last executing test programs: 1m45.060394735s ago: executing program 1 (id=118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1m44.80961261s ago: executing program 1 (id=121): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1m44.554443894s ago: executing program 1 (id=123): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x6) 1m43.300437879s ago: executing program 1 (id=127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m41.289810888s ago: executing program 1 (id=141): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) 1m40.729500488s ago: executing program 1 (id=146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000001) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x3f1, 0x0, 0x3}]}) 1m40.210230249s ago: executing program 32 (id=146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000001) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x3f1, 0x0, 0x3}]}) 1m37.837139174s ago: executing program 2 (id=162): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x6) 1m36.00563121s ago: executing program 2 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000009f000040"]) 1m35.151704427s ago: executing program 2 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) 1m33.891678791s ago: executing program 2 (id=171): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') 1m33.557206838s ago: executing program 2 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000a00)={0x1, 0x0, [{0x2ff, 0x0, 0x3}]}) 1m32.642013505s ago: executing program 2 (id=173): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='A', 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7a, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 1m32.125611485s ago: executing program 33 (id=173): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='A', 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7a, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 4.838100036s ago: executing program 0 (id=699): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) 4.710348718s ago: executing program 0 (id=700): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1ebe01, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.533493492s ago: executing program 0 (id=701): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5519, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2042, 0x50) fallocate(r1, 0x0, 0x0, 0x8000c62) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 2.673699428s ago: executing program 0 (id=717): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000104, 0x0, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYRES8]) 2.212543877s ago: executing program 4 (id=720): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000240)='P', 0x0}, 0x20) 2.0855533s ago: executing program 4 (id=721): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000f40)=ANY=[], 0x9) 1.829915574s ago: executing program 5 (id=723): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) 1.717572687s ago: executing program 4 (id=724): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x161443, 0x12d) fcntl$setlease(r1, 0x400, 0x0) 1.440569832s ago: executing program 3 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.141498538s ago: executing program 3 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x22}) 1.120881058s ago: executing program 0 (id=728): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.103308278s ago: executing program 5 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c0000f500000500410c1054006600000721"], 0x105c) 893.256083ms ago: executing program 3 (id=730): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000d80)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a17010038c1eb44279a8e72a4", 0x3a}, {&(0x7f0000000800)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b3c535060dcca5cff1f0e5a1d9b32ce", 0x46}], 0x2}}], 0x1, 0xc0) 863.403003ms ago: executing program 5 (id=731): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x24008804) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) 802.998014ms ago: executing program 3 (id=732): syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 725.584876ms ago: executing program 4 (id=733): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file2\x00', 0x100000be6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x8200, 0x1aa) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) 702.106436ms ago: executing program 5 (id=734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 563.218259ms ago: executing program 0 (id=735): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000120001"], 0x26}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) 408.624232ms ago: executing program 3 (id=736): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0090e674fc3d16030000f7372fb90c4213280e2e2e4b0d56ee98f196307a99eda2eedf841612fe27e9ee000000f7ffffffffffffff0000000000369300"/74, @ANYRES8], 0x1, 0x14a, &(0x7f00000005c0)="$eJzs2k9Kw0AUBvAHCkqXLl0FKlHQ/Ne61aW48wahzaTBiSmJIO0FxJWgMC68hOAJPEKW7nQj6CUisaO2qWgX2qn0+2360ddOX2ZgunlGmsQOywyijc7FwdNSmsRaw9tuMof51LdHRFoZ8qK4MmnEw0c9L8j84gNqrbz0X+trodg/YxEPXNUtAQAAAAAAAAAAAAAAAAAAAADAmPSaDLW2iE9ZxANnoJp1e4c+50GaKWpPOV2TM1zEBL8u98cbqq8/E+k7ZYrEblrW7eHvX8qw2hb8sbq/1nHcsbJuz4hiPwzC4Mh1vYa9adtbrvW2llVdUb+RPVFe3Nqj42T6wLzZ/TjzZvL855cjcX5S/bXP80eYQFj8q5WLOaJpeMBZDzQdbfxC+PFe+S/e//9aC179rrz/zGbCW/LNSWynwmcHgG+8BgAA//8twTjg") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) 408.394512ms ago: executing program 4 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003180)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 321.938164ms ago: executing program 5 (id=738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x81) fallocate(r0, 0x0, 0x0, 0x1000f4) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 255.522865ms ago: executing program 4 (id=739): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x670a, 0x13100, 0x0, 0x1000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 133.666647ms ago: executing program 3 (id=740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 0s ago: executing program 5 (id=741): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='\x00', 0x1}], 0x1}}], 0x1, 0x408b1) kernel console output (not intermixed with test programs): e pvrusb2 device. [ 84.556823][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 84.600164][ T2318] pvrusb2: Device being rendered inoperable [ 84.624177][ T5954] pvrusb2: Attempted to execute control transfer when device not ok [ 84.668257][ T786] usb 1-1: USB disconnect, device number 2 [ 84.671061][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 84.699328][ T5982] loop2: detected capacity change from 0 to 1024 [ 84.713618][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 84.754048][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.781226][ T2318] pvrusb2: Attached sub-driver cx25840 [ 84.807632][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 84.852280][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 84.973222][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 85.003155][ T787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 85.009919][ T787] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 85.040500][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.071471][ T787] usb 4-1: config 0 descriptor?? [ 85.190565][ T3441] hfsplus: b-tree write err: -5, ino 4 [ 85.553405][ T787] hid (null): global environment stack underflow [ 85.800558][ T5834] usb 4-1: USB disconnect, device number 2 [ 86.722276][ C1] sched: RT throttling activated [ 86.954842][ T6010] loop2: detected capacity change from 0 to 131072 [ 86.973928][ T6010] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 86.982379][ T6010] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.009171][ T6010] F2FS-fs (loop2): invalid crc value [ 87.018262][ T23] cfg80211: failed to load regulatory.db [ 87.029809][ T6010] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.096594][ T6010] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.105046][ T6010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.127810][ T6032] program syz.1.53 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.717198][ T6040] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.116978][ T6046] netlink: 'syz.3.60': attribute type 9 has an invalid length. [ 88.140449][ T6046] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.60'. [ 88.426405][ T6050] loop3: detected capacity change from 0 to 128 [ 88.467150][ T6050] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 88.498893][ T6050] hpfs: filesystem error: improperly stopped [ 88.512066][ T6050] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 88.531286][ T6050] hpfs: You really don't want any checks? You are crazy... [ 88.551784][ T6050] hpfs: hpfs_map_sector(): read error [ 88.572917][ T6050] hpfs: code page support is disabled [ 88.596081][ T6050] hpfs: hpfs_map_4sectors(): unaligned read [ 88.613581][ T6050] hpfs: hpfs_map_4sectors(): unaligned read [ 88.626280][ T6050] hpfs: filesystem error: unable to find root dir [ 89.082716][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 89.284170][ T23] usb 3-1: not running at top speed; connect to a high speed hub [ 89.320604][ T23] usb 3-1: config index 0 descriptor too short (expected 2322, got 18) [ 89.341922][ T23] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 89.350216][ T23] usb 3-1: config 95 has no interface number 0 [ 89.362779][ T23] usb 3-1: config 95 interface 1 has no altsetting 0 [ 89.385478][ T23] usb 3-1: string descriptor 0 read error: -22 [ 89.396300][ T23] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 89.425780][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.577382][ T6070] loop1: detected capacity change from 0 to 4096 [ 89.877191][ T6075] loop3: detected capacity change from 0 to 128 [ 89.888209][ T6075] EXT4-fs: Ignoring removed nobh option [ 89.951844][ T6075] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.989520][ T6075] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.071249][ T787] usb 3-1: USB disconnect, device number 2 [ 90.234562][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.403250][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.501455][ T6091] loop0: detected capacity change from 0 to 4096 [ 90.580966][ T6092] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.598006][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 90.606733][ T23] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 90.618098][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 90.630892][ T23] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 90.646598][ T23] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 90.662294][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.678861][ T28] audit: type=1800 audit(1758657288.850:3): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.79" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 90.679043][ T23] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 90.711584][ T27] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 90.733249][ T23] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 90.745527][ T23] usb 2-1: Product: syz [ 90.749747][ T23] usb 2-1: Manufacturer: syz [ 90.755336][ T23] usb 2-1: SerialNumber: syz [ 90.781112][ T23] usb 2-1: config 0 descriptor?? [ 90.796017][ T23] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 90.845239][ T23] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 90.939718][ T27] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 90.962299][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.990728][ T27] usb 4-1: Product: syz [ 91.013065][ T27] usb 4-1: Manufacturer: syz [ 91.017720][ T27] usb 4-1: SerialNumber: syz [ 91.049990][ T27] usb 4-1: config 0 descriptor?? [ 91.064261][ T27] gspca_main: sq930x-2.14.0 probing 2770:930c [ 91.149293][ T23] usb 2-1: USB disconnect, device number 2 [ 91.152475][ T6079] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 91.155258][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 91.203562][ T23] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 91.624683][ T6105] netlink: 'syz.2.84': attribute type 2 has an invalid length. [ 91.637533][ T6105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 91.876701][ T27] gspca_sq930x: ucbus_write failed -71 [ 91.888066][ T27] sq930x: probe of 4-1:0.0 failed with error -71 [ 91.922327][ T27] usb 4-1: USB disconnect, device number 3 [ 92.084757][ T6119] loop0: detected capacity change from 0 to 64 [ 92.242866][ T6111] loop2: detected capacity change from 0 to 32768 [ 92.286469][ T6111] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 92.313182][ T6111] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 92.389648][ T6111] XFS (loop2): Ending clean mount [ 92.407278][ T6111] XFS (loop2): Quotacheck needed: Please wait. [ 92.507866][ T6111] XFS (loop2): Quotacheck: Done. [ 92.767701][ T5785] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.077207][ T6121] loop1: detected capacity change from 0 to 32768 [ 93.151742][ T6121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.91 (6121) [ 93.197015][ T6145] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.234529][ T6121] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.267575][ T6147] program syz.3.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.278116][ T6121] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 93.296071][ T6121] BTRFS info (device loop1): using free space tree [ 93.500994][ T6165] loop0: detected capacity change from 0 to 1024 [ 93.536524][ T6121] BTRFS info (device loop1): enabling ssd optimizations [ 93.554142][ T6165] EXT4-fs: Ignoring removed bh option [ 93.561122][ T6121] BTRFS info (device loop1): auto enabling async discard [ 93.604730][ T6165] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 93.726923][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.928341][ T6165] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 93.964822][ T5786] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.131830][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.192605][ T5957] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (5957) [ 94.514653][ T6191] netlink: 180 bytes leftover after parsing attributes in process `syz.3.112'. [ 94.814100][ T6198] loop3: detected capacity change from 0 to 2048 [ 94.866489][ T6198] loop3: p3 p4 [ 94.876992][ T6198] loop3: p4 size 589824 extends beyond EOD, truncated [ 95.262443][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 95.328909][ T6082] udevd[6082]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.344607][ T5957] udevd[5957]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 95.474915][ T23] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 95.492440][ T23] usb 1-1: config 1 has no interface number 0 [ 95.501684][ T6216] loop2: detected capacity change from 0 to 1024 [ 95.508878][ T23] usb 1-1: config 1 interface 105 has no altsetting 0 [ 95.523174][ T6216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.529022][ T23] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 95.555328][ T5834] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.561101][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.573293][ T23] usb 1-1: Product: syz [ 95.577489][ T23] usb 1-1: Manufacturer: syz [ 95.599621][ T6216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.602722][ T23] usb 1-1: SerialNumber: syz [ 95.752371][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 95.759887][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.773620][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.792948][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 95.826512][ T5834] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 95.852851][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.882423][ T5834] usb 4-1: config 0 descriptor?? [ 95.914680][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.085390][ T6214] loop1: detected capacity change from 0 to 40427 [ 96.110018][ T6214] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 96.127534][ T6214] F2FS-fs (loop1): invalid crc value [ 96.152428][ T6214] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.252369][ T6214] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.363716][ T5834] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input5 [ 96.396168][ T28] audit: type=1800 audit(1758657294.570:4): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 96.473886][ T5834] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0002/input/input6 [ 96.514247][ T23] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 96.562010][ T23] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 96.637030][ T23] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 96.654500][ T5834] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 96.679398][ T5786] syz-executor: attempt to access beyond end of device [ 96.679398][ T5786] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.713727][ T5786] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 96.752709][ T5834] usb 4-1: USB disconnect, device number 4 [ 96.756442][ T23] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 96.842683][ T23] usb 1-1: USB disconnect, device number 3 [ 96.864216][ T23] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 97.024134][ T6229] fido_id[6229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 97.056042][ T23] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 97.072510][ T23] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 97.078137][ T6225] loop2: detected capacity change from 0 to 32768 [ 97.104179][ T23] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 97.116426][ T6225] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 97.308386][ T5957] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 97.649032][ T6245] input: syz1 as /devices/virtual/input/input7 [ 97.968252][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'. [ 98.076057][ T6258] loop1: detected capacity change from 0 to 512 [ 98.146031][ T6258] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.171347][ T6264] loop0: detected capacity change from 0 to 512 [ 98.192438][ T6258] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.209985][ T6264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.234818][ T6258] EXT4-fs (loop1): 1 truncate cleaned up [ 98.241890][ T6258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.316161][ T6264] EXT4-fs (loop0): 1 truncate cleaned up [ 98.346579][ T6258] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.127: corrupted in-inode xattr: overlapping e_value [ 98.364507][ T6264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.377506][ T6258] EXT4-fs (loop1): Remounting filesystem read-only [ 98.383376][ T6269] Zero length message leads to an empty skb [ 98.392314][ T6258] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1781: inode #15: comm syz.1.127: unable to update i_inline_off [ 98.427153][ T6272] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 98.452590][ T6272] overlayfs: failed to get uuid (/bus, err=-5); falling back to uuid=null. [ 98.495427][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.523880][ T6258] syz.1.127 (6258) used greatest stack depth: 19600 bytes left [ 98.667350][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.0.139'. [ 99.038667][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.061476][ T6292] loop0: detected capacity change from 0 to 128 [ 99.078363][ T6293] loop2: detected capacity change from 0 to 64 [ 99.091987][ T2924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.287561][ T2924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.461248][ T2924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.555852][ T2924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.828949][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.149'. [ 100.047621][ T6309] loop2: detected capacity change from 0 to 128 [ 100.225516][ T6312] FAT-fs (loop2): error, corrupted directory (invalid i_start) [ 100.251410][ T6312] FAT-fs (loop2): Filesystem has been set read-only [ 100.310106][ T6311] loop0: detected capacity change from 0 to 2048 [ 100.394376][ T6311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.450342][ T6311] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.514047][ T28] audit: type=1800 audit(1758657298.690:5): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 100.679566][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.699960][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.712775][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.724185][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.727041][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.754740][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.764075][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.201151][ T6330] loop2: detected capacity change from 0 to 8192 [ 101.270330][ T6330] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 101.292804][ T6330] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 101.303991][ T6330] REISERFS (device loop2): using ordered data mode [ 101.310525][ T6330] reiserfs: using flush barriers [ 101.390901][ T6330] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 101.431331][ T6330] REISERFS (device loop2): checking transaction log (loop2) [ 101.496051][ T6330] REISERFS (device loop2): Using r5 hash to sort names [ 101.506955][ T6330] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 101.522615][ T6330] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 101.571186][ T6330] REISERFS warning (device loop2): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 102.205624][ T6353] loop3: detected capacity change from 0 to 1024 [ 102.299975][ T6337] loop0: detected capacity change from 0 to 32768 [ 102.327177][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 102.429196][ T6337] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 102.474780][ T2924] hsr_slave_0: left promiscuous mode [ 102.482196][ T2924] hsr_slave_1: left promiscuous mode [ 102.529817][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.554199][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.572978][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.580416][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.610873][ T2924] bridge_slave_1: left allmulticast mode [ 102.616699][ T2924] bridge_slave_1: left promiscuous mode [ 102.624341][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.653498][ T6337] XFS (loop0): Ending clean mount [ 102.679151][ T6337] XFS (loop0): Quotacheck needed: Please wait. [ 102.703516][ T2924] bridge_slave_0: left allmulticast mode [ 102.710366][ T2924] bridge_slave_0: left promiscuous mode [ 102.736582][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.787430][ T6337] XFS (loop0): Quotacheck: Done. [ 102.866842][ T5797] Bluetooth: hci2: command tx timeout [ 102.919632][ T2924] veth1_macvtap: left promiscuous mode [ 102.932025][ T2924] veth0_macvtap: left promiscuous mode [ 102.953607][ T2924] veth1_vlan: left promiscuous mode [ 102.959162][ T2924] veth0_vlan: left promiscuous mode [ 103.072740][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.418718][ T6357] loop2: detected capacity change from 0 to 40427 [ 103.493886][ T6357] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 103.532381][ T6357] F2FS-fs (loop2): invalid crc value [ 103.550384][ T6357] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.718382][ T6357] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.820513][ T28] audit: type=1800 audit(1758657301.990:6): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.162" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 103.908668][ T5785] syz-executor: attempt to access beyond end of device [ 103.908668][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.938101][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 104.003823][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.202833][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 104.230165][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.251955][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.295003][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 104.322349][ T5834] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 104.355021][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.390401][ T5834] usb 1-1: config 0 descriptor?? [ 104.765666][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 104.843176][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 104.880166][ T5834] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0003/input/input8 [ 104.909086][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.937580][ T5797] Bluetooth: hci2: command tx timeout [ 104.986553][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.990609][ T5834] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0003/input/input9 [ 105.123762][ T5834] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 105.182457][ T5834] usb 1-1: USB disconnect, device number 4 [ 105.334844][ T6399] fido_id[6399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 105.700390][ T2924] bond0 (unregistering): Released all slaves [ 105.887936][ T6397] tipc: Started in network mode [ 105.920725][ T6397] tipc: Node identity ac14140f, cluster identity 4711 [ 105.941871][ T6397] tipc: New replicast peer: 255.255.255.255 [ 105.951463][ T6397] tipc: Enabled bearer , priority 10 [ 106.073844][ T6409] loop2: detected capacity change from 0 to 512 [ 106.136219][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.161254][ T6409] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.206800][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.223594][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.241089][ T6323] bridge_slave_0: entered allmulticast mode [ 106.262608][ T6323] bridge_slave_0: entered promiscuous mode [ 106.288108][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.297789][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.314494][ T6323] bridge_slave_1: entered allmulticast mode [ 106.331018][ T6323] bridge_slave_1: entered promiscuous mode [ 106.436435][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.447726][ T5785] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 106.466938][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.477394][ T5785] EXT4-fs (loop2): Remounting filesystem read-only [ 106.624252][ T6323] team0: Port device team_slave_0 added [ 106.748246][ T6323] team0: Port device team_slave_1 added [ 106.855872][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.874193][ T2907] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 106.889652][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.902822][ T2907] Quota error (device loop2): write_blk: dquota write failed [ 106.911079][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.911118][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.967157][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.996304][ T2907] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 106.997035][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.021354][ T2907] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 107.046225][ T5797] Bluetooth: hci2: command tx timeout [ 107.051727][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.054435][ T2907] Quota error (device loop2): write_blk: dquota write failed [ 107.073842][ T5834] tipc: Node number set to 2886997007 [ 107.101753][ T2907] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 107.367061][ T2907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.421545][ T6323] hsr_slave_0: entered promiscuous mode [ 107.459440][ T6323] hsr_slave_1: entered promiscuous mode [ 107.480051][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.512561][ T6323] Cannot create hsr debugfs directory [ 107.630854][ T2907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.790296][ T2907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.966834][ T2907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.095375][ T6428] loop3: detected capacity change from 0 to 32768 [ 108.325958][ T6433] loop0: detected capacity change from 0 to 4096 [ 108.334894][ T6428] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 108.423991][ T6323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.468272][ T6323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.506412][ T6323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.566641][ T6323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.629829][ T28] audit: type=1800 audit(1758657306.800:7): pid=6428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.174" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 108.750529][ T2907] tipc: Disabling bearer [ 108.768566][ T2907] tipc: Left network mode [ 108.772698][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.786445][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.796466][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.806709][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.823000][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.830703][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.981701][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 109.092375][ T5793] Bluetooth: hci2: command tx timeout [ 109.407423][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.528687][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.569118][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 109.628447][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.635605][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.649399][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.656554][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.736112][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.743796][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.750976][ T6448] bridge_slave_0: entered allmulticast mode [ 109.759939][ T6448] bridge_slave_0: entered promiscuous mode [ 109.768155][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.776736][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.784413][ T6448] bridge_slave_1: entered allmulticast mode [ 109.791337][ T6448] bridge_slave_1: entered promiscuous mode [ 109.847188][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.860051][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.016952][ T6448] team0: Port device team_slave_0 added [ 110.033353][ T6448] team0: Port device team_slave_1 added [ 110.131486][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.145415][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.178568][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.205785][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.213270][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.244109][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.347950][ T2907] hsr_slave_0: left promiscuous mode [ 110.355870][ T2907] hsr_slave_1: left promiscuous mode [ 110.361969][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.371036][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.379806][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.395291][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.406697][ T2907] bridge_slave_1: left allmulticast mode [ 110.416106][ T2907] bridge_slave_1: left promiscuous mode [ 110.421877][ T2907] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.437729][ T2907] bridge_slave_0: left allmulticast mode [ 110.444929][ T2907] bridge_slave_0: left promiscuous mode [ 110.451426][ T2907] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.497738][ T2907] veth1_macvtap: left promiscuous mode [ 110.505632][ T2907] veth0_macvtap: left promiscuous mode [ 110.511252][ T2907] veth1_vlan: left promiscuous mode [ 110.516953][ T2907] veth0_vlan: left promiscuous mode [ 110.933083][ T5793] Bluetooth: hci0: command tx timeout [ 111.009224][ T2907] team0 (unregistering): Port device team_slave_1 removed [ 111.051425][ T2907] team0 (unregistering): Port device team_slave_0 removed [ 111.099496][ T2907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.144876][ T2907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.553800][ T2907] bond0 (unregistering): Released all slaves [ 111.629366][ T6448] hsr_slave_0: entered promiscuous mode [ 111.636387][ T6448] hsr_slave_1: entered promiscuous mode [ 111.952058][ T6448] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 111.967504][ T6448] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.008889][ T6448] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.022800][ T6448] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.127588][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.268323][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.319954][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.359744][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.366971][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.400240][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.407487][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.647370][ T6323] veth0_vlan: entered promiscuous mode [ 112.661003][ T6323] veth1_vlan: entered promiscuous mode [ 112.725465][ T6323] veth0_macvtap: entered promiscuous mode [ 112.741822][ T6323] veth1_macvtap: entered promiscuous mode [ 112.771253][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.787669][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.801033][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.817259][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.829159][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.855739][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.866767][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.878986][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.889892][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.903361][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.919025][ T6323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.928830][ T6323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.938677][ T6323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.948945][ T6323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.972681][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.013138][ T5793] Bluetooth: hci0: command tx timeout [ 113.110059][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.135811][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.193349][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.201236][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.475989][ T6526] loop0: detected capacity change from 0 to 2048 [ 113.536687][ T6526] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.614945][ T6532] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.621452][ T5799] udevd[5799]: incorrect nilfs2 checksum on /dev/loop0 [ 113.779985][ T6448] veth0_vlan: entered promiscuous mode [ 113.843618][ T6448] veth1_vlan: entered promiscuous mode [ 113.945616][ T6448] veth0_macvtap: entered promiscuous mode [ 113.967161][ T6448] veth1_macvtap: entered promiscuous mode [ 114.005220][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.020286][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.037620][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.041349][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.072336][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.084643][ T6542] loop3: detected capacity change from 0 to 8192 [ 114.091829][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.111445][ T6542] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 114.131105][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.143712][ T6542] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 114.153043][ T6542] REISERFS (device loop3): using ordered data mode [ 114.159583][ T6542] reiserfs: using flush barriers [ 114.169003][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.172644][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.181577][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.195716][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.205578][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.216842][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.227323][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.238293][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.239514][ T6542] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 114.250316][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.271802][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 114.304085][ T6542] REISERFS (device loop3): checking transaction log (loop3) [ 114.321470][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.323748][ T6542] REISERFS (device loop3): Using r5 hash to sort names [ 114.352917][ T6542] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 114.362935][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.388556][ T6448] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.398429][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.422829][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 114.428197][ T6448] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.433549][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 114.447746][ T27] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 114.457603][ T6448] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.476328][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.483036][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.494563][ T6448] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.527680][ T27] usb 5-1: config 0 descriptor?? [ 114.534827][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 114.576894][ T9] pvrusb2: ********** [ 114.592639][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 114.638645][ T9] pvrusb2: Important functionality might not be entirely working. [ 114.686686][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 114.701535][ T9] pvrusb2: ********** [ 114.749910][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.789676][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.791464][ T2318] pvrusb2: Invalid write control endpoint [ 114.933234][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.941153][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.981121][ T2318] pvrusb2: Invalid write control endpoint [ 115.005141][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 115.041272][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 115.057384][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 115.068289][ T27] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input10 [ 115.079868][ T2318] pvrusb2: Device being rendered inoperable [ 115.091099][ T5834] usb 1-1: USB disconnect, device number 5 [ 115.092513][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 115.107103][ T5793] Bluetooth: hci0: command tx timeout [ 115.124396][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 115.157168][ T2318] pvrusb2: Attached sub-driver cx25840 [ 115.193784][ T27] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input11 [ 115.207810][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 115.253440][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 115.447812][ T27] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 115.582502][ T27] usb 5-1: USB disconnect, device number 2 [ 115.809845][ T6560] fido_id[6560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 116.220780][ T6554] loop3: detected capacity change from 0 to 40427 [ 116.270275][ T6554] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 116.291786][ T6573] sctp: [Deprecated]: syz.0.186 (pid 6573) Use of int in max_burst socket option deprecated. [ 116.291786][ T6573] Use struct sctp_assoc_value instead [ 116.308514][ T6554] F2FS-fs (loop3): Image doesn't support compression [ 116.342944][ T6554] F2FS-fs (loop3): Image doesn't support compression [ 116.390401][ T6554] F2FS-fs (loop3): invalid crc value [ 116.418112][ T6554] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.502619][ T6581] delete_channel: no stack [ 116.538466][ T6580] delete_channel: no stack [ 116.571281][ T6554] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.587517][ T6558] loop5: detected capacity change from 0 to 32768 [ 116.637535][ T6558] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 116.796496][ T6576] f2fs_ckpt-7:3: attempt to access beyond end of device [ 116.796496][ T6576] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.871116][ T6576] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 116.907077][ T6586] loop0: detected capacity change from 0 to 1024 [ 116.946234][ T6586] EXT4-fs: inline encryption not supported [ 116.969647][ T6586] EXT4-fs: Ignoring removed i_version option [ 116.980971][ T5957] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 117.009341][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'. [ 117.020148][ T6586] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.054446][ T6592] netlink: 3 bytes leftover after parsing attributes in process `syz.5.190'. [ 117.124426][ T6592] batadv1: entered promiscuous mode [ 117.138328][ T6586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.164023][ T6592] batadv1: entered allmulticast mode [ 117.173106][ T5793] Bluetooth: hci0: command tx timeout [ 117.474603][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.372554][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 118.878124][ T6644] mmap: syz.3.207 (6644) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.065379][ T6650] warning: `syz.4.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.421948][ T6660] loop4: detected capacity change from 0 to 2048 [ 119.480541][ T6660] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.532415][ T6666] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.701520][ T6664] loop0: detected capacity change from 0 to 4096 [ 119.740489][ T6670] hsr0: entered allmulticast mode [ 119.772678][ T6670] hsr_slave_0: entered allmulticast mode [ 119.778382][ T6670] hsr_slave_1: entered allmulticast mode [ 120.088558][ T6680] netdevsim netdevsim5: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 120.832871][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.062316][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 121.079436][ T9] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.142518][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 121.169628][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 121.203356][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.253353][ T9] usb 6-1: config 0 descriptor?? [ 121.557244][ T6722] loop4: detected capacity change from 0 to 64 [ 121.725468][ T9] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 121.955411][ T6704] loop0: detected capacity change from 0 to 32768 [ 122.005877][ T6704] (syz.0.227,6704,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.066558][ T6704] (syz.0.227,6704,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 122.195478][ T9] usb 6-1: USB disconnect, device number 2 [ 122.216610][ T6704] JBD2: Ignoring recovery information on journal [ 122.276489][ T6712] loop3: detected capacity change from 0 to 32768 [ 122.296168][ T6712] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 122.433898][ T6704] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 122.471926][ T6738] program syz.4.234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.538012][ T6561] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 122.617351][ T6712] loop3: detected capacity change from 0 to 4096 [ 122.650236][ T6712] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 122.758486][ T6742] loop4: detected capacity change from 0 to 512 [ 122.833964][ T6742] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 122.849112][ T28] audit: type=1800 audit(1758657321.010:8): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.230" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 122.905699][ T6742] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.943262][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 122.978388][ T6746] loop5: detected capacity change from 0 to 256 [ 123.050842][ T6742] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 123.100140][ T6742] EXT4-fs (loop4): 1 orphan inode deleted [ 123.102770][ T28] audit: type=1800 audit(1758657321.260:9): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.236" name="file1" dev="loop5" ino=1048601 res=0 errno=0 [ 123.109651][ T6746] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 123.148334][ T6742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.161717][ T6746] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.229821][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 123.292942][ T6742] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 123.317959][ T6742] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 123.369124][ T6748] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 123.399767][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 123.445242][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 123.543848][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 123.583472][ T5887] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.604826][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.239'. [ 123.608214][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 123.658523][ T6758] macvlan2: entered allmulticast mode [ 123.660731][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 123.682342][ T6758] veth1_vlan: entered allmulticast mode [ 123.697477][ T6742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.235: Block bitmap for bg 0 marked uninitialized [ 123.795512][ T5887] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 123.818356][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.846196][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 123.864273][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.869539][ T5887] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 123.902273][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.933319][ T5887] usb 4-1: config 0 descriptor?? [ 124.269356][ T6775] loop5: detected capacity change from 0 to 1024 [ 124.376693][ T5887] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 124.402851][ T5887] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 124.453193][ T5887] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 124.460580][ T5887] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 124.492069][ T5887] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 124.514553][ T5887] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 124.554423][ T5887] holtek_kbd 0003:04D9:A055.0006: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 124.625028][ T5887] usb 4-1: USB disconnect, device number 5 [ 124.764791][ T6782] fido_id[6782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 125.019609][ T6764] loop0: detected capacity change from 0 to 32768 [ 125.064899][ T6764] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.163862][ T6764] XFS (loop0): Ending clean mount [ 125.208597][ T6764] XFS (loop0): Quotacheck needed: Please wait. [ 125.351455][ T6764] XFS (loop0): Quotacheck: Done. [ 125.482703][ T6803] loop3: detected capacity change from 0 to 512 [ 125.542111][ T6803] EXT4-fs (loop3): 1 truncate cleaned up [ 125.581904][ T6803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.697860][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.864316][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.918784][ T6810] netlink: 'syz.5.251': attribute type 21 has an invalid length. [ 125.982562][ T6810] netlink: 128 bytes leftover after parsing attributes in process `syz.5.251'. [ 125.991678][ T6810] netlink: 'syz.5.251': attribute type 4 has an invalid length. [ 126.007884][ T6780] loop4: detected capacity change from 0 to 40427 [ 126.071304][ T6810] netlink: 'syz.5.251': attribute type 5 has an invalid length. [ 126.095133][ T6810] netlink: 3 bytes leftover after parsing attributes in process `syz.5.251'. [ 126.122814][ T6780] F2FS-fs (loop4): invalid crc value [ 126.201197][ T6780] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.223937][ T6815] vxcan3: entered allmulticast mode [ 126.380348][ T6780] F2FS-fs (loop4): Start checkpoint disabled! [ 126.421157][ T6780] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 126.592008][ T6780] syz.4.245: attempt to access beyond end of device [ 126.592008][ T6780] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 126.911658][ T2924] kworker/u4:8: attempt to access beyond end of device [ 126.911658][ T2924] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 126.947116][ T2924] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 126.993880][ T2924] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 127.399024][ T6820] loop5: detected capacity change from 0 to 32768 [ 127.461163][ T6820] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.253 (6820) [ 127.512560][ T6820] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 127.542600][ T6820] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 127.572437][ T6820] BTRFS info (device loop5): disabling tree log [ 127.592543][ T6820] BTRFS info (device loop5): using free space tree [ 127.753591][ T6820] BTRFS info (device loop5): auto enabling async discard [ 127.808669][ T6820] BTRFS info (device loop5): checking UUID tree [ 127.912197][ T6831] loop0: detected capacity change from 0 to 32768 [ 127.975033][ T6831] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.288048][ T6831] XFS (loop0): Ending clean mount [ 128.290946][ T6448] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.465498][ T6831] XFS (loop0): User initiated shutdown received. [ 128.513555][ T6831] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 128.576414][ T5799] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (5799) [ 128.604269][ T6831] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 128.752830][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.022764][ T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.249055][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 129.302918][ T787] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.311040][ T787] usb 6-1: config 0 has no interface number 0 [ 129.351163][ T787] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 129.386036][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.422447][ T787] usb 6-1: Product: syz [ 129.436871][ T787] usb 6-1: Manufacturer: syz [ 129.441511][ T787] usb 6-1: SerialNumber: syz [ 129.501030][ T787] usb 6-1: config 0 descriptor?? [ 129.524324][ T787] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 129.602195][ T6883] loop3: detected capacity change from 0 to 32768 [ 129.629112][ T6883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.262 (6883) [ 129.684204][ T6883] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 129.718793][ T6883] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 129.762360][ T6883] BTRFS info (device loop3): using free space tree [ 129.773739][ T787] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 129.837381][ T787] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 129.927081][ T6883] BTRFS info (device loop3): enabling ssd optimizations [ 129.980880][ T6883] BTRFS info (device loop3): auto enabling async discard [ 130.261839][ T6883] fs-verity: sha512 using implementation "sha512-avx2" [ 130.294980][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 130.305907][ T786] usb 6-1: USB disconnect, device number 3 [ 130.326056][ T786] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 130.354145][ T6883] fs-verity (loop3, inode 261): fs-verity keyring is empty, rejecting signed file! [ 130.396936][ T786] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 130.439488][ T786] quatech2 6-1:0.51: device disconnected [ 130.651395][ T5787] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.978823][ T6897] loop0: detected capacity change from 0 to 32768 [ 131.058273][ T6897] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 131.086151][ T6897] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 131.345531][ T6897] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 131.391454][ T6089] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 131.421534][ T6089] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 131.611681][ T6089] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 190ms [ 131.637041][ T6089] gfs2: fsid=syz:syz.0: jid=0: Done [ 131.670065][ T6897] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 132.195348][ T6971] netlink: 100 bytes leftover after parsing attributes in process `syz.3.275'. [ 132.951596][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961878][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.580518][ T7000] loop5: detected capacity change from 0 to 2048 [ 133.707158][ T7000] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 133.770778][ T6975] loop3: detected capacity change from 0 to 32768 [ 133.836480][ T7009] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.314294][ T7015] ialloc: diAlloc returned -17! [ 134.724114][ T7030] loop0: detected capacity change from 0 to 16 [ 134.823604][ T7030] erofs: (device loop0): mounted with root inode @ nid 36. [ 135.007155][ T7030] erofs: (device loop0): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 135.351244][ T7045] loop4: detected capacity change from 0 to 1024 [ 135.402639][ T7040] loop3: detected capacity change from 0 to 8192 [ 135.403453][ T7045] EXT4-fs: Ignoring removed oldalloc option [ 135.466533][ T7045] EXT4-fs: Ignoring removed orlov option [ 135.495221][ T7045] EXT4-fs (loop4): stripe (10) is not aligned with cluster size (16), stripe is disabled [ 135.507016][ T7040] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.533854][ T7049] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 135.592181][ T7040] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 135.634714][ T7040] REISERFS (device loop3): using ordered data mode [ 135.666885][ T7045] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec118, mo2=0083] [ 135.702597][ T7040] reiserfs: using flush barriers [ 135.710666][ T7040] REISERFS (device loop3): journal params: device ram0, size 1, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 135.732506][ T7045] System zones: 1-12 [ 135.751373][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 135.785288][ T7045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.841585][ T7040] REISERFS (device loop3): checking transaction log (ram0) [ 135.867866][ T7040] REISERFS warning: reiserfs-5090 is_tree_node: node level 1 does not match to the expected one 127 [ 135.912080][ T7040] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 135.985491][ T7040] REISERFS (device loop3): Remounting filesystem read-only [ 136.010661][ T7040] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 136.079034][ T7067] EXT4-fs error (device loop4): mb_free_blocks:1938: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 136.458389][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.106546][ T7104] loop4: detected capacity change from 0 to 256 [ 137.278866][ T7106] loop3: detected capacity change from 0 to 512 [ 137.339797][ T7106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 137.478299][ T7106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.575327][ T7106] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.922783][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.100128][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 138.313570][ T786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.339343][ T786] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 138.380554][ T786] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.404251][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.434498][ T786] usb 5-1: Product: syz [ 138.438705][ T786] usb 5-1: Manufacturer: syz [ 138.467049][ T786] usb 5-1: SerialNumber: syz [ 138.734823][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.778336][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.809746][ T786] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 138.840849][ T786] usb 5-1: USB disconnect, device number 3 [ 139.194113][ T7138] loop3: detected capacity change from 0 to 32768 [ 139.301714][ T7138] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 139.365384][ T28] audit: type=1800 audit(1758657337.540:10): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.327" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 139.411321][ T7138] (syz.3.327,7138,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 139.439159][ T786] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.620889][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 139.643764][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 139.669299][ T786] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 139.712070][ T786] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 139.742487][ T786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.776972][ T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.807634][ T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.838828][ T786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.882346][ T786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.912422][ T786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.938994][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.195797][ T786] usb 5-1: usb_control_msg returned -71 [ 140.215917][ T786] usbtmc 5-1:16.0: can't read capabilities [ 140.233282][ T786] usbtmc 5-1:16.0: Failed to submit iin_urb [ 140.239306][ T786] usbtmc: probe of 5-1:16.0 failed with error -90 [ 140.264814][ T786] usb 5-1: USB disconnect, device number 4 [ 141.641016][ T7190] loop3: detected capacity change from 0 to 32768 [ 141.693346][ T7190] XFS: attr2 mount option is deprecated. [ 141.767151][ T7190] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.902477][ T7190] XFS (loop3): Ending clean mount [ 141.928350][ T7190] XFS (loop3): Quotacheck needed: Please wait. [ 142.101959][ T7190] XFS (loop3): Quotacheck: Done. [ 142.342463][ T7191] loop5: detected capacity change from 0 to 32768 [ 142.362578][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 142.449163][ T7197] loop4: detected capacity change from 0 to 40427 [ 142.480411][ T7197] F2FS-fs (loop4): invalid crc value [ 142.554944][ T7197] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.602617][ T7191] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 142.713224][ T7191] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 142.883098][ T7197] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 143.119460][ T28] audit: type=1800 audit(1758657341.290:11): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.345" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 143.448777][ T6323] syz-executor: attempt to access beyond end of device [ 143.448777][ T6323] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.497598][ T6323] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 143.695379][ T6448] ocfs2: Unmounting device (7,5) on (node local) [ 143.824355][ T7256] loop3: detected capacity change from 0 to 4096 [ 143.990213][ T7258] loop0: detected capacity change from 0 to 4096 [ 144.082447][ T7258] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 144.260304][ T7258] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 144.504238][ T7258] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 144.533004][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.763334][ T76] ntfs3: loop0: ino=1e, failed to parse mft record [ 145.249021][ T7282] loop4: detected capacity change from 0 to 512 [ 145.298123][ T28] audit: type=1800 audit(1758657343.470:12): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.364" name="file2" dev="loop4" ino=1048602 res=0 errno=0 [ 145.357336][ T7282] FAT-fs (loop4): error, corrupted file size (i_pos 51, 9216) [ 146.084807][ T7280] loop0: detected capacity change from 0 to 32768 [ 146.151707][ T7280] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.235614][ T7280] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280 [ 146.297227][ T7280] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 146.353469][ T7280] OCFS2: File system is now read-only. [ 146.403530][ T7280] (syz.0.363,7280,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 146.470363][ T7280] (syz.0.363,7280,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 146.538742][ T7280] (syz.0.363,7280,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 146.606880][ T7280] (syz.0.363,7280,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 146.637872][ T7280] (syz.0.363,7280,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 146.673622][ T7280] (syz.0.363,7280,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 146.707173][ T7280] (syz.0.363,7280,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 146.752482][ T7280] (syz.0.363,7280,1):ocfs2_mknod:385 ERROR: status = -30 [ 146.760484][ T7280] (syz.0.363,7280,1):ocfs2_mknod:502 ERROR: status = -30 [ 146.941986][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 147.137667][ T7324] loop3: detected capacity change from 0 to 8192 [ 147.186358][ T7324] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.215995][ T7324] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 147.229346][ T7324] REISERFS (device loop3): using ordered data mode [ 147.238197][ T7324] reiserfs: using flush barriers [ 147.254855][ T7324] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.276328][ T7324] REISERFS (device loop3): checking transaction log (loop3) [ 147.346005][ T7324] REISERFS (device loop3): Using r5 hash to sort names [ 147.372754][ T7324] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 147.688313][ T7307] loop4: detected capacity change from 0 to 32768 [ 147.805547][ T7307] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.018540][ T7307] XFS (loop4): Ending clean mount [ 148.081928][ T7344] loop3: detected capacity change from 0 to 4096 [ 148.129260][ T7344] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 148.310782][ T6323] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.351191][ T7336] loop0: detected capacity change from 0 to 32768 [ 148.400104][ T7336] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.383 (7336) [ 148.470861][ T7336] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.494560][ T7336] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.513599][ T7336] BTRFS info (device loop0): using free space tree [ 148.753484][ T7336] BTRFS info (device loop0): enabling ssd optimizations [ 148.760582][ T7336] BTRFS info (device loop0): auto enabling async discard [ 148.888183][ T7334] loop5: detected capacity change from 0 to 32768 [ 149.063886][ T7334] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.115490][ T7388] loop3: detected capacity change from 0 to 128 [ 149.158649][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.188767][ T28] audit: type=1800 audit(1758657347.360:13): pid=7388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.388" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 149.209465][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.252911][ T7334] XFS (loop5): Ending clean mount [ 149.271013][ T7388] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 149.349280][ T7334] XFS (loop5): Quotacheck needed: Please wait. [ 149.362390][ T7388] FAT-fs (loop3): Filesystem has been set read-only [ 149.369414][ T7388] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 149.499273][ T5957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5957) [ 149.510195][ T7334] XFS (loop5): Quotacheck: Done. [ 149.798018][ T6448] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.807517][ T7404] syz.3.390 uses obsolete (PF_INET,SOCK_PACKET) [ 150.702189][ T5887] kernel write not supported for file bpf-prog (pid: 5887 comm: kworker/1:4) [ 150.882705][ T6089] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 151.092947][ T6089] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.101713][ T6089] usb 4-1: config 0 has no interface number 0 [ 151.131886][ T6089] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 151.164437][ T6089] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 151.205134][ T6089] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.228119][ T7436] loop4: detected capacity change from 0 to 64 [ 151.254771][ T6089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.306862][ T6089] usb 4-1: config 0 descriptor?? [ 151.313060][ T7420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.355243][ T7415] loop0: detected capacity change from 0 to 32768 [ 151.361450][ T6089] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 152.037048][ T7452] loop4: detected capacity change from 0 to 1024 [ 152.124219][ T7455] loop5: detected capacity change from 0 to 128 [ 152.159143][ T7452] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 152.207123][ T7455] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.222377][ T7452] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 152.231818][ T7452] EXT4-fs error (device loop4): ext4_acquire_dquot:6940: comm syz.4.406: Failed to acquire dquot type 0 [ 152.342617][ T7455] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.430495][ T7452] EXT4-fs (loop4): 1 truncate cleaned up [ 152.473504][ T7452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.565550][ T6448] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.713422][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 152.724994][ T5887] usb 4-1: USB disconnect, device number 6 [ 152.903340][ T6323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.917650][ T7469] loop3: detected capacity change from 0 to 32768 [ 153.965510][ T7473] loop4: detected capacity change from 0 to 32768 [ 153.987107][ T7469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 154.047048][ T7473] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 154.276678][ T5799] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 154.328291][ T7466] loop5: detected capacity change from 0 to 32768 [ 154.341619][ T5957] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 154.421376][ T7466] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 154.510051][ T7466] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 154.538768][ T7506] loop0: detected capacity change from 0 to 8192 [ 154.561400][ T7506] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 154.642918][ T7506] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 154.692398][ T7506] REISERFS (device loop0): using ordered data mode [ 154.702980][ T7506] reiserfs: using flush barriers [ 154.722447][ T7506] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.781016][ T7466] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 154.836050][ T7506] REISERFS (device loop0): checking transaction log (loop0) [ 154.849237][ T786] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 154.883202][ T786] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 155.124859][ T786] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 241ms [ 155.156204][ T786] gfs2: fsid=syz:syz.0: jid=0: Done [ 155.161530][ T7466] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 155.228828][ T7506] REISERFS (device loop0): Using tea hash to sort names [ 155.254544][ T7506] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.474439][ T7529] loop4: detected capacity change from 0 to 40427 [ 156.490874][ T7529] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 156.528054][ T7529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.698863][ T7529] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.928969][ T7529] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.953392][ T7529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.965777][ T7543] loop0: detected capacity change from 0 to 32768 [ 157.021584][ T7543] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.425 (7543) [ 157.123292][ T7543] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 157.167138][ T7543] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 157.212395][ T7543] BTRFS info (device loop0): use no compression [ 157.219003][ T7543] BTRFS info (device loop0): using free space tree [ 157.541501][ T7543] BTRFS info (device loop0): enabling ssd optimizations [ 157.562304][ T7543] BTRFS info (device loop0): auto enabling async discard [ 157.872408][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 158.024979][ T5788] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 158.101988][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.127384][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.174524][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.209999][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.243611][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.275411][ T9] usb 6-1: config 0 descriptor?? [ 158.398443][ T7610] batadv_slave_1: entered promiscuous mode [ 158.423536][ T7609] batadv_slave_1: left promiscuous mode [ 158.715536][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.762361][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.769850][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.836737][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.857843][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.892444][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.919406][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.964212][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 158.971694][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.025256][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.057555][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.097755][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.127670][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.151738][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.189886][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.214644][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.222109][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.293450][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.300928][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.335720][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.352325][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.370299][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.380418][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.408010][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.438196][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.461327][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.489455][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.523026][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.540415][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.590021][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.611897][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.647171][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.682434][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.722353][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.729906][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.792464][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.799933][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.848619][ T9] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 159.873344][ T9] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 159.916796][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 160.022431][ T9] usb 6-1: USB disconnect, device number 4 [ 160.040184][ T7615] loop4: detected capacity change from 0 to 40427 [ 160.093773][ T7615] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 160.147973][ T7615] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 160.189346][ T7615] F2FS-fs (loop4): Image doesn't support compression [ 160.244175][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 160.270981][ T7615] F2FS-fs (loop4): invalid crc value [ 160.310116][ T7653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.450'. [ 160.346399][ T7615] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.350274][ T7653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.450'. [ 160.448746][ T28] audit: type=1326 audit(1758657358.610:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.3.451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69e538eec9 code=0x0 [ 160.498555][ T7615] F2FS-fs (loop4): Start checkpoint disabled! [ 160.550372][ T7615] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 160.684296][ T7615] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x1012/0x19e0 [ 160.738936][ T7615] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 161.050865][ T7676] loop5: detected capacity change from 0 to 128 [ 161.088789][ T7676] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 161.124580][ T7680] loop0: detected capacity change from 0 to 64 [ 161.282163][ T6448] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.151878][ T7701] loop5: detected capacity change from 0 to 4096 [ 162.212415][ T7701] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 162.445078][ T7701] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 162.782811][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.873950][ T7687] loop0: detected capacity change from 0 to 40427 [ 162.898743][ T7687] F2FS-fs (loop0): invalid crc value [ 162.928305][ T7687] F2FS-fs (loop0): Found nat_bits in checkpoint [ 162.995177][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 163.015440][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.049240][ T7687] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.052107][ T9] usb 4-1: config 0 descriptor?? [ 163.192889][ T5788] syz-executor: attempt to access beyond end of device [ 163.192889][ T5788] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.217686][ T5788] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.891394][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 163.923930][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 163.958952][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 163.980020][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.002032][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 164.010025][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.020440][ T7755] bond0: Unable to set down delay as MII monitoring is disabled [ 164.020509][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.037701][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.053323][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.064235][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.082027][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 164.100173][ T9] pegasus: probe of 4-1:0.0 failed with error -71 [ 164.150809][ T9] usb 4-1: USB disconnect, device number 7 [ 164.286702][ T7761] loop0: detected capacity change from 0 to 512 [ 164.297062][ T7761] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.329322][ T7761] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.382612][ T7761] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.406698][ T7761] EXT4-fs (loop0): Test dummy encryption mode enabled [ 164.423632][ T7761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.523036][ T7761] EXT4-fs (loop0): 1 truncate cleaned up [ 164.530024][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.717936][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.099028][ T7789] loop5: detected capacity change from 0 to 128 [ 165.113322][ T7789] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.143236][ T7790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.177030][ T7789] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.212318][ T6089] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 165.386663][ T3441] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.442334][ T6089] usb 1-1: Using ep0 maxpacket: 16 [ 165.460949][ T6089] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.488157][ T6089] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.513301][ T6089] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.532470][ T6089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.572024][ T6089] usb 1-1: Product: syz [ 165.592860][ T6089] usb 1-1: Manufacturer: syz [ 165.622599][ T6089] usb 1-1: SerialNumber: syz [ 165.864235][ T6089] usb 1-1: 0:2 : does not exist [ 165.899723][ T6089] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 166.002705][ T6089] usb 1-1: USB disconnect, device number 6 [ 166.106255][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.559820][ T7833] loop5: detected capacity change from 0 to 512 [ 166.584444][ T7833] EXT4-fs: Ignoring removed bh option [ 166.644956][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 166.651748][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 166.667330][ T7833] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 166.706506][ T7845] loop3: detected capacity change from 0 to 512 [ 166.717782][ T7833] EXT4-fs (loop5): 1 truncate cleaned up [ 166.725057][ T7833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.925052][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 166.953676][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 167.011272][ T6448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.394153][ T7836] ceph: No mds server is up or the cluster is laggy [ 167.475890][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 167.489812][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 167.735679][ T7874] pimreg: entered allmulticast mode [ 167.774523][ T7874] dvmrp8: entered allmulticast mode [ 167.792885][ T7874] pimreg: left allmulticast mode [ 167.798117][ T7874] dvmrp8: left allmulticast mode [ 168.012387][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.232419][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 168.253269][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 168.304247][ T27] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 168.322839][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.358957][ T27] usb 4-1: Product: syz [ 168.368080][ T27] usb 4-1: Manufacturer: syz [ 168.384737][ T27] usb 4-1: SerialNumber: syz [ 168.413385][ T27] usb 4-1: config 0 descriptor?? [ 168.423266][ T27] usb 4-1: no audio or video endpoints found [ 168.468869][ T7898] loop4: detected capacity change from 0 to 128 [ 168.516362][ T7898] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.535447][ T7898] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.568449][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.698647][ T28] audit: type=1800 audit(1758657366.870:15): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 168.827526][ T7908] loop5: detected capacity change from 0 to 4096 [ 168.871255][ T6323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.881361][ T7913] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.972070][ T28] audit: type=1800 audit(1758657367.140:16): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.523" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 169.018397][ T28] audit: type=1800 audit(1758657367.180:17): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.523" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 169.039589][ T7908] program syz.5.523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.322356][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.512279][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 169.520595][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.532033][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.542013][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.555116][ T5892] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 169.564325][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.577886][ T5892] usb 5-1: config 0 descriptor?? [ 169.831675][ T7921] loop0: detected capacity change from 0 to 256 [ 170.024617][ T5892] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 170.038586][ T5892] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 170.053575][ T5892] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 170.070523][ T5892] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 170.095686][ T5892] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 170.127769][ T5892] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 170.251554][ T5892] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 170.288723][ T5892] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 170.383840][ T5834] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 170.400938][ T5892] usb 5-1: USB disconnect, device number 5 [ 170.406958][ T5834] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.449115][ T5834] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.470474][ T5834] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 170.516735][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 170.736425][ T7933] loop5: detected capacity change from 0 to 32768 [ 170.752328][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 170.759885][ T5834] usb 4-1: USB disconnect, device number 8 [ 170.762996][ T7933] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 170.783590][ T27] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 170.792421][ T27] usb 1-1: config 1 has no interface number 0 [ 170.798681][ T27] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 170.837990][ T27] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 170.880141][ T27] usb 1-1: config 1 interface 105 has no altsetting 0 [ 170.904301][ T27] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 170.928934][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.957955][ T7935] loop3: detected capacity change from 0 to 2048 [ 170.964827][ T27] usb 1-1: Product: syz [ 170.969031][ T27] usb 1-1: Manufacturer: syz [ 170.976603][ T27] usb 1-1: SerialNumber: syz [ 170.998946][ T7929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.034015][ T7935] NILFS (loop3): invalid segment: Inconsistency found [ 171.046897][ T7929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.058640][ T7935] NILFS (loop3): trying rollback from an earlier position [ 171.087152][ T5799] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 171.107819][ T7935] NILFS (loop3): recovery complete [ 171.123781][ T7940] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.273698][ T5799] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 171.501737][ T7929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.527467][ T7929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.707137][ T7946] loop5: detected capacity change from 0 to 4096 [ 171.735648][ T7946] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 171.760566][ T7937] loop4: detected capacity change from 0 to 32768 [ 171.779714][ T7937] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 171.818221][ T7946] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 171.917120][ T5957] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 172.001897][ T6448] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22. [ 172.156327][ T27] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 172.168585][ T7951] trusted_key: syz.4.543 sent an empty control message without MSG_MORE. [ 172.186406][ T27] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 172.224517][ T27] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:35:53:15:2b:a4 [ 172.265648][ T27] usb 1-1: USB disconnect, device number 7 [ 172.315029][ T27] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 172.453697][ T27] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 172.477356][ T27] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 172.505470][ T28] audit: type=1326 audit(1758657370.670:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a3352af79 code=0x7ffc0000 [ 172.528939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 172.550781][ T27] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 172.622428][ T28] audit: type=1326 audit(1758657370.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3358eec9 code=0x7ffc0000 [ 172.653573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 172.682386][ T28] audit: type=1326 audit(1758657370.670:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a3352af79 code=0x7ffc0000 [ 172.762331][ T28] audit: type=1326 audit(1758657370.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3358eec9 code=0x7ffc0000 [ 172.803531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 172.837247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 172.912324][ T28] audit: type=1326 audit(1758657370.670:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a3352af79 code=0x7ffc0000 [ 173.042637][ T28] audit: type=1326 audit(1758657370.670:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3358eec9 code=0x7ffc0000 [ 173.044260][ T7965] io-wq is not configured for unbound workers [ 173.066121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 173.187253][ T28] audit: type=1326 audit(1758657370.680:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7954 comm="syz.4.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a3352af79 code=0x7ffc0000 [ 173.537665][ T7975] Bluetooth: MGMT ver 1.22 [ 174.149189][ T7958] loop3: detected capacity change from 0 to 40427 [ 174.209615][ T7958] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 174.237579][ T7958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.343920][ T7958] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.510988][ T7958] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 174.555387][ T7958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.712352][ T5892] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 175.932448][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 175.949423][ T5892] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 175.962580][ T5892] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 175.986018][ T5892] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 176.012271][ T5892] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 176.051887][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 176.071845][ T5892] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 176.091295][ T5892] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 176.110184][ T5892] usb 6-1: Product: syz [ 176.120561][ T5892] usb 6-1: Manufacturer: syz [ 176.133557][ T5892] usb 6-1: SerialNumber: syz [ 176.146377][ T5892] usb 6-1: config 0 descriptor?? [ 176.162667][ T5892] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 176.189041][ T8022] loop3: detected capacity change from 0 to 32768 [ 176.206123][ T5892] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 176.229105][ T8022] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 176.272323][ T8022] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.313475][ T8029] loop4: detected capacity change from 0 to 32768 [ 176.327145][ T8029] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 176.472823][ T9] usb 6-1: USB disconnect, device number 5 [ 176.478794][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 176.485333][ T8026] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 176.514469][ T8022] XFS (loop3): Ending clean mount [ 176.523729][ T9] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 176.560719][ T8022] XFS (loop3): Quotacheck needed: Please wait. [ 176.626432][ T6561] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 176.730284][ T8022] XFS (loop3): Quotacheck: Done. [ 176.998149][ T5787] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 177.089585][ T8047] loop4: detected capacity change from 0 to 128 [ 177.127351][ T8047] EXT4-fs: Ignoring removed nobh option [ 177.178933][ T8047] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.219994][ T8047] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.413969][ T6323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.973966][ T787] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 178.189530][ T787] usb 5-1: not running at top speed; connect to a high speed hub [ 178.203924][ T787] usb 5-1: config index 0 descriptor too short (expected 2322, got 18) [ 178.231586][ T787] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 178.257335][ T787] usb 5-1: config 95 has no interface number 0 [ 178.287918][ T787] usb 5-1: config 95 interface 1 has no altsetting 0 [ 178.321933][ T787] usb 5-1: string descriptor 0 read error: -22 [ 178.329079][ T787] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 178.357182][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.974262][ T9] usb 5-1: USB disconnect, device number 6 [ 179.505554][ T8081] loop5: detected capacity change from 0 to 128 [ 179.530673][ T8081] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 179.556533][ T8081] hpfs: filesystem error: improperly stopped [ 179.564274][ T8081] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 179.573131][ T8081] hpfs: You really don't want any checks? You are crazy... [ 179.590336][ T8081] hpfs: hpfs_map_sector(): read error [ 179.622751][ T8081] hpfs: code page support is disabled [ 179.628407][ T8081] hpfs: hpfs_map_4sectors(): unaligned read [ 179.647626][ T8081] hpfs: hpfs_map_4sectors(): unaligned read [ 179.667992][ T8081] hpfs: filesystem error: unable to find root dir [ 179.928701][ T8086] program syz.5.582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.422341][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 180.582606][ T7990] net_ratelimit: 250 callbacks suppressed [ 180.582625][ T7990] Set syz1 is full, maxelem 65536 reached [ 180.632311][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 180.641894][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 180.661104][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.700312][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 180.723010][ T9] pvrusb2: ********** [ 180.732519][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 180.753714][ T9] pvrusb2: Important functionality might not be entirely working. [ 180.761584][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 180.773951][ T9] pvrusb2: ********** [ 180.940154][ T2318] pvrusb2: Invalid write control endpoint [ 181.036468][ T2318] pvrusb2: Invalid write control endpoint [ 181.050528][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 181.062716][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 181.070414][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 181.091651][ T2318] pvrusb2: Device being rendered inoperable [ 181.101234][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 181.126896][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 181.137944][ T2318] pvrusb2: Attached sub-driver cx25840 [ 181.159930][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 181.170664][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.197644][ T8092] pvrusb2: Attempted to execute control transfer when device not ok [ 181.207962][ T5892] usb 5-1: USB disconnect, device number 7 [ 181.329757][ T8111] loop8: detected capacity change from 0 to 8 [ 181.351918][ T8111] Dev loop8: unable to read RDB block 8 [ 181.358843][ T8111] loop8: unable to read partition table [ 181.366016][ T8111] loop8: partition table beyond EOD, truncated [ 181.372800][ T8111] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 181.907095][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 182.095250][ T8113] loop5: detected capacity change from 0 to 32768 [ 182.157092][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.181624][ T8113] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.207989][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.238798][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.260840][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.273008][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.285226][ T9] usb 1-1: config 0 descriptor?? [ 182.419172][ T8113] XFS (loop5): Ending clean mount [ 182.463400][ T8113] XFS (loop5): Quotacheck needed: Please wait. [ 182.563656][ T8113] XFS (loop5): Quotacheck: Done. [ 182.644469][ T8144] loop3: detected capacity change from 0 to 512 [ 182.652440][ T8144] EXT4-fs: Ignoring removed orlov option [ 182.672677][ T8144] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 182.717902][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 182.742744][ T8144] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 182.761590][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 182.795037][ T8144] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.604: corrupted in-inode xattr: e_value size too large [ 182.854416][ T6448] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.899007][ T8144] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.604: couldn't read orphan inode 15 (err -117) [ 182.969346][ T8144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.104574][ T9] usb 1-1: USB disconnect, device number 8 [ 183.279449][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.772406][ T5892] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.985792][ T5892] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 184.000529][ T5892] usb 6-1: config 0 has no interface number 0 [ 184.006871][ T5892] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 184.023853][ T5892] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 184.041223][ T5892] usb 6-1: config 0 interface 255 has no altsetting 0 [ 184.049484][ T5892] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 184.066085][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.099632][ T5892] usb 6-1: config 0 descriptor?? [ 184.117530][ T5892] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 184.751249][ T5892] usb 6-1: USB disconnect, device number 6 [ 184.862315][ T5834] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.083092][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 185.101524][ T5834] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.111114][ T5834] usb 4-1: config 59 has an invalid interface number: 140 but max is 0 [ 185.126641][ T5834] usb 4-1: config 59 has no interface number 0 [ 185.136985][ T8191] loop4: detected capacity change from 0 to 256 [ 185.151386][ T5834] usb 4-1: config 59 interface 140 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 185.189707][ T5834] usb 4-1: config 59 interface 140 altsetting 7 endpoint 0x7 has an invalid bInterval 181, changing to 11 [ 185.218586][ T8191] FAT-fs (loop4): Directory bread(block 64) failed [ 185.227923][ T8191] FAT-fs (loop4): Directory bread(block 65) failed [ 185.234358][ T5834] usb 4-1: config 59 interface 140 altsetting 7 endpoint 0x7 has invalid maxpacket 1624, setting to 1024 [ 185.240307][ T8191] FAT-fs (loop4): Directory bread(block 66) failed [ 185.256729][ T5834] usb 4-1: config 59 interface 140 has no altsetting 0 [ 185.261849][ T8191] FAT-fs (loop4): Directory bread(block 67) failed [ 185.271948][ T8191] FAT-fs (loop4): Directory bread(block 68) failed [ 185.286897][ T8191] FAT-fs (loop4): Directory bread(block 69) failed [ 185.293170][ T5834] usb 4-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.09 [ 185.295391][ T8191] FAT-fs (loop4): Directory bread(block 70) failed [ 185.314546][ T8191] FAT-fs (loop4): Directory bread(block 71) failed [ 185.318040][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.321425][ T8191] FAT-fs (loop4): Directory bread(block 72) failed [ 185.356062][ T8191] FAT-fs (loop4): Directory bread(block 73) failed [ 185.359686][ T5834] usb 4-1: Product: syz [ 185.370744][ T5834] usb 4-1: Manufacturer: syz [ 185.380857][ T5834] usb 4-1: SerialNumber: syz [ 185.403995][ T8178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.411353][ T8178] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.462356][ T787] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 185.664706][ T787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.695820][ T787] usb 6-1: config 0 has no interfaces? [ 185.709980][ T787] usb 6-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 185.711163][ T5834] usb-storage 4-1:59.140: USB Mass Storage device detected [ 185.741232][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.765333][ T787] usb 6-1: config 0 descriptor?? [ 185.772472][ T5834] usb-storage 4-1:59.140: Quirks match for vid 05ab pid 0060: 2 [ 185.863058][ T5834] usb 4-1: USB disconnect, device number 9 [ 185.984419][ T786] usb 6-1: USB disconnect, device number 7 [ 186.189415][ T8217] vlan2: entered allmulticast mode [ 186.194716][ T8217] erspan0: entered allmulticast mode [ 186.510819][ T8229] loop4: detected capacity change from 0 to 256 [ 186.922669][ T5887] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.125870][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.137539][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.158741][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.197494][ T5887] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.247496][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.277335][ T5887] usb 1-1: config 0 descriptor?? [ 187.444094][ T8237] loop4: detected capacity change from 0 to 32768 [ 187.469049][ T8256] veth1_to_bond: entered allmulticast mode [ 187.471335][ T8237] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.640 (8237) [ 187.515734][ T8256] veth1_to_bond: left allmulticast mode [ 187.532871][ T8237] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.572763][ T8237] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 187.602947][ T8237] BTRFS info (device loop4): using free space tree [ 187.729606][ T5887] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 187.772361][ T8237] BTRFS info (device loop4): enabling ssd optimizations [ 187.813419][ T8237] BTRFS info (device loop4): auto enabling async discard [ 187.843576][ T5887] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 187.984609][ T5887] usb 1-1: USB disconnect, device number 9 [ 188.112157][ T8278] fido_id[8278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 188.154478][ T6323] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 188.494588][ T5799] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (5799) [ 189.666730][ T8289] loop0: detected capacity change from 0 to 32768 [ 189.749255][ T8289] JBD2: Ignoring recovery information on journal [ 189.819653][ T8295] loop4: detected capacity change from 0 to 32768 [ 189.833000][ T8295] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 189.870907][ T8293] loop5: detected capacity change from 0 to 32768 [ 189.920428][ T8289] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 189.967600][ T8293] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.111769][ T5957] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 190.195396][ T8293] XFS (loop5): Ending clean mount [ 190.305386][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 190.305401][ T28] audit: type=1800 audit(1758657388.470:109): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.655" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 190.451135][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 190.591499][ T6448] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 190.793878][ T8320] input: syz1 as /devices/virtual/input/input14 [ 191.067558][ T8325] loop4: detected capacity change from 0 to 64 [ 191.177401][ T28] audit: type=1800 audit(1758657389.340:110): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.665" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 191.577950][ T8334] loop0: detected capacity change from 0 to 4096 [ 191.584784][ T8331] loop3: detected capacity change from 0 to 8192 [ 191.598188][ T8334] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 191.668998][ T8334] ntfs3: loop0: MFT: r=18, expect seq=1 instead of 0! [ 191.690701][ T8334] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 191.741388][ T8334] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 192.620275][ T8359] loop0: detected capacity change from 0 to 512 [ 192.635919][ T8359] EXT4-fs: Ignoring removed nobh option [ 192.656649][ T8359] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.679199][ T8359] EXT4-fs (loop0): 1 truncate cleaned up [ 192.708717][ T8359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.737286][ T8347] loop3: detected capacity change from 0 to 32768 [ 192.767164][ T8347] (syz.3.675,8347,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 192.782078][ T28] audit: type=1800 audit(1758657390.960:111): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.680" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 192.804866][ T8347] (syz.3.675,8347,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 192.825670][ T8359] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.680: corrupted in-inode xattr: overlapping e_value [ 192.835331][ T8347] JBD2: Ignoring recovery information on journal [ 192.852690][ T8359] EXT4-fs (loop0): Remounting filesystem read-only [ 192.859380][ T8359] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1781: inode #15: comm syz.0.680: unable to update i_inline_off [ 192.874299][ T5887] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.905617][ T8347] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.920877][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.081910][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 193.112105][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 193.152904][ T5887] usb 5-1: config 0 has no interfaces? [ 193.161670][ T5887] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 193.201166][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.229595][ T5887] usb 5-1: Product: syz [ 193.235102][ T5887] usb 5-1: Manufacturer: syz [ 193.239746][ T5887] usb 5-1: SerialNumber: syz [ 193.257075][ T5887] usb 5-1: config 0 descriptor?? [ 193.524374][ T5887] usb 5-1: USB disconnect, device number 8 [ 193.756417][ T8374] loop3: detected capacity change from 0 to 32768 [ 193.785940][ T8374] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.870570][ T8374] XFS (loop3): Ending clean mount [ 193.879678][ T8374] XFS (loop3): Quotacheck needed: Please wait. [ 193.935574][ T8374] XFS (loop3): Quotacheck: Done. [ 193.994235][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.379611][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386412][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.139608][ T8413] batadv_slave_1: entered promiscuous mode [ 195.147384][ T8412] batadv_slave_1: left promiscuous mode [ 195.258523][ T8415] capability: warning: `syz.0.700' uses deprecated v2 capabilities in a way that may be insecure [ 195.287357][ T8405] loop3: detected capacity change from 0 to 40427 [ 195.315052][ T8405] F2FS-fs (loop3): invalid crc value [ 195.355006][ T8405] F2FS-fs (loop3): Found nat_bits in checkpoint [ 195.583484][ T8405] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 195.651691][ T8422] loop5: detected capacity change from 0 to 4096 [ 195.717098][ T5787] syz-executor: attempt to access beyond end of device [ 195.717098][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.772598][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 195.797449][ T8422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.918290][ T8422] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.013619][ T6448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.529658][ T8420] loop0: detected capacity change from 0 to 40427 [ 196.555923][ T8420] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3840) blocks(1024) [ 196.602816][ T8443] loop5: detected capacity change from 0 to 1024 [ 196.603640][ T8420] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.639063][ T8443] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 196.676227][ T8443] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 196.688589][ T8420] F2FS-fs (loop0): invalid crc value [ 196.729704][ T8420] F2FS-fs (loop0): Found nat_bits in checkpoint [ 196.741313][ T8443] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 196.803810][ T8443] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 196.853101][ T8443] EXT4-fs error (device loop5): ext4_get_journal_inode:5807: inode #17: comm syz.5.710: iget: bad i_size value: 4398046511204 [ 196.920901][ T8443] EXT4-fs (loop5): no journal found [ 196.974488][ T8420] F2FS-fs (loop0): Start checkpoint disabled! [ 197.032813][ T8420] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.039991][ T8420] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 197.481307][ T2907] kworker/u4:7: attempt to access beyond end of device [ 197.481307][ T2907] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 197.575028][ T8455] loop3: detected capacity change from 0 to 32768 [ 197.585489][ T2907] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.593438][ T2907] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.600462][ T2907] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.607907][ T2907] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 197.650724][ T8455] JBD2: Ignoring recovery information on journal [ 197.736152][ T8455] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 197.829471][ T8455] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total [ 197.853430][ T8455] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 197.863409][ T8455] OCFS2: File system is now read-only. [ 197.868926][ T8455] (syz.3.714,8455,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 197.877405][ T8455] (syz.3.714,8455,1):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 197.885602][ T8455] (syz.3.714,8455,1):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 197.893988][ T8455] (syz.3.714,8455,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 197.902705][ T8455] (syz.3.714,8455,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 197.911345][ T8455] (syz.3.714,8455,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 197.920895][ T8455] (syz.3.714,8455,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 197.930427][ T8455] (syz.3.714,8455,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 197.939224][ T8455] (syz.3.714,8455,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 197.949018][ T8455] (syz.3.714,8455,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 197.958182][ T8455] (syz.3.714,8455,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 197.967332][ T8455] (syz.3.714,8455,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 197.975610][ T8455] (syz.3.714,8455,1):ocfs2_extend_allocation:592 ERROR: status = -30 [ 197.984003][ T8455] (syz.3.714,8455,1):ocfs2_allocate_unwritten_extents:1498 ERROR: status = -30 [ 197.993161][ T8455] (syz.3.714,8455,1):__ocfs2_change_file_space:2044 ERROR: status = -30 [ 198.122377][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 198.609095][ T8486] pim6reg1: entered promiscuous mode [ 198.617047][ T8486] pim6reg1: entered allmulticast mode [ 199.259907][ T8504] loop4: detected capacity change from 0 to 512 [ 199.293868][ T8504] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.383080][ T8504] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 199.476685][ T5793] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1 [ 199.526700][ T8510] loop3: detected capacity change from 0 to 24 [ 199.535154][ T8510] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 199.552259][ T8510] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 199.628606][ T8510] overlayfs: failed to clone lowerpath [ 199.706813][ T8515] loop5: detected capacity change from 0 to 1024 [ 199.724905][ T8515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.790525][ T8515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.909406][ T6448] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.989892][ T8524] [ 199.992274][ T8524] ===================================================== [ 199.999227][ T8524] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 200.006705][ T8524] syzkaller #0 Not tainted [ 200.011139][ T8524] ----------------------------------------------------- [ 200.018089][ T8524] syz.5.741/8524 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 200.025662][ T8524] ffffffff8ca0a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xf0/0x3c0 [ 200.034330][ T8524] [ 200.034330][ T8524] and this task is already holding: [ 200.041695][ T8524] ffff888030c82118 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x29/0x3c0 [ 200.050580][ T8524] which would create a new lock dependency: [ 200.056470][ T8524] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 200.064221][ T8524] [ 200.064221][ T8524] but this new dependency connects a HARDIRQ-irq-safe lock: [ 200.073671][ T8524] (&dev->event_lock#2){-...}-{2:2} [ 200.073698][ T8524] [ 200.073698][ T8524] ... which became HARDIRQ-irq-safe at: [ 200.086585][ T8524] lock_acquire+0x197/0x410 [ 200.091182][ T8524] _raw_spin_lock_irqsave+0xa8/0xf0 [ 200.096471][ T8524] input_event+0x7a/0xc0 [ 200.100811][ T8524] psmouse_report_standard_packet+0x53/0x200 [ 200.106888][ T8524] psmouse_process_byte+0x478/0x670 [ 200.112176][ T8524] psmouse_handle_byte+0x43/0x490 [ 200.117293][ T8524] ps2_interrupt+0x164/0x980 [ 200.121969][ T8524] serio_interrupt+0x8b/0x130 [ 200.126753][ T8524] i8042_interrupt+0x394/0x730 [ 200.131604][ T8524] __handle_irq_event_percpu+0x276/0x930 [ 200.137328][ T8524] handle_irq_event+0x8b/0x1e0 [ 200.142188][ T8524] handle_edge_irq+0x247/0xb30 [ 200.147051][ T8524] __common_interrupt+0x13b/0x230 [ 200.152264][ T8524] common_interrupt+0xb4/0xd0 [ 200.157045][ T8524] asm_common_interrupt+0x26/0x40 [ 200.162158][ T8524] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 200.167975][ T8524] i8042_aux_write+0x109/0x170 [ 200.172838][ T8524] ps2_do_sendbyte+0x1ff/0x6d0 [ 200.177691][ T8524] ps2_sendbyte+0x5f/0x120 [ 200.182195][ T8524] cypress_send_ext_cmd+0x23d/0x920 [ 200.187491][ T8524] cypress_detect+0x8d/0x190 [ 200.192175][ T8524] psmouse_extensions+0x467/0xbe0 [ 200.197313][ T8524] psmouse_switch_protocol+0xdc/0x610 [ 200.202779][ T8524] psmouse_connect+0x89f/0x1470 [ 200.207736][ T8524] serio_driver_probe+0x7a/0xa0 [ 200.212678][ T8524] really_probe+0x25b/0xb40 [ 200.217268][ T8524] __driver_probe_device+0x18c/0x330 [ 200.222640][ T8524] driver_probe_device+0x4f/0x420 [ 200.227750][ T8524] __driver_attach+0x44e/0x6f0 [ 200.232604][ T8524] bus_for_each_dev+0x22d/0x2a0 [ 200.237566][ T8524] serio_handle_event+0x1a2/0x860 [ 200.242676][ T8524] process_scheduled_works+0xa45/0x15b0 [ 200.248308][ T8524] worker_thread+0xa55/0xfc0 [ 200.252991][ T8524] kthread+0x2fa/0x390 [ 200.257170][ T8524] ret_from_fork+0x48/0x80 [ 200.261678][ T8524] ret_from_fork_asm+0x11/0x20 [ 200.266535][ T8524] [ 200.266535][ T8524] to a HARDIRQ-irq-unsafe lock: [ 200.273549][ T8524] (tasklist_lock){.+.+}-{2:2} [ 200.273576][ T8524] [ 200.273576][ T8524] ... which became HARDIRQ-irq-unsafe at: [ 200.286198][ T8524] ... [ 200.286204][ T8524] lock_acquire+0x197/0x410 [ 200.293376][ T8524] _raw_read_lock+0x36/0x50 [ 200.297972][ T8524] do_wait+0x294/0xaf0 [ 200.302139][ T8524] kernel_wait+0xac/0x170 [ 200.306559][ T8524] call_usermodehelper_exec_work+0xb9/0x220 [ 200.312547][ T8524] process_scheduled_works+0xa45/0x15b0 [ 200.318178][ T8524] worker_thread+0xa55/0xfc0 [ 200.322854][ T8524] kthread+0x2fa/0x390 [ 200.327003][ T8524] ret_from_fork+0x48/0x80 [ 200.331501][ T8524] ret_from_fork_asm+0x11/0x20 [ 200.336350][ T8524] [ 200.336350][ T8524] other info that might help us debug this: [ 200.336350][ T8524] [ 200.346594][ T8524] Chain exists of: [ 200.346594][ T8524] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 200.346594][ T8524] [ 200.359809][ T8524] Possible interrupt unsafe locking scenario: [ 200.359809][ T8524] [ 200.368218][ T8524] CPU0 CPU1 [ 200.373580][ T8524] ---- ---- [ 200.378936][ T8524] lock(tasklist_lock); [ 200.383188][ T8524] local_irq_disable(); [ 200.389956][ T8524] lock(&dev->event_lock#2); [ 200.397168][ T8524] lock(&f->f_owner.lock); [ 200.404200][ T8524] [ 200.407692][ T8524] lock(&dev->event_lock#2); [ 200.412550][ T8524] [ 200.412550][ T8524] *** DEADLOCK *** [ 200.412550][ T8524] [ 200.420707][ T8524] 2 locks held by syz.5.741/8524: [ 200.425826][ T8524] #0: ffff88802e26ce80 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x1cb/0x4e0 [ 200.434360][ T8524] #1: ffff888030c82118 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x29/0x3c0 [ 200.443676][ T8524] [ 200.443676][ T8524] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 200.454080][ T8524] -> (&dev->event_lock#2){-...}-{2:2} { [ 200.459830][ T8524] IN-HARDIRQ-W at: [ 200.464074][ T8524] lock_acquire+0x197/0x410 [ 200.470589][ T8524] _raw_spin_lock_irqsave+0xa8/0xf0 [ 200.478234][ T8524] input_event+0x7a/0xc0 [ 200.484497][ T8524] psmouse_report_standard_packet+0x53/0x200 [ 200.492501][ T8524] psmouse_process_byte+0x478/0x670 [ 200.499731][ T8524] psmouse_handle_byte+0x43/0x490 [ 200.506881][ T8524] ps2_interrupt+0x164/0x980 [ 200.513487][ T8524] serio_interrupt+0x8b/0x130 [ 200.520256][ T8524] i8042_interrupt+0x394/0x730 [ 200.527178][ T8524] __handle_irq_event_percpu+0x276/0x930 [ 200.534847][ T8524] handle_irq_event+0x8b/0x1e0 [ 200.541697][ T8524] handle_edge_irq+0x247/0xb30 [ 200.548466][ T8524] __common_interrupt+0x13b/0x230 [ 200.555509][ T8524] common_interrupt+0xb4/0xd0 [ 200.562193][ T8524] asm_common_interrupt+0x26/0x40 [ 200.569238][ T8524] _raw_spin_unlock_irqrestore+0xa9/0x110 [ 200.576954][ T8524] i8042_aux_write+0x109/0x170 [ 200.583731][ T8524] ps2_do_sendbyte+0x1ff/0x6d0 [ 200.591373][ T8524] ps2_sendbyte+0x5f/0x120 [ 200.597798][ T8524] cypress_send_ext_cmd+0x23d/0x920 [ 200.605003][ T8524] cypress_detect+0x8d/0x190 [ 200.611598][ T8524] psmouse_extensions+0x467/0xbe0 [ 200.618642][ T8524] psmouse_switch_protocol+0xdc/0x610 [ 200.626022][ T8524] psmouse_connect+0x89f/0x1470 [ 200.632873][ T8524] serio_driver_probe+0x7a/0xa0 [ 200.639726][ T8524] really_probe+0x25b/0xb40 [ 200.646271][ T8524] __driver_probe_device+0x18c/0x330 [ 200.653564][ T8524] driver_probe_device+0x4f/0x420 [ 200.660592][ T8524] __driver_attach+0x44e/0x6f0 [ 200.667376][ T8524] bus_for_each_dev+0x22d/0x2a0 [ 200.674249][ T8524] serio_handle_event+0x1a2/0x860 [ 200.681289][ T8524] process_scheduled_works+0xa45/0x15b0 [ 200.688841][ T8524] worker_thread+0xa55/0xfc0 [ 200.695446][ T8524] kthread+0x2fa/0x390 [ 200.701519][ T8524] ret_from_fork+0x48/0x80 [ 200.707951][ T8524] ret_from_fork_asm+0x11/0x20 [ 200.714751][ T8524] INITIAL USE at: [ 200.718828][ T8524] lock_acquire+0x197/0x410 [ 200.725255][ T8524] _raw_spin_lock_irqsave+0xa8/0xf0 [ 200.732367][ T8524] input_inject_event+0xab/0x320 [ 200.739308][ T8524] led_trigger_event+0x133/0x210 [ 200.746168][ T8524] kbd_led_trigger_activate+0xbd/0x100 [ 200.753548][ T8524] led_trigger_set+0x524/0x940 [ 200.760229][ T8524] led_trigger_set_default+0x1a0/0x1e0 [ 200.767611][ T8524] led_classdev_register_ext+0x6e9/0x940 [ 200.775169][ T8524] input_leds_connect+0x4eb/0x6b0 [ 200.782118][ T8524] input_register_device+0xcdc/0x1070 [ 200.789415][ T8524] atkbd_connect+0x6fb/0x9a0 [ 200.795946][ T8524] serio_driver_probe+0x7a/0xa0 [ 200.802711][ T8524] really_probe+0x25b/0xb40 [ 200.809128][ T8524] __driver_probe_device+0x18c/0x330 [ 200.816326][ T8524] driver_probe_device+0x4f/0x420 [ 200.823378][ T8524] __driver_attach+0x44e/0x6f0 [ 200.830088][ T8524] bus_for_each_dev+0x22d/0x2a0 [ 200.836850][ T8524] serio_handle_event+0x1a2/0x860 [ 200.843790][ T8524] process_scheduled_works+0xa45/0x15b0 [ 200.851256][ T8524] worker_thread+0xa55/0xfc0 [ 200.857760][ T8524] kthread+0x2fa/0x390 [ 200.863754][ T8524] ret_from_fork+0x48/0x80 [ 200.870094][ T8524] ret_from_fork_asm+0x11/0x20 [ 200.876778][ T8524] } [ 200.879446][ T8524] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 200.888739][ T8524] -> (&new->fa_lock){....}-{2:2} { [ 200.893971][ T8524] INITIAL USE at: [ 200.897957][ T8524] lock_acquire+0x197/0x410 [ 200.904201][ T8524] _raw_write_lock_irq+0xa3/0xe0 [ 200.910882][ T8524] fasync_remove_entry+0xf4/0x1c0 [ 200.917640][ T8524] lease_modify+0x1a6/0x390 [ 200.923884][ T8524] locks_remove_file+0x4c0/0xe20 [ 200.930568][ T8524] __fput+0x18f/0x970 [ 200.936300][ T8524] task_work_run+0x1ce/0x250 [ 200.942633][ T8524] exit_to_user_mode_loop+0xe6/0x110 [ 200.949670][ T8524] exit_to_user_mode_prepare+0xf6/0x180 [ 200.957012][ T8524] syscall_exit_to_user_mode+0x1a/0x50 [ 200.964229][ T8524] do_syscall_64+0x61/0xb0 [ 200.970403][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.978076][ T8524] INITIAL READ USE at: [ 200.982700][ T8524] lock_acquire+0x197/0x410 [ 200.989398][ T8524] _raw_read_lock_irqsave+0xb0/0x100 [ 200.996873][ T8524] kill_fasync+0x192/0x4b0 [ 201.003473][ T8524] mousedev_notify_readers+0x6eb/0xc00 [ 201.011129][ T8524] mousedev_event+0x5f0/0x1310 [ 201.018087][ T8524] input_pass_values+0x9c9/0x1300 [ 201.025301][ T8524] input_event_dispose+0x346/0x6c0 [ 201.032589][ T8524] input_inject_event+0x1f9/0x320 [ 201.039798][ T8524] evdev_write+0x32a/0x470 [ 201.046389][ T8524] vfs_write+0x288/0x940 [ 201.052808][ T8524] ksys_write+0x147/0x250 [ 201.059318][ T8524] do_syscall_64+0x55/0xb0 [ 201.065920][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.074004][ T8524] } [ 201.076583][ T8524] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 201.085355][ T8524] ... acquired at: [ 201.089334][ T8524] _raw_read_lock_irqsave+0xb0/0x100 [ 201.094804][ T8524] kill_fasync+0x192/0x4b0 [ 201.099410][ T8524] mousedev_notify_readers+0x6eb/0xc00 [ 201.105041][ T8524] mousedev_event+0x5f0/0x1310 [ 201.110071][ T8524] input_pass_values+0x9c9/0x1300 [ 201.115292][ T8524] input_event_dispose+0x346/0x6c0 [ 201.120589][ T8524] input_inject_event+0x1f9/0x320 [ 201.125796][ T8524] evdev_write+0x32a/0x470 [ 201.130389][ T8524] vfs_write+0x288/0x940 [ 201.134827][ T8524] ksys_write+0x147/0x250 [ 201.139341][ T8524] do_syscall_64+0x55/0xb0 [ 201.143941][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.150028][ T8524] [ 201.152351][ T8524] -> (&f->f_owner.lock){....}-{2:2} { [ 201.157739][ T8524] INITIAL USE at: [ 201.161634][ T8524] lock_acquire+0x197/0x410 [ 201.167702][ T8524] _raw_write_lock_irq+0xa3/0xe0 [ 201.174200][ T8524] __f_setown+0x3b/0x330 [ 201.180457][ T8524] generic_setlease+0xe32/0x1270 [ 201.186982][ T8524] fcntl_setlease+0x268/0x340 [ 201.193234][ T8524] do_fcntl+0x1cb/0x1380 [ 201.199048][ T8524] __se_sys_fcntl+0xc9/0x1a0 [ 201.205319][ T8524] do_syscall_64+0x55/0xb0 [ 201.211344][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.218831][ T8524] INITIAL READ USE at: [ 201.223174][ T8524] lock_acquire+0x197/0x410 [ 201.229691][ T8524] _raw_read_lock_irqsave+0xb0/0x100 [ 201.236987][ T8524] send_sigio+0x33/0x360 [ 201.243242][ T8524] dnotify_handle_event+0x153/0x420 [ 201.250457][ T8524] fsnotify+0x132e/0x1780 [ 201.256794][ T8524] __fsnotify_parent+0x5e6/0x720 [ 201.263733][ T8524] do_iter_read+0xa72/0xc80 [ 201.270247][ T8524] do_readv+0x235/0x3e0 [ 201.276425][ T8524] do_syscall_64+0x55/0xb0 [ 201.282841][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.290747][ T8524] } [ 201.293254][ T8524] ... key at: [] init_file.__key+0x0/0x20 [ 201.301079][ T8524] ... acquired at: [ 201.304911][ T8524] _raw_read_lock_irqsave+0xb0/0x100 [ 201.310376][ T8524] send_sigio+0x33/0x360 [ 201.314888][ T8524] kill_fasync+0x228/0x4b0 [ 201.319521][ T8524] mousedev_notify_readers+0x6eb/0xc00 [ 201.325160][ T8524] mousedev_event+0x5f0/0x1310 [ 201.330113][ T8524] input_pass_values+0x9c9/0x1300 [ 201.335321][ T8524] input_event_dispose+0x346/0x6c0 [ 201.340612][ T8524] input_inject_event+0x1f9/0x320 [ 201.345819][ T8524] evdev_write+0x32a/0x470 [ 201.350409][ T8524] vfs_write+0x288/0x940 [ 201.354835][ T8524] ksys_write+0x147/0x250 [ 201.359343][ T8524] do_syscall_64+0x55/0xb0 [ 201.363966][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.370049][ T8524] [ 201.372373][ T8524] [ 201.372373][ T8524] the dependencies between the lock to be acquired [ 201.372382][ T8524] and HARDIRQ-irq-unsafe lock: [ 201.385915][ T8524] -> (tasklist_lock){.+.+}-{2:2} { [ 201.391039][ T8524] HARDIRQ-ON-R at: [ 201.395012][ T8524] lock_acquire+0x197/0x410 [ 201.401188][ T8524] _raw_read_lock+0x36/0x50 [ 201.407693][ T8524] do_wait+0x294/0xaf0 [ 201.413422][ T8524] kernel_wait+0xac/0x170 [ 201.419418][ T8524] call_usermodehelper_exec_work+0xb9/0x220 [ 201.427003][ T8524] process_scheduled_works+0xa45/0x15b0 [ 201.434212][ T8524] worker_thread+0xa55/0xfc0 [ 201.440469][ T8524] kthread+0x2fa/0x390 [ 201.446190][ T8524] ret_from_fork+0x48/0x80 [ 201.452279][ T8524] ret_from_fork_asm+0x11/0x20 [ 201.458701][ T8524] SOFTIRQ-ON-R at: [ 201.462695][ T8524] lock_acquire+0x197/0x410 [ 201.468848][ T8524] _raw_read_lock+0x36/0x50 [ 201.475021][ T8524] do_wait+0x294/0xaf0 [ 201.480776][ T8524] kernel_wait+0xac/0x170 [ 201.486768][ T8524] call_usermodehelper_exec_work+0xb9/0x220 [ 201.494327][ T8524] process_scheduled_works+0xa45/0x15b0 [ 201.501538][ T8524] worker_thread+0xa55/0xfc0 [ 201.507800][ T8524] kthread+0x2fa/0x390 [ 201.513538][ T8524] ret_from_fork+0x48/0x80 [ 201.519889][ T8524] ret_from_fork_asm+0x11/0x20 [ 201.526339][ T8524] INITIAL USE at: [ 201.530247][ T8524] lock_acquire+0x197/0x410 [ 201.536334][ T8524] _raw_write_lock_irq+0xa3/0xe0 [ 201.542837][ T8524] copy_process+0x225d/0x3d70 [ 201.549080][ T8524] kernel_clone+0x21b/0x840 [ 201.555149][ T8524] user_mode_thread+0xde/0x130 [ 201.561482][ T8524] rest_init+0x27/0x300 [ 201.567208][ T8524] arch_call_rest_init+0xe/0x10 [ 201.573630][ T8524] start_kernel+0x459/0x4e0 [ 201.579711][ T8524] x86_64_start_reservations+0x2a/0x30 [ 201.586841][ T8524] copy_bootdata+0x0/0xe0 [ 201.592745][ T8524] secondary_startup_64_no_verify+0x179/0x17b [ 201.600387][ T8524] INITIAL READ USE at: [ 201.604718][ T8524] lock_acquire+0x197/0x410 [ 201.611215][ T8524] _raw_read_lock+0x36/0x50 [ 201.617712][ T8524] do_wait+0x294/0xaf0 [ 201.623788][ T8524] kernel_wait+0xac/0x170 [ 201.630137][ T8524] call_usermodehelper_exec_work+0xb9/0x220 [ 201.638131][ T8524] process_scheduled_works+0xa45/0x15b0 [ 201.645709][ T8524] worker_thread+0xa55/0xfc0 [ 201.652743][ T8524] kthread+0x2fa/0x390 [ 201.658816][ T8524] ret_from_fork+0x48/0x80 [ 201.665255][ T8524] ret_from_fork_asm+0x11/0x20 [ 201.672030][ T8524] } [ 201.674557][ T8524] ... key at: [] tasklist_lock+0x18/0x40 [ 201.682293][ T8524] ... acquired at: [ 201.686098][ T8524] _raw_read_lock+0x36/0x50 [ 201.690780][ T8524] send_sigurg+0xf0/0x3c0 [ 201.695384][ T8524] sk_send_sigurg+0x6f/0xc0 [ 201.701399][ T8524] queue_oob+0x3d7/0x4e0 [ 201.705842][ T8524] unix_stream_sendmsg+0xaa2/0xba0 [ 201.711154][ T8524] ____sys_sendmsg+0x5bf/0x950 [ 201.716108][ T8524] ___sys_sendmsg+0x220/0x290 [ 201.720979][ T8524] __sys_sendmmsg+0x275/0x4a0 [ 201.725851][ T8524] __x64_sys_sendmmsg+0xa0/0xb0 [ 201.730905][ T8524] do_syscall_64+0x55/0xb0 [ 201.735531][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.741615][ T8524] [ 201.743940][ T8524] [ 201.743940][ T8524] stack backtrace: [ 201.749846][ T8524] CPU: 1 PID: 8524 Comm: syz.5.741 Not tainted syzkaller #0 [ 201.757135][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.767200][ T8524] Call Trace: [ 201.770481][ T8524] [ 201.773422][ T8524] dump_stack_lvl+0x16c/0x230 [ 201.778109][ T8524] ? load_image+0x3b0/0x3b0 [ 201.783497][ T8524] ? show_regs_print_info+0x20/0x20 [ 201.788714][ T8524] ? load_image+0x3b0/0x3b0 [ 201.793227][ T8524] ? print_shortest_lock_dependencies+0xf4/0x160 [ 201.799569][ T8524] __lock_acquire+0x678f/0x7c80 [ 201.804446][ T8524] ? verify_lock_unused+0x140/0x140 [ 201.809668][ T8524] ? verify_lock_unused+0x140/0x140 [ 201.814886][ T8524] lock_acquire+0x197/0x410 [ 201.819401][ T8524] ? send_sigurg+0xf0/0x3c0 [ 201.823916][ T8524] ? read_lock_is_recursive+0x20/0x20 [ 201.829293][ T8524] ? do_raw_read_lock+0x3d/0x90 [ 201.834143][ T8524] ? _raw_read_lock_irqsave+0xbc/0x100 [ 201.839620][ T8524] ? _raw_read_lock+0x50/0x50 [ 201.844306][ T8524] ? __lock_acquire+0x7c80/0x7c80 [ 201.849345][ T8524] ? do_raw_spin_lock+0x121/0x2c0 [ 201.854387][ T8524] _raw_read_lock+0x36/0x50 [ 201.859074][ T8524] ? send_sigurg+0xf0/0x3c0 [ 201.863585][ T8524] send_sigurg+0xf0/0x3c0 [ 201.867926][ T8524] sk_send_sigurg+0x6f/0xc0 [ 201.872431][ T8524] queue_oob+0x3d7/0x4e0 [ 201.876680][ T8524] ? scm_stat_add+0xc0/0xc0 [ 201.881203][ T8524] ? __might_sleep+0xe0/0xe0 [ 201.885816][ T8524] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 201.891899][ T8524] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 201.898145][ T8524] unix_stream_sendmsg+0xaa2/0xba0 [ 201.903286][ T8524] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 201.909271][ T8524] ? aa_sk_perm+0x7fc/0x930 [ 201.913778][ T8524] ? unix_show_fdinfo+0x270/0x270 [ 201.918803][ T8524] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 201.925251][ T8524] ? aa_sock_msg_perm+0x94/0x150 [ 201.930196][ T8524] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.935493][ T8524] ? security_socket_sendmsg+0x80/0xa0 [ 201.940954][ T8524] ? unix_show_fdinfo+0x270/0x270 [ 201.945982][ T8524] ____sys_sendmsg+0x5bf/0x950 [ 201.950762][ T8524] ? __asan_memset+0x22/0x40 [ 201.955356][ T8524] ? __sys_sendmsg_sock+0x30/0x30 [ 201.960382][ T8524] ? __import_iovec+0x5f2/0x860 [ 201.965258][ T8524] ? import_iovec+0x73/0xa0 [ 201.969773][ T8524] ___sys_sendmsg+0x220/0x290 [ 201.974463][ T8524] ? __sys_sendmsg+0x270/0x270 [ 201.979248][ T8524] __sys_sendmmsg+0x275/0x4a0 [ 201.983954][ T8524] ? __ia32_sys_sendmsg+0x90/0x90 [ 201.988990][ T8524] ? __ia32_sys_get_robust_list+0x90/0x90 [ 201.994703][ T8524] ? do_fcntl+0x118a/0x1380 [ 201.999207][ T8524] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 202.005190][ T8524] ? lock_chain_count+0x20/0x20 [ 202.010044][ T8524] __x64_sys_sendmmsg+0xa0/0xb0 [ 202.014910][ T8524] do_syscall_64+0x55/0xb0 [ 202.019328][ T8524] ? clear_bhb_loop+0x40/0x90 [ 202.024011][ T8524] ? clear_bhb_loop+0x40/0x90 [ 202.028692][ T8524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.034605][ T8524] RIP: 0033:0x7f1071f8eec9 [ 202.039040][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.058740][ T8524] RSP: 002b:00007f10701f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.067160][ T8524] RAX: ffffffffffffffda RBX: 00007f10721e5fa0 RCX: 00007f1071f8eec9 [ 202.076105][ T8524] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 202.084085][ T8524] RBP: 00007f1072011f91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 202.092064][ T8524] R10: 00000000000408b1 R11: 0000000000000246 R12: 0000000000000000 [ 202.100495][ T8524] R13: 00007f10721e6038 R14: 00007f10721e5fa0 R15: 00007ffff3e8c978 [ 202.108496][ T8524] [ 202.131319][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 202.138246][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 202.713594][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.825984][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.898094][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.997713][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.777786][ T76] hsr_slave_0: left promiscuous mode [ 203.783794][ T76] hsr_slave_1: left promiscuous mode [ 203.789758][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.798585][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.809167][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.817029][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.827611][ T76] bridge_slave_1: left allmulticast mode [ 203.833945][ T76] bridge_slave_1: left promiscuous mode [ 203.839796][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.850312][ T76] bridge_slave_0: left allmulticast mode [ 203.856827][ T76] bridge_slave_0: left promiscuous mode [ 203.870057][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.881909][ T76] veth1_macvtap: left promiscuous mode [ 203.887665][ T76] veth0_macvtap: left promiscuous mode [ 203.894092][ T76] veth1_vlan: left promiscuous mode [ 203.899386][ T76] veth0_vlan: left promiscuous mode [ 204.087599][ T76] team0 (unregistering): Port device team_slave_1 removed [ 204.115697][ T76] team0 (unregistering): Port device team_slave_0 removed [ 204.145935][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.175116][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.266834][ T76] bond0 (unregistering): Released all slaves [ 205.342925][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.406561][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.470255][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.518205][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.647810][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.731036][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.790370][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.841262][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.990872][ T76] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.068391][ T76] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.118266][ T76] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.179618][ T76] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.488011][ T76] hsr_slave_0: left promiscuous mode [ 207.494308][ T76] hsr_slave_1: left promiscuous mode [ 207.500313][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.509557][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.518124][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.531744][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.539762][ T76] bridge_slave_1: left allmulticast mode [ 207.548470][ T76] bridge_slave_1: left promiscuous mode [ 207.554552][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.565573][ T76] bridge_slave_0: left allmulticast mode [ 207.571245][ T76] bridge_slave_0: left promiscuous mode [ 207.577271][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.593684][ T76] hsr_slave_0: left promiscuous mode [ 207.600252][ T76] hsr_slave_1: left promiscuous mode [ 207.610444][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.618291][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.628193][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.637102][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.647085][ T76] bridge_slave_1: left allmulticast mode [ 207.654490][ T76] bridge_slave_1: left promiscuous mode [ 207.660522][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.671781][ T76] bridge_slave_0: left allmulticast mode [ 207.678153][ T76] bridge_slave_0: left promiscuous mode [ 207.686113][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.705824][ T76] hsr_slave_0: left promiscuous mode [ 207.711851][ T76] hsr_slave_1: left promiscuous mode [ 207.720814][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.730129][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.738238][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.748389][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.756272][ T76] bridge_slave_1: left allmulticast mode [ 207.761920][ T76] bridge_slave_1: left promiscuous mode [ 207.768885][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.777708][ T76] bridge_slave_0: left allmulticast mode [ 207.783792][ T76] bridge_slave_0: left promiscuous mode [ 207.789467][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.804153][ T76] veth1_macvtap: left promiscuous mode [ 207.809721][ T76] veth0_macvtap: left promiscuous mode [ 207.817194][ T76] veth1_vlan: left promiscuous mode [ 207.822576][ T76] veth0_vlan: left promiscuous mode [ 207.828913][ T76] veth1_macvtap: left promiscuous mode [ 207.835765][ T76] veth0_macvtap: left promiscuous mode [ 207.841360][ T76] veth1_vlan: left promiscuous mode [ 207.846993][ T76] veth0_vlan: left promiscuous mode [ 207.854857][ T76] veth1_vlan: left allmulticast mode [ 207.860423][ T76] veth1_macvtap: left promiscuous mode [ 207.865975][ T76] veth0_macvtap: left promiscuous mode [ 207.871548][ T76] veth1_vlan: left promiscuous mode [ 207.877962][ T76] veth0_vlan: left promiscuous mode [ 208.215878][ T76] team0 (unregistering): Port device team_slave_1 removed [ 208.245314][ T76] team0 (unregistering): Port device team_slave_0 removed [ 208.275308][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.310216][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.389605][ T76] bond0 (unregistering): Released all slaves [ 208.584861][ T76] team0 (unregistering): Port device team_slave_1 removed [ 208.615655][ T76] team0 (unregistering): Port device team_slave_0 removed [ 208.644850][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.676076][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.865197][ T76] bond0 (unregistering): Released all slaves [ 209.017629][ T76] team0 (unregistering): Port device team_slave_1 removed [ 209.059313][ T76] team0 (unregistering): Port device team_slave_0 removed [ 209.089081][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.121805][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.205277][ T76] bond0 (unregistering): Released all slaves