380][T16737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1489.191350][ T5757] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 1489.219644][ T5757] usb 1-1: USB disconnect, device number 15 [ 1491.083702][T13480] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1491.283468][T13480] usb 1-1: Using ep0 maxpacket: 16 [ 1491.298328][T13480] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1491.318443][T13480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.373461][T13480] usb 1-1: Product: syz [ 1491.377771][T13480] usb 1-1: Manufacturer: syz [ 1491.403151][T13480] usb 1-1: SerialNumber: syz [ 1491.441009][T13480] usb 1-1: config 0 descriptor?? [ 1492.007077][T16784] loop3: detected capacity change from 0 to 2048 [ 1492.153404][T16784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1492.407128][T13480] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1492.415450][ T5818] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1492.550264][T13480] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1492.637860][T13480] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1492.679861][T13480] usb 1-1: media controller created [ 1492.731444][T13480] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1492.884514][ T5818] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1492.906504][T13480] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1492.923781][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.931872][ T5818] usb 2-1: Product: syz [ 1492.936604][T13480] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1492.964426][ T5818] usb 2-1: Manufacturer: syz [ 1492.969224][ T5818] usb 2-1: SerialNumber: syz [ 1493.012915][ T5818] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1493.169272][T13480] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1494.018510][T16779] random: crng reseeded on system resumption [ 1494.273582][T13480] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1494.344271][T13480] ath9k_htc: Failed to initialize the device [ 1494.484631][T13480] usb 2-1: ath9k_htc: USB layer deinitialized [ 1494.492722][ T5870] usb 1-1: USB disconnect, device number 16 [ 1494.649361][ T5870] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1494.723442][T16805] fuse: Bad value for 'fd' [ 1495.443276][ T5818] usb 2-1: USB disconnect, device number 15 [ 1495.711640][T16814] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2897'. [ 1498.498435][T16838] fuse: Bad value for 'fd' [ 1498.671533][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 1500.344820][T16849] loop1: detected capacity change from 0 to 32768 [ 1500.364344][T16849] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1501.633483][T16868] loop3: detected capacity change from 0 to 2048 [ 1501.690710][T16868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1502.638432][T16878] fuse: Bad value for 'fd' [ 1502.734621][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2915'. [ 1503.271328][T16886] loop2: detected capacity change from 0 to 32768 [ 1504.241493][T16888] loop3: detected capacity change from 0 to 32768 [ 1504.899121][T16888] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1504.913053][T16888] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1504.923560][T16888] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1504.931732][T16888] BTRFS info (device loop3): enabling ssd optimizations [ 1504.940784][T16888] BTRFS info (device loop3): setting datacow [ 1504.946996][T16888] BTRFS info (device loop3): doing ref verification [ 1504.953880][T16888] BTRFS info (device loop3): force clearing of disk cache [ 1504.961086][T16888] BTRFS info (device loop3): turning off barriers [ 1504.967699][T16888] BTRFS info (device loop3): using spread ssd allocation scheme [ 1504.975490][T16888] BTRFS info (device loop3): using free space tree [ 1505.353506][T16888] BTRFS info (device loop3): auto enabling async discard [ 1505.364820][T16899] blktrace: Concurrent blktraces are not allowed on loop3 [ 1505.384582][T16888] BTRFS info (device loop3): rebuilding free space tree [ 1505.885050][T16919] loop2: detected capacity change from 0 to 2048 [ 1506.084958][T16919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1506.374170][T13903] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1506.874202][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1507.403569][T11732] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1507.584519][T11732] usb 1-1: device descriptor read/64, error -71 [ 1508.164907][T16952] loop2: detected capacity change from 0 to 32768 [ 1509.063487][T11732] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1509.213539][T11732] usb 1-1: device descriptor read/64, error -71 [ 1509.394616][T11732] usb usb1-port1: attempt power cycle [ 1509.823642][T11732] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1509.888056][T11732] usb 1-1: device descriptor read/8, error -71 [ 1510.183600][T11732] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1510.939579][T11732] usb 1-1: device not accepting address 20, error -71 [ 1510.949673][T11732] usb usb1-port1: unable to enumerate USB device [ 1513.591870][T16998] blktrace: Concurrent blktraces are not allowed on loop7 [ 1515.269766][T17008] loop3: detected capacity change from 0 to 32768 [ 1515.288531][T17008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2942 (17008) [ 1515.327465][T17008] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1515.337837][T17008] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1515.346727][T17008] BTRFS info (device loop3): setting nodatacow, compression disabled [ 1515.355024][T17008] BTRFS info (device loop3): enabling ssd optimizations [ 1515.362044][T17008] BTRFS info (device loop3): setting datacow [ 1515.368174][T17008] BTRFS info (device loop3): doing ref verification [ 1515.374975][T17008] BTRFS info (device loop3): force clearing of disk cache [ 1515.382215][T17008] BTRFS info (device loop3): turning off barriers [ 1515.388843][T17008] BTRFS info (device loop3): using spread ssd allocation scheme [ 1515.397005][T17008] BTRFS info (device loop3): using free space tree [ 1515.449564][T17008] BTRFS info (device loop3): auto enabling async discard [ 1515.458156][T17008] BTRFS info (device loop3): rebuilding free space tree [ 1515.690333][T13903] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1519.583468][ T5757] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1519.814025][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.863532][ T5757] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.904906][ T5757] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1519.971993][ T5757] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1520.032624][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.072868][ T5757] usb 3-1: config 0 descriptor?? [ 1521.708776][ T5757] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 1521.794390][ T5757] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1522.512787][ T5757] usb 3-1: USB disconnect, device number 20 [ 1522.616488][T17095] fido_id[17095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1524.486165][T17123] loop1: detected capacity change from 0 to 512 [ 1524.808498][T17123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.845586][T17123] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.134058][T17123] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2971: corrupted inode contents [ 1525.238373][T17123] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2971: mark_inode_dirty error [ 1525.252287][T17123] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.2971: corrupted inode contents [ 1525.273490][T17123] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2971: mark_inode_dirty error [ 1525.344092][T17123] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1525.461538][T14381] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.091516][ T28] audit: type=1326 audit(1770199005.695:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.120962][ T28] audit: type=1326 audit(1770199005.695:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.228583][ T28] audit: type=1326 audit(1770199005.725:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.253798][ T28] audit: type=1326 audit(1770199005.725:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.494760][ T28] audit: type=1326 audit(1770199005.725:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.637554][ T28] audit: type=1326 audit(1770199005.725:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.777181][ T28] audit: type=1326 audit(1770199005.725:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1526.909954][ T28] audit: type=1326 audit(1770199005.725:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1527.150196][ T28] audit: type=1326 audit(1770199005.725:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1527.213979][ T28] audit: type=1326 audit(1770199005.755:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17135 comm="syz.0.2974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92159aeb9 code=0x7ffc0000 [ 1527.629431][T17157] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1528.273599][T16629] Bluetooth: hci4: command 0x1003 tx timeout [ 1528.280792][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1529.665599][T17173] loop2: detected capacity change from 0 to 512 [ 1529.697993][T17173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1529.711130][T17173] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.912483][T17173] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2984: corrupted inode contents [ 1529.925125][T17173] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #2: comm syz.2.2984: mark_inode_dirty error [ 1529.937346][T17173] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #2: comm syz.2.2984: corrupted inode contents [ 1529.949891][T17173] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.2984: mark_inode_dirty error [ 1530.064953][T17173] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 1530.227821][T14895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.305151][T17179] fuse: Bad value for 'fd' [ 1532.020141][T17207] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2991'. [ 1533.889332][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1534.098560][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.141945][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.162391][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1534.183106][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.227329][ T23] usb 2-1: config 0 descriptor?? [ 1534.583446][T17213] netlink: 'syz.0.2994': attribute type 3 has an invalid length. [ 1534.686863][ T23] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1534.697094][ T23] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1534.890797][ T23] cp2112 0003:10C4:EA90.000E: error requesting version [ 1534.917011][ T23] cp2112: probe of 0003:10C4:EA90.000E failed with error -32 [ 1535.287570][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3002'. [ 1535.312414][T17228] syz.3.2999 (17228): drop_caches: 2 [ 1535.379975][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1535.848291][T17257] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3001'. [ 1536.681432][ T5818] usb 2-1: USB disconnect, device number 16 [ 1538.163526][ T5757] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1538.319414][T17293] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3014'. [ 1538.875724][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.898202][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.922625][ T5757] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1538.942073][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.971022][ T5757] usb 2-1: config 0 descriptor?? [ 1539.090128][T17298] xt_CT: No such helper "pptp" [ 1539.407571][ T5757] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 1539.461496][ T5757] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1539.615942][ T5757] cp2112 0003:10C4:EA90.000F: error requesting version [ 1539.648619][ T5757] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 1539.873566][ T5818] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1540.143433][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 1540.150949][ T5818] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1540.173402][ T5818] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1541.412214][T11732] usb 2-1: USB disconnect, device number 17 [ 1542.827868][ T5818] usb 1-1: string descriptor 0 read error: -71 [ 1542.854231][ T5818] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1543.677261][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.688036][ T5818] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1543.710986][ T5818] usb 1-1: no configuration chosen from 1 choice [ 1543.725064][ T5818] usb 1-1: USB disconnect, device number 21 [ 1544.207532][T17334] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3027'. [ 1545.083601][ T5757] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1545.306182][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.333169][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.372189][ T5757] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1545.392931][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.412316][ T5757] usb 2-1: config 0 descriptor?? [ 1545.853614][ T5757] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 1545.893521][ T5757] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1546.041845][ T5757] cp2112 0003:10C4:EA90.0010: error requesting version [ 1546.086104][ T5757] cp2112: probe of 0003:10C4:EA90.0010 failed with error -32 [ 1546.521255][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.528115][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.493453][T10087] usb 2-1: USB disconnect, device number 18 [ 1549.174365][T17382] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1552.408224][T17399] loop3: detected capacity change from 0 to 32768 [ 1552.997183][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1552.997201][ T28] audit: type=1326 audit(1770199032.595:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.036648][T17424] delete_channel: no stack [ 1553.056503][T17423] delete_channel: no stack [ 1553.103424][ T28] audit: type=1326 audit(1770199032.605:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.199622][ T28] audit: type=1326 audit(1770199032.635:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.299837][ T28] audit: type=1326 audit(1770199032.635:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.383440][ T28] audit: type=1326 audit(1770199032.635:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.602619][ T28] audit: type=1326 audit(1770199032.635:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.626391][ T28] audit: type=1326 audit(1770199032.635:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.687776][ T28] audit: type=1326 audit(1770199032.645:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.776009][ T28] audit: type=1326 audit(1770199032.665:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1553.817085][T17434] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3057'. [ 1554.041379][ T28] audit: type=1326 audit(1770199032.665:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17423 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9388d9aeb9 code=0x7ffc0000 [ 1556.387619][T17455] loop1: detected capacity change from 0 to 32768 [ 1556.837018][T17455] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1556.850032][T17455] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1556.861511][T17455] BTRFS info (device loop1): turning off barriers [ 1556.870653][T17455] BTRFS info (device loop1): setting nodatasum [ 1556.879457][T17455] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 1556.891626][T17455] BTRFS error (device loop1): open_ctree failed: -22 [ 1556.911910][T17444] syz.0.3061 (17444): drop_caches: 2 [ 1558.088892][T17477] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3071'. [ 1558.909612][T17484] loop3: detected capacity change from 0 to 32768 [ 1561.291652][T17492] syz.3.3075 (17492): drop_caches: 2 [ 1561.425907][T17495] loop1: detected capacity change from 0 to 32768 [ 1561.439159][T17495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3076 (17495) [ 1561.469085][T17495] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1561.479431][T17495] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1561.488296][T17495] BTRFS info (device loop1): turning off barriers [ 1561.494914][T17495] BTRFS info (device loop1): setting nodatasum [ 1561.501154][T17495] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 1561.511729][T17495] BTRFS error (device loop1): open_ctree failed: -22 [ 1561.851085][T11455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (11455) [ 1562.250106][T17504] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1563.195753][T17517] loop1: detected capacity change from 0 to 32768 [ 1565.189837][T17528] syz.3.3086 (17528): drop_caches: 2 [ 1565.580047][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3087'. [ 1565.620836][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3087'. [ 1565.676239][T17531] dummy0: entered promiscuous mode [ 1565.716532][T17531] team0: entered promiscuous mode [ 1565.721981][T17531] team_slave_0: entered promiscuous mode [ 1565.746101][T17531] team_slave_1: entered promiscuous mode [ 1565.981843][T17534] loop2: detected capacity change from 0 to 32768 [ 1566.046176][T17534] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1566.056607][T17534] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1566.065451][T17534] BTRFS info (device loop2): turning off barriers [ 1566.072050][T17534] BTRFS info (device loop2): setting nodatasum [ 1566.078414][T17534] BTRFS error (device loop2): support for check_integrity* not compiled in! [ 1566.087763][T17534] BTRFS error (device loop2): open_ctree failed: -22 [ 1566.450504][T11471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (11471) [ 1566.497701][ T5757] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1566.772145][T17541] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3090'. [ 1567.033856][ T5757] usb 4-1: Using ep0 maxpacket: 16 [ 1567.056444][ T5757] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1567.070605][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.103530][ T5757] usb 4-1: Product: syz [ 1567.107799][ T5757] usb 4-1: Manufacturer: syz [ 1567.142307][ T5757] usb 4-1: SerialNumber: syz [ 1567.161680][ T5757] usb 4-1: config 0 descriptor?? [ 1567.591848][ T5757] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1567.624121][ T5757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1567.653999][T10087] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1567.654920][ T5757] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1567.703385][ T5757] usb 4-1: media controller created [ 1567.764780][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.873435][T10087] usb 1-1: Using ep0 maxpacket: 16 [ 1567.881126][T10087] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.903443][T10087] usb 1-1: config 0 has no interfaces? [ 1567.920435][T10087] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1567.929924][T10087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.939102][T10087] usb 1-1: Product: syz [ 1567.945916][T10087] usb 1-1: Manufacturer: syz [ 1567.950587][T10087] usb 1-1: SerialNumber: syz [ 1567.983492][T10087] usb 1-1: config 0 descriptor?? [ 1568.383892][ T5757] zl10353_read_register: readreg error (reg=127, ret==0) [ 1568.397077][ T5757] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1568.416401][ T5757] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1568.434848][ T5757] usb 4-1: USB disconnect, device number 8 [ 1568.524593][ T5757] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1569.512328][T17563] loop2: detected capacity change from 0 to 32768 [ 1569.518183][T17562] loop1: detected capacity change from 0 to 32768 [ 1571.212414][T10087] usb 1-1: USB disconnect, device number 22 [ 1571.449220][T17565] syz.3.3096 (17565): drop_caches: 2 [ 1571.667969][T14895] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 1571.679772][T14895] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1571.688233][T14895] CPU: 0 PID: 14895 Comm: syz-executor Not tainted syzkaller #0 [ 1571.695911][T14895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1571.706096][T14895] RIP: 0010:lmLogSync+0x245/0x9f0 [ 1571.711180][T14895] Code: 14 af fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 f9 5c d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 dd 5c d9 fe 49 8b 3f e8 c5 13 af fe [ 1571.730838][T14895] RSP: 0018:ffffc90003a27b80 EFLAGS: 00010202 [ 1571.736959][T14895] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: a1976f7537c93800 [ 1571.744977][T14895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1571.753546][T14895] RBP: ffffc90003a27c88 R08: ffffc90003a27ae7 R09: 0000000000000000 [ 1571.761661][T14895] R10: ffffc90003a27aa0 R11: fffff52000744f5d R12: ffff88802f1b6000 [ 1571.769679][T14895] R13: ffffc90003a27be0 R14: ffff88801ff33038 R15: 0000000000000040 [ 1571.777693][T14895] FS: 00005555815b5500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1571.786859][T14895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1571.793599][T14895] CR2: 00007ffdfdf0bf90 CR3: 0000000057671000 CR4: 00000000003506f0 [ 1571.801617][T14895] Call Trace: [ 1571.805014][T14895] [ 1571.807980][T14895] ? jfs_syncpt+0x25/0x90 [ 1571.812438][T14895] ? lmWriteRecord+0x1ac0/0x1ac0 [ 1571.817421][T14895] ? dqput+0x440/0x440 [ 1571.821536][T14895] ? writeback_inodes_sb_nr+0x30/0x30 [ 1571.826999][T14895] jfs_syncpt+0x7b/0x90 [ 1571.831386][T14895] jfs_sync_fs+0x87/0xa0 [ 1571.835673][T14895] sync_filesystem+0xea/0x220 [ 1571.840383][T14895] generic_shutdown_super+0x6f/0x2b0 [ 1571.845705][T14895] kill_block_super+0x44/0x90 [ 1571.850515][T14895] deactivate_locked_super+0x97/0x100 [ 1571.855928][T14895] cleanup_mnt+0x43b/0x4d0 [ 1571.860529][T14895] task_work_run+0x1d4/0x260 [ 1571.865170][T14895] ? task_work_cancel+0x220/0x220 [ 1571.870335][T14895] ? exit_to_user_mode_loop+0x3b/0x110 [ 1571.875938][T14895] exit_to_user_mode_loop+0xe6/0x110 [ 1571.881290][T14895] exit_to_user_mode_prepare+0xee/0x180 [ 1571.886903][T14895] syscall_exit_to_user_mode+0x1a/0x50 [ 1571.892422][T14895] do_syscall_64+0x61/0xa0 [ 1571.896918][T14895] ? clear_bhb_loop+0x40/0x90 [ 1571.901639][T14895] ? clear_bhb_loop+0x40/0x90 [ 1571.906355][T14895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.912289][T14895] RIP: 0033:0x7f3d5c19c117 [ 1571.916747][T14895] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1571.936493][T14895] RSP: 002b:00007ffdfdf0c5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1571.944960][T14895] RAX: 0000000000000000 RBX: 00007f3d5c20471f RCX: 00007f3d5c19c117 [ 1571.953074][T14895] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfdf0c6a0 [ 1571.961101][T14895] RBP: 00007ffdfdf0c6a0 R08: 00007ffdfdf0d6a0 R09: 00000000ffffffff [ 1571.969125][T14895] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfdf0d730 [ 1571.977141][T14895] R13: 00007f3d5c20471f R14: 000000000017f910 R15: 00007ffdfdf0d770 [ 1571.985184][T14895] [ 1571.988252][T14895] Modules linked in: [ 1572.079862][T17572] loop3: detected capacity change from 0 to 32768 [ 1572.094430][T14895] ---[ end trace 0000000000000000 ]--- [ 1572.099983][T14895] RIP: 0010:lmLogSync+0x245/0x9f0 [ 1572.105347][T14895] Code: 14 af fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 f9 5c d9 fe 4d 8b 3f 49 83 c7 40 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 dd 5c d9 fe 49 8b 3f e8 c5 13 af fe [ 1572.126652][T14895] RSP: 0018:ffffc90003a27b80 EFLAGS: 00010202 [ 1572.132895][T14895] RAX: 0000000000000008 RBX: dffffc0000000000 RCX: a1976f7537c93800 [ 1572.141790][T17572] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1572.152353][T17572] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1572.162280][T17572] BTRFS info (device loop3): turning off barriers [ 1572.168828][T17572] BTRFS info (device loop3): setting nodatasum [ 1572.175246][T17572] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 1572.184287][T14895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1572.192390][T14895] RBP: ffffc90003a27c88 R08: ffffc90003a27ae7 R09: 0000000000000000 [ 1572.200984][T14895] R10: ffffc90003a27aa0 R11: fffff52000744f5d R12: ffff88802f1b6000 [ 1572.209370][T14895] R13: ffffc90003a27be0 R14: ffff88801ff33038 R15: 0000000000000040 [ 1572.217638][T14895] FS: 00005555815b5500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1572.226973][T14895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1572.234421][T17572] BTRFS error (device loop3): open_ctree failed: -22 [ 1572.246567][T14895] CR2: 00007f9388d840c0 CR3: 0000000057671000 CR4: 00000000003506e0 [ 1572.255628][T14895] Kernel panic - not syncing: Fatal exception [ 1572.261893][T14895] Kernel Offset: disabled [ 1572.266236][T14895] Rebooting in 86400 seconds..