last executing test programs: 17.393966368s ago: executing program 2 (id=472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 17.156028956s ago: executing program 2 (id=477): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) 16.195981021s ago: executing program 2 (id=489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r1], 0xfe33) 15.924195632s ago: executing program 2 (id=495): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) 15.651789071s ago: executing program 2 (id=500): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/41, 0x29}], 0x1, &(0x7f0000000480)=""/145, 0x91}}], 0x1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000200)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) close(r0) 15.279083306s ago: executing program 2 (id=504): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 7.724082522s ago: executing program 3 (id=571): openat$null(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) 7.681847446s ago: executing program 3 (id=572): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 7.624457641s ago: executing program 3 (id=573): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000300)=0x7ffffffe, 0x8) 7.491652202s ago: executing program 3 (id=575): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) ioctl$VT_OPENQRY(r0, 0x4b4d, &(0x7f00000000c0)) 7.421119467s ago: executing program 3 (id=577): syz_mount_image$bcachefs(&(0x7f0000005d80), &(0x7f0000000240)='./file1\x00', 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="6572766f72733d636f6e74696e75652c696e6f6465735f33326269742c636f6d7072657373696f6e3d7a7374642c6e6f7265636f766572792c76657273696f6e5f757067726164653d6e6f6e652c7265636f766572795f706173735f6c6173743d636865636b5f646972656e74732c646566636f6e746578743d757365725f752c666f776e65723d124335c59ae911441c412090ab61c35695283a7b8b8713727fca2c986cb36f05edea77241aff6b2f070000008b155f68f12ed89fd6a8fa362a6f38b62d2cd2065ca14c94996a73252d6b799a8cd9c700"/225, @ANYRESDEC=0x0, @ANYBLOB='\v\x00'], 0xff, 0x5db5, &(0x7f0000011900)="$eJzs3X2QHOWZGPDumVntrlaClSzMCgmxGNmOuGALFIjxncPGOTu2g40sLMDiOEmGxdZZSLI+EKBL+Mphgp2UqqAOAnGiA5dzlbpKcOkS4julSsYYX3xVFLLjP3zk66jY+SM+ojpLHJEc79XudO9O9/bbPTszK4T9+1VpZ7r3med9np53erp7tbMRAAAAvxRe/J09r3/igg9994Hxk/d+5I/uuD8aqk+tH0gDhpPbu96sCplPa753OvPM9jdGpm7z8+L8P172+vCD1378kas//L0tf7JkbNXq8au+fvi6hx58/gM/e/7xJ6+tGiedT5fOLMd/EUfRqh8dfvyhb//p+ZPr4snx4+H7oiVL4qXfXBLnUqw9FUXRbdN1Zr95+OS62ydv7/9Sf2b9ubkk5vsvt4Fknh3Y/Jmnj35+7NuHR3et+8mJK3feNxMSD7TMpyg6Z0vr4/uiKBpM/k1KZ9tI+uDkdn0URQtbHve+irouabP+ywLLK5PbBcntUEWe9PsX55YbbdbRyN32t/m4TtXmOX9efvvld0bzJe3znOT2ueT20jnmqaf/4qgWR43p8rfHM3Mkanne4iiemtsD08u1qeVoejnKL8e55Vpuud6X62tq3GTD1uM4uz6Ny61Pd8eNZP3FrfvqAhsC65cntwPJC/WNdDnK32kamnVnpo+opa7jZ2piBNQCr710/XR5yZMxlKwbipfOesxEgfR7x7+zddNrP7znueFAHfGzcZI/7ij/2PhTR79205HlI6H8W2pJ/lpH+V+sv3TqqydGFgXzH0zz1zvKv/HnP374gev3Lwtun+Pp9ml0lH/1lxcdOLl/Q/9oKP+hNP9AR/mvumXV1Ree2HdnsP616fYZ7Cj/Dx5dc/qWg984EswfpfkXdpT/laeeWVlf/tixYP6j6fYZ6ij/DeueuOZjKx58Mrj9X07zL+4o/6ZjD23Z9fQLa4Lzc326fYY7yn/qmu+/enr42mdC+8740Jl+hwX4xfK25Bjr4WS50/PMbrWcLzwx2mge8y1K/i3u5UA5ccu5CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06rFr/v0XWpff+X/u3HjsP6za1kiW+xtRFEdR9Fq9uZyuXxBF8WAURXv2bt29d9uOz47+1s59u3ds3T66de/o+I69u+8e/Vt/c3T3+K7tW++e/O7ay9Y1H7d0KlsULY0vnFXLxMTERBRFo63r0vF+76PP/r+NT/7lp6No7XnfX9UI9vPe//rqh5YVfM2JxybW/4srH71nwf86t7liOKlrOFTXcHZdWsHQ2Mt/9sHnfjhZ19vL6nr8pRv/b6agqRUzeRK1/qg2dac/XlhYx3TVM/VMba/G7du2j6+t3r5xYPu++4U/PPHv7tr4T5vbdyDYR5vbd3KrNiYe+ekD777vg+PvP4uf96rt3dLCVH3p9htItvc5SV/nBPqqBfq6c/SV4//s3/6nr94XrW389KLZY1f11ZdMgL54eVvjpiMsjJdkYgeS+PQZTx/33r137HrvnrvvuWzbHVs/O/7Z8R3r1l159eXrLr/i6nXvnWq9+bVn/afjv7vN/hclmRbFKwq3W35tOu5FU1/rUVJ2etNyJ6svGmre5rZzGp7veij53lC8dFauiQLp945/Z+um1354z3OhV178bHPEwWhx8zZeGYjcnntgfbrgovHPzOty5+8ObE+/5l6Xfc3q8q/Lqrqq5tVkXdXzqrWikv3YS5c8/NOnv/jPb25jf9ESOlVfWufCyZfL5VHL63b2tirqq43nZ6xoO9x62e4/vHvbpoNV+/PWZ6b1a048NvE/V8Yf37fnz3Y3V5yR98vWgjp8v5yueqaeqe01kDwfZ+v27Y/qSV9DhXVtiJ/+wLvvOPIr0/UtWBDdtXXv3t2XN7++Vfv68wXnLtt2/4oLZ/V1RfNr1X7/otxy5X6/Vtxf1X4/P85MfHG+0dzyUFTv6H1i489//PAD1+9fFnyfON7u+8RvZ5bqXb5P1AKv90f+8iujr9/8qder5tN1e1bcu6zga769sYlv/MGvXv7+G6//cHPFGdkPtRbU4X5ouuqknnR7Te2Hrjh7+njznufMCzEem7jo6++64fTJL3yyuaJq+05HF23fddX7+Xqgr5v73rHk0Z+seEfv5u+ezX91yXsWLjrL5u9Asn0HAtt3uuqknnrr9n3PrTu339ZcPnuP25r6K85/0vedPXff8/mt27eP797TXl/tvp+m4+S3cqfvp+m7x9KKvtLna6av4juDSXzBt16Mgo/K3mlne7X7ekvrvy2Xo9PXG0Bq5n1hQWZ9fv+ZXvdbdU608T1f/NZL8Wjz/bJX11vTcS7IvTF3er216jzpHbnl7HlSI2rpu2n2edLUQ6rOk/LjVJ0nXZJbrj6Pebiwk9Dz15e88xZdN83V25jMUDg/4igaSfKPJKvS481V74murD/3zo/GY+3Nj3aPp9Nx/kZuA3V6PF01P1ZHxXX1en68K/eg6uf7YGFlA4Hno+r5Xp1JNDHR7Xn5cKDq9Lx8KIo7yj82/tTRr910ZHkw/5Zakr/WUf4X6y+d+uqJkUXB/AfT/I2O8q/+8qIDJ/dv6A/mP5Run4GO8l91y6qrLzyx785g/rVp/YMd5f/Bo2tO33LwG0eC+aM0/1BH+W9Y98Q1H1vx4JPB/C/HyTiTr90oOnxy3e3N5XjqEvpASx19mbqi/HI8vbygqI+o3hpfS8OSAepxnF2fxuXWp300kvUXt9RYZGNgffqqHUhe2G+ky1H+Tvn6dPeU1nU88P5zptRajj2K1lddn+yV13408nuty+nP/9M50N9oPndX5LZX1ftHfu+d5gtehw1cwqg6Xpj987eFHb3+XnnqmZX15Y8dC15XPdruddVdmaWFFddVu603uL84mu5Pu9sfjYTyv5zm7+79IJg/eT+ommfvzC1XzrO+4vGq5ln+OGUoWlzW96ze0+9tOvbQll1Pv7AmOM/WN1/w1fPssczS4sp51t3PpYPz7Nm4ne0RzJ9uj2D+9b05rgnOs+S4pmqeXZpb7n6eZY9HP57c3pWLH0quEM+171PXfP/V08PXPhOcZ4fanWe/n1karpxnzePb/g6Pb4PP0/Tx7Xwfn7+1jz97enzYXK7llouPD5Mf587X8eGGwPq5Hh8Ozboz00f0Vjw+DOxnAKDMdx+5+3+3Lqfn/+l7d3r+/63c47o9r8z/f6hUr84rg/kP9eZ8JXicOn2+Mt/nW91dR64+zp7f8y3H8a0GZ/JPX0ee7+tC83te6TwkWY7yd5qchwAA8Ga4+F9/5ddbl9Pz/9Zju8nbF5L7+WNB57mB/GfsPHe+r5O8lc6jW/KfsfPo+b4ONt/XqeZyHeA/n5d+z3WAYq4DnNm6AACYm8237x4f37Nr663jm7ft2LZ3en3f1JnT7P+n+reT2/W5PFX/f7oofmFJ/CeD+bP1vC8QH9JIftr6mVs/d8Xm28bvnGv/ofGq+i+KL+s/f34R6v/qQHxIt/2Hxqvqvyi+rP/rg/mz9bw/EB/Sbf+h8ar6L4ov6/9TwfzZen41EB/Sbf+h8ar6L4ov6z//+2Ch/n8tEB/Sbf+h8ar6L4ov6/+GYP5sPR8IxId0239ovKr+i+LL+r8xmD9bz98JxId0239ovKr+i+LL+r8pmD9bzzWB+JBu+w+NV9V/UXxZ/58O5s/WMxaID+m2/9B4Vf0XxZf1vymYP1vP3w3Eh3Tbf2i8qv6L4sv6vzmYP1vPBwPxIUX9R2Pt9x8ar6r/oviy/n8jmD9bz98LxIeUPv+F9bU3XlX/RfFl/d8SzJ+t59cD8SHdzv/QeFX9F8WX9f+bwfzZej4UiA/ptv/QeFX9F8WX9b85mD9bz4cD8SHd9h8ar6r/oviy/rcE82fr+fuB+JBu+w+NV9V/UXxZ/1uD+bP1fCQQH9Jt/6Hxqvovii/r/zPB/Nl6PhqID+m2/9B4Vf0XxZf1f2swf7aejwXiQ7rtPzReVf9F8WX95z/vMNT/PwjEh3Tbf2i8qv6L4sv6Hw/mz9ZzbSA+pNv+Q+NV9V8UX9b/7cH8xZ8bkI8P6bb/0HhV/RfFl/X/2WD+bD2fCMSHdNt/aLyq/oviy/r/XDB/tp7rAvEh3fYfGq+q/6L4sv63BfNn61kfiA/ptv/QeFX9F8WX9f9bwfzZej4ZiA/ptv/QeFX9F8WX9f/5YP5sPRsC8SHd9h8ar6r/oviy/rcH82fruT4QH9Jt/6Hxqvovii/r/45g/mw9nwrEh3Tb/+R4/6ogb1X/Rf2U9b8jmD9bz8ZAfEi3/YfGq+q/KL6s/53B/Nl6bgjEh3Tbf2i8qv6L4sv63xXMn63nxkB8SLf9h8ar6r8ovqz/LwTzZ+u5KRAf0m3/ofGq+i+KL+t/dzB/tp5PB+JDuu0/NF5V/0XxZf3vCebP1rMpEB/Sbf+h8ar6L4ov639vMH+2npsD8SHd9h8ar6r/oviy/vc1bwZm58/W8xvZ+Erd9h8ar6r/oviy/u8M5s/Wc0sgPqTb/kPjVfVfFF/W//5g/mw9vxmID+m2/9B4Vf0XxZf1n/8cyFD/mwPxIdP97909Pr55367btu4d37xj523jezbv371t797x5ECt298rC/9e0Jv8iyyUyrw+mpNk244947tn778HS+dv65yIpnbkzc+4GYjf3lZ8/mOvO501Z8t874sapdvrgtzyucnn0Z4b+DzafHyadsXUndmfR5sftlHxOa5V+6f8+KH9U1wSX7R/De3Pqt7/5rz/q5zfA6X951f3J4cq/fF5bcVHJX/frb352t3vnQbn68vtzdf8565Xzdd8/Fzn61CX8zU/fmg+1Uriy46H2p2vmwLxqfbnZxzst2hezfXvDKZp5/R3BnNfZungbxm0/3ro7vfIg6+HpOiq10P+97irXg/5+Lm+Hga7fD3kx696PRTFl50ft/t6uDEQH5KZDwuikvnQ3ecWBOfD2vbmQ/7vWFXNh3z8XOfDQJfzIT9+1Xwoii+7XtjufPhUIL5d7e8vuvtckeD82NLe/Mj/PYmq+ZGPn+v8iLucH/nxq+ZHUXzo5ynRHObHJwPxqcz75+17pk7qt23dvu2e3H/AGE7eP9/s98Mz8r78V7/25280vyR11GbVUXU8EefqWJJUsiT0dw8Ddd/6X/7Nxm/97ItfiaK159VXhuueKXnmS048NrH03tVfu+ntxz44WX+ttP7pyPTvFlf8veN8fNpPY/vOPXt/5fad+3a0+z+uyqWfh1KbXp6nz0NJVtbb/HyT0O8TzPXzTfpm3Tk7tf35JgC/IM499Ozi1uX08//S96ORZN83mOwA0/XtH2d39/l6wePsg+0dZ6/J91txnJ2PT/tt9zi71uVxdn78quPsoviy/7fX7nH2JwLxc5WdJ5MTZGp+jG/ev3N36/+Jm++/W9v7euf37/h2X9/8fm5jp9qvf34/F3L+65/fvwM8//XP79957tQZO19KPiyy6vMjq86jQr+XPtfzqAWz7pydnEcBwNnvn+z+0b9sXU7P/5Oz2Onz/y8ly/Uejz/f51HzfV4538fJb/3P35/f8yDnAyWDnQWcDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAU+/3//h+/2brc3xiZun3xd/a8/okLPvTdB8ZP3vuRP7rj/vP/eNnrww9e+/FHrv7w97b8yZKxVavHr/r64eseevD5D/zs+cefvLZyoOHmzaXJ4kAUxX8RR9GqHx1+/KFv/+n5k+viyfHj4fuiJUvipd9cEucyrD0VRdFt03Vmv3n45LrbJ2/v/1J/Zv25uST5vqKhelpPps7orsqOeAsaSObZgc2fefro58e+fXh017qfnLhy530zIfFAy3yKonO2tD6+L4qiweTfpHS2jaQPTm7XR1G0sOVx76uo65I2678ssLwyuV2Q3A5V5Em/f3FuudFmHY3cbX+bj+vQ/6/Nb/5Z8tsvvzOaL2mf5yS3zyW3l84xTz39F0e1OGpMl789npkjUcvzFkfx1NwemF6uTS1H08tRfjnOLddyy/W+XF9T4yYbth7H2fVpXG59ujtuJOsvbt1XF9gQWL88uR1IXqhvpMtR/k7T0Kw7M31ELXUdP1MTI6AWeO2l66fLS56MoWTdULx01mMmCqTfO/6drZte++E9zw0H6oifjZP8cUf5x8afOvq1m44sHwnl31JL8tc6yv9i/aVTXz0xsiiY/2Cav95R/o0///HDD1y/f1lw+xxPt0+jo/yrv7zowMn9G/pHQ/kPpfkHOsp/1S2rrr7wxL47g/WvTbfPYEf5f/DomtO3HPzGkWD+KM2/sKP8rzz1zMr68seOBfMfTbfPUEf5b1j3xDUfW/Hgk8Ht/3Kaf3FH+Tcde2jLrqdfWBOcn+vT7TPcUf5T13z/1dPD1z4T2nfGh870OyzAL5a3JcdYDyfLnZ5ndqvlfOGJ0UbzmG9R8m9xLwfKiVvOXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIGTnRH1f6/KrRx657nP/Y/N/a8RRFAceM1Eg/V59wdjYaAd1rP7yogMn92/oT5cnxx7pIA8AAAAw24pXvviF1uX0PLyWLMfRQDQS7Y8HoxWFj0+vEaxIl+Ls+vw1hMGZyJ7kqfUoT71HeRo9ytPXozwLepSnv0d5BiryDETt5RkszVNru56FPcoz1KM8i3qUZ3GP8pzTeZ5Ga55ze1TPcGme9ufhkh7lWdqjPG/rUZ5lPcpzXo/yvL1Hec7vUZ78NeW5zsPFSeQFoTxTd+qVeRpxffobRdfT03Eu7HKcoTbHyV+zn+s4g22Oc0mX4wy0Oc67uhwnbnOcNbnH1eY4Tq1inHTe3hXqJ11qc/7f3aM89/Qoz4Ee5fntHuX5hz3K8496lOfeLvMAhPzu85f+Qetyev6fnn/G0XDU37giWpjscfJXAdLz3Yumvs5+vwvtkNJ8K3Pr+6ry5U+wc/kummt9+QsIuXzvKM3XmHW+WpCv0ZpvdY/yAQAAwFz841MHMj+am33+PxL1N5ZNn7++M/f4yvP1/A+yE2m+S3uUDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL9m115j5CrLB4C/Z2d2Zv7LpQtpy5TeNm3/FELohaZGUGHSRBKMsEVsuTRkrbCwDUsL3RZo1RTB2GYTDFq8cPtgQWIIEUhIGnRNMKDEDzY2iOHiurAS+EIE6Q0oOmZ2z9k9O7PDLqO0Vn+/kHPmOed53uc9h4TkOQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85/vj9//2bDoe7Ott7xro6A9RqPwzrvI4knuZXKnU1sA+3nlu7ZV/fWnr7iSu9M5nG1gIAAAAqPH4eTNOT8fJHJ6M3lEohHx2achHuTF1xfg7QDGOm1qHz3MWheWZ3f9/YVRqGopPjk4aU1eI6wpxnInrerZsvX5td3fnxk/wR6VP9XNU7ycKYejzxZwTw6pF25/ZE7UNP0fLBM/RFNct3nTDjYt7tmw9a90Na6/rvK5z/bJly89Zumzp2ecsW3ztuu7OJcPHkJ9gvRBCaex7meBfJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAHbfrv7W+l4sK+3vWugo78lCiGqU1MeR3IvkyuV2hrYxyv3PTgrM+PuvUlc6Z3PNrAQAAAAUONXj884Px0nc3gyekehEPLZXMiEGUPxvNHUbAjlcnJ9QdX1I7F3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyNp3sP3P6Xiwr7e9a6Cj/7gohKhOTXkcyb1MrlRqa2Afq5f96PwvzLzj3iSu9C42sA4AAABQ64XTm+9Ix8kc3hTHUSiEYpgfmqMZY+qSbwOnVq1XnZesM3uSedXfDurlzZ9k3mmTzDtjgryL4/OtAQAAAI49V7T+bnU6Tub/5jiOQmvIZ4shE8cTzfHJd4G5VXlJ/UTzfVI/r079RHN/Ul899wMAAMD/srPefOLDdFw7/xdDPlsYmb8n+nv6RfHZ38kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHp+ffDCX6Tjwb7e9q6Bjv5MFEJUp6Y8juReJlcqtTWwj1X/eGPH7ZfeMjWJK73z2QYWAgAAAGo8mvv0Lek4mcOT0TsKhZDPtoTmcNzQ3P9absrUdd+cOTuEUBpKyOXCrWs3bdp49vAxyftStOtzC2/oO7Mmb+nw8cg/KQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8K9a9sjONel4sK+3vWugo///ohCiOjXlcST3MrlSqa2Bfbyw84zDV931VF8SV3oXG1gHAAAAqDWr++m/pONkDk9m/ygUQjHkQi5MH4rTs35FU9V69b4ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP89erZsvX5td3fnRj/88MOPkR9H+79MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0fLz9d97Ox0P9vW2dw109BeiEKI6NeVxJPcyuVKprYF9fOqqOefM3r/55iSu9C42sA4AAABQa81bm/en42QOT2b/KBRCMTSH5jAtjmsNzf+tR2K3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0TQ3RKH8MZ2y8mjvGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgkHHhx1X3peLCvt71roKP/hCiEqE5NeRzJvUyuVGprYB9X7v32V27c9ewZSVzpnc82sBAAAABQo/nNF7+ajpM5PBm9o1AI+eyskA+z4ivdYxeIMkniuN8FRuu+PqYsM+m6HVU7Ht5ZIf4OURjZZxj67DBad9dH1hXjq02tk3tPAAAAcCybtuPib6TjZP5vjuMotIZ8dlpqrr5xTH3LpOf4u8fUnTDpup+OqWudoO7f8EoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAbdufK5U9LxYF9ve9dAR38UhRDVqSmPI7mXyZVKbQ3so9R539MPX943I4krvYsNrAMAAADUuvSNwnfTcTKHJ7N/FAqhGGaHE8Psobk/tI6tT/KOK/3+5RW7X7oihCXTn5+Trdvvh3suezsc+uxr7w0fhsIQmsYmNYUwJe4X1el39R8eWfXMh9sfCGHJtMys+v1GW40eqkSl8snbFjx8+fS9K+ouAwAAAMe0woMHfpKOk/k/maij0Bry2fV15/8k72PN/+09M7dNjY/xF4CqiqbWuF9TnX697z7QdnDNlw9W5v/n5xRG/l+B0+ePzU+3Sh+rvjlEpfLcJ05bffjATZcMX0j6Z+r0X9M876Sdb82cl/QvxNevCZPtH6r693Qcmr+o5fgLxvYPIbSN1//HFz7+/qp7371iuH/99734T4Ofnxo2/KDQnRyHr9T2X3n/8p1bc69PGds/qtN/4bNP7n/s1lV3Vj//qdnx+tceq1S6Zsu9+25feNuKznNT/Zvq9L+57ZV3vvOzXz5U6b9vbstI/4Uf8fwT9t8zf8e+XdvvWTP2/Zdq+98Wrj5r45Nb1l15V/Xzt1QtnH7z6WPt+391VnTR5p6XN1bfAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLZ1PPbBoXQ82Nfb3jXQ0d8UhRDVqSmPI7mXyZVKbQ3s4zeZPR88tL94fBJXehcbWAcAAACodcmKV69Lx8kcnsz+USiEYsiFXGgZmvtP3rbg4cun710RWuP78TnbvaFn05nXbti8/poj/QgAAADABHad9/6KdJzM/9k4jkJryGcXhOZ4/l95//KdW3OvT0nm/xDC0J/7s9eu6+5cEka+E/R0HJq/qOX4C5K8THwuVPIWXb2hO/5MkKz71KOfWXruZZeO5Del888ezZv7xGmrDx+46ZJx85aN5r06K7poc8/LG1P7LI3kLR3N6913+8LbVnSemzxHFJ8L8fMkeXvm79i3a/s9a5K8pvjcEq8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIRw0nt//1o6Huzrbe8a6OgPmRCiOjXlcST3MrlSqa2BfXxw/vODh1u/+GASV3rnsw0sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwk79hMZVxHEAn9ndmm231k0pNNEaWuylBaEQLPYgzcU/SNRSUbRQjGK8qFgQrdiDbYNB1ENBodJepBXPSg5F7SEWW0VBrOJBPCnoSSWHpEgqKrt5s9l97SPxQUTk84Fl9je7832/Nzv7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+0x7+4c5ad91XG2iPF15+9tK919/++dHxuZfu+vDpIxs/2nCpOTF6z6u77vh67LP+kaGt4zvfn7pvcuLcbX+cO35idMkLvbAwbM/Kegjx1xjC0E9TxyfPf7GxNRdb14/Nw6G/P67/uD/mEnbMhxAe7/TZ++HU3PATrfHIa30989flQvL3FRrV1M+CZm+//L/Us3N26JHHTk0/OXJ+avOB4V9mb3nm8OJXYr3rPIWwbqx7/aoQwurs1ZJO20BanI17QghrutbdukRfNy2z/5sL6k3ZeE02NpbISZ9vydW1ZfZRy419y1xXVmWF8/Py+5d/GK2UdJ/rsvFMNm7/hznV9IqhEkOt0/5TcfGMhK7fLYbYPtv1Tl1p16FTh3wdc3UlV1dX5e6rfd1sY6sx9s6n7+Xm0+O4ls1v6X5WX8XegvnBbKxnf9TfUx3ybxY0rnizeB+hq6+Zf+tgFKgU/PfSfKe97MdoZHONuP6KNX9dRfps5tNH9/323YtnmgV9xPdilh9L5Y+Mn5x+96GzgwNF+WOVLL9SKv9C9cv5d2YH1hbmH0v51VL5D/z58ytH7z+4oXB/ZtL+1Erlb3197aG5g3v7Nhflv53y66Xyd+4f2nXj7HPPF/a/I+3P6lL5376x7fL+Yx+cLcwPKX9NqfzvT57eVB1882Jh/nTan0ap/AeH39p99w0TJwr3/6uUf22p/H0XJ8cOnPpkW+H53JP2p1kqf373Nz9ebo6eLnp2/s1+HZsACMRQACVgqZULOK4jWDqqhRGCpR5XHO9BilQp83+cvT8swFjWzFh77l975l+lLxzbdGe+OWdpeeglSncBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAxxUAAP//FH5gfQ==") syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x88) 6.350712324s ago: executing program 3 (id=587): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10", 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.936078638s ago: executing program 5 (id=599): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001340)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r1}) 3.915866408s ago: executing program 5 (id=609): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000180), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ptrace(0x8, 0x0) 3.539050874s ago: executing program 5 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) 3.089238354s ago: executing program 5 (id=616): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2200054, &(0x7f0000000180), 0x4, 0x244, &(0x7f0000000480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYBLOB="4ffef8a5fe039b069f473594fba9121a07732b", @ANYRESOCT=r0, @ANYRES8, @ANYBLOB="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", @ANYBLOB="1263a7b959383aa0a9fa10796416da755d29640e5041a395796348a83463470c07de0fe7c8e02a1a743587f58ffb22bbd585d0a5cbead9ca0823180dad88e609da79bbd442bddae537570748f21ac461994ea7754a096f9d50951ef0a07c555e2e53a20f4a407feef4892391f639afa0eccda43b87b58452d42073ba989bbdec9a81948e1f0c9cb8c0ad00fccafaefa58aadfc71bbd61088", @ANYRESDEC, @ANYRES64, @ANYBLOB="14a8d0ca3386858350717bda500a6e0d271cba7c24404f4fdd13b1b5922dc27fae2bb7656c2c9cf00076db74ad9da398465c271f3c99f9c8b75aa628562a36eae8e60442812741be1793c1486650f74ba8ad8536070000000000000065f3bc92da1e56d7ffa95c91b5c58ba55f9245a209ef24b8348e9ff4cb9b84333e1a13"], 0xde, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./bus/file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x4) 3.043301313s ago: executing program 4 (id=617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x36a3, &(0x7f0000000340)) close(r1) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 2.864485589s ago: executing program 4 (id=620): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x90}, 0x800, 0x0, 0x1, 0x7, 0x400, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x0) 2.716109187s ago: executing program 5 (id=622): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x80000001, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2.609515939s ago: executing program 4 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000015000000540001800d0001"], 0x68}}, 0x0) 1.771697046s ago: executing program 4 (id=626): syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f00000044c0)='./file1\x00', 0x0, &(0x7f0000000240)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x5}}, {@heartbeat_none}, {@acl}, {@barrier={'barrier', 0x3d, 0x1}}, {@err_cont}, {@coherency_buffered}, {@err_ro}, {@data_writeback}, {@nouser_xattr}]}, 0x18, 0x447d, &(0x7f0000004500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 1.6094814s ago: executing program 1 (id=628): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={r1}, &(0x7f0000000680)=0x8) 1.478568954s ago: executing program 1 (id=629): capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1.415947472s ago: executing program 0 (id=630): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$vfat(&(0x7f0000002500), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file0\x00') 1.38386064s ago: executing program 1 (id=631): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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") 1.156119211s ago: executing program 0 (id=632): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 928.842569ms ago: executing program 0 (id=633): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r0, 0x5d801) read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[], 0x28) 928.542115ms ago: executing program 5 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000f0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="120100000575c820490d00702f26010203010902120001000000830904"], 0x0) 924.242241ms ago: executing program 1 (id=635): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) 719.766256ms ago: executing program 4 (id=636): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x0, 0x40}, 0x8) 719.427435ms ago: executing program 1 (id=637): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) 557.450415ms ago: executing program 0 (id=638): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 486.10919ms ago: executing program 1 (id=639): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 316.093628ms ago: executing program 0 (id=640): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x6}, 0x8) 165.62473ms ago: executing program 4 (id=641): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00"], 0x24}}, 0x0) 0s ago: executing program 0 (id=642): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, '\x00', @ptr=0x2}}) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) r1 = epoll_create(0x208000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0xd}) kernel console output (not intermixed with test programs): [ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.943155][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.966320][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.973358][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.999824][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.013178][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.020129][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.047233][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.098346][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.107140][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.134143][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.180875][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.195513][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.203029][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.229491][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.242070][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.249021][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.275088][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.293694][ T5246] hsr_slave_0: entered promiscuous mode [ 69.300166][ T5246] hsr_slave_1: entered promiscuous mode [ 69.318382][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.360090][ T5226] hsr_slave_0: entered promiscuous mode [ 69.369814][ T5226] hsr_slave_1: entered promiscuous mode [ 69.376489][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.384390][ T5226] Cannot create hsr debugfs directory [ 69.412091][ T5230] team0: Port device team_slave_0 added [ 69.420138][ T5230] team0: Port device team_slave_1 added [ 69.439847][ T5235] hsr_slave_0: entered promiscuous mode [ 69.446603][ T5235] hsr_slave_1: entered promiscuous mode [ 69.453745][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.461358][ T5235] Cannot create hsr debugfs directory [ 69.481385][ T5225] hsr_slave_0: entered promiscuous mode [ 69.487886][ T5225] hsr_slave_1: entered promiscuous mode [ 69.494471][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.502388][ T5225] Cannot create hsr debugfs directory [ 69.582902][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.589887][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.616375][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.663434][ T5233] hsr_slave_0: entered promiscuous mode [ 69.669806][ T5233] hsr_slave_1: entered promiscuous mode [ 69.677000][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.684781][ T5233] Cannot create hsr debugfs directory [ 69.696583][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.703672][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.730546][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.919011][ T5230] hsr_slave_0: entered promiscuous mode [ 69.925740][ T5230] hsr_slave_1: entered promiscuous mode [ 69.932467][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.940017][ T5230] Cannot create hsr debugfs directory [ 70.217144][ T5246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.228025][ T5246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.250617][ T5246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.261684][ T5246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.310550][ T5225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.327478][ T5225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.338684][ T5225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.353988][ T5225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.441695][ T5226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.453094][ T5226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.467769][ T5226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.493958][ T5226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.519674][ T5235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.536796][ T5235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.569789][ T5235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.594691][ T5235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.660281][ T5230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.681993][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.696800][ T5230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.711446][ T5230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.739430][ T5230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.776324][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.789333][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.807313][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.819731][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.841398][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.864691][ T5237] Bluetooth: hci1: command tx timeout [ 70.871076][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.878929][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.888772][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.896059][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.908730][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.915875][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.935317][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.942491][ T5237] Bluetooth: hci0: command tx timeout [ 70.951255][ T5244] Bluetooth: hci4: command tx timeout [ 70.957356][ T5249] Bluetooth: hci3: command tx timeout [ 70.963100][ T5234] Bluetooth: hci5: command tx timeout [ 70.963115][ T5232] Bluetooth: hci2: command tx timeout [ 71.055573][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.078626][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.124250][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.166063][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.186406][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.231153][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.238342][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.253450][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.260566][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.293361][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.305618][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.312771][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.322536][ T924] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.329707][ T924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.351204][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.366385][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.373578][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.384541][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.391737][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.464861][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.494508][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.525820][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.532955][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.557300][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.580335][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.587536][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.603383][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.610496][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.628700][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.635841][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.679755][ T5225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.699372][ T5225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.785150][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.930290][ T5233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.988597][ T5233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.077425][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.217227][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.238515][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.320685][ T5226] veth0_vlan: entered promiscuous mode [ 72.391166][ T5226] veth1_vlan: entered promiscuous mode [ 72.423943][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.449089][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.563376][ T5230] veth0_vlan: entered promiscuous mode [ 72.577296][ T5230] veth1_vlan: entered promiscuous mode [ 72.589260][ T5226] veth0_macvtap: entered promiscuous mode [ 72.623804][ T5235] veth0_vlan: entered promiscuous mode [ 72.636811][ T5246] veth0_vlan: entered promiscuous mode [ 72.663177][ T5235] veth1_vlan: entered promiscuous mode [ 72.675699][ T5226] veth1_macvtap: entered promiscuous mode [ 72.695505][ T5246] veth1_vlan: entered promiscuous mode [ 72.762894][ T5233] veth0_vlan: entered promiscuous mode [ 72.795129][ T5233] veth1_vlan: entered promiscuous mode [ 72.814127][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.827086][ T5235] veth0_macvtap: entered promiscuous mode [ 72.847359][ T5230] veth0_macvtap: entered promiscuous mode [ 72.858025][ T5235] veth1_macvtap: entered promiscuous mode [ 72.875459][ T5230] veth1_macvtap: entered promiscuous mode [ 72.899288][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.940067][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.942190][ T5234] Bluetooth: hci1: command tx timeout [ 72.956953][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.969322][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.992517][ T5246] veth0_macvtap: entered promiscuous mode [ 73.000549][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.012212][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.022692][ T5234] Bluetooth: hci5: command tx timeout [ 73.022736][ T5234] Bluetooth: hci4: command tx timeout [ 73.022777][ T5234] Bluetooth: hci3: command tx timeout [ 73.022823][ T5234] Bluetooth: hci0: command tx timeout [ 73.031913][ T5244] Bluetooth: hci2: command tx timeout [ 73.035349][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.058014][ T5225] veth0_vlan: entered promiscuous mode [ 73.065465][ T5226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.074873][ T5226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.084732][ T5226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.094676][ T5226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.129596][ T5246] veth1_macvtap: entered promiscuous mode [ 73.143865][ T5230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.152941][ T5230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.163253][ T5230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.172200][ T5230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.186348][ T5233] veth0_macvtap: entered promiscuous mode [ 73.196162][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.207149][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.218000][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.228769][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.240461][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.266063][ T5233] veth1_macvtap: entered promiscuous mode [ 73.278020][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.291644][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.301507][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.313198][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.325507][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.340819][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.351233][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.361160][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370030][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.408877][ T5225] veth1_vlan: entered promiscuous mode [ 73.434418][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.445526][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.455900][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.467317][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.477493][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.488067][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.499220][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.554112][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.564860][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.575185][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.589186][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.599147][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.610150][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.620304][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.630961][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.644082][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.668164][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.678892][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.690684][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.704643][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.714749][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.725275][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.735163][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.745837][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.758052][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.794365][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.805645][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.815913][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.827207][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.837189][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.847973][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.857885][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.868961][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.880499][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.905101][ T5246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.917928][ T5246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.926766][ T5246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.935577][ T5246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.950508][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.958588][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.988814][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.999802][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.009989][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.018889][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.049170][ T5225] veth0_macvtap: entered promiscuous mode [ 74.064534][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.073541][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.097297][ T5225] veth1_macvtap: entered promiscuous mode [ 74.126578][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.129011][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.140114][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.152426][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.227027][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.248607][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.254633][ T5226] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.261470][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.284893][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.295324][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.306878][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.317614][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.328216][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.338190][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.348766][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.362727][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.377395][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.393237][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.405088][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.413337][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.426246][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.439354][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.449455][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.461042][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.472027][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.486009][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.501473][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.518717][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.530432][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.653317][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.659609][ T5225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.679653][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.697367][ T5225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.721734][ T5225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.730487][ T5225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.874706][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.916941][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.013945][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.022157][ T5244] Bluetooth: hci1: command tx timeout [ 75.028112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.071031][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.100294][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.112136][ T5244] Bluetooth: hci2: command tx timeout [ 75.117721][ T5244] Bluetooth: hci0: command tx timeout [ 75.123237][ T5234] Bluetooth: hci3: command tx timeout [ 75.123262][ T5249] Bluetooth: hci4: command tx timeout [ 75.128834][ T5234] Bluetooth: hci5: command tx timeout [ 75.165786][ T5335] loop0: detected capacity change from 0 to 32768 [ 75.181959][ T5335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5335) [ 75.217568][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.225839][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.269216][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.290267][ T5335] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.331706][ T5335] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 75.348181][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.377145][ T5335] BTRFS info (device loop0): using free-space-tree [ 75.444788][ T5346] loop4: detected capacity change from 0 to 64 [ 75.520319][ T5346] hfs: unable to locate alternate MDB [ 75.626801][ T5346] hfs: continuing without an alternate MDB [ 76.270923][ T5371] loop4: detected capacity change from 0 to 1024 [ 76.425303][ T5371] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.538428][ T5371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 76.630841][ T5371] System zones: 0-1, 3-36 [ 76.653473][ T5343] loop2: detected capacity change from 0 to 32768 [ 76.674765][ T5230] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.713059][ T5343] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 76.911419][ T5371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.057413][ T5343] XFS (loop2): Ending clean mount [ 77.074837][ T5397] loop5: detected capacity change from 0 to 32768 [ 77.107744][ T5397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.14 (5397) [ 77.133681][ T5397] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 77.135937][ T5343] XFS (loop2): Quotacheck needed: Please wait. [ 77.153602][ T5371] capability: warning: `syz.4.10' uses deprecated v2 capabilities in a way that may be insecure [ 77.154529][ T5397] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 77.226101][ T5397] BTRFS info (device loop5): using free-space-tree [ 77.233892][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.413646][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 77.432852][ T8] usb 2-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=8d.4d [ 77.446631][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.461722][ T8] usb 2-1: Product: syz [ 77.473330][ T8] usb 2-1: Manufacturer: syz [ 77.477961][ T8] usb 2-1: SerialNumber: syz [ 77.517865][ T8] usb 2-1: config 0 descriptor?? [ 77.532328][ T5246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.538497][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 77.548636][ T8] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 77.553600][ T5343] XFS (loop2): Quotacheck: Done. [ 77.621715][ T57] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.668591][ T5226] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 77.712572][ T5238] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.776006][ T57] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 77.792412][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.802209][ T8] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 77.808844][ T8] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 77.814354][ T57] usb 4-1: Product: syz [ 77.820796][ T57] usb 4-1: Manufacturer: syz [ 77.830980][ T8] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 77.854436][ T8] usb 2-1: USB disconnect, device number 2 [ 77.884336][ T5238] usb 1-1: Using ep0 maxpacket: 32 [ 77.901384][ T57] usb 4-1: SerialNumber: syz [ 77.910355][ T5238] usb 1-1: config 0 has an invalid interface number: 202 but max is 1 [ 77.916093][ T29] audit: type=1800 audit(1727503223.638:2): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 77.948837][ T5238] usb 1-1: config 0 has no interface number 1 [ 77.961871][ T5238] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 77.983581][ T5238] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.984937][ T5397] BTRFS info (device loop5): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 77.994613][ T5238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 78.022858][ T57] usb 4-1: config 0 descriptor?? [ 78.082693][ T5238] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 78.092414][ T5238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.100439][ T5238] usb 1-1: Product: syz [ 78.105228][ T5238] usb 1-1: Manufacturer: syz [ 78.109852][ T5238] usb 1-1: SerialNumber: syz [ 78.228800][ T5238] usb 1-1: config 0 descriptor?? [ 78.292032][ T5238] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 78.368075][ T5432] binder: 5431:5432 ioctl c0306201 0 returned -14 [ 78.380409][ T5238] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 78.462308][ T5316] usb 1-1: Failed to submit usb control message: -71 [ 78.469158][ T5316] usb 1-1: unable to send the bmi data to the device: -71 [ 78.476833][ T2957] usb 1-1: Failed to submit usb control message: -71 [ 78.491668][ T2957] usb 1-1: unable to send the bmi data to the device: -71 [ 78.522366][ T5316] usb 1-1: unable to get target info from device [ 78.528763][ T5316] usb 1-1: could not get target info (-71) [ 78.545255][ T2957] usb 1-1: unable to get target info from device [ 78.545483][ T5292] usb 4-1: USB disconnect, device number 2 [ 78.592067][ T2957] usb 1-1: could not get target info (-71) [ 78.605084][ T5238] usb 1-1: USB disconnect, device number 2 [ 78.646812][ T5316] usb 1-1: could not probe fw (-71) [ 78.651686][ T2957] usb 1-1: could not probe fw (-71) [ 78.704937][ T5225] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.370934][ T5455] loop3: detected capacity change from 0 to 64 [ 80.105872][ T5446] loop1: detected capacity change from 0 to 32768 [ 80.143595][ T5446] ======================================================= [ 80.143595][ T5446] WARNING: The mand mount option has been deprecated and [ 80.143595][ T5446] and is ignored by this kernel. Remove the mand [ 80.143595][ T5446] option from the mount to silence this warning. [ 80.143595][ T5446] ======================================================= [ 80.234936][ T5446] XFS: attr2 mount option is deprecated. [ 80.240651][ T5446] XFS: ikeep mount option is deprecated. [ 80.312791][ T5446] XFS: noikeep mount option is deprecated. [ 80.397932][ T5446] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 80.485673][ T5459] loop5: detected capacity change from 0 to 32768 [ 80.504321][ T5459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.23 (5459) [ 80.543799][ T5459] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.557195][ T5446] XFS (loop1): Ending clean mount [ 80.565516][ T5459] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 80.584870][ T5459] BTRFS info (device loop5): using free-space-tree [ 80.588579][ T5446] XFS (loop1): Quotacheck needed: Please wait. [ 80.829036][ T5446] XFS (loop1): Quotacheck: Done. [ 80.930413][ T5507] loop0: detected capacity change from 0 to 1036 [ 81.116225][ T934] cfg80211: failed to load regulatory.db [ 81.162829][ T5459] BTRFS info (device loop5): space_info DATA+METADATA has 98304 free, is not full [ 81.173182][ T5459] BTRFS info (device loop5): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=3112960, readonly=0 zone_unusable=0 [ 81.188337][ T5459] BTRFS info (device loop5): global_block_rsv: size 1441792 reserved 1441792 [ 81.197961][ T5459] BTRFS info (device loop5): trans_block_rsv: size 0 reserved 0 [ 81.206412][ T5459] BTRFS info (device loop5): chunk_block_rsv: size 0 reserved 0 [ 81.214790][ T5459] BTRFS info (device loop5): delayed_block_rsv: size 98304 reserved 98304 [ 81.224095][ T5459] BTRFS info (device loop5): delayed_refs_rsv: size 786432 reserved 786432 [ 81.283768][ T5462] loop2: detected capacity change from 0 to 40427 [ 81.289127][ T5509] loop3: detected capacity change from 0 to 512 [ 81.319895][ T5235] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 81.404571][ T5509] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.43: iget: bogus i_mode (0) [ 81.436509][ T5462] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.479080][ T5509] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.43: couldn't read orphan inode 17 (err -117) [ 81.550717][ T5509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.726118][ T5462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.830405][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.857018][ T5519] loop0: detected capacity change from 0 to 1024 [ 81.913655][ T5225] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.951336][ T5226] syz-executor: attempt to access beyond end of device [ 81.951336][ T5226] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.003665][ T5226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 82.100184][ T5519] EXT4-fs: Ignoring removed orlov option [ 82.152015][ T5519] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.164249][ T5530] batadv_slave_1: entered allmulticast mode [ 82.181128][ T5519] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 82.192705][ T5530] batadv_slave_1: left allmulticast mode [ 82.245788][ T5238] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.429827][ T5519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.677697][ T5546] loop4: detected capacity change from 0 to 64 [ 82.812637][ T5238] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 82.822541][ T5238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.865963][ T5238] usb 2-1: Product: syz [ 82.884434][ T5552] input: syz0 as /devices/virtual/input/input5 [ 82.892289][ T5238] usb 2-1: Manufacturer: syz [ 82.911667][ T5238] usb 2-1: SerialNumber: syz [ 82.955474][ T5238] usb 2-1: config 0 descriptor?? [ 83.131347][ T5519] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 83.274342][ T5388] usb 2-1: USB disconnect, device number 3 [ 83.387841][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.677720][ T5316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.708126][ T5316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.711350][ T5576] loop2: detected capacity change from 0 to 2048 [ 83.803287][ T5576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.835396][ T5582] netlink: 56 bytes leftover after parsing attributes in process `syz.4.69'. [ 84.064107][ T5591] warning: `syz.5.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.315223][ T5597] loop2: detected capacity change from 0 to 2048 [ 84.364685][ T5605] loop5: detected capacity change from 0 to 512 [ 84.389270][ T5605] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.436069][ T5605] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.470998][ T5604] Illegal XDP return value 4294967262 on prog (id 8) dev N/A, expect packet loss! [ 84.497689][ T5597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.532330][ T5292] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.540883][ T5605] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 84.596330][ T5605] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.654484][ T5605] EXT4-fs (loop5): 1 truncate cleaned up [ 84.678791][ T5605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.746125][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.759637][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.762424][ T5238] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.797354][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 84.836159][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.884425][ T5225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.888259][ T5621] loop3: detected capacity change from 0 to 128 [ 84.900006][ T5292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.929885][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.955225][ T5292] usb 2-1: config 0 descriptor?? [ 84.979206][ T5621] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 85.023140][ T5238] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.048781][ T5238] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.070655][ T5234] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 85.071175][ T5238] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.143044][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.174690][ T5233] sysv_free_block: trying to free block not in datazone [ 85.212528][ T5609] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 85.248684][ T5238] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.256276][ T5233] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 85.330473][ T5626] netlink: 4272 bytes leftover after parsing attributes in process `syz.5.91'. [ 85.375062][ T5292] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.405106][ T5292] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 85.488721][ T5292] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 85.639146][ T5238] usb 2-1: USB disconnect, device number 4 [ 85.674766][ T934] usb 1-1: USB disconnect, device number 3 [ 85.856277][ T5630] loop5: detected capacity change from 0 to 512 [ 85.908565][ T5630] EXT4-fs (loop5): orphan cleanup on readonly fs [ 86.018175][ T5630] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 86.025361][ T5619] loop4: detected capacity change from 0 to 40427 [ 86.036251][ T5630] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.92: invalid indirect mapped block 2683928664 (level 1) [ 86.067310][ T5619] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x1fffff [ 86.078385][ T5630] EXT4-fs (loop5): Remounting filesystem read-only [ 86.079436][ T5619] F2FS-fs (loop4): invalid crc value [ 86.089705][ T5630] EXT4-fs (loop5): 1 truncate cleaned up [ 86.103227][ T5630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.106914][ T5619] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.201084][ T5225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.295064][ T5619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.391687][ T934] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.451952][ T5619] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_mpage_readpages+0xf24/0x2140 [ 86.502141][ T5619] syz.4.88: attempt to access beyond end of device [ 86.502141][ T5619] loop4: rw=524288, sector=45072, nr_sectors = 8 limit=40427 [ 86.531364][ T5655] loop2: detected capacity change from 0 to 2048 [ 86.544585][ T934] usb 4-1: Using ep0 maxpacket: 8 [ 86.563284][ T934] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 86.582946][ T5619] syz.4.88: attempt to access beyond end of device [ 86.582946][ T5619] loop4: rw=524288, sector=45088, nr_sectors = 8 limit=40427 [ 86.596321][ T934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 86.637616][ T5619] syz.4.88: attempt to access beyond end of device [ 86.637616][ T5619] loop4: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 86.638145][ T934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.685731][ T5655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.734896][ T29] audit: type=1800 audit(1727503232.438:3): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.88" name="/" dev="loop4" ino=8 res=0 errno=0 [ 86.773108][ T5246] syz-executor: attempt to access beyond end of device [ 86.773108][ T5246] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 86.837040][ T5226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.846317][ T5246] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 86.856923][ T934] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.885723][ T5246] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 86.911643][ T934] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.930946][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.155056][ T5666] loop5: detected capacity change from 0 to 256 [ 87.252857][ T5657] loop1: detected capacity change from 0 to 40427 [ 87.349064][ T5657] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.540523][ T934] usb 4-1: usb_control_msg returned -32 [ 87.546852][ T934] usbtmc 4-1:16.0: can't read capabilities [ 87.557846][ T5677] process 'syz.5.109' launched './file1' with NULL argv: empty string added [ 87.632489][ T5657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.770779][ T5235] syz-executor: attempt to access beyond end of device [ 87.770779][ T5235] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 87.808209][ T5235] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 87.823279][ T5235] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 88.014191][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 88.026467][ T5684] usbtmc 4-1:16.0: Unable to send data, error -71 [ 88.434318][ T5697] loop2: detected capacity change from 0 to 512 [ 88.451500][ T5697] EXT4-fs: Ignoring removed orlov option [ 88.481249][ T5697] EXT4-fs: Ignoring removed i_version option [ 88.512415][ T5697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.566892][ T5697] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 88.587766][ T5697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 88.642059][ T5697] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.671893][ T5697] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 88.732105][ T5697] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 88.752599][ T5697] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 88.789732][ T5697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.117: bg 0: block 40: padding at end of block bitmap is not set [ 88.812695][ T5697] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 88.881958][ T5697] EXT4-fs (loop2): 1 truncate cleaned up [ 88.888647][ T5697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.964694][ T5695] loop4: detected capacity change from 0 to 32768 [ 88.999156][ T5697] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.117: bad symlink. [ 89.071708][ T5321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 89.103471][ T5695] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.117476][ T5234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 89.129527][ T5234] Bluetooth: hci0: Injecting HCI hardware error event [ 89.139041][ T5234] Bluetooth: hci0: hardware error 0x00 [ 89.149447][ T57] usb 4-1: USB disconnect, device number 3 [ 89.233351][ T5321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 89.241101][ T5321] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 89.252021][ T5321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.309416][ T5321] usb 6-1: config 0 descriptor?? [ 89.394021][ T5700] loop0: detected capacity change from 0 to 40427 [ 89.472060][ T5700] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 89.490717][ T5700] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.592957][ T5700] F2FS-fs (loop0): Image doesn't support compression [ 89.633672][ T5700] F2FS-fs (loop0): invalid crc value [ 89.775920][ T5700] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.859718][ T5695] XFS (loop4): Ending clean mount [ 89.863297][ T5707] loop1: detected capacity change from 0 to 32768 [ 89.876381][ T57] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 89.932980][ T5695] XFS (loop4): Quotacheck needed: Please wait. [ 89.968081][ T5695] XFS (loop4): Quotacheck: Done. [ 90.000917][ T5700] F2FS-fs (loop0): Start checkpoint disabled! [ 90.043945][ T5700] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 90.060852][ T5700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 90.121113][ T5246] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.137802][ T5226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.148493][ T57] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.162438][ T57] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.171354][ T57] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 90.182471][ T57] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 90.191544][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.246128][ T5716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.385301][ T57] hub 4-1:1.0: bad descriptor, ignoring hub [ 90.391282][ T57] hub 4-1:1.0: probe with driver hub failed with error -5 [ 90.399233][ T57] cdc_wdm 4-1:1.0: skipping garbage [ 90.404720][ T57] cdc_wdm 4-1:1.0: skipping garbage [ 90.443026][ T57] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 90.449048][ T57] cdc_wdm 4-1:1.0: Unknown control protocol [ 90.473570][ T11] kworker/u8:0: attempt to access beyond end of device [ 90.473570][ T11] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 90.491034][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.502810][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.518147][ T5316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.579047][ T5321] video4linux radio32: keene_cmd_set failed (-71) [ 90.588422][ T5321] radio-keene 6-1:0.0: V4L2 device registered as radio32 [ 90.608908][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.611180][ T5321] usb 6-1: USB disconnect, device number 2 [ 90.658285][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.665868][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.879353][ T5316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.967087][ T5249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.980998][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.996715][ T5727] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.023085][ T5716] cdc_wdm 4-1:1.0: Error autopm - -16 [ 91.061128][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.073061][ T57] usb 4-1: USB disconnect, device number 4 [ 91.141731][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.201460][ T5234] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 91.210848][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.219438][ T57] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 91.231143][ T5316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.242143][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.469326][ T5316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.484210][ T5321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.545550][ T57] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.562893][ T57] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.578555][ T57] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 91.590462][ T57] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 91.611323][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.638226][ T5723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.648736][ T57] hub 4-1:1.0: bad descriptor, ignoring hub [ 91.682000][ T5321] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.711750][ T5321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.723614][ T57] hub 4-1:1.0: probe with driver hub failed with error -5 [ 91.731276][ T57] cdc_wdm 4-1:1.0: skipping garbage [ 91.736609][ T5321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.746682][ T57] cdc_wdm 4-1:1.0: skipping garbage [ 91.752153][ T5321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.816711][ T57] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 91.823083][ T57] cdc_wdm 4-1:1.0: Unknown control protocol [ 91.842480][ T5321] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.851760][ T5321] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.859870][ T5321] usb 2-1: Manufacturer: syz [ 91.891319][ T5321] usb 2-1: config 0 descriptor?? [ 91.941223][ T5316] bridge_slave_1: left allmulticast mode [ 91.948842][ T5316] bridge_slave_1: left promiscuous mode [ 91.987120][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.043408][ T5316] bridge_slave_0: left allmulticast mode [ 92.049211][ T5316] bridge_slave_0: left promiscuous mode [ 92.057066][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.122755][ T25] usb 4-1: USB disconnect, device number 5 [ 92.283740][ T5733] loop4: detected capacity change from 0 to 32768 [ 92.319222][ T5321] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 92.327207][ T5321] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 92.387440][ T5321] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 92.440512][ T5733] JBD2: Ignoring recovery information on journal [ 92.575926][ T5733] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 92.592548][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 92.638566][ T8] usb 2-1: USB disconnect, device number 5 [ 92.674446][ T5733] (syz.4.129,5733,1):ocfs2_reflink_ioctl:4420 ERROR: status = -2 [ 92.829255][ T5759] loop5: detected capacity change from 0 to 4096 [ 92.867888][ T5246] ocfs2: Unmounting device (7,4) on (node local) [ 92.916116][ T5759] NILFS (loop5): invalid segment: Checksum error in segment payload [ 92.965442][ T5759] NILFS (loop5): trying rollback from an earlier position [ 93.228187][ T5757] loop3: detected capacity change from 0 to 40427 [ 93.239222][ T5759] NILFS (loop5): recovery complete [ 93.262748][ T5761] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.315842][ T5757] F2FS-fs (loop3): invalid crc value [ 93.342532][ T5244] Bluetooth: hci1: command tx timeout [ 93.378804][ T5757] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.552277][ T5757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.620608][ T5316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.694603][ T5757] syz.3.135: attempt to access beyond end of device [ 93.694603][ T5757] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.712696][ T5316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.718774][ T5757] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 93.741082][ T5316] bond0 (unregistering): Released all slaves [ 93.832687][ T5724] chnl_net:caif_netlink_parms(): no params data found [ 93.882384][ T5238] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.092598][ T5238] usb 2-1: Using ep0 maxpacket: 16 [ 94.142582][ T5238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.154853][ T5238] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.182090][ T5238] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.201511][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.216504][ T5238] usb 2-1: config 0 descriptor?? [ 94.623137][ T5244] Bluetooth: hci6: command 0xfc11 tx timeout [ 94.626442][ T5767] raw-gadget.0 gadget.1: fail, usb_ep_set_wedge returned -11 [ 94.637961][ T5249] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 94.686299][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.693797][ T5238] usbhid 2-1:0.0: can't add hid device: -71 [ 94.699813][ T5238] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 94.710613][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.727263][ T5238] usb 2-1: USB disconnect, device number 6 [ 94.733642][ T5724] bridge_slave_0: entered allmulticast mode [ 94.751474][ T5724] bridge_slave_0: entered promiscuous mode [ 94.819201][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.844043][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.852452][ T5802] syz.5.149 uses obsolete (PF_INET,SOCK_PACKET) [ 94.858890][ T5724] bridge_slave_1: entered allmulticast mode [ 94.866396][ T5724] bridge_slave_1: entered promiscuous mode [ 95.195576][ T5804] loop0: detected capacity change from 0 to 8192 [ 95.241494][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.397539][ T5802] syzkaller1: entered promiscuous mode [ 95.421870][ T5249] Bluetooth: hci1: command tx timeout [ 95.422404][ T5802] syzkaller1: entered allmulticast mode [ 95.493233][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.655860][ T5316] hsr_slave_0: left promiscuous mode [ 95.741802][ T5316] hsr_slave_1: left promiscuous mode [ 95.769176][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.788101][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.806633][ T5794] loop3: detected capacity change from 0 to 32768 [ 95.815375][ T5823] netlink: 232 bytes leftover after parsing attributes in process `syz.0.153'. [ 95.837025][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.851872][ T5823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.153'. [ 95.854023][ T5794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.147 (5794) [ 95.881026][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.902444][ T5794] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.915078][ T5794] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 95.924473][ T5794] BTRFS info (device loop3): using free-space-tree [ 96.041914][ T5316] veth1_macvtap: left promiscuous mode [ 96.056757][ T5316] veth0_macvtap: left promiscuous mode [ 96.091529][ T5316] veth1_vlan: left promiscuous mode [ 96.103387][ T5316] veth0_vlan: left promiscuous mode [ 96.150049][ T5843] loop0: detected capacity change from 0 to 128 [ 96.219012][ T5843] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.237948][ T5843] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.690144][ T5230] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.730110][ T5861] loop1: detected capacity change from 0 to 16 [ 96.843738][ T5861] erofs: (device loop1): mounted with root inode @ nid 36. [ 96.898983][ T5233] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.915683][ T5861] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 97.514367][ T5249] Bluetooth: hci1: command tx timeout [ 97.980709][ T5883] loop4: detected capacity change from 0 to 1024 [ 98.000424][ T5883] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 98.031473][ T5883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.097534][ T29] audit: type=1800 audit(1727503243.818:4): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.170" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 98.160196][ T5246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.271161][ T5316] team0 (unregistering): Port device team_slave_1 removed [ 98.411061][ T5316] team0 (unregistering): Port device team_slave_0 removed [ 98.919644][ T5895] netlink: 'syz.4.175': attribute type 9 has an invalid length. [ 98.935370][ T5895] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.175'. [ 99.249864][ T5869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'. [ 99.305510][ T5724] team0: Port device team_slave_0 added [ 99.348064][ T5724] team0: Port device team_slave_1 added [ 99.527816][ T5911] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.177'. [ 99.591864][ T5249] Bluetooth: hci1: command tx timeout [ 99.731282][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.739366][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.766035][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.779235][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.788019][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.815836][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.089874][ T5924] loop1: detected capacity change from 0 to 512 [ 100.115594][ T5924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.146736][ T5926] loop5: detected capacity change from 0 to 128 [ 100.169972][ T5924] EXT4-fs (loop1): 1 orphan inode deleted [ 100.252005][ T5924] EXT4-fs (loop1): 1 truncate cleaned up [ 100.259492][ T5924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.272112][ T5321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.363854][ T5924] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.393471][ T5724] hsr_slave_0: entered promiscuous mode [ 100.457323][ T5924] EXT4-fs (loop1): Remounting filesystem read-only [ 100.465196][ T5724] hsr_slave_1: entered promiscuous mode [ 100.481970][ T5321] usb 4-1: Using ep0 maxpacket: 16 [ 100.493586][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.514710][ T5724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.540746][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.575305][ T5321] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 100.575547][ T5724] Cannot create hsr debugfs directory [ 100.611613][ T5321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.665472][ T5321] usb 4-1: config 0 descriptor?? [ 100.673637][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.009900][ T5947] ALSA: mixer_oss: invalid OSS volume '1:' [ 101.040793][ T5947] ALSA: mixer_oss: invalid OSS volume 'invalid' [ 101.091483][ T5947] ALSA: mixer_oss: invalid OSS volume 'verification' [ 101.127445][ T5947] ALSA: mixer_oss: invalid OSS volume 'stack' [ 101.151505][ T5321] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 101.173452][ T5947] ALSA: mixer_oss: invalid OSS volume 'proc' [ 101.201711][ T5321] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 101.393131][ T5321] usb 4-1: USB disconnect, device number 6 [ 101.596106][ T5959] capability: warning: `syz.4.196' uses 32-bit capabilities (legacy support in use) [ 102.415497][ T5990] loop5: detected capacity change from 0 to 128 [ 102.441411][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.521743][ T5321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.606627][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.697132][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.721641][ T5321] usb 1-1: Using ep0 maxpacket: 32 [ 102.728582][ T5321] usb 1-1: config 0 has no interfaces? [ 102.746309][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.767051][ T5321] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 102.776273][ T5321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.787278][ T5321] usb 1-1: Product: syz [ 102.791471][ T5321] usb 1-1: Manufacturer: syz [ 102.801365][ T5321] usb 1-1: SerialNumber: syz [ 102.813373][ T5321] usb 1-1: config 0 descriptor?? [ 102.983643][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.051533][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.135207][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.142781][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.176968][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.184163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.224942][ T5292] usb 1-1: USB disconnect, device number 4 [ 103.579181][ T5724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.616890][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.664588][ T5987] loop4: detected capacity change from 0 to 32768 [ 103.850234][ T6033] loop1: detected capacity change from 0 to 256 [ 103.858109][ T6033] exfat: Deprecated parameter 'namecase' [ 103.863884][ T6033] exfat: Deprecated parameter 'namecase' [ 103.870298][ T6033] exfat: Deprecated parameter 'utf8' [ 103.875923][ T6033] exfat: Deprecated parameter 'namecase' [ 104.011942][ T6033] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 104.050376][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.095608][ T6043] gre1: entered promiscuous mode [ 104.213499][ T5987] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none [ 104.313538][ T5987] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 104.444528][ T5987] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 104.444580][ T5987] gen 0 oldest_gen 0 data_type journal [ 104.444595][ T5987] journal_seq 1 [ 104.444609][ T5987] need_discard 1 [ 104.444622][ T5987] need_inc_gen 1 [ 104.444635][ T5987] dirty_sectors 256 [ 104.444648][ T5987] stripe_sectors 0 [ 104.444662][ T5987] cached_sectors 0 [ 104.444675][ T5987] stripe 67108864 [ 104.444688][ T5987] stripe_redundancy 0 [ 104.444702][ T5987] io_time[READ] 1 [ 104.444715][ T5987] io_time[WRITE] 1 [ 104.444728][ T5987] fragmentation 0 [ 104.444741][ T5987] bp_start 8 [ 104.444755][ T5987] [ 104.444767][ T5987] invalid data type (got 2 should be 7): delete?, fixing [ 104.474544][ T5724] veth0_vlan: entered promiscuous mode [ 104.493057][ T5724] veth1_vlan: entered promiscuous mode [ 104.602842][ T5724] veth0_macvtap: entered promiscuous mode [ 104.609158][ T5724] veth1_macvtap: entered promiscuous mode [ 104.638044][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.638074][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.638090][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.638109][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.638124][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.638143][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.638158][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.638177][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.638192][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.638211][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.648427][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.655231][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.655256][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.655272][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.655291][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.655306][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.655325][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.655341][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.655360][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.655376][ T5724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.655395][ T5724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.662460][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.676995][ T5724] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.677051][ T5724] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.677089][ T5724] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.677127][ T5724] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.694300][ T6058] loop3: detected capacity change from 0 to 2048 [ 104.948718][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.948748][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.074700][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.074730][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.694052][ T6088] netlink: 'syz.1.228': attribute type 1 has an invalid length. [ 105.712309][ T6088] netlink: 9116 bytes leftover after parsing attributes in process `syz.1.228'. [ 105.732035][ T6088] netlink: 'syz.1.228': attribute type 2 has an invalid length. [ 105.739722][ T6088] netlink: 185 bytes leftover after parsing attributes in process `syz.1.228'. [ 105.883049][ T6083] loop3: detected capacity change from 0 to 32768 [ 105.890304][ T6083] XFS: ikeep mount option is deprecated. [ 105.898320][ T6083] XFS: noikeep mount option is deprecated. [ 105.941133][ T5238] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.025935][ T5987] bcachefs (loop4): accounting_read... done [ 106.037150][ T5987] bcachefs (loop4): alloc_read... done [ 106.117205][ T5987] bcachefs (loop4): stripes_read... done [ 106.124454][ T5987] bcachefs (loop4): snapshots_read... done [ 106.142238][ T5987] bcachefs (loop4): going read-write [ 106.216592][ T5238] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 106.228105][ T5238] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 106.239492][ T5238] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.248962][ T5238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.340617][ T5987] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 106.355960][ T6080] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.393992][ T5238] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.411243][ T6083] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 106.492717][ T5987] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 106.503413][ T5987] bcachefs (loop4): error starting copygc thread [ 106.509792][ T5987] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 106.518946][ T5987] bcachefs (loop4): shutting down [ 106.524977][ T5987] bcachefs (loop4): going read-only [ 106.530411][ T5987] bcachefs (loop4): finished waiting for writes to stop [ 106.618855][ T5987] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 106.623626][ T5238] usb 1-1: USB disconnect, device number 5 [ 106.628792][ T5987] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 106.655691][ T5987] bcachefs (loop4): unshutdown complete, journal seq 9 [ 106.674844][ T6118] loop2: detected capacity change from 0 to 8192 [ 106.690081][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.238'. [ 106.699252][ T6083] XFS (loop3): Ending clean mount [ 106.703264][ T6083] XFS (loop3): Quotacheck needed: Please wait. [ 106.709652][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.238'. [ 106.725721][ T5987] bcachefs (loop4): done going read-only, filesystem not clean [ 106.758041][ T6128] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 106.780813][ T6128] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 106.881281][ T5987] bcachefs (loop4): shutdown complete [ 106.981737][ T5294] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 107.054642][ T6083] XFS (loop3): Quotacheck: Done. [ 107.134058][ T5294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 107.185683][ T5294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 107.209504][ T5233] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 107.243219][ T5294] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.280698][ T5294] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.323722][ T5294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.396185][ T5294] usb 6-1: config 0 descriptor?? [ 107.405103][ T6130] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.843607][ T5294] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 107.888361][ T5294] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 107.919819][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'. [ 108.052666][ T5294] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 108.130294][ T5294] usb 6-1: USB disconnect, device number 3 [ 108.226791][ T29] audit: type=1326 audit(1727503253.948:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.0.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c8f7dff9 code=0x0 [ 108.819580][ T6181] loop3: detected capacity change from 0 to 1024 [ 108.868391][ T6164] loop1: detected capacity change from 0 to 32768 [ 108.904202][ T6164] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.249 (6164) [ 108.973436][ T6164] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.992745][ T6181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.005531][ T6164] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 109.067926][ T6164] BTRFS info (device loop1): using free-space-tree [ 109.219681][ T5987] bcachefs: bch2_fs_get_tree() error: EINTR [ 109.557006][ T6213] loop5: detected capacity change from 0 to 2048 [ 109.981305][ T5235] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.251286][ T6242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.878638][ T6262] loop5: detected capacity change from 0 to 128 [ 110.964112][ T6262] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.971979][ T5238] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.027892][ T6262] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.060225][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.203826][ T6262] syz.5.286 (pid 6262) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 111.258495][ T6247] loop3: detected capacity change from 0 to 32768 [ 111.281681][ T5238] usb 1-1: Using ep0 maxpacket: 16 [ 111.289313][ T5238] usb 1-1: config 5 has an invalid interface number: 184 but max is 0 [ 111.297610][ T5238] usb 1-1: config 5 has no interface number 0 [ 111.303779][ T5238] usb 1-1: config 5 interface 184 altsetting 11 endpoint 0x7 has invalid maxpacket 96, setting to 64 [ 111.314721][ T5238] usb 1-1: config 5 interface 184 has no altsetting 0 [ 111.325504][ T5238] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 111.334730][ T5238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.343651][ T5238] usb 1-1: Product: syz [ 111.348136][ T5238] usb 1-1: Manufacturer: syz [ 111.353256][ T5238] usb 1-1: SerialNumber: syz [ 111.632199][ T5225] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.652444][ T5238] pn533_usb 1-1:5.184: NFC: Could not find bulk-in or bulk-out endpoint [ 111.716591][ T5238] usb 1-1: USB disconnect, device number 6 [ 111.886320][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.895144][ T6294] syz.5.294[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.895241][ T6294] syz.5.294[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.907631][ T6294] syz.5.294[6294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.069119][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 112.123731][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.139753][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.161173][ T25] usb 5-1: Product: syz [ 112.166612][ T25] usb 5-1: Manufacturer: syz [ 112.171242][ T25] usb 5-1: SerialNumber: syz [ 112.183644][ T25] usb 5-1: config 0 descriptor?? [ 112.434928][ T25] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.474116][ T29] audit: type=1326 audit(1727503258.198:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.5.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51b1d7dff9 code=0x0 [ 112.722366][ T5292] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.791812][ T5238] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.847666][ T25] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 112.879587][ T25] usb 5-1: USB disconnect, device number 2 [ 112.886221][ T5292] usb 3-1: Using ep0 maxpacket: 8 [ 112.930969][ T5292] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 112.962328][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.963378][ T5238] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 112.970362][ T5292] usb 3-1: Product: syz [ 112.970385][ T5292] usb 3-1: Manufacturer: syz [ 112.970406][ T5292] usb 3-1: SerialNumber: syz [ 113.000456][ T5292] usb 3-1: config 0 descriptor?? [ 113.039350][ T5238] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.063441][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.076412][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.142163][ T5238] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.158607][ T5238] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.177218][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.213079][ T5238] usb 4-1: config 0 descriptor?? [ 113.229139][ T6313] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 113.240681][ T5292] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 113.341822][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.346342][ T6335] macvlan0: entered allmulticast mode [ 113.355557][ T6335] veth1_vlan: entered allmulticast mode [ 113.390952][ T6335] veth1_vlan: left allmulticast mode [ 113.407629][ T6337] loop1: detected capacity change from 0 to 512 [ 113.457403][ T6335] macvlan0 (unregistering): left allmulticast mode [ 113.474382][ T6337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.509886][ T6337] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.524499][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 113.532939][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.596549][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.666427][ T25] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 113.679884][ T5238] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 113.703793][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.704176][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.724090][ T5238] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 113.737956][ T25] usb 1-1: config 0 descriptor?? [ 113.751480][ T5238] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.955985][ T8] usb 4-1: USB disconnect, device number 7 [ 114.085310][ T5292] usb write operation failed. (-71) [ 114.115715][ T5292] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.149415][ T5292] dvbdev: DVB: registering new adapter (Terratec H7) [ 114.180096][ T5292] usb 3-1: media controller created [ 114.189960][ T6350] loop4: detected capacity change from 0 to 4096 [ 114.210261][ T25] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 114.231865][ T6350] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 114.232776][ T5292] usb read operation failed. (-71) [ 114.287661][ T5292] usb write operation failed. (-71) [ 114.331119][ T6350] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 114.367156][ T5292] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 114.408333][ T25] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 114.409261][ T5292] usb 3-1: USB disconnect, device number 2 [ 114.521804][ T12] ntfs3: loop4: ino=5, "/" ntfs3_write_inode failed, -22. [ 114.609144][ T25] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 114.811666][ T25] ft260 0003:0403:6030.0006: failed to retrieve status: -71, no wakeup [ 114.841917][ T25] ft260 0003:0403:6030.0006: failed to retrieve status: -71 [ 114.880710][ T25] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 114.966961][ T25] usb 1-1: USB disconnect, device number 7 [ 115.243162][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 115.283582][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 115.639502][ T6355] loop1: detected capacity change from 0 to 32768 [ 115.812334][ T5292] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 115.826899][ T6386] find_entry called with index = 0 [ 115.960758][ T6378] loop2: detected capacity change from 0 to 32768 [ 115.966199][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.019002][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.064852][ T5292] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 116.069912][ T6382] loop4: detected capacity change from 0 to 40427 [ 116.087854][ T6378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.334 (6378) [ 116.111781][ T6382] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.119641][ T6382] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.135931][ T6386] read_mapping_page failed! [ 116.176731][ T6386] ERROR: (device loop1): txCommit: [ 116.176731][ T6386] [ 116.185902][ T6378] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.187072][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.196598][ T6382] F2FS-fs (loop4): invalid crc value [ 116.202265][ T6378] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 116.222476][ T6378] BTRFS info (device loop2): using free-space-tree [ 116.240747][ T6382] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.293245][ T5292] usb 4-1: config 0 descriptor?? [ 116.369616][ T6382] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.394318][ T6382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.631432][ T6368] loop5: detected capacity change from 0 to 32768 [ 116.675731][ T5235] ERROR: (device loop1): diFree: wmap shows inode already free [ 116.675731][ T5235] [ 116.729366][ T5246] syz-executor: attempt to access beyond end of device [ 116.729366][ T5246] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 116.747530][ T5246] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 116.754054][ T5292] lenovo 0003:17EF:6067.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 116.815126][ T5724] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.883190][ T6368] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.907036][ T6422] input: syz1 as /devices/virtual/input/input8 [ 117.020127][ T8] usb 4-1: USB disconnect, device number 8 [ 117.278090][ T6368] XFS (loop5): Ending clean mount [ 117.509370][ T5225] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.694549][ T6437] loop4: detected capacity change from 0 to 64 [ 117.748006][ T6435] netlink: zone id is out of range [ 117.836026][ T6435] netlink: set zone limit has 4 unknown bytes [ 118.035438][ T6440] netlink: 188 bytes leftover after parsing attributes in process `syz.3.349'. [ 118.045257][ T6440] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 118.601866][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 118.601900][ T6462] netlink: 'syz.3.356': attribute type 2 has an invalid length. [ 118.716733][ T6466] loop1: detected capacity change from 0 to 4096 [ 118.820393][ T6471] netlink: 'syz.3.362': attribute type 3 has an invalid length. [ 118.834824][ T6471] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.362'. [ 118.975324][ T6479] loop4: detected capacity change from 0 to 128 [ 119.092508][ T6479] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.313091][ T6482] loop0: detected capacity change from 0 to 32768 [ 119.333359][ T6482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.367 (6482) [ 119.352460][ T6482] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.381889][ T6482] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 119.390655][ T6482] BTRFS info (device loop0): using free-space-tree [ 119.559338][ T29] audit: type=1800 audit(1727503265.278:7): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="bus" dev="loop1" ino=33 res=0 errno=0 [ 119.591473][ T6466] ntfs3: loop1: failed to convert "0080" to cp857 [ 119.622340][ T6466] ntfs3: loop1: failed to convert name for inode 1e. [ 119.761462][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 119.811873][ T6509] tipc: Started in network mode [ 119.821358][ T6509] tipc: Node identity 00005f600025e19c6e, cluster identity 8 [ 119.878153][ T5230] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.973703][ T6512] loop1: detected capacity change from 0 to 256 [ 120.047396][ T6512] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 120.172714][ T4677] udevd[4677]: worker [5344] terminated by signal 33 (Unknown signal 33) [ 120.222441][ T4677] udevd[4677]: worker [5344] failed while handling '/devices/virtual/block/loop0' [ 120.478189][ T6522] loop3: detected capacity change from 0 to 256 [ 120.522704][ T6522] exFAT-fs (loop3): bogus fat length [ 120.528050][ T6522] exFAT-fs (loop3): failed to read boot sector [ 120.607858][ T6522] exFAT-fs (loop3): failed to recognize exfat type [ 120.846252][ T6533] mmap: syz.4.382 (6533): VmData 37425152 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 121.302817][ T6546] loop3: detected capacity change from 0 to 512 [ 121.347667][ T6546] EXT4-fs: Ignoring removed i_version option [ 121.415221][ T6546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 121.458986][ T6546] System zones: 1-12 [ 121.483894][ T6546] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.387: bg 0: block 131: padding at end of block bitmap is not set [ 121.553914][ T6546] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 121.593797][ T6546] EXT4-fs (loop3): 1 truncate cleaned up [ 121.648498][ T6546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.777586][ T6559] netlink: 'syz.1.391': attribute type 5 has an invalid length. [ 121.817859][ T6556] delete_channel: no stack [ 121.920875][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.011653][ T5321] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.237372][ T5321] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.249623][ T5321] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.306410][ T5321] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.343662][ T5321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.366993][ T6571] loop2: detected capacity change from 0 to 4096 [ 122.375775][ T5321] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.392040][ T5321] usb 5-1: invalid MIDI out EP 0 [ 122.471695][ T5238] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.597768][ T5606] udevd[5606]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.637808][ T5321] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 122.752198][ T5321] usb 5-1: USB disconnect, device number 3 [ 122.763810][ T5238] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 122.773357][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.793688][ T5238] usb 4-1: config 0 descriptor?? [ 122.802898][ T5238] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 123.624832][ T5238] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 123.652329][ T5238] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 123.692958][ T5238] usb 4-1: USB disconnect, device number 9 [ 123.787604][ T6600] Bluetooth: MGMT ver 1.23 [ 123.865588][ T6602] loop4: detected capacity change from 0 to 2048 [ 123.930509][ T6602] loop4: p2 < > [ 124.527344][ T6623] loop0: detected capacity change from 0 to 64 [ 125.129177][ T6608] loop1: detected capacity change from 0 to 32768 [ 125.214092][ T6608] read_mapping_page failed! [ 125.240159][ T6608] ERROR: (device loop1): txCommit: [ 125.240159][ T6608] [ 125.242583][ T6635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 125.275796][ T6610] loop5: detected capacity change from 0 to 32768 [ 125.298321][ T6636] find_entry called with index = 0 [ 125.314156][ T6610] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.415 (6610) [ 125.351740][ T6636] read_mapping_page failed! [ 125.358700][ T6636] ERROR: (device loop1): txCommit: [ 125.358700][ T6636] [ 125.408188][ T6610] BTRFS info (device loop5): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 125.448183][ T6615] loop4: detected capacity change from 0 to 32768 [ 125.453866][ T6610] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 125.508924][ T6610] BTRFS info (device loop5): using free-space-tree [ 125.529504][ T5235] ERROR: (device loop1): diFree: numfree > numinos [ 125.529504][ T5235] [ 125.534373][ T6615] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 125.562260][ T5235] ERROR: (device loop1): diFree: numfree > numinos [ 125.562260][ T5235] [ 125.763917][ T6625] loop2: detected capacity change from 0 to 32768 [ 125.790307][ T6615] XFS (loop4): Ending clean mount [ 125.826555][ T6664] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 125.852317][ T6664] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.431'. [ 125.881434][ T6625] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.116000][ T5246] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 126.251082][ T6625] XFS (loop2): Ending clean mount [ 126.262036][ T6625] XFS (loop2): Quotacheck needed: Please wait. [ 126.324790][ T6625] XFS (loop2): Quotacheck: Done. [ 126.397013][ T5225] BTRFS info (device loop5): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 126.655461][ T6697] loop1: detected capacity change from 0 to 512 [ 126.927166][ T5724] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.009008][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.071426][ T6697] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.434462][ T5388] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 127.456853][ T6722] loop4: detected capacity change from 0 to 128 [ 127.459997][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.540979][ T29] audit: type=1804 audit(1727503273.258:8): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.448" name="/newroot/86/file2/file0" dev="loop4" ino=1048614 res=1 errno=0 [ 127.624513][ T5388] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 127.644981][ T5388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.693292][ T5388] usb 6-1: Product: syz [ 127.699643][ T5388] usb 6-1: Manufacturer: syz [ 127.737126][ T5388] usb 6-1: SerialNumber: syz [ 127.780078][ T5388] usb 6-1: config 0 descriptor?? [ 127.803042][ T6722] syz.4.448: attempt to access beyond end of device [ 127.803042][ T6722] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 127.831387][ T6722] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 127.843574][ T6732] loop1: detected capacity change from 0 to 256 [ 127.942677][ T6732] Process accounting resumed [ 128.298959][ T6735] loop0: detected capacity change from 0 to 4096 [ 128.355500][ T6735] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 128.389544][ T6745] nftables ruleset with unbound chain [ 128.529360][ T6735] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 128.598075][ T5388] mos7840 6-1:0.0: required endpoints missing [ 128.618278][ T5388] usb 6-1: USB disconnect, device number 4 [ 128.744729][ T5249] Bluetooth: hci1: unexpected cc 0x1003 length: 1 < 9 [ 128.855979][ T2994] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 128.874374][ T5230] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 128.901723][ T5230] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 128.922511][ T5230] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 128.940096][ T6729] loop3: detected capacity change from 0 to 32768 [ 128.952502][ T5316] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 128.959557][ T6729] XFS: ikeep mount option is deprecated. [ 129.091221][ T6729] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.173842][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.466'. [ 129.385577][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 129.551265][ T6794] loop5: detected capacity change from 0 to 512 [ 129.617725][ T6794] EXT4-fs error (device loop5): __ext4_iget:4952: inode #15: block 1803188595: comm syz.5.475: invalid block [ 129.689485][ T6794] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.475: couldn't read orphan inode 15 (err -117) [ 129.700654][ T6804] loop0: detected capacity change from 0 to 1024 [ 129.717976][ T6729] XFS (loop3): Ending clean mount [ 129.722331][ T6794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.741425][ T6807] loop4: detected capacity change from 0 to 2048 [ 129.771994][ T6794] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.475: invalid indirect mapped block 234881024 (level 0) [ 129.803309][ T6729] XFS (loop3): Quotacheck needed: Please wait. [ 129.845795][ T5225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.846518][ T6804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.895505][ T6807] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.918690][ T6804] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 129.954401][ T6729] XFS (loop3): Quotacheck: Done. [ 130.002604][ T6804] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 130.045479][ T6804] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.045479][ T6804] [ 130.093498][ T6819] loop5: detected capacity change from 0 to 164 [ 130.107944][ T6804] EXT4-fs (loop0): Total free blocks count 0 [ 130.127203][ T6804] EXT4-fs (loop0): Free/Dirty block details [ 130.162379][ T6804] EXT4-fs (loop0): free_blocks=68451041280 [ 130.169627][ T6819] ISOFS: unable to read i-node block [ 130.180051][ T5233] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.195620][ T6804] EXT4-fs (loop0): dirty_blocks=16 [ 130.209516][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 130.216095][ T6804] EXT4-fs (loop0): Block reservation details [ 130.254170][ T6804] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 130.284977][ T6817] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 28 [ 130.647080][ T6831] loop1: detected capacity change from 0 to 512 [ 130.652624][ T6835] netlink: 10835 bytes leftover after parsing attributes in process `syz.2.489'. [ 130.695371][ T6831] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.711006][ T6840] netlink: 'syz.5.491': attribute type 1 has an invalid length. [ 130.756610][ T6831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.920104][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.953520][ T6852] loop3: detected capacity change from 0 to 256 [ 131.067908][ T6852] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 131.083287][ T6855] loop5: detected capacity change from 0 to 4096 [ 131.132375][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.256873][ T6862] loop0: detected capacity change from 0 to 512 [ 131.343101][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 131.351712][ T6862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.352870][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.383119][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.392902][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.430784][ T8] usb 5-1: config 0 descriptor?? [ 131.438624][ T6864] loop3: detected capacity change from 0 to 64 [ 131.517222][ T6862] EXT4-fs (loop0): 1 truncate cleaned up [ 131.527220][ T6862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.549003][ T6864] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 131.576501][ T6862] EXT4-fs error (device loop0): ext4_check_dx_root:2220: inode #2: comm syz.0.502: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 131.686887][ T8] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.775790][ T6871] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 131.805038][ T6873] loop1: detected capacity change from 0 to 4096 [ 131.810431][ T6877] loop5: detected capacity change from 0 to 1024 [ 131.812735][ T5230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.848857][ T6877] EXT4-fs: Ignoring removed oldalloc option [ 131.885062][ T6877] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 131.910885][ T6873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.925671][ T5321] usb 5-1: USB disconnect, device number 4 [ 131.946793][ T6877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.960247][ T5321] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 132.182175][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.291720][ T5225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.352400][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.358848][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.707306][ T6897] veth1_macvtap: left promiscuous mode [ 132.749062][ T6897] macsec0: entered allmulticast mode [ 132.774035][ T6902] veth1_macvtap: entered promiscuous mode [ 132.790078][ T6902] veth1_macvtap: entered allmulticast mode [ 132.843950][ T6899] loop1: detected capacity change from 0 to 4096 [ 133.550769][ T6912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.523'. [ 133.901663][ T5238] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 133.937296][ T6904] loop5: detected capacity change from 0 to 131072 [ 133.956519][ T6904] F2FS-fs (loop5): invalid crc value [ 134.071106][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.105312][ T5238] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.172135][ T5238] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 134.201735][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.352569][ T5238] usb 4-1: config 0 descriptor?? [ 134.510229][ T6904] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.848188][ T6927] loop4: detected capacity change from 0 to 32768 [ 134.855786][ T6904] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 134.912871][ T6904] F2FS-fs (loop5): sanity_check_inode: inode (ino=6, mode=41471) should not have inline_data, run fsck to fix [ 134.960048][ T6922] loop1: detected capacity change from 0 to 32768 [ 134.994130][ T6922] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.155352][ T6922] XFS (loop1): Ending clean mount [ 135.260448][ T5235] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.688780][ T5238] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -71 [ 135.700483][ T5238] usb 4-1: USB disconnect, device number 11 [ 135.731144][ T6948] block device autoloading is deprecated and will be removed. [ 135.741468][ T6948] syz.4.534: attempt to access beyond end of device [ 135.741468][ T6948] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 135.820615][ T6953] loop0: detected capacity change from 0 to 64 [ 135.927302][ T6958] loop1: detected capacity change from 0 to 128 [ 135.955516][ T6958] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 136.000362][ T6958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.190290][ T6968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.543'. [ 136.383123][ T6978] macvlan0: entered promiscuous mode [ 136.389657][ T6978] team_slave_0: entered promiscuous mode [ 136.395890][ T6978] team_slave_1: entered promiscuous mode [ 136.401864][ T6978] team0: entered promiscuous mode [ 136.407661][ T6978] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 136.418888][ T6978] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 136.805778][ T6994] input: syz1 as /devices/virtual/input/input10 [ 136.839735][ T5238] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.966855][ T6997] netlink: 96 bytes leftover after parsing attributes in process `syz.1.555'. [ 137.016137][ T5238] usb 1-1: too many configurations: 61, using maximum allowed: 8 [ 137.039561][ T5238] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.054024][ T5238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.070960][ T5238] usb 1-1: Product: syz [ 137.075761][ T5238] usb 1-1: Manufacturer: syz [ 137.081242][ T5238] usb 1-1: SerialNumber: syz [ 137.094485][ T5238] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.155920][ T7002] loop5: detected capacity change from 0 to 256 [ 137.171480][ T934] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.235246][ T7004] loop1: detected capacity change from 0 to 1764 [ 137.261273][ T7004] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 137.470326][ T7010] loop3: detected capacity change from 0 to 2048 [ 137.535724][ T7010] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.572585][ T5294] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 137.726470][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.743716][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.754495][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.774847][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.800703][ T7015] netlink: 'syz.3.563': attribute type 9 has an invalid length. [ 137.808891][ T5294] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.828094][ T7015] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.563'. [ 137.842329][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.862247][ T5294] usb 5-1: config 0 descriptor?? [ 137.890740][ T5294] hub 5-1:0.0: USB hub found [ 138.063076][ T5388] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.073851][ T5294] hub 5-1:0.0: 1 port detected [ 138.222291][ T5388] usb 6-1: Using ep0 maxpacket: 8 [ 138.230974][ T7008] loop1: detected capacity change from 0 to 32768 [ 138.240519][ T5388] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.253989][ T5388] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.264004][ T7008] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.560 (7008) [ 138.279200][ T5388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.304048][ T934] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 138.306162][ T5388] usb 6-1: config 0 descriptor?? [ 138.319978][ T7008] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.330535][ T934] ath9k_htc: Failed to initialize the device [ 138.358470][ T934] usb 1-1: ath9k_htc: USB layer deinitialized [ 138.360462][ T7008] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 138.393745][ T7008] BTRFS info (device loop1): using free-space-tree [ 138.466892][ T7031] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.567'. [ 138.478635][ T7031] netlink: del zone limit has 8 unknown bytes [ 138.499861][ T5294] usb 5-1: USB disconnect, device number 5 [ 138.596730][ T5388] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.616798][ T5235] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.980182][ T7044] loop1: detected capacity change from 0 to 256 [ 139.027353][ T7044] FAT-fs (loop1): Directory bread(block 64) failed [ 139.041541][ T7044] FAT-fs (loop1): Directory bread(block 65) failed [ 139.051476][ T7044] FAT-fs (loop1): Directory bread(block 66) failed [ 139.070109][ T7044] FAT-fs (loop1): Directory bread(block 67) failed [ 139.079434][ T7044] FAT-fs (loop1): Directory bread(block 68) failed [ 139.091313][ T7044] FAT-fs (loop1): Directory bread(block 69) failed [ 139.101080][ T7044] FAT-fs (loop1): Directory bread(block 70) failed [ 139.110131][ T7044] FAT-fs (loop1): Directory bread(block 71) failed [ 139.133591][ T7044] FAT-fs (loop1): Directory bread(block 72) failed [ 139.140882][ T7044] FAT-fs (loop1): Directory bread(block 73) failed [ 139.210152][ T7044] syz.1.568: attempt to access beyond end of device [ 139.210152][ T7044] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 139.226139][ T7044] syz.1.568: attempt to access beyond end of device [ 139.226139][ T7044] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 139.237539][ T5388] usb 1-1: USB disconnect, device number 8 [ 139.566623][ T7062] loop1: detected capacity change from 0 to 4096 [ 139.776071][ T7071] team0: entered promiscuous mode [ 139.781383][ T7071] team_slave_0: entered promiscuous mode [ 139.789244][ T7071] team_slave_1: entered promiscuous mode [ 139.797173][ T7071] team0: left promiscuous mode [ 139.802499][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.810363][ T7071] team_slave_0: left promiscuous mode [ 139.817072][ T7071] team_slave_1: left promiscuous mode [ 139.940651][ T7058] loop3: detected capacity change from 0 to 32768 [ 139.962888][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 139.976888][ T25] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 139.987557][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.996303][ T25] usb 1-1: Product: syz [ 140.000747][ T25] usb 1-1: Manufacturer: syz [ 140.021490][ T7082] netlink: 'syz.4.584': attribute type 27 has an invalid length. [ 140.030518][ T25] usb 1-1: SerialNumber: syz [ 140.031029][ T7058] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=compression=zstd,norecovery,recovery_pass_last=check_dirents,nojournal_transaction_names,version_upgrade=none [ 140.054556][ T7058] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 140.055647][ T25] usb 1-1: config 0 descriptor?? [ 140.079500][ T7081] af_packet: packet_mmap: vma is busy: 1 [ 140.101178][ T7058] invalid bkey u64s 11 type alloc_v4 0:14:0 len 0 ver 0: [ 140.101199][ T7058] gen 0 oldest_gen 0 data_type journal [ 140.101214][ T7058] journal_seq 1 [ 140.101227][ T7058] need_discard 1 [ 140.101241][ T7058] need_inc_gen 1 [ 140.101255][ T7058] dirty_sectors 256 [ 140.101269][ T7058] stripe_sectors 0 [ 140.101282][ T7058] cached_sectors 0 [ 140.101296][ T7058] stripe 67108864 [ 140.101310][ T7058] stripe_redundancy 0 [ 140.101323][ T7058] io_time[READ] 1 [ 140.101336][ T7058] io_time[WRITE] 1 [ 140.101349][ T7058] fragmentation 0 [ 140.101363][ T7058] bp_start 8 [ 140.101376][ T7058] [ 140.101388][ T7058] invalid data type (got 2 should be 7): delete?, shutting down [ 140.103293][ T25] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 140.111461][ T7058] bcachefs (loop3): inconsistency detected - emergency read only at journal seq 7 [ 140.214050][ T7058] bcachefs (loop3): accounting_read... done [ 140.221050][ T7058] bcachefs (loop3): alloc_read... done [ 140.230570][ T7058] bcachefs (loop3): stripes_read... done [ 140.241274][ T7058] bcachefs (loop3): snapshots_read... done [ 140.256165][ T7058] bcachefs (loop3): going read-write [ 140.274731][ T7058] bcachefs (loop3): done starting filesystem [ 140.280771][ T5294] bcachefs (loop3): going read-only [ 140.287102][ T5294] bcachefs (loop3): finished waiting for writes to stop [ 140.330949][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.339587][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.616460][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.664618][ T7082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.769420][ T7095] loop1: detected capacity change from 0 to 2048 [ 140.796630][ T7095] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 140.828122][ T5388] usb 6-1: USB disconnect, device number 5 [ 140.836312][ T5388] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 140.854111][ T7095] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.931122][ T7082] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.950272][ T7082] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.963083][ T7082] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.975702][ T7082] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.112852][ T57] usb 1-1: USB disconnect, device number 9 [ 141.169954][ T29] audit: type=1326 audit(1727503286.888:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.5.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b1d7dff9 code=0x7ffc0000 [ 141.192570][ T29] audit: type=1326 audit(1727503286.888:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.5.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b1d7dff9 code=0x7ffc0000 [ 141.226091][ T29] audit: type=1326 audit(1727503286.948:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.5.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51b1d7dff9 code=0x7ffc0000 [ 141.249908][ T29] audit: type=1326 audit(1727503286.968:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.5.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b1d7dff9 code=0x7ffc0000 [ 141.274165][ T29] audit: type=1326 audit(1727503286.968:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.5.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b1d7dff9 code=0x7ffc0000 [ 141.413076][ T5233] bcachefs (loop3): shutting down [ 141.470681][ T5557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.492598][ T7099] loop1: detected capacity change from 0 to 40427 [ 141.500760][ T7099] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 141.512388][ T7099] F2FS-fs (loop1): Image doesn't support compression [ 141.520083][ T7099] F2FS-fs (loop1): Image doesn't support compression [ 141.528606][ T7099] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 141.539168][ T7099] F2FS-fs (loop1): invalid crc value [ 141.566351][ T7099] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.645400][ T5557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.758735][ T7099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.785208][ T29] audit: type=1800 audit(1727503287.508:14): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.592" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 141.844402][ T7116] loop4: detected capacity change from 0 to 64 [ 141.858209][ T5557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.858392][ T29] audit: type=1800 audit(1727503287.578:15): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.592" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 141.894448][ T7099] syz.1.592: attempt to access beyond end of device [ 141.894448][ T7099] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 141.953209][ T7099] syz.1.592: attempt to access beyond end of device [ 141.953209][ T7099] loop1: rw=2049, sector=45104, nr_sectors = 120 limit=40427 [ 142.006022][ T7099] syz.1.592: attempt to access beyond end of device [ 142.006022][ T7099] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.029741][ T29] audit: type=1326 audit(1727503287.758:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b1d7dff9 code=0x7fc00000 [ 142.090940][ T5557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.130197][ T7113] loop0: detected capacity change from 0 to 8192 [ 142.131392][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.156066][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.165558][ T5235] syz-executor: attempt to access beyond end of device [ 142.165558][ T5235] loop1: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 142.184291][ T5235] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.191891][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.207625][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.220773][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.228722][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.559655][ T7134] dummy0: entered promiscuous mode [ 142.573644][ T7134] dummy0: left promiscuous mode [ 142.608129][ T5557] bridge_slave_1: left allmulticast mode [ 142.617246][ T5557] bridge_slave_1: left promiscuous mode [ 142.641482][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.702500][ T29] audit: type=1326 audit(1727503288.408:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7115 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f51b1d7dff9 code=0x7fc00000 [ 142.745582][ T5557] bridge_slave_0: left allmulticast mode [ 142.751279][ T5557] bridge_slave_0: left promiscuous mode [ 142.772445][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.065763][ T7150] loop4: detected capacity change from 0 to 16 [ 143.096684][ T7150] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.126755][ T7150] erofs: (device loop4): erofs_read_inode: unsupported i_format 36 of nid 37 [ 143.295338][ T7155] loop4: detected capacity change from 0 to 256 [ 143.461017][ T5557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.478957][ T5557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.491390][ T5557] bond0 (unregistering): Released all slaves [ 143.515625][ T7140] syz_tun: entered promiscuous mode [ 143.524899][ T7140] batadv_slave_0: entered promiscuous mode [ 143.666285][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 143.710395][ T5557] tipc: Left network mode [ 143.738275][ T7166] loop5: detected capacity change from 0 to 128 [ 143.786550][ T7166] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.805650][ T7166] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.980593][ T7177] loop1: detected capacity change from 0 to 256 [ 143.988367][ T7177] exfat: Deprecated parameter 'namecase' [ 144.008617][ T7175] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 144.059866][ T7177] exfat: Deprecated parameter 'namecase' [ 144.074883][ T7177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 144.171036][ T7179] netlink: 64 bytes leftover after parsing attributes in process `syz.4.623'. [ 144.302065][ T5244] Bluetooth: hci3: command tx timeout [ 144.782407][ T5225] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.005959][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.014194][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.021930][ T7120] bridge_slave_0: entered allmulticast mode [ 145.036134][ T7120] bridge_slave_0: entered promiscuous mode [ 145.098779][ T7193] loop0: detected capacity change from 0 to 256 [ 145.156146][ T7193] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 145.183888][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.201739][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.209017][ T7120] bridge_slave_1: entered allmulticast mode [ 145.232027][ T7120] bridge_slave_1: entered promiscuous mode [ 145.367163][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.390487][ T5557] hsr_slave_0: left promiscuous mode [ 145.400061][ T5557] hsr_slave_1: left promiscuous mode [ 145.412159][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.424071][ T7200] loop0: detected capacity change from 0 to 256 [ 145.430676][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.441368][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.453165][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.478128][ T7189] loop4: detected capacity change from 0 to 32768 [ 145.518690][ T5557] veth1_macvtap: left promiscuous mode [ 145.525755][ T5557] veth0_macvtap: left promiscuous mode [ 145.538595][ T5557] veth1_vlan: left promiscuous mode [ 145.546278][ T5557] veth0_vlan: left promiscuous mode [ 145.564702][ T7189] JBD2: Ignoring recovery information on journal [ 145.586039][ T7203] loop1: detected capacity change from 0 to 512 [ 145.602205][ T7203] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 145.624833][ T7203] EXT4-fs (loop1): invalid journal inode [ 145.630938][ T7203] EXT4-fs (loop1): can't get journal size [ 145.689481][ T7203] EXT4-fs (loop1): 1 truncate cleaned up [ 145.713546][ T7203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.754065][ T7189] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 145.826529][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.852576][ T7210] loop0: detected capacity change from 0 to 512 [ 145.898852][ T7210] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 145.918756][ T7210] UDF-fs: Scanning with blocksize 512 failed [ 145.943908][ T7210] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 145.951441][ T7210] UDF-fs: Scanning with blocksize 1024 failed [ 145.959790][ T7210] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 145.976011][ T7210] UDF-fs: Scanning with blocksize 2048 failed [ 146.008511][ T5246] ocfs2: Unmounting device (7,4) on (node local) [ 146.020301][ T7210] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 146.038904][ T7210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.089747][ T29] audit: type=1800 audit(1727503291.808:18): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.633" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 146.161833][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 146.331886][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 146.340856][ T9] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 146.350303][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.381268][ T9] usb 6-1: Product: syz [ 146.387124][ T9] usb 6-1: Manufacturer: syz [ 146.388958][ T5244] Bluetooth: hci3: command tx timeout [ 146.424479][ T9] usb 6-1: SerialNumber: syz [ 146.470403][ T9] usb 6-1: config 0 descriptor?? [ 146.494356][ T9] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 146.516639][ T7226] sctp: [Deprecated]: syz.0.640 (pid 7226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.516639][ T7226] Use struct sctp_sack_info instead [ 146.723761][ T9] usb 6-1: USB disconnect, device number 6 [ 146.816568][ T7222] mmap: syz.1.639 (7222) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.852056][ T7222] [ 146.854435][ T7222] ====================================================== [ 146.861459][ T7222] WARNING: possible circular locking dependency detected [ 146.868739][ T7222] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted [ 146.875937][ T7222] ------------------------------------------------------ [ 146.883063][ T7222] syz.1.639/7222 is trying to acquire lock: [ 146.889062][ T7222] ffff88807dc26b48 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0 [ 146.899835][ T7222] [ 146.899835][ T7222] but task is already holding lock: [ 146.907288][ T7222] ffff888073e39e18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 146.917734][ T7222] [ 146.917734][ T7222] which lock already depends on the new lock. [ 146.917734][ T7222] [ 146.928238][ T7222] [ 146.928238][ T7222] the existing dependency chain (in reverse order) is: [ 146.937254][ T7222] [ 146.937254][ T7222] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 146.944936][ T7222] lock_acquire+0x1ed/0x550 [ 146.949984][ T7222] down_read_killable+0xca/0xd30 [ 146.955451][ T7222] mmap_read_lock_killable+0x1d/0x70 [ 146.961259][ T7222] lock_mm_and_find_vma+0x29c/0x2f0 [ 146.967715][ T7222] exc_page_fault+0x1bf/0x8c0 [ 146.972929][ T7222] asm_exc_page_fault+0x26/0x30 [ 146.978316][ T7222] fault_in_readable+0x165/0x2b0 [ 146.983786][ T7222] fault_in_iov_iter_readable+0x229/0x280 [ 146.990051][ T7222] generic_perform_write+0x259/0x6d0 [ 146.996124][ T7222] shmem_file_write_iter+0xf9/0x120 [ 147.001855][ T7222] vfs_write+0xa6f/0xc90 [ 147.006759][ T7222] ksys_write+0x183/0x2b0 [ 147.011647][ T7222] do_syscall_64+0xf3/0x230 [ 147.016809][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.023246][ T7222] [ 147.023246][ T7222] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 147.032250][ T7222] validate_chain+0x18ef/0x5920 [ 147.037718][ T7222] __lock_acquire+0x1384/0x2050 [ 147.043107][ T7222] lock_acquire+0x1ed/0x550 [ 147.048146][ T7222] down_write+0x99/0x220 [ 147.052912][ T7222] process_measurement+0x439/0x1fb0 [ 147.058664][ T7222] ima_file_mmap+0x13d/0x2b0 [ 147.063887][ T7222] security_mmap_file+0x7e7/0xa40 [ 147.069546][ T7222] __se_sys_remap_file_pages+0x6e6/0xa50 [ 147.075732][ T7222] do_syscall_64+0xf3/0x230 [ 147.080814][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.087535][ T7222] [ 147.087535][ T7222] other info that might help us debug this: [ 147.087535][ T7222] [ 147.097878][ T7222] Possible unsafe locking scenario: [ 147.097878][ T7222] [ 147.105326][ T7222] CPU0 CPU1 [ 147.110859][ T7222] ---- ---- [ 147.116219][ T7222] lock(&mm->mmap_lock); [ 147.120561][ T7222] lock(&sb->s_type->i_mutex_key#12); [ 147.128671][ T7222] lock(&mm->mmap_lock); [ 147.135816][ T7222] lock(&sb->s_type->i_mutex_key#12); [ 147.141298][ T7222] [ 147.141298][ T7222] *** DEADLOCK *** [ 147.141298][ T7222] [ 147.149437][ T7222] 1 lock held by syz.1.639/7222: [ 147.154371][ T7222] #0: ffff888073e39e18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 147.164867][ T7222] [ 147.164867][ T7222] stack backtrace: [ 147.170747][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.1.639 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 147.181071][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.191151][ T7222] Call Trace: [ 147.194448][ T7222] [ 147.197477][ T7222] dump_stack_lvl+0x241/0x360 [ 147.202179][ T7222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.207398][ T7222] ? __pfx__printk+0x10/0x10 [ 147.212022][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.217661][ T7222] print_circular_bug+0x13a/0x1b0 [ 147.222700][ T7222] check_noncircular+0x36a/0x4a0 [ 147.227652][ T7222] ? __pfx_check_noncircular+0x10/0x10 [ 147.233115][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.238839][ T7222] ? lockdep_lock+0x123/0x2b0 [ 147.243652][ T7222] ? prb_first_seq+0x131/0x210 [ 147.248511][ T7222] validate_chain+0x18ef/0x5920 [ 147.253393][ T7222] ? __pfx_validate_chain+0x10/0x10 [ 147.258626][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.264741][ T7222] ? __pfx_validate_chain+0x10/0x10 [ 147.269967][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.275694][ T7222] ? mark_lock+0x9a/0x360 [ 147.280030][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.285685][ T7222] ? __lock_acquire+0x1384/0x2050 [ 147.290748][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.296383][ T7222] ? look_up_lock_class+0x77/0x170 [ 147.301515][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.307181][ T7222] ? register_lock_class+0x102/0x980 [ 147.312777][ T7222] ? __pfx_register_lock_class+0x10/0x10 [ 147.318473][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.324142][ T7222] ? mark_lock+0x9a/0x360 [ 147.328478][ T7222] ? ima_match_policy+0x115/0x22f0 [ 147.333608][ T7222] __lock_acquire+0x1384/0x2050 [ 147.338487][ T7222] lock_acquire+0x1ed/0x550 [ 147.343009][ T7222] ? process_measurement+0x439/0x1fb0 [ 147.348391][ T7222] ? __pfx_lock_acquire+0x10/0x10 [ 147.353430][ T7222] ? __pfx___might_resched+0x10/0x10 [ 147.358741][ T7222] ? ima_match_policy+0x115/0x22f0 [ 147.363864][ T7222] ? __pfx_ima_match_policy+0x10/0x10 [ 147.369242][ T7222] ? __schedule+0x189d/0x4b30 [ 147.373932][ T7222] down_write+0x99/0x220 [ 147.378176][ T7222] ? process_measurement+0x439/0x1fb0 [ 147.383550][ T7222] ? __pfx_down_write+0x10/0x10 [ 147.388407][ T7222] ? ima_get_action+0x75/0xb0 [ 147.393093][ T7222] process_measurement+0x439/0x1fb0 [ 147.398303][ T7222] ? __pfx_process_measurement+0x10/0x10 [ 147.403945][ T7222] ? __pfx_lock_acquire+0x10/0x10 [ 147.409008][ T7222] ? aa_file_perm+0x137/0xf50 [ 147.413706][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.419347][ T7222] ? mtree_load+0x8a1/0x9c0 [ 147.423862][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.429494][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.435128][ T7222] ima_file_mmap+0x13d/0x2b0 [ 147.439727][ T7222] ? __pfx_mtree_load+0x10/0x10 [ 147.444594][ T7222] ? __pfx_ima_file_mmap+0x10/0x10 [ 147.449709][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.455343][ T7222] ? end_current_label_crit_section+0x151/0x180 [ 147.461618][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.467254][ T7222] ? common_file_perm+0x1a6/0x210 [ 147.472309][ T7222] security_mmap_file+0x7e7/0xa40 [ 147.477351][ T7222] __se_sys_remap_file_pages+0x6e6/0xa50 [ 147.483008][ T7222] ? __pfx_do_futex+0x10/0x10 [ 147.487696][ T7222] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 147.493867][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.499502][ T7222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.505500][ T7222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.511846][ T7222] ? do_syscall_64+0x100/0x230 [ 147.516635][ T7222] ? srso_alias_return_thunk+0x5/0xfbef5 [ 147.522275][ T7222] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 147.528013][ T7222] do_syscall_64+0xf3/0x230 [ 147.532540][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.538450][ T7222] RIP: 0033:0x7f001797dff9 [ 147.542892][ T7222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.562499][ T7222] RSP: 002b:00007f001882e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 147.570918][ T7222] RAX: ffffffffffffffda RBX: 00007f0017b35f80 RCX: 00007f001797dff9 [ 147.579068][ T7222] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020491000 [ 147.587039][ T7222] RBP: 00007f00179f0296 R08: 0000000000000000 R09: 0000000000000000 [ 147.595009][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.602977][ T7222] R13: 0000000000000000 R14: 00007f0017b35f80 R15: 00007ffcc4be4d38 [ 147.610959][ T7222] [ 147.758965][ T5557] team0 (unregistering): Port device team_slave_1 removed [ 147.788664][ T5557] team0 (unregistering): Port device team_slave_0 removed [ 148.106560][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.159218][ T7120] team0: Port device team_slave_0 added [ 148.170306][ T7120] team0: Port device team_slave_1 added [ 148.206171][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.213372][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.239595][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.251710][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.258658][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.285093][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.330421][ T7120] hsr_slave_0: entered promiscuous mode [ 148.336645][ T7120] hsr_slave_1: entered promiscuous mode [ 148.346166][ T7120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.355377][ T7120] Cannot create hsr debugfs directory [ 148.420893][ T7120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.461716][ T5244] Bluetooth: hci3: command tx timeout [ 148.478027][ T7120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.546160][ T7120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.606762][ T7120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.685753][ T7120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.694499][ T7120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.715863][ T7120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 148.724511][ T7120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.777051][ T7120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.798028][ T7120] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.809096][ T924] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.816240][ T924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.830305][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.837401][ T5557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.959848][ T7120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.990691][ T7120] veth0_vlan: entered promiscuous mode [ 149.001208][ T7120] veth1_vlan: entered promiscuous mode [ 149.023628][ T7120] veth0_macvtap: entered promiscuous mode [ 149.031934][ T7120] veth1_macvtap: entered promiscuous mode [ 149.045697][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.056262][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.066581][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.077079][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.086923][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.098346][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.108737][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.119220][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.130519][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.145102][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.155910][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.165901][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.176924][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.186786][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.197303][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.207402][ T7120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.218413][ T7120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.229717][ T7120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.240607][ T7120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.249434][ T7120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.258432][ T7120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.267245][ T7120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.294585][ T7120] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 149.316545][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.317042][ T7120] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 149.339545][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.358921][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.369219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.541728][ T5244] Bluetooth: hci3: command tx timeout