last executing test programs: 2m6.291105022s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x8906, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4}}}}}}}, 0x36) 1m42.867803703s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x8906, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4}}}}}}}, 0x36) 1m18.858108597s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x8906, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4}}}}}}}, 0x36) 56.597669893s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x8906, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4}}}}}}}, 0x36) 30.518648913s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x8906, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4}}}}}}}, 0x36) 6.11332434s ago: executing program 4 (id=1461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}}, 0x14}}, 0x0) 6.024223692s ago: executing program 2 (id=1462): r0 = socket$inet6(0xa, 0x3, 0x38) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3e, &(0x7f00000008c0)=ANY=[], 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 6.023856008s ago: executing program 3 (id=1463): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 5.578240825s ago: executing program 2 (id=1465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) 5.557549038s ago: executing program 0 (id=1466): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 5.488442164s ago: executing program 3 (id=1467): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x4, 0x0) fanotify_mark(r1, 0x1, 0x4800003a, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 5.386346762s ago: executing program 4 (id=1468): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="c4e2", 0xfffff, 0xfffffffffffffffd) 5.117374153s ago: executing program 0 (id=1469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x34}}, 0x0) 5.062822711s ago: executing program 2 (id=1470): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0xf0ffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 4.94825842s ago: executing program 3 (id=1471): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000003700)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ebdb23", 0xd4b, 0x0, 0x0, @private2, @empty, {[], "5db37c8aec2d0136df538abbb1ec7868979d6b57a5fcf3925e11468f25419fdd6961dae7e02e1e67bd69275172f2c5d2ef58b601e7fd25b32fee293d48325b4fdc65b7c5b737ec07b3080dc7737a49d389ee7a08e317c2da8ee65ec8f212ce1a9529de8e7e0dc7451f616ff1ec0647b13ec6e631e6b25ce0a1bd72bf8c895e28f214c5f547a87ae47df542a6ed2485328680f2ce73298bfa3fd177defcf980719ecf450ab6aac39c645c17cd7d3f7f6f417560e9b6f69e2c3c66cae91b3b3ef7533dbd30e7a3117f19cf4ff878ea8ccaef82303f7f9865830382162b727d943e3bb76b3226fb0ce188321c4f3b7e28c9f035a0055e55685e433c9ceae4cb71c2c1c2aac415ea45c86fb6e27d00bc4df2aece8c410fe382e7a0a45ce338ceb8a60e670801b4b1d4f31183b314545bec63e249d5c2801362a9da6a2770439ca4aa6bf8b06cdb0d4f74ed06991882f102311d3419f60da6da259f70c644fc6b4d86b017211e7f6e3f40c0de7beffe741436f47ecdce6de2b28722c72fd47d2d0817fc9bae14b0d5990965f59eed7db236b6ec843cba80a849d27568eb0f22e0121c159833b5316b5b7fed698fae62b41bed3a0382bfe2e62375e5e6923a0b904483c5e909af1b44d80fa0c905d8e2501e5e14f14714395487bb87d3f6efb8fb705de086d89ae0912f2c1fbd1f030e2fbef1415fb8208516038db1b9f260d8f26a04ede9f52b1774fc00e862d5a0c5fa1f3cd84a65e0461ff93d1c4ba61381166409597182844cc0070c99b4352f4d227582947a07f9ae9100d85ce6383434e015820b378d4f795c02be06b88ef7a18d9d4bc67358c2637d38c45faaaa5720f6d55fe599bf05240fddba792a2b773175d3e5241c6fc71a73009d51066da0309d517e98cf66aefc8b4a70f04a18a2c643fff76fb29c9611d588c8f88f33e61fd802121ca44af3f16db0fdda83305e8a6cb49c0b8fa116cdf446e9664b3182c130cfb017189200ccaa2c43d754d77e4153428249ab1aef62772579cd1288926241791173d9e78fbcb33805b1c97ae3133d2df6ded3554bc46c8c6efe969c1bfc8ea15cc087696eca49b268eac9866fa05861ab794ed3ab22b5a03866b24bf1dc03f17379957a4c84589e120d6b431efd0de0538b8ab0011db2430b8eb0dfa7ace161b03a00ac2df4bb73890a783573b25caa05b8ab3ceca4e1ba46fba2a372c312505e0d70376daca946a77a4127ab146ee9842e71dacfe8a6f67d5ed60d6345e91ce14c2d1d2378ee661121051bc2fc1d0133c86e91e7c25f3424db17ba5c3e6bed6bef201f78a4614975cf91a7b5d8220a1f47359a579acc92506da0c82ccad7f265b32dae21840d3407c8e13a30f6d566c42fe5e7ffe37f314f0b062955ac496a3e1ef8c0cbc5fb808b6f6bff054498f86595b09367370686ae6e9cd99cc4265a438f118886b71fec79d78e45fed0177cdb6042464c55eebe974f7d039200e4db269482fdeef0fac540016c8a2e41fb620564c1a9b3a10b1425e6045afb1a6e6bc1da632491934cdf63c9adb3eed76bd3a210f3203244f8492442fdd90e661d6097efadd75460a1e2a2a9d043686de24e29a972517e8ca5e762f32154a9c2787742f5b0f62790f0b3903294055a86bb6cb15c5426ccb579c7c3f8593a4fa2119f0c6b55bd0a43c51d3add690f5ceadbb6b4de47e282f6dc25a8207ae9c8acae81efb8063abf6778860b7a9918f9a29ebc178222f4c89485aa860e36826bce4754ff949693e48b2def229924a8ef99ac40daf1bb8fd1a14dc4791aa2521fde46aa1409e0a385d5e70360319efb630879c266d33128567afd0952c50910062ea0c893f4f34313f6813196ec26fb44e5426725d2af726065157493538afeed70bb0cd5df4c506667da11c5ef61e86e39486449942faee8fe20badefa65c9b07d79c794297961ea7bf66033eec96c7966c7c8d9e5c258f90a01d94955f5c21f6b5f55c8be23bfd5d62bb8f5ce374052b6a3cc02cca6b113dad3fc4140123cb23ce76ba7b109821a882802d23b2dcdedac4d1757b8a74262ecfe0c18dd80dcd26e3b3ac32516b58f2c3c84a0ea4725fe369532af6193d523665ef5e5e187fc5ee3be7f09449f456cb6fa97cc8b29f87e88cf7b1c6d257d5543bf51ca3a5480e75a861730fa10343333eac3930bc2582a42e966f14aa4373e5168377101f9cbc63bfbdf75938152ad63af05d234003907dc9565f878dcf2269228d03c9c157ca88e4f81851e927a385be6a0e3ff539043856820a28572b4876ded897f62c8feac94938cf45b1cb56608ea9a916c3f6499c8f95428d670c6b7d93a8eafb0f15b6c5e42ee5c5ce3b049f3cf41dbb5e023041bcd65ba8968d760e1eb509ff928335bc02264a666f1374560ba37c5eff400131e0f8a7c9ad13bc613d24d45cf153c330a0de5060590fba303cea1b5e921e849b4bd64e33676944235139f77c13ef0e877aed7276058bb651419ee2779e7e283194f6fdc5d6a6cfae67ebd8f26c6799b9027dce6722a30c11b61fa2f3449b06bc2113bf678dd932a105893e30df58a04d8c4d91ff885639eb6d874b20a19f36d64f8126198884ae7320e351308b66b084e3095f98e0cc07e54824b6a6045051554ce2a7340ae641b851f60bb8551736f8a2f7d298229f8896f704ebb1d5e2b072656fa602583733064123c5f9b7d469339908d491b1a83bd390ad07ad6ac3641afc568c10ccf43165e67639566b4cd93bf27a34406d9ce3f3bf2b03f01e1966ca3256bf8d615da35651a98322ab9a47e8ce5a4b4f5fcbcb7bd74053b0e3b8fa2fbd2e6cac85d8905a4dc18f6aaac4054a80a852307f54b6b6dee086daf0191a78b43b1a4ce126c9639105b2f39b69a1f6a85f621e5df85f523e850f9bdf3b326e8a77f958db48c1cbf277ad7af101c1fa7fdd4600d2d6cbf6694f97d2b33f3c1990b733ab3cda8c9fdacbd56390778d62ce4015701ddf501e1c9dac13d0135f3d7ca4d021e0c62043da64c85bee12c609c6cff248374e1970649b36b7dde7cb558f021c7ceba684af2a7e24fb5e824670205cc8ee27830d6df69e5705fd48423299e8905250e4115e50a476d905255c491304a865386079ffcff4b62e9f6f852fce0ca29b7bb613b2cc4711208ff8d2a003019c7158c7be31fffac04728f526c77e10e7a24bbb395f24b23b62d6aa8ede5ea2f43ae78a77cd5e6b8cdd7ceb05c210dc50f8bdf562d56bd8d0195e25c51c9efea17960557cc5071d54b233ac9b82ff50191f321a699c7712e1f0ff927bd33cdad842589588feb61dd63f99859d1dc0ce00ad6a26fa2d3060cbabc1b1b6a707133d3936e33bde3ebd4373e1c8a91269cc05fc16dd8db7f9f580087b79cc51bb4b0bf2d4ece7d6538d581cf6f4def71d7637701179ff2f09a2dc16008e25579310f194c31591f226659ed69a856895f156664162c5f62e4157ced27cbdcd353be971812e58c95973074a8b39568a993bba38b34b8a28dbe5cbbd1b45d65828279094c52af44d1ac7a7f8f713406b481fa903f4a88bcdff65c5f4781b8228cfd052a2995a878eda0c3c6fa6364ac58b34dab3b12f28e06e4397c1e82a4627083c552cbe95a1e911f07fd8ee32c4f007635e8c02c703bbde7e8a30004c8b8569ed3a9f78dafd8630dccac3d5b9e9c22901a9875e2ae8ffc6c0357871039ec02db6230e800220edd90dc73bbbc4ec3a7ad211501e5ff056dce3f1a0eeed83bf5161cbda63e4762fcc4cf9916f33bdd856c9b493e74b96b8da5df108591eb8ef5ec463770a56ed70686ea1758f453ca7c60ed6cc2e6f5fb56cbe0bd93f4e17e836d606d67420c2d412cbfd6baef5cbeb49da0c0b62574e9ca3be4b6338adff5051693df27001650a9d671c838af3013bd72a340d807bbfa36798fca3578959b09b94d8872b87a5f9c49dbccbe1c06db4b2b870b5038d6be5ef7e831564db8283d88fed4ffc21a918b052f9b65157af75e504dee09864a964a56911a068e71574f3090fcfd4ca8535bbd93ed159057353038ac4eceb34145cbae3183d9a8048c810dbf5d47ee892b64e225d12f56c0950e0fa072bcc7564f649b1ede099d199f8d969838ab073dcc55dea38a3e48b7916aea18adb0c7e5e02a6df2efa80f1bf8105319206fc8cc4957ee8243091deabc6b01cd500e121510aa0c92a4d47410be3aed93c1ff311ab2df41a018fbb07e73a41f2ebf2fd51ae7ace185bf5d718c22da684e60ed05f3f14f02116585a2d7cf67dc790be13ea00841430433284091868cef82bc8c0a60da1c9dd37c34ddcf1efa1f1fb19f9f18dd43b1c6c9f489f9d92f0ac39f1d36c56c568f6c90e4ecb561bcf82c8908b865a750e8c00150c27bfc7ad75a9a40b9cb1c43c5d5218b3a9525d94ac1d04786098849b81cdb6fceb2e3323562d6e3772c2ee68f742be63d545c3fcfb9fa70397d90109d5f4353d4b83119d3626c5b16e5e86f6c98acc135ec1916c37e58651c43fab33e82a48f06010e2f3e940f3b60a048eef7192f4a47ab3d882beb8f031d57c9b55a460a534309ed97ce32b5513120f2a0867f4d612237b76c5b0394a7ff3688801e5cae06d4eb748ac1ddd4fe763817ac7c7a9bb3984e118e76b28dd4a77181962f1296f77031cdbbad14e9b14f16a68f2b5b5c287c0b0de67a5b45a38106b6a6fd5a6670165c528c5b8c87f3abcc5a0a028780b85048ad77d0cb7ac491208fa83b459f1bc4e1ba7850d8548a1f080e7ec2b0f9b081d5386f1e1832a1fbb30295d2900b9921d59fde26d23388c2e5a5d12585dbf875a9fe"}}}}}, 0x0) 4.616521531s ago: executing program 0 (id=1472): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGVERSION(r1, 0x80044502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 4.417619409s ago: executing program 4 (id=1473): timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000240)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002"]) 4.367543228s ago: executing program 3 (id=1474): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="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", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000f80)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x28}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xa, 0x7, 0x209, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r0}, 0x38) 4.23603388s ago: executing program 2 (id=1475): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.953897863s ago: executing program 4 (id=1476): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.807203177s ago: executing program 0 (id=1477): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0x7}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)="f04f969842c742c0d1551248070ecbea878c441e450876de3416ecd2beb1425151f6cc3434c45c002a7ae58096ba5be20080025e807dd639e400b1fc6653ef87feb5126bb98942024045729b55cea6659e2c09cee6", 0x55}], 0x1}}], 0x1, 0x0) 3.750291496s ago: executing program 2 (id=1478): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x80004519, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.694120253s ago: executing program 1 (id=705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x8906, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x3, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x4}}}}}}}, 0x36) 1.32116434s ago: executing program 0 (id=1479): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x65c0, 0xff39, 0x3) 1.269614578s ago: executing program 2 (id=1480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x46, 0xbf, 0x2f, 0x20, 0x4d8, 0x83, 0x3f82, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x1, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x0, 0x6b}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7}}]}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.257120093s ago: executing program 3 (id=1481): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) 1.171643788s ago: executing program 4 (id=1482): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 896.437512ms ago: executing program 3 (id=1483): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb4020000) renameat2(r1, &(0x7f0000000080)='./file1\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 312.299739ms ago: executing program 0 (id=1484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x40089413, &(0x7f00000d1800)) 0s ago: executing program 4 (id=1485): r0 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x7, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x8, 0x0) kernel console output (not intermixed with test programs): 349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1008'. [ 495.506254][ T8349] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744072160630944) [ 495.517300][ T8349] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 496.887285][ T8374] loop3: detected capacity change from 0 to 1024 [ 497.031749][ T8374] hfsplus: xattr exists yet [ 497.254553][ T58] hfsplus: b-tree write err: -5, ino 4 [ 497.500305][ T8386] team0: Device ipvlan2 failed to register rx_handler [ 497.633381][ T5198] Bluetooth: hci3: command 0x0406 tx timeout [ 498.334172][ T29] audit: type=1326 audit(1724558469.352:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2ad79e79 code=0x7ffc0000 [ 498.357041][ T29] audit: type=1326 audit(1724558469.352:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2ad79e79 code=0x7ffc0000 [ 498.381481][ T29] audit: type=1326 audit(1724558469.352:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f5b2ad79e79 code=0x7ffc0000 [ 498.404788][ T29] audit: type=1326 audit(1724558469.362:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2ad79e79 code=0x7ffc0000 [ 498.427592][ T29] audit: type=1326 audit(1724558469.392:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f5b2ad79e79 code=0x7ffc0000 [ 498.450754][ T29] audit: type=1326 audit(1724558469.392:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2ad79e79 code=0x7ffc0000 [ 498.782063][ T5599] IPVS: starting estimator thread 0... [ 498.804131][ T8411] tipc: Started in network mode [ 498.809723][ T8411] tipc: Node identity ac1414aa, cluster identity 4711 [ 498.822730][ T8411] tipc: Enabled bearer , priority 10 [ 498.883868][ T8413] IPVS: using max 240 ests per chain, 12000 per kthread [ 499.235380][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.244982][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.333668][ T8417] loop3: detected capacity change from 0 to 512 [ 499.374551][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.382772][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.436786][ T8417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.450295][ T8417] ext4 filesystem being mounted at /123/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.511727][ T8423] loop0: detected capacity change from 0 to 64 [ 499.583308][ T8417] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.1036: Directory hole found for htree leaf block 0 [ 499.640200][ T8417] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.1036: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 499.932792][ T5599] tipc: Node number set to 2886997162 [ 499.950051][ T6818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.962904][ T1826] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 500.130607][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.170448][ T8428] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 500.225739][ T1826] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.236824][ T1826] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.329039][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.334637][ T1826] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.349328][ T1826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.358166][ T1826] usb 5-1: SerialNumber: syz [ 500.393534][ T8428] usb 3-1: Using ep0 maxpacket: 16 [ 500.453420][ T8428] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 500.462963][ T8428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.471222][ T8428] usb 3-1: Product: syz [ 500.475804][ T8428] usb 3-1: Manufacturer: syz [ 500.484830][ T8428] usb 3-1: SerialNumber: syz [ 500.511132][ T8428] usb 3-1: config 0 descriptor?? [ 500.561550][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.753031][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.762844][ T1826] usb 5-1: 0:2 : does not exist [ 500.799597][ T8428] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v92 fw v159.0.0 (1 channels) [ 500.873481][ T1826] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 500.987113][ T1826] usb 5-1: USB disconnect, device number 11 [ 501.001923][ T8428] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 501.004102][ T58] bridge_slave_1: left allmulticast mode [ 501.010525][ T8428] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 501.016299][ T58] bridge_slave_1: left promiscuous mode [ 501.032161][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.067224][ T58] bridge_slave_0: left allmulticast mode [ 501.073703][ T58] bridge_slave_0: left promiscuous mode [ 501.080485][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.654462][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.692080][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.722170][ T58] bond0 (unregistering): Released all slaves [ 501.803183][ T8428] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 501.838205][ T8428] usb 3-1: USB disconnect, device number 14 [ 502.046246][ T58] hsr_slave_0: left promiscuous mode [ 502.064866][ T58] hsr_slave_1: left promiscuous mode [ 502.084331][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.092097][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.195534][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.203947][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.306736][ T58] veth1_macvtap: left promiscuous mode [ 502.313193][ T58] veth0_macvtap: left promiscuous mode [ 502.319104][ T58] veth1_vlan: left promiscuous mode [ 502.325423][ T58] veth0_vlan: left promiscuous mode [ 502.959631][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 503.004599][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 503.158472][ T5198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.201695][ T5198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.216324][ T5198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.239001][ T5198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.301905][ T5198] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 503.402690][ T58] team0 (unregistering): Port device team_slave_1 removed [ 503.418077][ T5198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 503.450162][ T58] team0 (unregistering): Port device team_slave_0 removed [ 503.845139][ T8456] loop0: detected capacity change from 0 to 1024 [ 503.855243][ T8456] EXT4-fs: Ignoring removed orlov option [ 503.861235][ T8456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 504.385691][ T8456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.817988][ T8471] loop4: detected capacity change from 0 to 64 [ 504.873989][ T8451] chnl_net:caif_netlink_parms(): no params data found [ 504.967168][ T8475] loop2: detected capacity change from 0 to 256 [ 505.045876][ T8475] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 505.234973][ T6990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.536279][ T5198] Bluetooth: hci5: command tx timeout [ 505.723256][ T8485] ALSA: mixer_oss: invalid OSS volume 'ß' [ 506.558089][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.567774][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.575941][ T8451] bridge_slave_0: entered allmulticast mode [ 506.585160][ T8451] bridge_slave_0: entered promiscuous mode [ 506.794995][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.805480][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.816059][ T8451] bridge_slave_1: entered allmulticast mode [ 506.825362][ T8451] bridge_slave_1: entered promiscuous mode [ 507.362832][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.399831][ T8503] loop2: detected capacity change from 0 to 256 [ 507.589186][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.642525][ T8503] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 507.712722][ T5198] Bluetooth: hci5: command tx timeout [ 507.746287][ T8491] loop4: detected capacity change from 0 to 32768 [ 507.861802][ T8491] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 507.861802][ T8491] [ 507.872958][ T8491] ERROR: (device loop4): remounting filesystem as read-only [ 507.901973][ T8507] loop3: detected capacity change from 0 to 64 [ 508.037662][ T111] blkno = 5002c, nblocks = 1 [ 508.043564][ T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 508.043564][ T111] [ 508.047437][ T8451] team0: Port device team_slave_0 added [ 508.100930][ T8451] team0: Port device team_slave_1 added [ 508.272973][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.280164][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.306687][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.411753][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.419194][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.445686][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.474910][ T8514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 508.485031][ T8514] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 508.721915][ T8451] hsr_slave_0: entered promiscuous mode [ 508.765143][ T8451] hsr_slave_1: entered promiscuous mode [ 508.810620][ T8451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.818809][ T8451] Cannot create hsr debugfs directory [ 509.482822][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 509.758771][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 509.794108][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.811070][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.824322][ T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00 [ 509.834104][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.844720][ T5188] Bluetooth: hci5: command tx timeout [ 509.853111][ T8] usb 3-1: config 0 descriptor?? [ 510.359800][ T8] wacom 0003:056A:0090.000E: hidraw0: USB HID v0.00 Device [HID 056a:0090] on usb-dummy_hcd.2-1/input0 [ 510.621925][ T8451] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.624529][ T8] usb 3-1: USB disconnect, device number 15 [ 510.744614][ T8451] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.802667][ T8451] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.856354][ T8451] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.856771][ T8537] loop0: detected capacity change from 0 to 256 [ 511.094987][ T8537] FAT-fs (loop0): Directory bread(block 64) failed [ 511.101809][ T8537] FAT-fs (loop0): Directory bread(block 65) failed [ 511.110540][ T8537] FAT-fs (loop0): Directory bread(block 66) failed [ 511.118251][ T8537] FAT-fs (loop0): Directory bread(block 67) failed [ 511.125351][ T8537] FAT-fs (loop0): Directory bread(block 68) failed [ 511.132127][ T8537] FAT-fs (loop0): Directory bread(block 69) failed [ 511.139254][ T8537] FAT-fs (loop0): Directory bread(block 70) failed [ 511.146333][ T8537] FAT-fs (loop0): Directory bread(block 71) failed [ 511.153572][ T8537] FAT-fs (loop0): Directory bread(block 72) failed [ 511.160343][ T8537] FAT-fs (loop0): Directory bread(block 73) failed [ 511.853633][ T5198] Bluetooth: hci5: command tx timeout [ 511.957634][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.113596][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.174490][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.182160][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.268378][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.276143][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.979252][ T5198] Bluetooth: hci0: command 0x0406 tx timeout [ 513.073017][ T8568] loop2: detected capacity change from 0 to 1024 [ 513.330845][ T8571] loop4: detected capacity change from 0 to 512 [ 513.432640][ T8571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.692545][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.837803][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.241153][ T8451] veth0_vlan: entered promiscuous mode [ 514.299495][ T8451] veth1_vlan: entered promiscuous mode [ 514.608364][ T8587] loop4: detected capacity change from 0 to 64 [ 514.646611][ T8451] veth0_macvtap: entered promiscuous mode [ 514.705293][ T8451] veth1_macvtap: entered promiscuous mode [ 514.710487][ T8589] Bluetooth: hci3: unsupported parameter 64512 [ 514.723382][ T8589] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 514.843765][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.855452][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.865654][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.876577][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.886751][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.897597][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.907804][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.918643][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.928858][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.939770][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.950075][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.960850][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.976388][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.032262][ T8591] loop3: detected capacity change from 0 to 128 [ 515.149612][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.160472][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.170714][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.181634][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.191752][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.202652][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.212768][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.223966][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.239828][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.251776][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.261969][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.272763][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.287964][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.481351][ T8451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.491316][ T8451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.500538][ T8451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.509746][ T8451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.563201][ T1826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 516.820688][ T1826] usb 4-1: Using ep0 maxpacket: 16 [ 516.856171][ T1826] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 517.008333][ T1826] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 517.018243][ T1826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.026645][ T1826] usb 4-1: Product: syz [ 517.031035][ T1826] usb 4-1: Manufacturer: syz [ 517.036171][ T1826] usb 4-1: SerialNumber: syz [ 517.189812][ T1826] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input20 [ 517.486004][ T4605] bcm5974 4-1:1.0: could not read from device [ 517.537692][ T4605] bcm5974 4-1:1.0: could not read from device [ 517.617311][ T4605] bcm5974 4-1:1.0: could not read from device [ 517.646721][ T1826] usb 4-1: USB disconnect, device number 10 [ 517.727465][ T4605] bcm5974 4-1:1.0: could not read from device [ 518.149897][ T8612] loop4: detected capacity change from 0 to 32768 [ 518.161451][ T8612] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1112 (8612) [ 518.211106][ T8622] loop0: detected capacity change from 0 to 512 [ 518.232984][ T8612] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 518.244447][ T8612] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm [ 518.257985][ T8612] BTRFS info (device loop4): using free-space-tree [ 518.337721][ T8622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.351288][ T8622] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.598300][ T8646] loop3: detected capacity change from 0 to 64 [ 518.763322][ T6013] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 518.806234][ T8650] loop2: detected capacity change from 0 to 256 [ 518.994136][ T6990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.167660][ T8667] loop2: detected capacity change from 0 to 1024 [ 520.292759][ T8667] hfsplus: request for non-existent node 134217728 in B*Tree [ 520.300596][ T8667] hfsplus: request for non-existent node 134217728 in B*Tree [ 520.333209][ T1826] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 520.439688][ T8674] loop3: detected capacity change from 0 to 64 [ 520.572208][ T1826] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 520.580826][ T1826] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 520.592891][ T1826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 520.604356][ T1826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 520.614503][ T1826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.627906][ T1826] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.637394][ T1826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.698693][ T1826] usb 1-1: config 0 descriptor?? [ 521.205819][ T1826] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 521.280771][ T1826] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 521.343316][ T1826] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 521.493379][ T8686] Cannot find del_set index 0 as target [ 521.548378][ T5599] usb 1-1: USB disconnect, device number 7 [ 521.604885][ T8683] loop2: detected capacity change from 0 to 2048 [ 521.876255][ T8683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.256587][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.264918][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.515752][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.655347][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.663807][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.435613][ T8688] loop3: detected capacity change from 0 to 32768 [ 523.450287][ T8688] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1129 (8688) [ 523.469905][ T8688] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 523.480670][ T8688] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 523.492114][ T8688] BTRFS info (device loop3): using free-space-tree [ 523.685021][ T8705] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 523.823706][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.976969][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.032978][ T8714] loop2: detected capacity change from 0 to 1024 [ 524.179619][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.202251][ T8714] hfsplus: bad catalog entry type [ 524.224872][ T6818] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 524.380495][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.427415][ T3565] hfsplus: b-tree write err: -5, ino 4 [ 524.679746][ T144] bridge_slave_1: left allmulticast mode [ 524.685898][ T144] bridge_slave_1: left promiscuous mode [ 524.692657][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.717275][ T144] bridge_slave_0: left allmulticast mode [ 524.723446][ T144] bridge_slave_0: left promiscuous mode [ 524.730054][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.320502][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.350622][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.366181][ T144] bond0 (unregistering): Released all slaves [ 526.019476][ T5188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.039560][ T5188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.074162][ T5188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.083032][ T8723] loop4: detected capacity change from 0 to 2048 [ 526.160365][ T5188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.174985][ T144] hsr_slave_0: left promiscuous mode [ 526.196053][ T144] hsr_slave_1: left promiscuous mode [ 526.206806][ T5188] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 526.215599][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.224088][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.225876][ T5188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.241416][ T8723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.311255][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.318202][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.356095][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.364026][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.383604][ T144] veth1_macvtap: left promiscuous mode [ 526.395251][ T144] veth0_macvtap: left promiscuous mode [ 526.401204][ T144] veth1_vlan: left promiscuous mode [ 526.406867][ T144] veth0_vlan: left promiscuous mode [ 526.593256][ T29] audit: type=1804 audit(1724558497.572:27): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1138" name="/newroot/205/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 526.729032][ T8736] loop2: detected capacity change from 0 to 256 [ 526.863416][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.437926][ T8742] loop4: detected capacity change from 0 to 512 [ 527.455248][ T144] team0 (unregistering): Port device team_slave_1 removed [ 527.470978][ T8742] EXT4-fs: Ignoring removed bh option [ 527.501114][ T144] team0 (unregistering): Port device team_slave_0 removed [ 527.555075][ T8742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 527.593539][ T8742] System zones: 1-12 [ 527.638363][ T8742] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1144: corrupted in-inode xattr: e_value size too large [ 527.713141][ T8742] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1144: couldn't read orphan inode 15 (err -117) [ 527.787906][ T8742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.492873][ T5188] Bluetooth: hci5: command tx timeout [ 528.536631][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.622215][ T8759] loop2: detected capacity change from 0 to 512 [ 528.823369][ T8759] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1149: corrupted in-inode xattr: invalid ea_ino [ 528.874878][ T8759] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1149: couldn't read orphan inode 15 (err -117) [ 528.975919][ T8759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.389790][ T8726] chnl_net:caif_netlink_parms(): no params data found [ 529.466912][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.575406][ T5188] Bluetooth: hci5: command tx timeout [ 530.863936][ T8766] loop4: detected capacity change from 0 to 32768 [ 530.957073][ T8766] [ 530.957073][ T8766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 530.957073][ T8766] [ 531.056871][ T8766] [ 531.056871][ T8766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.056871][ T8766] [ 531.068309][ T8766] [ 531.068309][ T8766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.068309][ T8766] [ 531.080197][ T8766] [ 531.080197][ T8766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.080197][ T8766] [ 531.155648][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.170015][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.178174][ T8726] bridge_slave_0: entered allmulticast mode [ 531.187317][ T8726] bridge_slave_0: entered promiscuous mode [ 531.230387][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.238218][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.246137][ T8726] bridge_slave_1: entered allmulticast mode [ 531.255323][ T8726] bridge_slave_1: entered promiscuous mode [ 531.255511][ T6013] [ 531.255511][ T6013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.255511][ T6013] [ 531.272149][ T6013] [ 531.272149][ T6013] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 531.272149][ T6013] [ 531.522119][ T8726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.605619][ T8726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.886475][ T8726] team0: Port device team_slave_0 added [ 531.953547][ T8726] team0: Port device team_slave_1 added [ 532.094303][ T8786] loop3: detected capacity change from 0 to 64 [ 532.129926][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.137293][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.151501][ T8784] loop2: detected capacity change from 0 to 2048 [ 532.163544][ T8726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.232752][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.239938][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.266831][ T8726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.292220][ T8786] syz.3.1159: attempt to access beyond end of device [ 532.292220][ T8786] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 532.415318][ T8784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.566576][ T8784] EXT4-fs (loop2): shut down requested (2) [ 532.654940][ T5188] Bluetooth: hci5: command tx timeout [ 532.692956][ T8726] hsr_slave_0: entered promiscuous mode [ 532.764361][ T8726] hsr_slave_1: entered promiscuous mode [ 532.822969][ T8726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.830773][ T8726] Cannot create hsr debugfs directory [ 532.869182][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.913975][ T8802] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 533.059979][ T8801] loop0: detected capacity change from 0 to 1024 [ 533.385018][ T1103] hfsplus: b-tree write err: -5, ino 4 [ 534.254178][ T8825] loop2: detected capacity change from 0 to 512 [ 534.347141][ T8825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.395565][ T8726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 534.420706][ T8726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 534.463340][ T8726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 534.524735][ T8726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 534.555489][ T8825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.568981][ T8825] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.674010][ T8833] loop4: detected capacity change from 0 to 256 [ 534.702933][ T8825] EXT4-fs (loop2): shut down requested (0) [ 534.712056][ T8833] exfat: Deprecated parameter 'utf8' [ 534.717860][ T8833] exfat: Deprecated parameter 'utf8' [ 534.733510][ T5188] Bluetooth: hci5: command tx timeout [ 534.911058][ T8833] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x14f16447, utbl_chksum : 0xe619d30d) [ 535.013737][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.529425][ T8726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.711205][ T8726] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.747960][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.755812][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.834343][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.842180][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.338226][ T8850] mmap: syz.0.1181 (8850) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 537.982875][ T8867] input: syz0 as /devices/virtual/input/input22 [ 537.989719][ T8867] input: failed to attach handler leds to device input22, error: -6 [ 538.431645][ T8855] loop3: detected capacity change from 0 to 32768 [ 538.446215][ T8855] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1183 (8855) [ 538.493053][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.524542][ T8855] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 538.535521][ T8855] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 538.546871][ T8855] BTRFS info (device loop3): using free-space-tree [ 538.906517][ T8877] loop2: detected capacity change from 0 to 1024 [ 538.952865][ T8877] EXT4-fs: Ignoring removed orlov option [ 538.965325][ T8877] EXT4-fs (loop2): Test dummy encryption mode enabled [ 539.022968][ T8877] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 539.063923][ T6818] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 539.158969][ T8877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.169768][ T8726] veth0_vlan: entered promiscuous mode [ 539.232403][ T8726] veth1_vlan: entered promiscuous mode [ 539.513192][ T8726] veth0_macvtap: entered promiscuous mode [ 539.587107][ T8726] veth1_macvtap: entered promiscuous mode [ 539.732806][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.743574][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.754024][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.767784][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.777977][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.791523][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.807285][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.819242][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.829403][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.840167][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.850400][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.865916][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.881415][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.998524][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.051545][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.062540][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.073319][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.084302][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.096501][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.107638][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.123663][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.135638][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.145783][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.156528][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.166678][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.177740][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.193013][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.376756][ T8726] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.386143][ T8726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.396973][ T8726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.406290][ T8726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.643152][ T5596] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 540.900254][ T5596] usb 5-1: Using ep0 maxpacket: 16 [ 540.927199][ T5596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.938629][ T5596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.948967][ T5596] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 540.962739][ T5596] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 540.972090][ T5596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.034629][ T5596] usb 5-1: config 0 descriptor?? [ 541.571901][ T5596] shield 0003:0955:7214.0010: unknown main item tag 0x1 [ 541.579524][ T5596] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 541.641078][ T5596] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 541.695644][ T5596] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 541.705737][ T5596] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 541.810208][ T25] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 541.834130][ T5596] usb 5-1: USB disconnect, device number 12 [ 541.868335][ T25] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 541.880069][ T25] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 541.891845][ T25] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 542.644068][ T8933] loop3: detected capacity change from 0 to 64 [ 542.833545][ T8933] hfs: request for non-existent node 131072 in B*Tree [ 542.840551][ T8933] hfs: request for non-existent node 131072 in B*Tree [ 542.947801][ T8938] loop0: detected capacity change from 0 to 24 [ 543.118984][ T8941] loop2: detected capacity change from 0 to 512 [ 543.294739][ T8941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1209: bg 0: block 393: padding at end of block bitmap is not set [ 543.383589][ T8941] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 543.444655][ T8941] EXT4-fs (loop2): 2 truncates cleaned up [ 543.452770][ T8941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.595741][ T8941] EXT4-fs error (device loop2): ext4_check_dx_root:2218: inode #2: comm syz.2.1209: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 544.100200][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.637612][ T8962] loop4: detected capacity change from 0 to 512 [ 544.709243][ T8962] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 544.720153][ T8962] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 544.826370][ T8962] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 544.889840][ T8962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 544.932954][ T8962] System zones: 0-2, 18-18, 34-34 [ 544.971577][ T8962] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 545.062970][ T8962] EXT4-fs (loop4): 1 truncate cleaned up [ 545.070629][ T8962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.243555][ T8962] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 545.542054][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.626037][ T8951] loop0: detected capacity change from 0 to 32768 [ 545.765800][ T8951] ialloc: diAlloc returned -5! [ 545.955873][ T8971] loop2: detected capacity change from 0 to 256 [ 546.053536][ T8974] lo speed is unknown, defaulting to 1000 [ 546.061100][ T8974] lo speed is unknown, defaulting to 1000 [ 546.066134][ T8971] FAT-fs (loop2): Directory bread(block 64) failed [ 546.069360][ T8974] lo speed is unknown, defaulting to 1000 [ 546.073849][ T8971] FAT-fs (loop2): Directory bread(block 65) failed [ 546.074111][ T8971] FAT-fs (loop2): Directory bread(block 66) failed [ 546.074234][ T8971] FAT-fs (loop2): Directory bread(block 67) failed [ 546.074485][ T8971] FAT-fs (loop2): Directory bread(block 68) failed [ 546.074607][ T8971] FAT-fs (loop2): Directory bread(block 69) failed [ 546.074847][ T8971] FAT-fs (loop2): Directory bread(block 70) failed [ 546.092742][ T8974] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 546.095034][ T8971] FAT-fs (loop2): Directory bread(block 71) failed [ 546.132607][ T8974] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 546.135638][ T8971] FAT-fs (loop2): Directory bread(block 72) failed [ 546.149102][ T8971] FAT-fs (loop2): Directory bread(block 73) failed [ 546.228578][ T8974] lo speed is unknown, defaulting to 1000 [ 546.237011][ T8974] lo speed is unknown, defaulting to 1000 [ 546.245390][ T8974] lo speed is unknown, defaulting to 1000 [ 546.254141][ T8974] lo speed is unknown, defaulting to 1000 [ 546.262837][ T8974] lo speed is unknown, defaulting to 1000 [ 546.271253][ T8974] lo speed is unknown, defaulting to 1000 [ 546.279785][ T8974] lo speed is unknown, defaulting to 1000 [ 546.639722][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.648601][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.672673][ T29] audit: type=1326 audit(1724558517.672:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.695503][ T29] audit: type=1326 audit(1724558517.672:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.718499][ T29] audit: type=1326 audit(1724558517.692:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.743539][ T29] audit: type=1326 audit(1724558517.692:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.768271][ T29] audit: type=1326 audit(1724558517.692:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.791016][ T29] audit: type=1326 audit(1724558517.692:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.813861][ T29] audit: type=1326 audit(1724558517.692:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f39f79e79 code=0x7ffc0000 [ 546.923628][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.931828][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.690113][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.867938][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.944054][ T8993] loop2: detected capacity change from 0 to 512 [ 547.985261][ T8993] EXT4-fs: Ignoring removed nobh option [ 548.091086][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.267674][ T8993] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 548.289858][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.360026][ T8993] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 548.418445][ T8993] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.1227: casefold flag without casefold feature [ 548.471744][ T8993] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1227: couldn't read orphan inode 13 (err -117) [ 548.554266][ T8993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.753251][ T144] bridge_slave_1: left allmulticast mode [ 548.759156][ T144] bridge_slave_1: left promiscuous mode [ 548.765968][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.853338][ T144] bridge_slave_0: left allmulticast mode [ 548.859241][ T144] bridge_slave_0: left promiscuous mode [ 548.868298][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.507842][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.770700][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.854695][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.912471][ T8995] loop0: detected capacity change from 0 to 32768 [ 549.912515][ T144] bond0 (unregistering): Released all slaves [ 549.932257][ T8995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1220 (8995) [ 549.958508][ T8995] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 549.969196][ T8995] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 549.980072][ T8995] BTRFS info (device loop0): using free-space-tree [ 550.290075][ T6990] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 550.599538][ T144] hsr_slave_0: left promiscuous mode [ 550.608965][ T144] hsr_slave_1: left promiscuous mode [ 550.623310][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.631005][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.654769][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.662648][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.692169][ T144] veth1_macvtap: left promiscuous mode [ 550.698187][ T144] veth0_macvtap: left promiscuous mode [ 550.704278][ T144] veth1_vlan: left promiscuous mode [ 550.709838][ T144] veth0_vlan: left promiscuous mode [ 551.200210][ T9015] loop3: detected capacity change from 0 to 512 [ 551.231536][ T9015] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 551.242696][ T9015] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 551.735252][ T144] team0 (unregistering): Port device team_slave_1 removed [ 551.813337][ T144] team0 (unregistering): Port device team_slave_0 removed [ 551.939432][ T9022] loop0: detected capacity change from 0 to 1024 [ 552.165885][ T5198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 552.176030][ T5198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 552.186827][ T5198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 552.207947][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1230'. [ 552.238317][ T5198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 552.258724][ T5198] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 552.355930][ T5198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.639584][ T9025] lo speed is unknown, defaulting to 1000 [ 552.856207][ T9033] loop3: detected capacity change from 0 to 256 [ 553.052693][ T9033] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 553.583141][ T9025] chnl_net:caif_netlink_parms(): no params data found [ 554.412859][ T5188] Bluetooth: hci5: command tx timeout [ 554.563035][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 554.626010][ T5241] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 554.711017][ T9025] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.719271][ T9025] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.727191][ T9025] bridge_slave_0: entered allmulticast mode [ 554.736414][ T9025] bridge_slave_0: entered promiscuous mode [ 554.762475][ T9025] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.770276][ T9025] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.778276][ T9025] bridge_slave_1: entered allmulticast mode [ 554.789111][ T9025] bridge_slave_1: entered promiscuous mode [ 554.835162][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.846724][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.857552][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.863006][ T5241] usb 1-1: Using ep0 maxpacket: 8 [ 554.871008][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.885349][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.923990][ T25] usb 3-1: config 0 descriptor?? [ 554.993039][ T5241] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.016627][ T5241] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 555.025325][ T5241] usb 1-1: can't read configurations, error -71 [ 555.128932][ T9025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.180966][ T9025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.377172][ T9025] team0: Port device team_slave_0 added [ 555.421977][ T9025] team0: Port device team_slave_1 added [ 555.436024][ T25] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 555.471740][ T25] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 555.529485][ T25] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 555.627643][ T9078] loop4: detected capacity change from 0 to 1024 [ 555.659904][ T9025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.667277][ T9025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.698908][ T9025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.698988][ T25] usb 3-1: USB disconnect, device number 16 [ 555.775211][ T9078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.797048][ T9025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.805521][ T9025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.833118][ T9025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.098254][ T9025] hsr_slave_0: entered promiscuous mode [ 556.134863][ T9025] hsr_slave_1: entered promiscuous mode [ 556.175862][ T9025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.183744][ T9025] Cannot create hsr debugfs directory [ 556.508806][ T5188] Bluetooth: hci5: command tx timeout [ 556.526029][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.403795][ T9025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.422669][ T9101] loop3: detected capacity change from 0 to 128 [ 557.432197][ T9101] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 557.457633][ T9101] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 557.469747][ T9025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.472868][ T25] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 557.542171][ T9025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.586229][ T9025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.714339][ T25] usb 1-1: config 0 has no interfaces? [ 557.750860][ T25] usb 1-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 557.760831][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.765451][ T3565] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 557.769129][ T25] usb 1-1: Product: syz [ 557.784594][ T25] usb 1-1: Manufacturer: syz [ 557.789426][ T25] usb 1-1: SerialNumber: syz [ 557.832064][ T25] usb 1-1: config 0 descriptor?? [ 558.186319][ T9111] loop4: detected capacity change from 0 to 128 [ 558.261705][ T9111] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 558.320798][ T9111] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.357755][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.372260][ T9025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.423600][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.455197][ T9025] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.514450][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.522397][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.572419][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.574993][ T8] usb 1-1: USB disconnect, device number 10 [ 558.579991][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.592536][ T5188] Bluetooth: hci5: command tx timeout [ 559.000639][ T6013] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 559.763415][ T5596] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 559.989623][ T5596] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.000428][ T5596] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.087053][ T5596] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 560.096720][ T5596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.105242][ T5596] usb 1-1: Product: syz [ 560.109655][ T5596] usb 1-1: Manufacturer: syz [ 560.114715][ T5596] usb 1-1: SerialNumber: syz [ 560.201066][ T9025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.663181][ T5188] Bluetooth: hci5: command tx timeout [ 560.708199][ T9025] veth0_vlan: entered promiscuous mode [ 560.873177][ T9025] veth1_vlan: entered promiscuous mode [ 561.186534][ T9025] veth0_macvtap: entered promiscuous mode [ 561.244040][ T9025] veth1_macvtap: entered promiscuous mode [ 561.316153][ T5596] cdc_ncm 1-1:1.0: bind() failure [ 561.376613][ T5596] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 561.395112][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.405981][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.416254][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.427127][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.437384][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.448131][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.458408][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.469264][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.479477][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.490357][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.500532][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.511346][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.526793][ T9025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.538570][ T5596] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 561.553681][ T5596] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 561.580953][ T5596] usb 1-1: USB disconnect, device number 11 [ 561.700867][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.711836][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.727668][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.739698][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.749906][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.760657][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.770830][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.781589][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.791723][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.802604][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.812788][ T9025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.837415][ T9025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.852800][ T9025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.913230][ T9025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.928643][ T9025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.939261][ T9025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.948406][ T9025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.824586][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 563.230651][ T9170] loop0: detected capacity change from 0 to 2048 [ 563.372075][ T9170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.385175][ T9170] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.832686][ T6990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.277174][ T9197] loop0: detected capacity change from 0 to 512 [ 564.390185][ T9197] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1297: invalid block [ 564.478880][ T9197] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1297: invalid indirect mapped block 4294967295 (level 1) [ 564.567165][ T9197] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1297: invalid indirect mapped block 4294967295 (level 1) [ 564.601523][ T9195] loop3: detected capacity change from 0 to 2048 [ 564.656405][ T9197] EXT4-fs (loop0): 2 truncates cleaned up [ 564.664392][ T9197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.743051][ T9203] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 565.279423][ T6990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.096127][ T9194] loop2: detected capacity change from 0 to 32768 [ 566.110379][ T9194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1296 (9194) [ 566.274571][ T9194] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.285227][ T9194] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 566.295071][ T9194] BTRFS info (device loop2): using free-space-tree [ 566.684807][ T9210] loop3: detected capacity change from 0 to 4096 [ 566.890786][ T5987] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.252108][ T9235] netlink: 'syz.4.1305': attribute type 29 has an invalid length. [ 567.282049][ T29] audit: type=1800 audit(1724558538.292:35): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1300" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 567.307623][ T9238] netlink: 'syz.4.1305': attribute type 29 has an invalid length. [ 567.354075][ T9235] netlink: 'syz.4.1305': attribute type 29 has an invalid length. [ 567.389063][ T9235] netlink: 'syz.4.1305': attribute type 29 has an invalid length. [ 567.924476][ T5305] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 568.202616][ T5305] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.215774][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 568.227850][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 568.238324][ T5305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 568.251730][ T5305] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 568.261342][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.347368][ T5305] usb 1-1: config 0 descriptor?? [ 568.854249][ T5305] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 568.874836][ T5305] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 568.893014][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.901523][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.933444][ T5305] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 569.069688][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.078204][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.168534][ T5305] usb 1-1: USB disconnect, device number 12 [ 569.895608][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.089317][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.170924][ T9270] lo speed is unknown, defaulting to 1000 [ 570.365367][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.548621][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.843184][ T144] bridge_slave_1: left allmulticast mode [ 570.849092][ T144] bridge_slave_1: left promiscuous mode [ 570.855882][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.884071][ T144] bridge_slave_0: left allmulticast mode [ 570.892474][ T144] bridge_slave_0: left promiscuous mode [ 570.899088][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.411617][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.430006][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.469766][ T144] bond0 (unregistering): Released all slaves [ 571.801969][ T144] hsr_slave_0: left promiscuous mode [ 571.810061][ T144] hsr_slave_1: left promiscuous mode [ 571.827053][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.834915][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.845976][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.853947][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.872550][ T144] veth1_macvtap: left promiscuous mode [ 571.878589][ T144] veth0_macvtap: left promiscuous mode [ 571.884545][ T144] veth1_vlan: left promiscuous mode [ 571.891289][ T144] veth0_vlan: left promiscuous mode [ 572.634368][ T5305] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 572.900152][ T5305] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 572.910996][ T5305] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 572.920210][ T5305] usb 3-1: config 1 has no interface number 0 [ 572.926677][ T5305] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.938016][ T5305] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 572.947562][ T5305] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 97, using maximum allowed: 30 [ 572.958698][ T5305] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 572.973367][ T144] team0 (unregistering): Port device team_slave_1 removed [ 572.995544][ T9287] loop4: detected capacity change from 0 to 2048 [ 573.009849][ T144] team0 (unregistering): Port device team_slave_0 removed [ 573.016786][ T5198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.026745][ T5198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.036990][ T5198] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.062741][ T5305] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.072259][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.080619][ T5305] usb 3-1: Product: syz [ 573.085144][ T5305] usb 3-1: Manufacturer: syz [ 573.089974][ T5305] usb 3-1: SerialNumber: syz [ 573.107821][ T5198] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.121025][ T5198] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 573.180889][ T9287] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 573.322642][ T5198] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.363955][ T9294] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 573.376566][ T9287] syz.4.1320: attempt to access beyond end of device [ 573.376566][ T9287] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 573.523621][ T9289] lo speed is unknown, defaulting to 1000 [ 573.935995][ T9297] loop0: detected capacity change from 0 to 64 [ 574.022144][ T9297] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 574.069701][ T5305] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 574.076275][ T5305] cdc_ncm 3-1:1.1: bind() failure [ 574.108090][ T5305] usb 3-1: USB disconnect, device number 17 [ 574.456876][ T9303] input: syz1 as /devices/virtual/input/input25 [ 574.603137][ T9289] chnl_net:caif_netlink_parms(): no params data found [ 574.622221][ T5596] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 574.882909][ T5596] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 574.896598][ T5596] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.940844][ T5596] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.950968][ T5596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.959366][ T5596] usb 4-1: Product: syz [ 574.963963][ T5596] usb 4-1: Manufacturer: syz [ 574.968799][ T5596] usb 4-1: SerialNumber: syz [ 574.985462][ T9300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.372863][ T5198] Bluetooth: hci5: command tx timeout [ 575.446305][ T5596] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 575.485072][ T5596] usb 4-1: USB disconnect, device number 11 [ 575.836610][ T9324] loop0: detected capacity change from 0 to 64 [ 575.977771][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.985709][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.993736][ T9289] bridge_slave_0: entered allmulticast mode [ 576.003116][ T9289] bridge_slave_0: entered promiscuous mode [ 576.039775][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.048085][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.056246][ T9289] bridge_slave_1: entered allmulticast mode [ 576.065533][ T9289] bridge_slave_1: entered promiscuous mode [ 576.111503][ T8428] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 576.238903][ T9289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.321332][ T9289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.407298][ T8428] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 576.416825][ T8428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.425353][ T8428] usb 5-1: Product: syz [ 576.429759][ T8428] usb 5-1: Manufacturer: syz [ 576.434694][ T8428] usb 5-1: SerialNumber: syz [ 576.479593][ T8428] usb 5-1: config 0 descriptor?? [ 576.641771][ T9289] team0: Port device team_slave_0 added [ 576.712094][ T9289] team0: Port device team_slave_1 added [ 576.890100][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.897457][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.923918][ T9289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.941194][ T8428] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 577.018151][ T9289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.025584][ T9289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.051989][ T9289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.159156][ T8428] usb 5-1: failed to fetch extended address, random address set [ 577.355620][ T9289] hsr_slave_0: entered promiscuous mode [ 577.378538][ T8428] usb 5-1: USB disconnect, device number 13 [ 577.400283][ T9289] hsr_slave_1: entered promiscuous mode [ 577.429621][ T9289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.437744][ T9289] Cannot create hsr debugfs directory [ 577.480831][ T5198] Bluetooth: hci5: command tx timeout [ 578.181557][ T9358] loop4: detected capacity change from 0 to 128 [ 578.214968][ T9357] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 578.345957][ T9358] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 578.429205][ T9358] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 578.716821][ T6013] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 578.794568][ T9367] loop0: detected capacity change from 0 to 1024 [ 578.821720][ T9367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 579.000786][ T9289] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 579.064288][ T9289] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 579.118812][ T9289] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 579.141644][ T9371] loop3: detected capacity change from 0 to 512 [ 579.194635][ T9371] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 579.207414][ T9371] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 579.217949][ T9371] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1350: Corrupt directory, running e2fsck is recommended [ 579.242081][ T9289] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 579.277545][ T9371] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 579.324636][ T9371] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1350: corrupted in-inode xattr: invalid ea_ino [ 579.358954][ T9371] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1350: couldn't read orphan inode 15 (err -117) [ 579.389369][ T9371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.537461][ T5188] Bluetooth: hci5: command tx timeout [ 579.899661][ T6818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.904956][ T9383] loop4: detected capacity change from 0 to 64 [ 580.327077][ T9289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.368242][ T9389] loop2: detected capacity change from 0 to 256 [ 580.496141][ T9289] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.516531][ T9389] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 580.571103][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.578868][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.658516][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.666273][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.703059][ T9395] sock: sock_set_timeout: `syz.4.1359' (pid 9395) tries to set negative timeout [ 581.127588][ T9398] loop4: detected capacity change from 0 to 1024 [ 581.173435][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 581.184166][ T9402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1363'. [ 581.613563][ T5188] Bluetooth: hci5: command 0x0419 tx timeout [ 581.741624][ T9409] loop0: detected capacity change from 0 to 512 [ 581.852100][ T9412] capability: warning: `syz.2.1367' uses 32-bit capabilities (legacy support in use) [ 581.914601][ T9409] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.1365: iget: special inode unallocated [ 581.949913][ T9412] loop2: detected capacity change from 0 to 256 [ 581.978677][ T9412] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 581.996987][ T9409] EXT4-fs (loop0): get root inode failed [ 582.004789][ T9409] EXT4-fs (loop0): mount failed [ 582.421583][ T9289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.445466][ T9419] loop2: detected capacity change from 0 to 128 [ 582.833476][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 582.843366][ T9425] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1371'. [ 582.921587][ T9289] veth0_vlan: entered promiscuous mode [ 582.966736][ T9423] loop3: detected capacity change from 0 to 2048 [ 582.977892][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 583.021201][ T9289] veth1_vlan: entered promiscuous mode [ 583.150171][ T9423] overlayfs: upper fs needs to support d_type. [ 583.180420][ T9423] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 583.190505][ T9423] overlayfs: failed to set xattr on upper [ 583.196814][ T9423] overlayfs: ...falling back to redirect_dir=nofollow. [ 583.203969][ T9423] overlayfs: ...falling back to index=off. [ 583.209962][ T9423] overlayfs: ...falling back to uuid=null. [ 583.242806][ T5597] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 583.289126][ T9289] veth0_macvtap: entered promiscuous mode [ 583.329114][ T9289] veth1_macvtap: entered promiscuous mode [ 583.444313][ T9431] loop0: detected capacity change from 0 to 256 [ 583.458502][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.462945][ T5597] usb 5-1: Using ep0 maxpacket: 8 [ 583.469365][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.484628][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.495415][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.501107][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 583.505544][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.515522][ T5597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 583.531365][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.549393][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.560128][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.570363][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.581159][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.586563][ T5597] usb 5-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice= 8.ff [ 583.591159][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 583.600499][ T5597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.610775][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.615849][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.620209][ T5597] usb 5-1: Product: syz [ 583.640990][ T5597] usb 5-1: Manufacturer: syz [ 583.646178][ T5597] usb 5-1: SerialNumber: syz [ 583.695446][ T5188] Bluetooth: hci5: command 0x0419 tx timeout [ 583.716230][ T5597] usb 5-1: config 0 descriptor?? [ 583.736345][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.747199][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.757366][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.762673][ T6818] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 583.769164][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.778561][ T8428] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 583.788462][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.807603][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.817770][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.826061][ T6818] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 583.828540][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.846865][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.857644][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.867793][ T9289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 583.878576][ T9289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 583.893973][ T9289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.916868][ T5597] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.971224][ T5597] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 583.994485][ T5597] usb 5-1: USB disconnect, device number 14 [ 584.000750][ T8428] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 584.012088][ T8428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.023666][ T8428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.033883][ T8428] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 584.043865][ T9289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.056150][ T9289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.066843][ T9289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.077807][ T9289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.086241][ T8428] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 584.097613][ T8428] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 584.106210][ T8428] usb 3-1: Manufacturer: syz [ 584.174820][ T8428] usb 3-1: config 0 descriptor?? [ 584.690504][ T8428] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 584.709229][ T8428] appleir 0003:05AC:8243.0013: No inputs registered, leaving [ 584.741339][ T8428] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 584.785180][ T4329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.938084][ T4329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.943481][ T5597] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 585.007927][ T5599] usb 3-1: USB disconnect, device number 18 [ 585.103895][ T4329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.158676][ T5597] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 585.170151][ T5597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.181524][ T5597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.191970][ T5597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 585.230419][ T5597] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 585.240065][ T5597] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 585.248857][ T5597] usb 1-1: Manufacturer: syz [ 585.276258][ T5597] usb 1-1: config 0 descriptor?? [ 585.328140][ T4329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.663012][ T4329] bridge_slave_1: left allmulticast mode [ 585.668926][ T4329] bridge_slave_1: left promiscuous mode [ 585.675744][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.723371][ T4329] bridge_slave_0: left allmulticast mode [ 585.729401][ T4329] bridge_slave_0: left promiscuous mode [ 585.735768][ T5597] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 585.736251][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.768734][ T5597] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 585.793643][ T5597] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 586.048453][ T5597] usb 1-1: USB disconnect, device number 13 [ 586.385056][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 586.394914][ T9443] loop2: detected capacity change from 0 to 1024 [ 586.427125][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.459879][ T9443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.531933][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.577282][ T9443] EXT4-fs error (device loop2): ext4_get_inode_usage:883: inode #2: comm syz.2.1380: corrupted in-inode xattr: bad e_name length [ 586.614125][ T5198] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 586.628141][ T4329] bond0 (unregistering): Released all slaves [ 586.656480][ T9443] EXT4-fs (loop2): Remounting filesystem read-only [ 586.668147][ T5198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 586.685201][ T4422] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 586.696101][ T4422] Quota error (device loop2): write_blk: dquota write failed [ 586.706779][ T5198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 586.717522][ T5198] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 586.721437][ T5198] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 586.728035][ T4422] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 586.737732][ T5198] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 586.744745][ T4422] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 586.762984][ T4422] Quota error (device loop2): write_blk: dquota write failed [ 586.771147][ T4422] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 586.781570][ T4422] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 586.792088][ T4422] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 587.036816][ T9447] lo speed is unknown, defaulting to 1000 [ 587.746127][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.754033][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.956169][ T5987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.173917][ T4329] hsr_slave_0: left promiscuous mode [ 588.226331][ T4329] hsr_slave_1: left promiscuous mode [ 588.275177][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.283546][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.360638][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.368995][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.433000][ T4329] veth1_macvtap: left promiscuous mode [ 588.438768][ T4329] veth0_macvtap: left promiscuous mode [ 588.452676][ T4329] veth1_vlan: left promiscuous mode [ 588.458374][ T4329] veth0_vlan: left promiscuous mode [ 588.801715][ T25] infiniband syz0: ib_query_port failed (-19) [ 588.822765][ T5198] Bluetooth: hci3: command tx timeout [ 589.326557][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 589.405419][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 590.263832][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 590.274535][ T5188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 590.291156][ T5188] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 590.306881][ T5188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 590.318902][ T5188] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 590.328629][ T5188] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 590.893550][ T5188] Bluetooth: hci3: command tx timeout [ 591.020186][ T9447] chnl_net:caif_netlink_parms(): no params data found [ 592.440990][ T5188] Bluetooth: hci1: command tx timeout [ 592.496684][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 592.972920][ T5188] Bluetooth: hci3: command tx timeout [ 593.295648][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.305344][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.313394][ T9447] bridge_slave_0: entered allmulticast mode [ 593.322660][ T9447] bridge_slave_0: entered promiscuous mode [ 593.394688][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.405499][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.414474][ T9447] bridge_slave_1: entered allmulticast mode [ 593.423982][ T9447] bridge_slave_1: entered promiscuous mode [ 593.708808][ T9447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.794354][ T9447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.090483][ T9447] team0: Port device team_slave_0 added [ 594.210170][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.218405][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.226464][ T9480] bridge_slave_0: entered allmulticast mode [ 594.235759][ T9480] bridge_slave_0: entered promiscuous mode [ 594.293117][ T9447] team0: Port device team_slave_1 added [ 594.314744][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.322632][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.330521][ T9480] bridge_slave_1: entered allmulticast mode [ 594.339858][ T9480] bridge_slave_1: entered promiscuous mode [ 594.376379][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.384609][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.513263][ T5188] Bluetooth: hci1: command tx timeout [ 594.698401][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.705780][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.734484][ T9447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.751934][ T9512] loop0: detected capacity change from 0 to 256 [ 594.849598][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.857085][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.883729][ T9447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.915917][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.934391][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.942565][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.985590][ T9512] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 595.028439][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.052945][ T5188] Bluetooth: hci3: command tx timeout [ 595.469217][ T9447] hsr_slave_0: entered promiscuous mode [ 595.504876][ T9447] hsr_slave_1: entered promiscuous mode [ 595.533172][ T9447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.540978][ T9447] Cannot create hsr debugfs directory [ 595.669322][ T9480] team0: Port device team_slave_0 added [ 595.756844][ T9480] team0: Port device team_slave_1 added [ 595.937530][ T5241] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 596.038902][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.110622][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.118084][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.150915][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.177155][ T5241] usb 5-1: Using ep0 maxpacket: 8 [ 596.254951][ T5241] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 596.263388][ T5241] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 596.270812][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.271724][ T5241] usb 5-1: config 0 has an invalid interface number: 49 but max is 2 [ 596.290683][ T5241] usb 5-1: config 0 has no interface number 0 [ 596.297311][ T5241] usb 5-1: config 0 has no interface number 1 [ 596.303753][ T5241] usb 5-1: config 0 has no interface number 2 [ 596.310155][ T5241] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 596.319611][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.371544][ T5241] usb 5-1: config 0 descriptor?? [ 596.435375][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.442971][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.469414][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.564737][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.572900][ T5188] Bluetooth: hci1: command tx timeout [ 596.604568][ T5241] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 596.797842][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.869731][ T5241] qcserial 5-1:0.49: Qualcomm USB modem converter detected [ 596.977327][ T9480] hsr_slave_0: entered promiscuous mode [ 596.988295][ T9480] hsr_slave_1: entered promiscuous mode [ 597.005599][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.013667][ T9480] Cannot create hsr debugfs directory [ 597.041067][ T5241] usb 5-1: USB disconnect, device number 15 [ 597.054536][ T5241] qcserial 5-1:0.6: device disconnected [ 597.065470][ T5241] qcserial 5-1:0.49: device disconnected [ 597.453118][ T144] bridge_slave_1: left allmulticast mode [ 597.459790][ T144] bridge_slave_1: left promiscuous mode [ 597.466607][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.482228][ T144] bridge_slave_0: left allmulticast mode [ 597.490749][ T144] bridge_slave_0: left promiscuous mode [ 597.499337][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.985276][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.003960][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.081515][ T144] bond0 (unregistering): Released all slaves [ 598.236021][ T9524] loop4: detected capacity change from 0 to 512 [ 598.270516][ T9524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 598.360533][ T9524] EXT4-fs (loop4): 1 truncate cleaned up [ 598.404940][ T9524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.655655][ T5188] Bluetooth: hci1: command tx timeout [ 598.678304][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 598.728799][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 598.759785][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 598.824939][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 598.863534][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 598.878069][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 599.005235][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.159522][ T9480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.303030][ T144] hsr_slave_0: left promiscuous mode [ 599.350900][ T144] hsr_slave_1: left promiscuous mode [ 599.361335][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.369339][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.394478][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.408106][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.464044][ T144] veth1_macvtap: left promiscuous mode [ 599.469835][ T144] veth0_macvtap: left promiscuous mode [ 599.476028][ T144] veth1_vlan: left promiscuous mode [ 599.481605][ T144] veth0_vlan: left promiscuous mode [ 600.308498][ T144] team0 (unregistering): Port device team_slave_1 removed [ 600.393531][ T144] team0 (unregistering): Port device team_slave_0 removed [ 600.683572][ T9549] loop4: detected capacity change from 0 to 128 [ 600.708060][ T9549] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 600.719368][ T9447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.840984][ T9480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.012899][ T9447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 601.058151][ T5188] Bluetooth: hci5: command tx timeout [ 601.090260][ T9480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.200147][ T9447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 601.325686][ T9447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 601.428665][ T9480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.930585][ T9480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 601.964526][ T5241] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 602.071766][ T9480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.138440][ T9480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.177255][ T5241] usb 5-1: Using ep0 maxpacket: 16 [ 602.196144][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.207780][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.219051][ T5241] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 602.229029][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.262071][ T9480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.289067][ T5241] usb 5-1: config 0 descriptor?? [ 602.653811][ T9530] chnl_net:caif_netlink_parms(): no params data found [ 602.811097][ T5241] kye 0003:0458:0138.0015: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 602.991896][ T9447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.090839][ T5241] usb 5-1: USB disconnect, device number 16 [ 603.133233][ T5188] Bluetooth: hci5: command tx timeout [ 603.177350][ T9447] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.254356][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.262041][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.352446][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.360141][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.836682][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.744985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 604.893695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 604.931969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 605.029192][ T9572] loop0: detected capacity change from 0 to 32768 [ 605.157809][ T9572] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 605.212023][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.231023][ T5188] Bluetooth: hci5: command tx timeout [ 605.349756][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.357553][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.468550][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.476327][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.478709][ T9572] XFS (loop0): Ending clean mount [ 605.720789][ T6990] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 605.756560][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.766612][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.774689][ T9530] bridge_slave_0: entered allmulticast mode [ 605.785814][ T9530] bridge_slave_0: entered promiscuous mode [ 605.900271][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.908426][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.917933][ T9530] bridge_slave_1: entered allmulticast mode [ 605.927179][ T9530] bridge_slave_1: entered promiscuous mode [ 606.228469][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.315360][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.568800][ T9530] team0: Port device team_slave_0 added [ 606.621985][ T9530] team0: Port device team_slave_1 added [ 606.846808][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.855233][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.882069][ T9530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.995142][ T9530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.003043][ T9530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.031376][ T9530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.136801][ T9594] loop4: detected capacity change from 0 to 16 [ 607.195919][ T9594] erofs: (device loop4): mounted with root inode @ nid 36. [ 607.293827][ T5188] Bluetooth: hci5: command tx timeout [ 607.459646][ T9447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.503875][ T9530] hsr_slave_0: entered promiscuous mode [ 607.548662][ T9530] hsr_slave_1: entered promiscuous mode [ 607.549241][ T9596] loop0: detected capacity change from 0 to 1024 [ 607.578865][ T9530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.587287][ T9530] Cannot create hsr debugfs directory [ 608.247917][ T9447] veth0_vlan: entered promiscuous mode [ 608.365500][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.507579][ T9447] veth1_vlan: entered promiscuous mode [ 608.993615][ T9447] veth0_macvtap: entered promiscuous mode [ 609.075170][ T9447] veth1_macvtap: entered promiscuous mode [ 609.105782][ T9480] veth0_vlan: entered promiscuous mode [ 609.306997][ T9480] veth1_vlan: entered promiscuous mode [ 609.317273][ T9530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.387899][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.398836][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.409048][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.419905][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.430030][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.440845][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.451251][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.464328][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.474971][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.485753][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.501015][ T9447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.524248][ T9530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 609.591832][ T9530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 609.627268][ T9530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 609.677392][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.688451][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.698722][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.709580][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.722419][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.733240][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.744640][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.755430][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.765661][ T9447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.780208][ T9447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.796412][ T9447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.897528][ T9618] loop0: detected capacity change from 0 to 512 [ 609.909138][ T9618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 609.994743][ T9618] EXT4-fs (loop0): 1 truncate cleaned up [ 610.002508][ T9618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.004976][ T9447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.024544][ T9447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.033747][ T9447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.042887][ T9447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.082976][ T8428] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 610.084284][ T9480] veth0_macvtap: entered promiscuous mode [ 610.231921][ T9480] veth1_macvtap: entered promiscuous mode [ 610.287384][ T8428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.299084][ T8428] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.309317][ T8428] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 610.320377][ T8428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.376564][ T8428] usb 5-1: config 0 descriptor?? [ 610.540302][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.551386][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.573762][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.585413][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.595735][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.606708][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.620649][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.631447][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.663541][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.680031][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.691387][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.702144][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.718652][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.778387][ T6990] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.897159][ T8428] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 610.906002][ T8428] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 610.913541][ T8428] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 610.920915][ T8428] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 610.924614][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.928409][ T8428] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 610.938699][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.938788][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.938877][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.978086][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.989344][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.999542][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.010435][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.020629][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.031490][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.041692][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.052621][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.068316][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.194306][ T9530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.250559][ T8428] mcp2221 0003:04D8:00DD.0016: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 611.265153][ T9530] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.336163][ T9480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.345373][ T9480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.354556][ T9480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.363692][ T9480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.436849][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.444643][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.465775][ T8428] usb 5-1: USB disconnect, device number 17 [ 611.550143][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.557938][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.295597][ T9632] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1432'. [ 613.565384][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.990069][ T9659] loop4: detected capacity change from 0 to 1024 [ 614.074873][ T9659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.109906][ T9530] veth0_vlan: entered promiscuous mode [ 614.150322][ T9530] veth1_vlan: entered promiscuous mode [ 614.286914][ T9659] EXT4-fs (loop4): shut down requested (0) [ 614.501592][ T9530] veth0_macvtap: entered promiscuous mode [ 614.603399][ T9530] veth1_macvtap: entered promiscuous mode [ 614.645716][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.804880][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.817356][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.835446][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.846204][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.856313][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.872930][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.886357][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.897813][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.908470][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.919221][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.929389][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.940189][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.952699][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.969159][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.990493][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.050018][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.062688][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.079602][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.091530][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.101701][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.112608][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.122750][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.133609][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.143742][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.154461][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.164572][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.181060][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.192470][ T9530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.203211][ T9530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.205523][ T9674] loop0: detected capacity change from 0 to 1024 [ 615.221372][ T9530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.307379][ T9530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.316770][ T9530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.325971][ T9530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.335116][ T9530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.502735][ T9674] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 615.514489][ T9674] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 615.599050][ T9674] EXT4-fs (loop0): invalid journal inode [ 615.830898][ T9674] ./file0: Can't lookup blockdev [ 616.342968][ T9692] loop0: detected capacity change from 0 to 256 [ 617.454522][ T3805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.462653][ T3805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.805820][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.814723][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.849615][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.857776][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.076766][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.085120][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.837686][ T9723] loop2: detected capacity change from 0 to 1024 [ 619.464806][ T9738] loop2: detected capacity change from 0 to 64 [ 619.524885][ T9735] loop4: detected capacity change from 0 to 512 [ 619.582776][ T9735] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 619.718530][ T9735] EXT4-fs (loop4): 1 truncate cleaned up [ 619.726795][ T9735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.305616][ T6013] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.652930][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.661296][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.787453][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.795707][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.314231][ T9786] loop3: detected capacity change from 0 to 512 [ 622.383336][ T9787] loop2: detected capacity change from 0 to 256 [ 622.445053][ T9786] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 622.502886][ T9786] System zones: 0-2, 18-18, 34-35 [ 622.545495][ T9786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.558912][ T9786] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.719712][ T4422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.912914][ T4422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.014521][ T9447] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.121112][ T4422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.289854][ T4422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.531893][ T4422] bridge_slave_1: left allmulticast mode [ 623.545429][ T4422] bridge_slave_1: left promiscuous mode [ 623.552001][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.579418][ T4422] bridge_slave_0: left allmulticast mode [ 623.585507][ T4422] bridge_slave_0: left promiscuous mode [ 623.592089][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.146128][ T4422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.169605][ T4422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.207514][ T4422] bond0 (unregistering): Released all slaves [ 624.520472][ T4422] hsr_slave_0: left promiscuous mode [ 624.531789][ T4422] hsr_slave_1: left promiscuous mode [ 624.541074][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.548959][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.560515][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.568566][ T4422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.600866][ T4422] veth1_macvtap: left promiscuous mode [ 624.606718][ T4422] veth0_macvtap: left promiscuous mode [ 624.612755][ T4422] veth1_vlan: left promiscuous mode [ 624.618266][ T4422] veth0_vlan: left promiscuous mode [ 625.278186][ T9804] loop0: detected capacity change from 0 to 16 [ 625.337701][ T9804] erofs: (device loop0): mounted with root inode @ nid 36. [ 625.434651][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 22 @ nid 36 [ 625.444902][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 21 @ nid 36 [ 625.455272][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 20 @ nid 36 [ 625.467692][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 18 @ nid 36 [ 625.477861][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 12 @ nid 36 [ 625.490954][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 10 @ nid 36 [ 625.501444][ T9804] erofs: (device loop0): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 625.518700][ T9804] syz.0.1479: attempt to access beyond end of device [ 625.518700][ T9804] loop0: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 625.535332][ T9804] syz.0.1479: attempt to access beyond end of device [ 625.535332][ T9804] loop0: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 625.551871][ T9804] syz.0.1479: attempt to access beyond end of device [ 625.551871][ T9804] loop0: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 625.566351][ T9804] syz.0.1479: attempt to access beyond end of device [ 625.566351][ T9804] loop0: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 625.581204][ T9804] syz.0.1479: attempt to access beyond end of device [ 625.581204][ T9804] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 625.595210][ T9804] syz.0.1479: attempt to access beyond end of device [ 625.595210][ T9804] loop0: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 625.650394][ T9807] loop4: detected capacity change from 0 to 512 [ 625.750334][ T4422] team0 (unregistering): Port device team_slave_1 removed [ 625.815552][ T4422] team0 (unregistering): Port device team_slave_0 removed [ 625.827582][ T1826] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 625.939694][ T9807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.954364][ T9807] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.999561][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 626.009659][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 626.038101][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 626.051813][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.062582][ T1826] usb 3-1: Using ep0 maxpacket: 32 [ 626.088067][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 626.108063][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.117060][ T1826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 626.134394][ T1826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 626.146253][ T1826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 626.307744][ T9814] loop3: detected capacity change from 0 to 512 [ 626.313292][ T1826] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=3f.82 [ 626.324090][ T1826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.339467][ T1826] usb 3-1: Product: syz [ 626.345719][ T1826] usb 3-1: Manufacturer: syz [ 626.350567][ T1826] usb 3-1: SerialNumber: syz [ 626.394896][ T1826] usb 3-1: config 0 descriptor?? [ 626.411797][ T1826] ims_pcu 3-1:0.0: Zero length descriptor [ 626.418020][ T1826] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 626.792903][ T6013] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /306/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 626.874567][ T9814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.887961][ T9814] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.911196][ T9806] ===================================================== [ 626.918734][ T9806] BUG: KMSAN: uninit-value in uprobe_mmap+0x2150/0x24d0 [ 626.926163][ T9806] uprobe_mmap+0x2150/0x24d0 [ 626.930921][ T9806] mmap_region+0x3dfb/0x4420 [ 626.935785][ T9806] do_mmap+0xebc/0x1b10 [ 626.940128][ T9806] vm_mmap_pgoff+0x23b/0x5a0 [ 626.952926][ T9806] ksys_mmap_pgoff+0x5cb/0x7a0 [ 626.962732][ T9806] __x64_sys_mmap+0x1a8/0x240 [ 626.967610][ T9806] x64_sys_call+0x1bfb/0x3ba0 [ 626.972819][ T9806] do_syscall_64+0xcd/0x1e0 [ 626.977983][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.984244][ T9806] [ 626.986655][ T9806] Uninit was created at: [ 626.991128][ T9806] __kmalloc_cache_noprof+0x4f0/0xb00 [ 626.996813][ T9806] register_netdevice+0x453/0x22d0 [ 627.002112][ T9806] nsim_create+0xf49/0x10a0 [ 627.006902][ T9806] __nsim_dev_port_add+0xac3/0x1120 [ 627.012441][ T9806] nsim_dev_reload_up+0xbde/0x1180 [ 627.017750][ T9806] devlink_reload+0x4e5/0xa50 [ 627.024309][ T9806] devlink_pernet_pre_exit+0x18f/0x520 [ 627.029974][ T9806] cleanup_net+0xcad/0x1c90 [ 627.034910][ T9806] process_scheduled_works+0xae0/0x1c40 [ 627.040657][ T9806] worker_thread+0xea7/0x14d0 [ 627.053885][ T9806] kthread+0x3dd/0x540 [ 627.058167][ T9806] ret_from_fork+0x6d/0x90 [ 627.064815][ T9806] ret_from_fork_asm+0x1a/0x30 [ 627.069792][ T9806] [ 627.072204][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.2.1480 Not tainted 6.11.0-rc4-syzkaller-00268-g48fb4b3d9b43 #0 [ 627.083316][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 627.093655][ T9806] ===================================================== [ 627.100696][ T9806] Disabling lock debugging due to kernel taint [ 627.107048][ T9806] Kernel panic - not syncing: kmsan.panic set ... [ 627.113597][ T9806] CPU: 0 UID: 0 PID: 9806 Comm: syz.2.1480 Tainted: G B 6.11.0-rc4-syzkaller-00268-g48fb4b3d9b43 #0 [ 627.125980][ T9806] Tainted: [B]=BAD_PAGE [ 627.130239][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 627.140436][ T9806] Call Trace: [ 627.143830][ T9806] [ 627.146867][ T9806] dump_stack_lvl+0x216/0x2d0 [ 627.151754][ T9806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 627.157799][ T9806] dump_stack+0x1e/0x30 [ 627.162142][ T9806] panic+0x4e2/0xcd0 [ 627.166227][ T9806] ? kmsan_get_metadata+0xe1/0x1c0 [ 627.171576][ T9806] kmsan_report+0x2c7/0x2d0 [ 627.176296][ T9806] ? filter_irq_stacks+0x60/0x1a0 [ 627.181507][ T9806] ? __msan_warning+0x95/0x120 [ 627.186462][ T9806] ? uprobe_mmap+0x2150/0x24d0 [ 627.191393][ T9806] ? mmap_region+0x3dfb/0x4420 [ 627.196365][ T9806] ? do_mmap+0xebc/0x1b10 [ 627.200980][ T9806] ? vm_mmap_pgoff+0x23b/0x5a0 [ 627.205910][ T9806] ? ksys_mmap_pgoff+0x5cb/0x7a0 [ 627.211035][ T9806] ? __x64_sys_mmap+0x1a8/0x240 [ 627.216063][ T9806] ? x64_sys_call+0x1bfb/0x3ba0 [ 627.221110][ T9806] ? do_syscall_64+0xcd/0x1e0 [ 627.226070][ T9806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.232365][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.237784][ T9806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 627.244322][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.249733][ T9806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 627.255748][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.261160][ T9806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 627.267714][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.273138][ T9806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 627.279172][ T9806] ? down_read+0x6bb/0xb20 [ 627.283789][ T9806] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 627.290346][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.295760][ T9806] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 627.301805][ T9806] __msan_warning+0x95/0x120 [ 627.306596][ T9806] uprobe_mmap+0x2150/0x24d0 [ 627.311399][ T9806] mmap_region+0x3dfb/0x4420 [ 627.316272][ T9806] ? cap_mmap_addr+0x326/0x490 [ 627.321264][ T9806] do_mmap+0xebc/0x1b10 [ 627.325602][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.331123][ T9806] vm_mmap_pgoff+0x23b/0x5a0 [ 627.335902][ T9806] ksys_mmap_pgoff+0x5cb/0x7a0 [ 627.340942][ T9806] ? kmsan_get_metadata+0x13e/0x1c0 [ 627.346368][ T9806] __x64_sys_mmap+0x1a8/0x240 [ 627.351244][ T9806] x64_sys_call+0x1bfb/0x3ba0 [ 627.356138][ T9806] do_syscall_64+0xcd/0x1e0 [ 627.360845][ T9806] ? clear_bhb_loop+0x25/0x80 [ 627.365732][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.371835][ T9806] RIP: 0033:0x7fb702979e79 [ 627.376400][ T9806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.396310][ T9806] RSP: 002b:00007fb70383b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 627.404912][ T9806] RAX: ffffffffffffffda RBX: 00007fb702b15f80 RCX: 00007fb702979e79 [ 627.413042][ T9806] RDX: 0000000002000001 RSI: 0000000000003000 RDI: 0000000020000000 [ 627.421157][ T9806] RBP: 00007fb7029e793e R08: 0000000000000003 R09: 0000000000000000 [ 627.429275][ T9806] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 627.437392][ T9806] R13: 0000000000000000 R14: 00007fb702b15f80 R15: 00007ffdfa7df0d8 [ 627.445535][ T9806] [ 627.448889][ T9806] Kernel Offset: disabled [ 627.453271][ T9806] Rebooting in 86400 seconds..