last executing test programs: 1m24.503374399s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x54f6, &(0x7f0000005800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x548, &(0x7f0000000b40)="$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") 1m22.43617256s ago: executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0x541b, 0x0) 1m21.762035785s ago: executing program 2: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0xa, [{0x1}, {}]}]}}, &(0x7f0000000f40)=""/4089, 0x36, 0xff9, 0x2}, 0x20) 1m21.653011803s ago: executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x14, &(0x7f0000000080)={0x0}}, 0x0) 1m21.509981834s ago: executing program 2: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw9eDHVY/1OH64Q7Xj3S4frTD9as6XD/W4fpFO2CR1fXfx+R3tin/69r6Ls1uzEby6zYV3OqpgVWDg/F3ObmB/DbzI0ey2exYNpNNNS1fX3YgX/6FDbV1fSSL6xpsWNf62hHy8ycOx20YCPt4U9O6Fu4z+un7svFf/PyJw3915pWbi2bH3dB0f/Xt3LKxtp2fD5fUt3UgW5X2SdzOwYbtXF/wnAw1bedAfrva31u389VlbufQwmZeUa3P+Vg2mP/9pXw/DTf+Wi/tp/Xhsv++Ncuy8wub3brMonVlg9mapksGF56fsfoRWbuP2qH05mx4RcfphmUcp7U5van5OG19TcTnf0O43fAS29D4NP30ydGG5/21+Us5TqPao17qtdJ6DHb7tdIrx2A8Ll7KH/TThcfgpvD4n9i89DFYeOwUHIPpcTccgxs7HYODo0P5NqcnYSC/zcIxuK1p+aF8TQP5fHlz+2Nw8szxU5Nzjz1+++zxQ0dnjs6c2LFt29SOXbv27NkzeWT22MxU/c9L3Nu9b002mF4DG8O+i6+Bd7Us23iozn9jdNH591Jfh2NtXodrW5bt9utwuPXBDVyZF+TiY7r+2rivttPHLgxmS7zG8udn6+W/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNq6/J+Zhlu+K9oG5b+XnB5x+DahmOw9eeR1mOw2z+P9MoxOBaOix9uXfp7wfqwvU9PrPTnkaFFx2B6uOHcU7sk/bw/ticfRcflLbUrrhnNzs7NnL7j0UNnzpzeloVxRbyl4VhpPV7XNDymbNHxOrji43X/7NufvqXg8rVhX43dXvtjbMnnqrbMzjvaP1f5d7fi/dl06fYsjC670vuz6Lt5bX+OZtnXvvfkPd954mvvX3J/1vLm5ycv/2fxlEsbzr8jS5x/Y+5/vb6+dFdPDY0M11+/Q2nvjDSdj5ufquH83DWQr/vVyeWdj0fCf1f6fHxjm/PxupZlu30+Hml9cPF8PNDptx2Xp/X5HAvHybGp9ufj2jLrtq/0mBxuez6+NcyBsP/fHZJCykUNx85Sx21a1/DwSHhcw3ENzcfpjqblR0I2q63rue2XdpxuubV+X0Pp0S24UsfpeMuy3T5O0+++ljpOBzr99u3StD6fY+G4uHFH++O0tsyLOy//3Lk6/rXh3Dna6RgcGRqtbfNIOgjz8302vzoeg3dkh7OT2bFsOr92ND+eBvJ1Tdy5vGNwNPx3pc+V69ocg1talu32MZi+jy117A0ML37wXdD6fI6F4+KZO9sfg7VlPrC7uz+7bgmXpGUafnZt/f3aUr/zuqVlN71Rx8pw2M7v7W7/u9naMsf2rDRntt9Pt4VLrinYT62v36VeU9PZldlP68J2vrJn6f1U257aMl/du8zjaX+WZeceuSv/fW/495W/PfuD55v+3aXo33TOPXLXz6478g8r2X4A+t/r9bGm/r2u4V+mlvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/3CYSUXy/7oPvDL7+rksNfPng3h92g1315eLHdep8PX4/ILa5Xc9O/Nff39ueesezLLstbv/oHD5dXfH7aobD9t58YPNly/y/O3LWvfB+8+l9Tb2178e7j8+nuUeBkUV3Kksy1644cv5esYfvJDPF+8+mM97zj/9VG2ZV/fWv463f/kt9eX/PJR/9x851HT7l8N++EmYUx8t3h/xdt+68O71ux9YWF+83cDG6/OH/cxD9fuN75Pzlafqy8f9vNT2f+dLz32rtvyj7yze/nODxdv/XLjfZ8P8n7fVl298Dmpfx9t9IWx/XF+83R3f/G7h9l/8Yn35Ux+qL3cwzLj+LeHrTR96ZbZxfz06cKjpcWUfri8X1z/1gz/Kr4/3F++/dfvHDlxo2h+tx8eL/1q/n8mW5ePlcT3R37Wsv3Y/jcdnXP9zf3iwaT93Wv/Fe15+W+1+W9d/W8typx7Zmq9/4f6a37HpL77w5cL1xe3Z/zenmh7P/k+F13FY/zMPheMxXP+/F+v31/ruCgc/1Xz+ict/fe25pscTfeQX9fVffO/RfK4aW73mmmuvu/78O2r7LsteWlW/v07rP/qXJ5u2/xs31fdHvD529FvXv5S4/tOfmzhxcu7s7HTaq0/ckL93zsfq2xO394Zwbm39+sDJMw/PnB6fGp/KsvHyvoXeJftmmD+rj/Ptl55fdAbden94Pm/5sxfWbP6XL8XL/+2++uUXPlr/vvWusNxXwuVrw/O3svUv9syGm/LX98CLYQvnF79f8OVYv+k/9yxrwfD4W38uiMf7qbc+nO+H2nX59434ur7M7f/RdP1+vh3263x4Z+aNNy2sr3H5+N4IF+6tv94ve/+F01x8Xv86PN8f/0n9/uN2xcf7o/BzzHfXNZ/v4vHx7XODrfefv4vH+XA+yc7Xr49Lxf194dWbCjcvvg9Jdv7m/Os/Tvdz84oe5lLmHpubPDZ74uyjk2dm5s5Mzj32+IHjJ8+eOHMgfy/PA5/pdPuF89Oa/Pw0PbNrZ5afrU7Wxxvsam//qfsPT++e2jw9c+TQ2SNn7j81c/ro4bm5wzPTc5sPHTky87lOt5+d3rdt+94du7dPHJ2d3rdn794deydmT5ysbUZ9ozrYNfXZiROnD+Q3mdu3c++2O+/cOTVx/OT0zL7dU1MTZzvdPv/eNFG79e9PnJ45dujM7PGZibnZx2f2bdu7a9f2ju8GePzUkbnxydNnT0yenZs5PVl/LONn8otr3/s63Z5ymvv3+s+zrQbqb8SXffK2Xen9WWuefXLJu6ov0vIGoq+E96L5pzed2rOcr2PuHwkzqUj+BwAAgCqIuX80zET+BwAAgNKIuX9VmIn8DwAAAKURc/9YmElF8n/p+v/rzi1r/fr/+v+N+0v/v2L9/3t7rf9fP1/o/3fH5fbv9f8D/X/9f/1//X/9f7qg1/r/MfevzrJK5n8AAACogpj714SZyP8AAABQGjH3XxNmIv8DAABAacTcf22YSUXyv/6//r/+v/6//n/x+vX/+5P+f3v6/x3o/09m1er/n+/m9uv/6/+zWK/1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu5fG2ZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP1vCjOpSP4HAACAKoi5/81hJvI/AAAA9J7hS7tZzP1vCTNZlP8vcQUAAADAVRdz/41ZSxG8Iv/+r/+v/6//r/+v/1+8/uX3/4cy/f/eof/fnv5/B/r/+v/6//r/dFWv9f/z3J+NZW8NM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+/xdmIv8DAABAacTcvy7MpCL5X/9f/1//X/9f/794/T7/vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7bw4zqUj+BwAAgCqIuf+WMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNy/PsykIvlf/7/H+/+xOar/r/+v/6//r/+/LPr/7en/d6D/r/+v/6//T1f1Wv8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox94+HmVQk/+v/93j/3+f/6//r/+v/6/+viP5/e/r/Hej/6//r/+v/01W91v+PuX9DmElF8j8AAABUQcz9G8NM5H8AAAAojZj7bw0zkf8BAACgNGLu3xRmUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/Z5hJRfI/AAAAVEHM/ZvDTOR/AAAAKI2Y+98VZiL/AwAAQGnE3L8lzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P/1//X/9f/pql7r/8fc/+4wk4rkfwAAAKiCmPu3hpnI/wAAAFAaMfffFmYi/wMAAEBpxNw/EWZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7r89zKQi+R8AAACqIOb+O8JM5H8AAAAojZj7J8NM5H8AAAAojZj7p8JMKpL/9f/1//X/9f9X1P9/x8L96v/X6f/3Fv3/9vT/O9D/1/+/6v3/Ef1/SqXX+v8x928LM6lI/gcAAIAqiLl/e5iJ/A8AAAClEXP/jjAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v8+/794/fr//Un/v73u9//jQ9T/1//X//f5//r/LNZr/f+Y++8MM6lI/gcAAIAqiLl/V5iJ/A8AAAClEXP/7jAT+R8AAABKI+b+PWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7fn8/w70//X/9f/1/+mqXuv/x9y/N8ykIvkfAAAAqiDm/veEmcj/AAAAUBox9/9KmIn8DwAAAKURc/+vhplUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+/eFmVQk/wMAAEAVxNz/a2Em8j8AAACURsz97w0zkf8BAACgNGLu3x9mUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/X5hJRfI/AAAAVEHM/XeFmcj/AAAAUBox978/zET+BwAAgNKIuf8DYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/g+GmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3fyTMpCL5X/9f/1//X/9f/794/fr//Un/vz39/w70/0vW/x+/Tv9f/583SlECWuzS+v/XvrbkCi+z/x9z/6+HmVQk/wMAAEAVxNx/d5iJ/A8AAAClEXP/R8NM5H8AAAAojZj7PxZmUpH8r/+v/6//r/+v/1+8fv3//qT/316f9f9/eX24XP+/Tv+/t7e/J/v/P16q/z+/qvX2+v+8ES6t/1+oK/3/mPs/HmZSkfwPAAAAVRBz/yfCTOR/AAAAKI2Y+z8ZZiL/AwAAQGnE3P8bYSYVyf/6/7XtWGgv6//r/+cX6P/r/+v/9y39//b6rP/v8/9b6P/39vb3ZP/f5/9zlfVa/z/m/k+FmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6//7/H/9f/1//f/i9ev/9yf9//b0/zvQ/9f/77X+/3/o/9Pfeq3/H3P//WEmFcn/AAAAUAUx9z8QZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP2fDjOpSP7X/++X/v+4/r/+v/5/y+PR/9f/L6L/357+fwf6//r/vdb/9/n/9Lle6//H3P9gmMny8//YspcEAAAAroqY+38rzKQi//4PAAAAVRBz/2+Hmcj/AAAAUBox9/9OmElF8r/+f7/0/33+f6b/r//f8nj0//X/i1y5/n888+j/6//r/0f6//r/+v+06rX+f8z9vxtmUpH8DwAAAFUQc/9DYSbyPwAAAPSFov8nu1XM/QfCTOR/AAAAKI2Y+w+GmVQk/+v/6//r//do//9PN/7zD7//iYPb9P/1//X/V+SKfv5/7cXv8//1//X/E/1//X/9f1r1Wv8/5v5DYSYVyf8AAABQBTH3/16YifwPAAAApRFz/+EwE/kfAAAASiPm/ukwk4rkf/1//X/9/x7t//fx5//H/aH/36xr/f940tX/L3RF+/8PLPTE9f9X2v8fLbxU/1//v5+3X/9f/5/Feq3/H3P/TJhJRfI/AAAAVEHI/YNH6nPhCvkfAAAASiPm/qNhJvI/AAAAlEbM/Q+HmVQk/+v/6//r/+v/+/z/4vX3bP/f5/+3pf/fXu/0/4vp/+v/9/P26//r/7NYr/X/Y+6fDTOpSP4HAACAKoi5/zNhJvI/AAAAlEbM/Z8NM5H/AQAAoDRi7j8WZlKR/K//r/+v/6//r/9fvH79//6k/9+e/n8H+v/6//r/+v90Va/1/2PuPx5mUpH8DwAAAFUQc/+JMBP5HwAAAEoj5v6TYSbyPwAAAJRGzP2nwkz+j737aN6rLv84fuf/D2MyPAAXbtj7EFjoWh+ACzcudMZxoaPYG8FesfeCvWMBRWzYG9hQ7GLvigU76sRxcl1X8kvO79xJvJOc871er82lwXiiw4Af4T3fJvtf/6//H7b/v5v+f7/v6//1/yPT/8/T/2+h/9f/6//1/+zU0vr/3P0Pjlua7H8AAADoIHf/Q+IW+x8AAACGkbv/srjF/gcAAIBh5O5/aNzSZP+f1P8f2PTs/zPj1f+P1P97/3/f7+v/9f8jO7/9/xX//SOf/l//r/8P+n/9v/6fky2t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+x8Rt9j/AAAAMIzc/Y+MW5rsf+//e/9f/6//1/9Pf1//v07e/5/Xqf+/7JaLH3j7dXe5/ky+r//X/+v/9f/s1tL6/9z9j4pbmux/AAAA6CB3/6PjFvsfAAAAhpG7/zFxi/0PAAAAw8jd/9i4pcn+1//r//X/+n/9//T39f/rpP+f16n/P5vv6//1//p//T+7tbT+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuvzxusf8BAABgGLn7j8QtTfa//v/c9///1v/r/+Pq//X/+v9zT/8/T/+/hf5f/6//1/+zU0vr/3P3XxG3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//3/r/+X/+v/5/+vv5/nfT/885//z/1Z8j96f9X3/9fpP/X/+v/OdEZ9v93zPxheyf9f+7+J8ctTfY/AAAAdJC7/ylxi/0PAAAAw8jd/9S4xf4HAACAYeTuf1rc0mT/6//1//p//b/+f/r7+v910v/PW8z7/wcOTv6w/n/1/b/3//X/+n/2WNr7/7n7nx63NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/+nvz/X/15/w69P/L4v+f95i+v996P/1/2v+9ev/9f+camn9f+7+Z8ctTfY/AAAAdJC7/8q4xf4HAACAYeTuf07cYv8DAADAMHL3PzduabL/p/v/479d/3969P97f/36/+nfP3bV/+e/o/5/tv+/u/f/e9L/z9P/b6H/1//r//fr/w9v+/n6f6Ysrf/P3f+8uKXJ/gcAAIAOcvc/P26x/wEAAGAYuftfELfY/wAAADCM3P0vjFua7H/v/+v/9f/r6/+9/3/MhXz/f3Pe+/+D+v/TpP+fp//fQv+v/9f/e/+fnVpa/5+7/0VxS5P9DwAAAB3k7n9x3GL/AwAAwDqc+PcOnPw3lIbc/S+JW+x/AAAAGEbu/pfGLU32v/5f/6//1//37v8PraT/9/7/6dL/z9P/b3Fh+/8Dg/b/Bwfr/6/a7+cvof+/XP/Pwuzp/284/uMXqv/P3f+yuKXJ/gcAAIAOcve/PG6x/wEAAGAYuftfEbfY/wAAADCM3P2vjFua7P9z3v8f3v/b+n/9v/5f/3/h+/+1vP+v/z9d+v95+v8tvP/v/X/v/+v/2ak9/f8JLlT/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3XxW32P8AAAAwjNz9r4lbmux/7//r//X/+n/9//T39f/rpP+fp//fQv+v/9f/6//ZqaX1/7n7Xxu3NNn/AAAA0EHu/tfFLfY/AAAADCN3/+vjFvsfAAAAhpG7/w1xS5P9r/8/t/1//rj+X/+/0f/r//X/50Xb/v/A1J+JTrVP/3/T/Y/cc++P6P/1//p//b/+nx1YRP9/9Pj/uszd/8a4pcn+BwAAgA5y978pbrH/AQAAYBi5+98ct9j/AAAAMIzc/W+JWwbZ/4e2/Hb9v/f/9f/6f/3/9Pf1/+vUtv8/Td7/30L/r//X/+v/2alF9P8n/PPc/W+NWwbZ/wAAAMCmdv/b4hb7HwAAAIaRu//tcYv9DwAAAMPI3f+OuKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+6+OW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/6//1//p//f/09/X/66T/n6f/32w218z8Aqb6/6N30v/r//X/+n/O0tL6/9z974lbmux/AAAA6CB3/zVxi/0PAAAAw8jdf23cYv8DAADAMHL3vzduabL/9f/6f/2//l//P/19/f866f/n6f+38P6//l//r/9np5bW/+fuf1/c0mT/AwAAQAe5+6+LW+x/AAAAGEbu/vfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nv6//X6dz1/xv9v/5f/7+F/l//r//nZEvr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/4fjlib7X/+v/9f/6//1/9Pf1/+vk/f/5+n/t9D/6//1//p/dmpp/X/u/o/ELU32PwAAAHSQu/+GuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v+9/f9mo//X/+v/jzkP/f+hjf5/5/T/8/T/W+j/x+z//28zUP9/eN+fr/9niZbW/+fu/3jc0mT/AwAAQAe5+z8Rt9j/AAAAMIzc/Z+MW+x/AAAAGEbu/k/FLU32v/5f/+/9f/2//n/6+97/Xyf9/zz9/xb6/zH7f+//6/+5YJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Fvp//b/+X//PTi2t/8/d//m4pcn+BwAAgA5y998Yt9j/AAAAMIzc/TfFLfY/AAAADCN3/xfilib7X/+v/9f/r7P/P6T/1//r/yctpf+/9NJ73Kz/1//r//X/+n/9f3dL6/9z938xbmmy/wEAAKCD3P1filvsfwAAABhG7v4vxy32PwAAAAwjd/9X4pYm+//U/v+izbFC9Zip/j8aNf3/CfT/e3/9+v/p3z+8/6//1/+fe0vp/73/f3a/fv2//n/Nv/4z6v8vOfXn6/8Z0dL6/9z9N8ctTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTuvyVuabL/vf+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//t/7/w+67//r/9mdpfX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/9f/6//1//r/6e/r/9dJ/z9P/7+F/l//r//3/j87tbT+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/d9//X6L/D/r/pfT/99H/n/R9/b/+f2T6//wz+jT9/xb6f/2//l//z04trf/P3X9r3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9r/3/3v1/wc2Hft/7//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/h/FLU32PwAAAKzVve76gFtP91+bu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3NJk/+v/e/X/Pd//1//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/p/FLScMv4Nn/J8SAAAAWJLc/T+PW5r89X8AAADoIHf/L+KWU/b/0dP8u9oBAACApcnd/8u4pclf/9f/L7z/34zf/9+20f/r/4/R/+v/d0H/P+9/7P+PHtD/6/9n6P/1//p/Tra0/j93/6/ilib7HwAAAAa15/9RyN3/67jF/gcAAIBh5O7/Tdxi/wMAAMAwcvf/Nm5psv/1/wvv/8/q/f/D9Y/W0P97//8c9v9XHpr8vv5f/z8y/f887/9vof/X/+v/9f/s1NL6/9z9t8UtTfY/AAAAdJC7/3dxi/0PAAAAw8jd//u4xf4HAACAYeTu/0Pc0mT/6/9H7P/X9f6//t/7/2ff/9/54iM33vt+116t/+e489n/5+8L+n/9v/7/GP2//l//z8mW1v/n7v9j3NJk/wMAAEAHuftvj1vsfwAAABhG7v4/xS32PwAAAAwjd/+f45Ym+1//r/9fSv+f/11fgP7/yPr6/2yKu/f/3v/X/5/K+//z9P9b6P/1//p//T87tbT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/6X0/8n7/8d/nvf/j9H/6//PhP5/nv5/C/2//l//r/9np5bW/+fu/0fc0mT/AwAAQAe5+++IW+x/AAAAGEbu/n/GLfY/AAAADCN3/7/ilib7X/+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//l//r/9np5bW/+fu/08AAAD//6cRdCE=") rename(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000980)=ANY=[@ANYRES16, @ANYRES8, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 1m19.244258373s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r0, &(0x7f00000011c0)=""/4117, 0x200021d5) 826.884214ms ago: executing program 0: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f00000009c0)=""/91, 0x5b}], 0x2}}], 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="5f6c2c24ced6cb2905f0e534aa4da0cb84375295696d4cc9bf2d34db0cbc3450080ef4fb2536a286b75ca389116f9544be9184692d46d47d566ec9143bf135778b0b71885c41660d23e1cbedcf686db0d1a6bb738bbfca", 0x60}], 0x1, &(0x7f0000000b40)=[@op={0x18}], 0x18}], 0x5c, 0x4008000) 698.239165ms ago: executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x20303159}}) 687.034931ms ago: executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 624.183197ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 585.383657ms ago: executing program 0: syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x1, 0x160, &(0x7f0000000500)="$eJzs281KMnEUx/HfjO8+T2VZm2ghtGmTr/TiIqhLEZ3EGkuyjRJEl9INdSUFdQMZik44ClGh/3S+n9X5zWH0DPjXs1EAAiujjCxZivTDTjx1n7ZMjwRgTnqS3nsAgin0anoCAGa8nEktSc9vd1WFIhP7Qb9/Ourb0cn+g7QdHvatmOL+/eIxMaz6/cTU+5Oj17eSU/t7u6P3/6f/WtGq1pTSujaG/Zp3/9YvNiEgeCxl/Xnsgq3zhuvkvRwZ5IKXo4Nc9OWSl2ODnK1eu7VZPQKAH7K/OP8h3/kP+84/gMXV7nQvK67r3FAEvbAX6CMR1Z8YY5kLw19MAGYud9ts5dqd7n6jWak7deeqeFwsH5YOCkflpxPJyefG938Ay+PzR3/8+oWpgQAAAAAAAAAAAAAAwLeltWl6BAAAAABzMo+/E5l+RgAAAAAAAAAAAAAAAAAAAGBZfAQAAP//zPQe9Q==") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 541.681534ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000015bfa30000000000000703000000feffff7a0af0fff801ffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x3b, 0x364, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) 514.772385ms ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@remote, @dev, @remote, 0x0, 0x9902, 0x0, 0x0, 0x0, 0x81000112}) 489.998641ms ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000000)=0x2) 466.814691ms ago: executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='trylock io'], 0xf) 458.374236ms ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004f80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r4 = dup(r2) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x3}}, 0x0) dup2(r0, r1) open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x780000d, 0x2010, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r5, 0x0) madvise(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x0) write$binfmt_script(r1, 0x0, 0x0) 414.76988ms ago: executing program 0: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000001980)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c646973636172642c696f636861727365743d69736f383835392d342c646d61736b3d30303030303030303030303030303030303030303031312c646973636172642c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d63703836302c6572726f72733d636f6e74696e75652c00401b3ed5707e114e487d8a07ac5bf76c35e1ec263fd239572442aeebf5f0885cac9e374bd219562c4cdeda0e24ce11eca191559cabf479c5ab2264639e972d6ac2080a7132a1c1dc10a33c900944ad0198fe12202479fe30823ef0664ce2"], 0x5, 0x1516, &(0x7f0000002280)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDknlkCRJkuSUmKRJXklIDDklDUlIDkNyGEJymJg0zufzMUmSJklCckrWd03xeXur7/2//7fv9b/+c/+ua1/Pup+177XXfu7nsPZ2+LbL0FpNat/ViIjg34K/PiQDQCwADASAawAgAIAKcRXisvtzS0z+9w7C/loPp13pGbArieufs3H9czauf87G9c/ZuP45G9c/Z+P652xcf8Zyss3TC1/LW87d+P5/Tsa///+LZJUd++Xastd3/RdSuP45G9f/f63gv7IT1z9n4/rnbFz/nI3rnxPk+tMern/OxvVnLCe70vef/2GLgSs/hxy1Xen3H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxnOGMv0wBwKX2lZ4XY4wxxhhjjDHG/jo+15WeAWOMMcYYY4wxxv7/QxAgQUEAMZALYiE35AEBAFdDPrgGInAtxMF1kB+uhwJQEApBYYiHIlAUNBiwQBBCMSgOUbgBSsCNUBJKQWkoAw7KQgLcBOXgZigPt0AFuBUqwm1QCSpDFagKt0M1uAOqw51wF9wNNaAm1ILacA/UgXuhLtwH9eB+qA8PQAN4EBrCQ9AIHobG8Ag0gUehKTwGzaA5tICW0Oq/lf8i9ICXoCf0gmToDX3gZegL/aA/DICB8AoMgldhMLwGKTAEhsLrMAzegOHwJoyAkTAK3oLR8DaMgbEwDsZDKkyAifAOTIJ3YTJMgakwDdJgOsyA92AmzILZ8D7MgQ9gLsyD+bAA0uFDWAiLIAM+gsXwMWTCElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ2wC3bDJ7AHPoW98Bnsg8//xfzT/5DfFQEBBQpUqDAGYzAWYzEP5sG8mBfzYT6MYATjMA7zY34sgAWwEBbCeIzHolgUDRokJCyGxTCKUSyBJbAklsTSWBodOkzABCyHN2N5LI8VsAJWxIpYCStjZayKVbEaVsPqWB3vwruwBtbAWlgL78F7sDfWxbpYD+thfax/6fYUNsJG2BgbYxNsgk2xKTbDZtgCW2ArbIWtsTW2wTaYiInYDtthe2yPSZiEHbADdsSO2Ak7YWfsjF2wC3bFbtgNX8wF+BK+hL2whuiNfbAP9sWUXP1xAA7AV3AQvoqv4muYgkNwKL6Or+MbOBxP4QgciaNwFFYTb+MYHIskxmMqpuJEnIiTcBJOxik4BadhGk7HGTgDZ+IsnIXv4xz8AD/AeTgPF2A6puNCXIQZmIGL8TRm4hJcistwOa7A5bgKV+MqXIvrcC1uwA24CTfhFtyC23Ab7sAduAsVAH6Cn+KnmIL7cB/ux/14AA/gQTyIWZiFh/AQHsbDeASP4FE8isfwOJ7A43gST+IpPI1n8Ayew3N4Hp+P/7rxrlJrUkBkU0KJGBEjYkWsyCPyiLwir8gn8omIiIg4ESfyi/yigCggColCIl7Ei6KiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiQSRIMqJcqK8KC8qiFtFRXGbqCQqi7auqqgqqolEV13cKe4Sd4kaoqaoJWqL2qKOqCPqirqinqgn6ov6ooF4UDQUvbE/PiyyK9NEDMGmYig2E82FvPgN1loMxzairUgUT4qROALbi9YuSTwjOogx2FH8TYzF50RnMR67iBdEV9FNdBcvih6ijespeonJ2Fv0EdOwr+gn+osBYibWFO/jnNy1xGsiRQwRQ8XrYgG+IYaLN8UIMVKMEm+J0eJtMUaMFePEeJEqJoiJ4h0xSbwrJospYqqYJtLEdDFDvCdmillitnhfzBEfiLlinpgvFoh08aFYKBaJDPGRWCw+FpliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2id3iE7FHfCr2is/EPvG52C++EAfEl+Kg+Epkia/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pKxMrfMI6+SeWVw8dW9VsbJ62R+eb0sIAvKQrKwjJdFZFGppZFWkgxlMVlcRuUNsoS8UZaUpWRpWUY6WVYmyJtkOXmzLC9vkRXkrbKivE1WkpVlFVlV3i6ryTskRH49Rg1ZU9aSteU9so68V9aV98l68n5ZXz4gG8gHZUP5kGwkH5aN5SOyiXxUNpWPyWayuWwhW8pW8nHZWj4h28i2MlE+KdvJp2R7+bRMks/IDtJffIs8JzvL52UX+YLsKrvJ7vJneUF62VP2kgC9ZR/5suwr+8n+coAcKF+Rg+SrcrB8TabIIXKofF0Ok2/I4fJNOUKOlKPkW3K0fFuOkWPlODlepsoJcqJ8R06S78rJcoqcKqfJNDld9r840mwp/2n+O3+QP/iXo2+Sm+UWuVVuk9vlDrlT7pK75W65R+6Re+VeuU/uk/vlfnlAHpAH5UGZJbPkIXlIHpaH5RF5RB6VR+UxeVyelT/Ik/JHeUqelqflWXlOnpPnL74GoFAJJZVSgYpRuVSsyq3yqKtUXnW1yqeuURF1rYpT16n86npVQBVUhVRhFa+KqKJKK6OsIhWqYqq4iqob8OIbRpVWZZRTZVWCuulfyVcl1I2qpCr1m/xL80v+k/m1Uq1Ua9VatVFtVKJKVO1UO9VetVdJKkl1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VbJKVn3Uy6qv6qf6qwFqoHpFDVKD1GA1WKWoFDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVqlLVRDVRTVKT1GQ1WU1VU1WaSlMz1Aw1U81Us9VsNUfNUXPVXDVfzVfpKl0tVAtVhspQi9VilamWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qU21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVZbKUofUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyF72BSIQgQpUEBPEBLFBbJAnyBPkDfIG+YJ8QSSIBHFBXJA/uD4oEBQMCgWFg/igSFA00IEJbCAuFj0a3BCUCG4MSgalgtJBmcAFZYOE4KagXHBzUD64JagQ3BpUDG4LKgWVgypB1eD2oFpwR1A9uDO4K7g7qBHUDGoFtYN7gjrBvUHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImwaNB0+CxoFnQPGgRtAxa/aXje3+q4BOup+6lk3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf0yl6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XqXqCnqjf0ZP0u3qynqKn6mk6TU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtcf6oV6kc7QH+nF+mOdqZfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdJb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QP+iT+kd9Sp/WZ/RZfU7/pM/rn/UF7bMX99k/70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycyW/ymwKmgClkCpl4E2+KmqImGxkyxUwxEzVRU8KUMCVNSVPalDbOOJNgEkw5U86UN+VNBVPBVDQVTSVTyVQxVczt5nZzh7nD3GnuNHebu01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MK9PKtDatTRvTxiSaRNPOtDPtTXuTZJJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySbZNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNiUsxQM9QMM8PMcDPcjDAjzajshap524wxY804M96kmlQz0Uw0k8wkM9lMNlPNVJNm0swMM8PMNDPNbDPbzDFzzFwz18w38026STcLzUKTYTLMYrPYZJpMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTJZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5qQ5aU6ZU+aMOWPOmYIXfy+9ibW5bR57lc1rr7b57DX2H+NCtrCNt0VsUattAVvwN7Gx1pa0pWxpW8Y6W9Ym2Jt+F1eylW0VW9XebqvZO2z138V17L22rr3P1rP329r2nt/E9e0DtoF91DZEBLDNbWPb0jaxj9qm9jHbzDa3LWxL284+Zdvbp22SfcZ2sM/+Ll5oF9nVdo1da9fZPfZTe8aetYftt/ac/cn2tL3sQPuKHWRftYPtazbFDvldPMq+ZUfbt+0YO9aOs+N/F0+102yanW5n2PfsTDvrd3G6/dDOsRl2rp1n59sFv8TZc8qwH9nF9mObaZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+4ndarfZ7XaH3Wl3/RJnn8de+5ndZz+3h+w39oD90h60R2yW/fqXOPv8jtjv7FH7vT1mj9sT9gd70v5oT9nTv5x/9rn/YH+2F6y3QEhAkhQFFEO5KJZyUx66ivLS1ZSPrqEIXUtxdB3lp+upABWkQlSY4qkIFSVNhiwRhVSMilOUbqBL6/TSVIYclaUEuonK0c1Unm6hCnQrVaTbqBJVpipUlW6nanQHVac76S66m2pQTapFtekeqkP3Ul26j+rR/VSfHqAG9CA1pIeoET1MjekRakKPUlN6jJpRc2pBLakVPU6t6QlqQ20pkZ6kdvQUtaenKYmeoQ70LHWkv1Eneo460/PUhV6grtSNutOL1INeop7Ui5KpN/Whl6kv9aP+NIAG0is0iF6lwfQapdAQGkqv0zB6g4bTmzSCRtIoeotG09s0hsbSOBpPqTSBJtI7NInepck0habSNEqj6TSD3qOZNItm0/s0hz6guTSP5tMCSqcPaSEtogz6iBbTx5RJS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSLtpNn9Ae+pT20me0jz6n/fQFHaAv6SB9RVn0NR2ib+gwfUtH6Dvfi76nY3ScTtAPdJJ+pFN0ms7QWTpHP9F5+pkukCcIMRShDFUYhDFhrjA2zB3mCa8K84ZXh/nCa8JIeG0YF14X5g+vDwuEBcNCYeEwPiwSFg11aEIbUhiGxcLiYTS8ISwR3hiWDEuFpcMyoQvLhgnhTWG58OawfHhLWCG8NawY3hZWCiuHj95fNbw9rBbeEVYP7wwTw7vDGmHNsFZYO7wnrBPeG9YN7wvrhfeH5cMHwgbhg2HD8KGwUfhw2Dh8JGwSPho2DR8Lm4XNwxZhy7BV+HjYOnwibBO2DRPDJ8N24VNh+/DpMCl8JuwQPvtL/wOL/rw/Oewd9glfDl8Ovb9Pzo8uiKZHP4wujC6KZkQ/ii6OfhzNjC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26IboxuinpfOxc4dMJJp1zgYlwuF+tyuzzuKpfXXe3yuWtcxF3r4tx1Lr+73hVwBV0hV9jFuyKuqNPOOOvIha6YK+6i7gZXwt3oSrpSrrQr45wr6xJcS9fKtXKt3ROujWvrEt2T7kn3lHvKPe2eds+4Du5Z19H9zXVyz7nO7nn3vHvBdXXdXHf3ouvhJuT79TOZ7Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7FJcihvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdaluopvoJrlJbrKb7Ka6qS7NpbkZboab6Wa6arN+PcpcN9fNd/Ndukt3C132mjHDLXaLXabLdEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8Nb8O6va5/W6/O+AOuIPuK5flvnaH3DfusPvWHXHfuaPue3fMHXcn3A/upPvRnXKn3Rl31p1zP7nz7md3wXmXGpkQmRh5JzIp8m5kcmRKZGpkWiQtMj0yI/JeZGZkVmR25P3InMgHkbmReZH5kQWR9MiHkYWRRZGMyEeRxZGPI5mRJZGlkWWR5ZEVEe+LbA19MV/cR/0NvoS/0Zf0pXxpX8Y7X9Yn+Jt8OX+zL+9v8RX8rb6iv81X8pV9Ff+Yb+ab+xa+pW/lH/et/RO+jW/rE/2Tvp1/yrf3T/sk/4zv4J/1Hf3ffCf/nO/sn/dd/Au+q+/mu/sXfQ//ku/pe/lk39v38S/7vr6f7+8H+IH+FT/Iv+oH+9d8ih/ih/rX/TD/hh/u3/Qj/Eg/KuYtP/rSJTKM96l+gp/o3/GT/Lt+sp/ip/ppPs1P9zP8e36mn+Vn+/f9HP+Bn+vn+fl+gU/3H/qFfpHP8B/5xf5jn+mXXLqp7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//E7/Gf+r3+M7/Pf+73+y/8Af+lP+i/8ln+a3/If+MP+2/9Ef+dP+q/98f8cX/C/+BP+h/9KX/an/Fn/Tn/kz/vf/YX+N+sMcYYY4z9l0y43BR/1N/7D54Tf7dzHwC4elvhrL/vz15Rri/wa7ufiG8XAYBnenV5+NJWo0ZycvLFfTMlBMXnAVz6k6BsMXA5XgKJ8BQkQVso94fz7ye6naN/Mn70VoA8f5cTC5fjy+N/8SfjP/7kqIUVwzNx/4/x5wGULH45JzdcjpdAosp+bAvl/2T8gq3/yfxzf5kK0ObvcvLC5fjy/BPgCXgWkn6zJ2OMMcYYY4wx9qt+okqnS9efl/7G5x9dn8eryzm54HL8z67PGWOMMcYYY4wxduU91637048nJbXt9K83qv+3srjxP7XhPcClZxQA/JsDAvzHz2LLf+RYKRc/Ov/YtfysD+B/Rin/isYV/mJijDHGGGOM/eUuL/p/+7y6UhNijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyoP/Efyd2pc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//8SoNew==") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) splice(r1, 0x0, r0, 0x0, 0xdf, 0x0) 391.85259ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) 364.369225ms ago: executing program 4: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014"], 0x58}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) 342.549185ms ago: executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000400)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0xfffffffc}}, 0x80, 0x0}}], 0x2, 0x40) 289.451738ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@loopback, 0x80000003}, 0x20) 237.48525ms ago: executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2b, 0x0, 0x0, @prog_id}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 227.123016ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xb8031, 0xffffffffffffffff, 0x8000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040), 0x4) 202.733402ms ago: executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a6, &(0x7f0000000640)={{@host}, @hyper, 0xb, 0x0, 0x400000}) 145.523217ms ago: executing program 3: r0 = io_uring_setup(0x6c33, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x9) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xca1c0fe}}], 0x300, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 137.57358ms ago: executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 126.550347ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x44}}, 0x0) 126.369036ms ago: executing program 0: unshare(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) 29.161104ms ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfce3) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)={0xa200, 0x60, 0x22}, 0x18) sendmsg$nl_route(r7, &(0x7f0000001700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000000640)=@ipv6_delroute={0x1044, 0x19, 0x10, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x14, 0x4, 0xff, 0x4, 0xfe, 0xb, 0x200}, [@RTA_EXPIRES={0x8, 0x17, 0x9}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "9bd7eed25bb3a99c1e05cdaa155aafe99fea1e00649bc2213218e417703ac7c817fc196699a01bd1815e3cec1b5fee3e87d2c46b8fcfcad8dbdad94e23399f993c0b19065b5584590a1fb2aa4076a6811f02da19ab7269f7b3c53d690c75218e8a85e3a16a6a2550bc7317b19b37318622f45d2083da70f8277bfea4025e1b5013a270d4f023069a7c8d531b9464a6f24728e15481c3a8ae77f2c98584d4d1b8a95345b14580775b5959c100265a47c741fd26eabc1885186b02e500eda73edf9d40061a54b9c21d6f0a441ae54ff052437fc3805b399885180f65ad2f67cccb1dd09611bbffc91881605174e8616e73f744aad27ea4494e4e448fd4fb6769788a5a36323b6afad426fb4394f6fdac1f2bad26cf19f7097f765f027f86bd08a2ce516cd1b66e22c0fffec2400d3089dfefbffd23c6b914a5794aa776128f01665fb1e19295540f94fea001921d50cb681dd011172ad16d3db70c040d2e4b56d35831d62d1e8f69df34a569e1e86c904917b8166823567c44663159a3375ad34c22fe616c00553d17b949e5d8d38d4fb024b0da9373bbb7681269cf99672d2903ba6ee45470d8bf65cd4ecf7ea129febb9cf7175025baa989a2a52267af16b53d5385e05f3c5b9df37ddc63e4781f2884da1e0273c4b665ec4b04a04309649592a1c12dd360b2efd79fa19190053124650aea3bccb86299bce2d73e49a0b2a47eca56b0954b3cfd4403286bd307d3f5047bbb787f257047d4083c605a93e63b054b8044726f9f75a105d6448b9bfaa569e46da01431b1e336cd089a7dc4f2f660ade9b195fef49aa93bd8e56a2efaf7f1d7c3007897ebf6aa2d9d1f2ee6fadc673f0ca26ccbd36d8c4284b61968de34f6bd77313ac8e1b19cf818bdd91caf34a745311eaf083f27fea3a31d750325995a1fe669f03bcb2d19f19397091173268cbc3eb635e9f815c288c513100f0dae480595888fc6d9d0722b0bb8dbf4c3b78841809982bb4a0b65fcba56bd9fe19cd731b1a66439ad53c56e7c816542936f3b264af3f396ca51e27a9e1f35a8af57dcba8315ae96096166ca69261565d6e9ceb8509b804c30bef315a3d764a4e779e57cf0416daed1546846e829597b46b3934482d6cd38e88eb7de4d5745a983397f850e019fab08258db16a8474f367c6c33a7b7e5c13faca64971e7c82df3366eda557bc30394743e9edcbace1d29873814c0df53ce292c01da67031152c9319081466dbbb63d452e3eb44033dd6718002472a48e8a8eba1b19aba59ca0aa68f24674255e4691ce4a1484a193004048bf80c0078ff444b5f2bb9f325b45adcdb445ccd55e0075735ccce8cd2425b66e0077adcc3a61f30b8041894eda147840dcf4157e8bcd8388f7197555e8d17722dbed6921da6b977c50d0e545455f3914494ec00de66ae4d32644b49378663d1b3124b9ed78587556e2eb599e7c83f639186c6d0a1c03bf6b96198370b877a5a25cd6b5d4f7ec84cc4d245a9cda178a4ca8db147f59a849ed5d9bc7f9160aa3f15da40b3e161529be0c42e42fb89a618ccd0ae754737beadb6ac3bd5681c3583b2304456ed076c368b4612599eb3b5c89cef3dc58d1bac2a66c85a06cac5fc6798648859d94b5bd97558ba30d09e377cda6570e73e79998b226fb934371dbd01063c0d18d853d903c620792eb5482bfbf663bc0c7810eb3bf58dc9d9220cae36431b51fe3921b374e3775184a63b21905c9e7eac168c88d0ccb01dd66e09517b2c52015f07f1fb00363215b5ca61b2b0cd4da540825972e690b7a0a65e65c8191d00d2a236c85ec410ba295f594793111ab8a7d42e9d5f57c89a3a6e75dc8cf7ecd3075f535c0b465bb51ceef4aa681632567e11c1892c1c11334ec60f0f35e8e0f0d7a43b8b64d6804f77dbb5390f011cd05e5662786bb302ab2e5558605f8fe7852149f694677ca1cb50133a0d04af692e2186c39cd8c19fd22f3bb21af9685be1711392c6043ae24516b14c744835e61e738af88453806626c23ea4c405fd4014e0ef43527363efb98e35b7165024eeac94ca48119b1cedb3eb251088e09f7c4271b2485ba2ab589bfdfbee4e9fc83e58822dba9df50658cebc55c17caca292a3c8c694bf772a81666b76a079afe0a093955644700ee0a17f7d2fe6cf653ea9d94d1d40c7a4d2124aaac55ab842a45e79ce28823d1f9491de47fca1b5ad741895956a7b4ecd175ce02f280fbc6199c62e2bf01c2b959bb8f30b7a7c0c1c96d508e89cb87a00f1292087a31b02a07a7cccf1b60be9d9973acb99af62180bc313676f35dbe9cddae2b745151d97c4f116ae56c20a318a20de39025b9ab467297cd48b71058ce89d94e47bfcdd2bbec4f50d2966ad1764d9139ec4a811f6b35e1027d155ec4a2033459469bec84adcd2ceee892826020029102b8ff652ec9a0355330282d1b5482763ff0c8ad9c5507c8eba07ffcdf5850974b2a2c7c0eab5382dc7b15b7815766b5e12ff8cf3f9f98608028b063f2e4a99993b9ba2945e7ab61dadac6da91d74d4011aad327711ca5ca266e5c62e2b039a5fdb23cdd109ee86c0af78084936b2030ce263ed37c3450a129642abf6031f9ac879b69d3160388decc88d32e1182bcccdcda9d6db2ebdeae37a496bf52a6091a8c9c6e509e41cbe7b4f6e287e6aaee951632bf3f6f629267cbb3b9dd33a4195741c26baf2aa8eb1c51d0daa1f1678e6d6fa28f70603cb9a7ffbe54cfa31a9fad0e2ab8b0c12149eb5cdb164f211ede5298b7a79e121f8cf2e6e7d34cd57fd22de73eac11f28dac458f03780bc8d7fa1f5603fc904579b043176b9c61faa77e7f9933bbfa5d32dac5e00cd9ac5d230674e8b63ee3c08209c56a052aae0cb96dd922151a350f9f7399ae8f1cf58b3913a53277152b9e5826963b277f57f453a6288ec40bdba57b1479e14182e21d1d75b365cd6121b70d22dde42dc32a53f3d0ad2c837256ae366d7addb5dd76b6e2da10033f05716e140d821811fd2a3f0f8cc4b4afc8fa6416d67c3319889339afc73dc538f219e4b887a374978f1669efe3fc89960cda8a46a42bc1125b6eca1529d76a3453576534355dff00d2ad5b4b130dae174a504229aa0a268979ec6fb23d31a5886c78dad8d906ba683bd4ecba927b1c23adc91ede40b379da4581d9a31e0da23890859e319f172afb242b147ad5ddbf8bcda7e6c8018d8bce7be5308480bcc759018eb649822b987667bb22aac4405133375e5ef6730c328f53ef401ffdc71fbe019ee2dccc627241118d158dda266e31ec33f53e8d79c653549abc76c9e61947719820bd33f02a613e623a7da4b0ed82497fdd1a8fff5909e55481caa9c1dd1542b1e636a6eda38e19d05b607c6dc9cd684b591985e86ceefc9ef17c4f9e7f97d73a1719d0fcea9f8c6b437345b4e0020602a8dd1482aaf51c12818a10a222b869790edae7dd9febd1cba0b3b1b172d407795afe1301e6d22ef4201817ffe83b84fd3c20c7e1becd48dc8278dcb9ce03e8fabaa6b08e0d9ce0128fcb5fa8bdcb531d2bb1460c6723b77935f30a5fd00de7cb2e895de0e8059d258292d835704f0c2de49060013be09e2f0fc0219ee78009c2bff034def6beb598d9f10d5cf808d1596ddbf959e415cc396f223de4f5cbdff41c9f124b65fa5cda550fad303a5ac221adb57194d552c54f423ae65319d541dedb0b7313fcf40d9b8540e28d772c760a01d6effa0473a7e20def93cbe6f75a525169d0557cc083a5097f05bee4def8f6938fafb10fec46e0e2a794ce627b637cb52b83c23e6d719978c936ab825123cd1fcbab08b07e2f701662373d25a50f07bf7c55b5836d5288be7ac3c4f08855758d68702b13d3fc5df3acecccafb125e91412ad0b0b3750827c59a691f2c02dcdb3324a35158cb359f263b7d94eba95dd53dfed071ec292718e5fca749423654cff63e74ce1caa2e870a5a0765cca9f4e579eaa969ab5ccfdd13cf1d71743f8e4ab8906ef37328392536c7c1970a5c1e027ae8f633429a7a5dc7d2fe02d96417e35bba64d369a1571452aed5cbbf802b8f9bf330d635147f5c3c2e7adbc2b6408185d370b9a64bf2046498143b0ae7ac50074d322795862f7f20ba6b389f8964d2f1dcc42968e4d9932e39573e0c102fe35210966145486f357ac8dbe15e4139429e92bbe237ccfbc072d8a143dcbc0f0e7afcb041295c2a13ab02414527856f54e665a0943ad4dade93ae88d8258c3be9f1350dd1a1062fdda434b5c5476eb4cf2e50f879a87a2a3f5c20e969408c2d69ad7c4f53a31af44d41315da91a833a4b83bad7ce2f09e333540114d48ab9cc03b0265ce1f10ced300889588b1d1c7db7f2f705953e3825f76adf6cfeb004ea38b5c17147c2745035da31529e4d3b2fda16dbaf686eba2dd98e6dd0ffe05517ff783ac9e52c3bfa8142d606d9bb825e74959b07efdf17047c5f561cf2db5ee24084d2c2dba4ffd89214396794c8207d890f9cec7383591c21a3fe0ac7f59ecb2dc4169224cf368a2a8d013cfdeb2e2b0a3b6b5dec8d9a3c92e4e0fa79367b2eeaf9d0d28a2311854fcf9aaf140a3d5c2c7d799cf87ba87d090de7c1b0baccab85f1ebbd6c9c742572cfee9cd6c8b5f673e3ed450c950f145957f11bdc7c7e3a07886a74de50c211b6d3c7d90f7c7d5e2a245d0756359a1b5a71b404b7fa0bff3110df130ea45795cbe090501c59e212a38bb3d89921b7ec27ffd453539d7cadbee1c2a7b80a4660ea92d4fe98008cdf1e5d5912c913f714777158c53e47ab116dd9e74c9c9296d313d635b7123535250d3eed09e58f5bc205db4a3bd282b067d75e3f04b24caff5174b7cc791326aa99bd1f2c63604de250f59d6d172f1e722f87205cf2e0dfdb7e4f4a200e42c0c8226e829eafbc5264bddd963ccfc7d16bec6fe6b4293000df779c15ebbbc2f77fcb4bd6a8a78d61615eae7e4d6bafbb68d637aafa0327eab289dc4791f603a1e9f9d61b6152551760853ab262da8e7f79848837a4e8b5404458e2233d3791db6c1d999434dacab4c83838e740ab6cb8b8cd826d59e30b360aec75cb2f92c3d6a5fe597b0744de37f352879696976a994cb03d89985799f5095905cb49a9bc2524cdc0fd93b4f323486bc0b7c3e3f252df68c9badacb5e4074555a9cf02dfc281f69427b1b67ca675ca2714ea0a41cb0238d6349acffbf17c8cca8f33d559ee006759cf63d542ea71a660f6b87a78951da25e5c423a89ab5514ff40ac741fad21c239d3216e3ee93bd64552c4a2e139430cfb61b10e1636c0a78db3df3c887edc8a5462055b21ab058956cfde51961b11b7818780462e78aea829244f789fda78409c006623238b9bcdcb9bcf4115ff054c64b3f4dae45cdba19554e82318d71201d3b4e167dc259097296e1dad0af44ca0bba96bce70bd309b521e3d8815f328b80951c2cd1ad83069bbae1e63b4f9e9ef51d0541d11c108f10517153f312b9f08aff01da51a89b3aaed8277911719fc59d44683b88c1244ea5983e48bbabc84571aeaa204e2500061b60aae87fcebc1b207743ac05ad33b40aab765076323dda5c4890c33f0b2dda48b9fe28773d69cbe481c771ce0894b5c3934f5517b05753c00b76e0c4d81bfcd865805ebbbcabf8e9b2020be00d4bc4ead7b09d7d8165f514ae86a979e72f8c582d8efb2bf38e6b4e99366b7a7d0a01cd5d2976f8400c4ac88734eb64b0d9dbe0200f5c16a87fd70b2a2d0953121427fc16e9cb36d22812c358e9defa00aa7b87af821e5a12f95d8003ff67468e9"}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0xffff}}, @RTA_MARK={0x8, 0x10, 0x7fffffff}, @RTA_IIF={0x8, 0x3, r5}]}, 0x1044}, 0x1, 0x0, 0x0, 0x24048800}, 0x20040080) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x89, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003000)={'ip6_vti0\x00', &(0x7f0000002f80)={'syztnl1\x00', r5, 0x0, 0x3, 0x0, 0x2a, 0x50, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x707, 0x700, 0x2, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x0, 0x0, 0x0, 0x9, 0x15, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0xffffffff, 0xffffffff}}) r8 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmsg(r8, &(0x7f0000002f40)={&(0x7f0000001780)=@qipcrtr, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001800)=""/234, 0xea}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/247, 0xf7}, {&(0x7f0000002b00)=""/252, 0xfc}, {&(0x7f0000002c00)=""/42, 0x2a}, {&(0x7f0000002c40)=""/232, 0xe8}, {&(0x7f0000002d40)=""/226, 0xe2}], 0x8, &(0x7f0000002ec0)=""/112, 0x70}, 0x140) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x14}, @loopback}, 0xc) r9 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000001740)={0x0, 0x0, 0xfffffffffffffff9}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200), 0x1) 0s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): , nr_sectors = 2 limit=64 [ 83.203621][ T5579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.236538][ T5579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.261566][ T5755] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.270317][ T5746] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 36) [ 83.303308][ T5746] Buffer I/O error on device loop1, logical block 36 [ 83.310723][ T5579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.322029][ T5746] syz-executor.1: attempt to access beyond end of device [ 83.322029][ T5746] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 83.345132][ T5746] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 255) [ 83.401046][ T5746] Buffer I/O error on device loop1, logical block 255 [ 83.410967][ T5380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.457735][ T5746] syz-executor.1: attempt to access beyond end of device [ 83.457735][ T5746] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 83.500410][ T5746] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 253) [ 83.523615][ T5579] hsr_slave_0: entered promiscuous mode [ 83.543600][ T5579] hsr_slave_1: entered promiscuous mode [ 83.560714][ T5746] Buffer I/O error on device loop1, logical block 253 [ 83.567521][ T5746] Buffer I/O error on device loop1, logical block 254 [ 83.574630][ T5579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.609869][ T5746] syz-executor.1: attempt to access beyond end of device [ 83.609869][ T5746] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 83.610475][ T5579] Cannot create hsr debugfs directory [ 83.666869][ T5746] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 37) [ 83.707293][ T5746] Buffer I/O error on device loop1, logical block 37 [ 83.714023][ T5746] Buffer I/O error on device loop1, logical block 38 [ 83.720717][ T5746] Buffer I/O error on device loop1, logical block 39 [ 83.727406][ T5746] Buffer I/O error on device loop1, logical block 40 [ 83.786866][ T5746] syz-executor.1: attempt to access beyond end of device [ 83.786866][ T5746] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 83.809836][ T5746] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 18 starting block 249) [ 83.831206][ T5746] Buffer I/O error on device loop1, logical block 249 [ 83.838014][ T5746] Buffer I/O error on device loop1, logical block 250 [ 83.901868][ T5380] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.026409][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.034182][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.106840][ T5113] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir1910461184/syzkaller.FnfYqK/32/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 84.170391][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.177620][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.194863][ T5113] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 84.250516][ T5113] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir1910461184/syzkaller.FnfYqK/32/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 84.317408][ T5113] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 84.361249][ T5113] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir1910461184/syzkaller.FnfYqK/32/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 84.442646][ T5113] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 84.505045][ T5113] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir1910461184/syzkaller.FnfYqK/32/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 84.543767][ T5113] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 84.582997][ T5380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.599071][ T5124] Bluetooth: hci4: command tx timeout [ 84.618112][ T5113] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir1910461184/syzkaller.FnfYqK/32/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 84.674421][ T5797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.691223][ T5113] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 84.812874][ T5380] veth0_vlan: entered promiscuous mode [ 84.850461][ T5380] veth1_vlan: entered promiscuous mode [ 84.954345][ T5380] veth0_macvtap: entered promiscuous mode [ 85.098514][ T5380] veth1_macvtap: entered promiscuous mode [ 85.203204][ T5579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.234126][ T5579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.283939][ T5812] tipc: MTU too low for tipc bearer [ 85.321630][ T5579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.362542][ T5579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.391254][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.431988][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.448937][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.460736][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.485559][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.501417][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.513965][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.538264][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.580544][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.612224][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.623131][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.634215][ T5380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.649392][ T5380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.664548][ T5380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.734475][ T5380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.759305][ T5380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.768625][ T5380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.777678][ T5380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.968556][ T5113] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.035788][ T5113] syz-executor.1 (5113) used greatest stack depth: 18320 bytes left [ 86.074722][ T4378] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.209914][ T5841] loop4: detected capacity change from 0 to 256 [ 86.285045][ T4378] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.355706][ T2813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.380719][ T2813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.404744][ T5579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.453146][ T4378] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.542322][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.577268][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.587847][ T4378] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.663623][ T5579] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.729539][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.736765][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.797348][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.804603][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.815561][ T5861] xt_addrtype: ipv6 does not support BROADCAST matching [ 86.973286][ T4378] bridge_slave_1: left allmulticast mode [ 86.982675][ T4378] bridge_slave_1: left promiscuous mode [ 86.992145][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.038747][ T4378] bridge_slave_0: left allmulticast mode [ 87.044567][ T4378] bridge_slave_0: left promiscuous mode [ 87.060659][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.082380][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.092997][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.102933][ T5125] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.116268][ T5125] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.124075][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.135554][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.720959][ T5859] loop4: detected capacity change from 0 to 32768 [ 87.728219][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.744963][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.757347][ T5859] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 87.757347][ T5859] clean (size 2912): [ 87.757347][ T5859] flags: 0 [ 87.757347][ T5859] journal_seq: 8 [ 87.757347][ T5859] usage: type=inodes v=8 [ 87.757347][ T5859] usage: type=key_version v=0 [ 87.757347][ T5859] usage: type=reserved v=0 [ 87.757347][ T5859] usage: type=reserved v=0 [ 87.757347][ T5859] usage: type=reserved v=0 [ 87.757347][ T5859] usage: type=reserved v=0 [ 87.757347][ T5859] data_usage: btree: 1/1 [0]=2816 [ 87.757347][ T5859] data_usage: journal: 1/1 [0]=0 [ 87.757347][ T5859] data_usage: user: 1/1 [0]=32 [ 87.757347][ T5859] dev_usage: dev=0free: buckets=83 sectors=0 fragmented=0sb: buckets=25 sectors=6152 fragmented=248journal: buckets=8 sectors=2048 fragmented=0btree: buckets=11 sectors=2816 fragmented=0user: buckets=1 sectors=32 fragmented=224cached: buckets=8 sectors=0 fragmented=0parity: buckets=0 sectors=0 fragmented=0stripe: buckets=0 sectors=0 fragmented=0need_gc_gens: buckets=0 sectors=0 fragmented=0need_discard: buckets=0 sectors=0 fragmented=0 [ 87.757347][ T5859] clock: read=0 [ 87.757347][ T5859] clock: write=1288 [ 87.757347][ T5859] btree_root: btree=extents l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS [ 87.763491][ T4378] bond0 (unregistering): Released all slaves [ 87.828561][ T5865] loop0: detected capacity change from 0 to 40427 [ 88.338220][ T29] audit: type=1804 audit(1717484370.269:6): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3901769289/syzkaller.gU4IJq/1/file0" dev="sda1" ino=1956 res=1 errno=0 [ 88.340463][ T5865] Process accounting resumed [ 88.636270][ T5579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.694206][ T5896] TCP: TCP segment has incorrect auth options set for 172.20.20.187.0->172.20.20.170.20002 [P] [ 88.743032][ T5900] dccp_v4_rcv: dropped packet with invalid checksum [ 88.763713][ T4378] hsr_slave_0: left promiscuous mode [ 88.781034][ T4378] hsr_slave_1: left promiscuous mode [ 88.789564][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.797912][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.808352][ T4378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.845702][ T4378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.891845][ T4378] veth1_macvtap: left promiscuous mode [ 88.902867][ T4378] veth0_macvtap: left promiscuous mode [ 88.914306][ T4378] veth1_vlan: left promiscuous mode [ 88.926400][ T4378] veth0_vlan: left promiscuous mode [ 89.235836][ T5125] Bluetooth: hci1: command tx timeout [ 90.574824][ T5931] loop2: detected capacity change from 0 to 4096 [ 90.593972][ T5931] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 90.658652][ T4378] team0 (unregistering): Port device team_slave_1 removed [ 90.679236][ T5931] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 90.750837][ T4378] team0 (unregistering): Port device team_slave_0 removed [ 90.953574][ T5935] loop2: detected capacity change from 0 to 512 [ 90.994860][ T5923] loop0: detected capacity change from 0 to 40427 [ 91.005361][ T5935] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.018543][ T5935] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 91.029772][ T5935] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 91.068732][ T5935] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 91.087048][ T5935] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 91.120141][ T5935] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 91.149422][ T5935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.208781][ T5940] input: syz1 as /devices/virtual/input/input5 [ 91.240345][ T5935] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.285298][ T5935] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 91.313396][ T5935] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 91.336566][ T5125] Bluetooth: hci1: command tx timeout [ 91.342326][ T5941] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.380205][ T5941] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 91.434878][ T29] audit: type=1800 audit(1717484373.369:7): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 91.443800][ T5935] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.465283][ T5941] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 91.479091][ T5935] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 91.493660][ T5935] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 91.532156][ T5941] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.566151][ T5941] EXT4-fs error (device loop2): ext4_find_dest_de:2111: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 91.709347][ T5122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.784528][ T5579] veth0_vlan: entered promiscuous mode [ 91.801175][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 91.961647][ T5579] veth1_vlan: entered promiscuous mode [ 92.217258][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.224423][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.267958][ T5866] bridge_slave_0: entered allmulticast mode [ 92.288424][ T5866] bridge_slave_0: entered promiscuous mode [ 92.321857][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.338350][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.357712][ T5866] bridge_slave_1: entered allmulticast mode [ 92.365066][ T5866] bridge_slave_1: entered promiscuous mode [ 92.393606][ T5579] veth0_macvtap: entered promiscuous mode [ 92.442455][ T5579] veth1_macvtap: entered promiscuous mode [ 92.501499][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.563880][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.701000][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.732826][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.761314][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.789611][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.815776][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.842287][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.872308][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.896151][ T5957] loop4: detected capacity change from 0 to 40427 [ 92.911757][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.943161][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.958047][ T5957] F2FS-fs (loop4): Found nat_bits in checkpoint [ 92.969705][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.991344][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.011454][ T5579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.037785][ T5579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.061419][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.070528][ T5957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.079795][ T5866] team0: Port device team_slave_0 added [ 93.119946][ T5579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.129072][ T5579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.138598][ T5579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.147753][ T5579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.374852][ T5866] team0: Port device team_slave_1 added [ 93.396056][ T5125] Bluetooth: hci1: command tx timeout [ 94.638130][ T5994] syz-executor.4: attempt to access beyond end of device [ 94.638130][ T5994] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 94.654671][ T5994] syz-executor.4: attempt to access beyond end of device [ 94.654671][ T5994] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 94.689380][ T29] audit: type=1800 audit(1717484375.539:8): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 95.076530][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.199311][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.255989][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.269593][ T5112] syz-executor.4: attempt to access beyond end of device [ 95.269593][ T5112] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.316243][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.316613][ T5112] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 95.323536][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.393313][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.475701][ T5125] Bluetooth: hci1: command tx timeout [ 95.595777][ T5866] hsr_slave_0: entered promiscuous mode [ 95.626838][ T5866] hsr_slave_1: entered promiscuous mode [ 95.642570][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.654951][ T5866] Cannot create hsr debugfs directory [ 95.741421][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.756489][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.847707][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.870483][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.048314][ T5221] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.250121][ T5221] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 96.267484][ T5221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.293934][ T5221] usb 3-1: Product: syz [ 96.312179][ T5221] usb 3-1: Manufacturer: syz [ 96.347909][ T5221] usb 3-1: SerialNumber: syz [ 96.381406][ T5221] usb 3-1: config 0 descriptor?? [ 96.397606][ T5221] ch341 3-1:0.0: ch341-uart converter detected [ 96.663772][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.699294][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.720122][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.753485][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.785249][ C0] hrtimer: interrupt took 102489 ns [ 97.007696][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.070085][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.109561][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.116833][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.173867][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.181088][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.233653][ T5221] usb 3-1: failed to send control message: -71 [ 97.250206][ T5221] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 97.288810][ T5221] usb 3-1: USB disconnect, device number 4 [ 97.294947][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.312685][ T5221] ch341 3-1:0.0: device disconnected [ 97.389986][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.512686][ T6048] loop3: detected capacity change from 0 to 512 [ 97.719269][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.792803][ T5866] veth0_vlan: entered promiscuous mode [ 97.813190][ T5866] veth1_vlan: entered promiscuous mode [ 97.926936][ T5866] veth0_macvtap: entered promiscuous mode [ 97.944449][ T5866] veth1_macvtap: entered promiscuous mode [ 97.988050][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.025332][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.055425][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.071161][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.082679][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.102660][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.124724][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.143499][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.162518][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.189053][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.211585][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.230236][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.241841][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.263267][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.274208][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.279588][ T6073] syz-executor.3 (pid 6073) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 98.289846][ T5866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.306584][ T5866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.320339][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.336076][ T5866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.346086][ T5866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.357543][ T5866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.369560][ T5866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.504044][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.533457][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.583812][ T4378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.599540][ T4378] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.693150][ T6078] loop0: detected capacity change from 0 to 8 [ 98.796665][ T6089] syzkaller1: entered promiscuous mode [ 98.809257][ T6089] syzkaller1: entered allmulticast mode [ 99.145719][ T5138] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.368502][ T5138] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 99.382431][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.403052][ T5138] usb 2-1: Product: syz [ 99.412403][ T5138] usb 2-1: Manufacturer: syz [ 99.423281][ T5138] usb 2-1: SerialNumber: syz [ 99.438506][ T5138] usb 2-1: config 0 descriptor?? [ 99.458316][ T5138] ch341 2-1:0.0: ch341-uart converter detected [ 99.524662][ T6090] loop4: detected capacity change from 0 to 32768 [ 100.217596][ T6143] loop2: detected capacity change from 0 to 256 [ 100.225985][ T6143] FAT-fs (loop2): Unrecognized mount option "shor " or missing value [ 100.288893][ T5138] usb 2-1: failed to send control message: -71 [ 100.296394][ T6143] CUSE: unknown device info "e" [ 100.301289][ T6143] CUSE: unknown device info "./file0" [ 100.305591][ T5138] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 100.319213][ T5138] usb 2-1: USB disconnect, device number 2 [ 100.326981][ T6143] CUSE: DEVNAME unspecified [ 100.330530][ T5138] ch341 2-1:0.0: device disconnected [ 100.526993][ T6156] loop4: detected capacity change from 0 to 2048 [ 100.559630][ T6156] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 100.577699][ T6156] UDF-fs: Scanning with blocksize 512 failed [ 100.600752][ T6156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.918856][ T6176] loop3: detected capacity change from 0 to 64 [ 101.143642][ T6194] loop3: detected capacity change from 0 to 2048 [ 101.202553][ T6196] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 101.215357][ T6196] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.278102][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.405421][ T5138] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.602499][ T6210] MPI: mpi too large (187200 bits) [ 101.621114][ T5138] usb 2-1: Using ep0 maxpacket: 16 [ 101.642219][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 101.661730][ T5138] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 101.687446][ T5138] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 101.716680][ T5138] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 101.756605][ T5138] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 101.775356][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 101.783379][ T5138] usb 2-1: SerialNumber: syz [ 101.793275][ T6210] loop4: detected capacity change from 0 to 1024 [ 101.831437][ T5138] usb-storage 2-1:1.0: USB Mass Storage device detected [ 101.848826][ T5138] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 101.858830][ T6210] hfsplus: bad catalog entry used to create inode [ 101.865989][ T5138] scsi host1: usb-storage 2-1:1.0 [ 101.879688][ T6210] hfsplus: failed to load root directory [ 101.902220][ T6184] loop2: detected capacity change from 0 to 32768 [ 101.933230][ T6184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6184) [ 102.023193][ T6184] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.056769][ T6184] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 102.076552][ T6184] BTRFS info (device loop2): using free-space-tree [ 102.144099][ T6233] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 102.164084][ T6232] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 102.192834][ T6233] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.234860][ T8] usb 2-1: USB disconnect, device number 3 [ 102.601498][ T5122] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.604727][ T6261] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.995751][ T6273] loop1: detected capacity change from 0 to 256 [ 103.068306][ T6276] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 103.077455][ T6273] FAT-fs (loop1): Directory bread(block 64) failed [ 103.077519][ T6273] FAT-fs (loop1): Directory bread(block 65) failed [ 103.125448][ T6273] FAT-fs (loop1): Directory bread(block 66) failed [ 103.132152][ T6276] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.150844][ T6273] FAT-fs (loop1): Directory bread(block 67) failed [ 103.165522][ T6273] FAT-fs (loop1): Directory bread(block 68) failed [ 103.191268][ T6273] FAT-fs (loop1): Directory bread(block 69) failed [ 103.201207][ T6273] FAT-fs (loop1): Directory bread(block 70) failed [ 103.217310][ T6273] FAT-fs (loop1): Directory bread(block 71) failed [ 103.242851][ T6273] FAT-fs (loop1): Directory bread(block 72) failed [ 103.278832][ T6273] FAT-fs (loop1): Directory bread(block 73) failed [ 103.471231][ T6296] loop0: detected capacity change from 0 to 2048 [ 103.670404][ T6306] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 103.679587][ T6306] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.689593][ T6306] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 103.754471][ T6303] loop1: detected capacity change from 0 to 4096 [ 103.771193][ T6303] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 103.810806][ T6303] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 103.887665][ T6303] ntfs3: loop1: ino=1b, "file0" The size of extended attributes must not exceed 64KiB [ 103.938789][ T5866] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 103.952468][ T6320] Bluetooth: MGMT ver 1.23 [ 104.069929][ T6324] MPI: mpi too large (187200 bits) [ 104.121161][ T6324] loop4: detected capacity change from 0 to 1024 [ 104.145707][ T6324] hfsplus: bad catalog entry used to create inode [ 104.164256][ T6324] hfsplus: failed to load root directory [ 104.193611][ T6328] loop2: detected capacity change from 0 to 4096 [ 104.228070][ T29] audit: type=1800 audit(1717484386.159:9): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 104.249955][ T6328] ntfs3: loop2: failed to convert "0000" to iso8859-15 [ 104.348986][ T6334] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 104.374347][ T6334] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.395778][ T6334] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 104.603578][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802bc7c000: rx timeout, send abort [ 105.113702][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802bc7c000: abort rx timeout. Force session deactivation [ 105.212832][ T6378] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.265416][ T6378] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 105.529526][ T6351] loop1: detected capacity change from 0 to 32768 [ 105.607436][ T6351] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.861207][ T6351] XFS (loop1): Ending clean mount [ 105.866896][ T6417] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 105.937371][ T5866] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.083843][ T6425] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 106.425713][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.451622][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.470013][ T6445] loop3: detected capacity change from 0 to 512 [ 106.954747][ T6472] loop1: detected capacity change from 0 to 1024 [ 106.970381][ T6472] EXT4-fs: Ignoring removed nobh option [ 107.039660][ T6476] loop2: detected capacity change from 0 to 1024 [ 107.049867][ T6478] loop3: detected capacity change from 0 to 512 [ 107.062237][ T6472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.073365][ T6476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.116597][ T6482] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 107.139009][ T6476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.193144][ T5122] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.385767][ T6494] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.627090][ T6508] loop4: detected capacity change from 0 to 1024 [ 107.645620][ T6512] loop2: detected capacity change from 0 to 2048 [ 107.664284][ T6508] EXT4-fs: Ignoring removed orlov option [ 107.689045][ T6508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.707540][ T6512] loop2: [ICS] [ 107.731556][ T6518] loop3: detected capacity change from 0 to 512 [ 107.752756][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.904700][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.919780][ T946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.029545][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.140157][ T946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.311711][ T946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.496721][ T946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.752110][ T946] bridge_slave_1: left allmulticast mode [ 108.773859][ T946] bridge_slave_1: left promiscuous mode [ 108.790864][ T946] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.815112][ T946] bridge_slave_0: left allmulticast mode [ 108.828853][ T946] bridge_slave_0: left promiscuous mode [ 108.860069][ T946] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.888486][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.898855][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.907279][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.917388][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.927546][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.945356][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.953938][ T6572] loop4: detected capacity change from 0 to 512 [ 108.963756][ T6572] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.005421][ T6572] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.062738][ T6572] EXT4-fs (loop4): 1 truncate cleaned up [ 109.078719][ T6572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.147841][ T6572] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: overlapping e_value [ 109.181218][ T6572] EXT4-fs (loop4): Remounting filesystem read-only [ 109.194526][ T6572] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.4: unable to update i_inline_off [ 109.222398][ T6572] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.301016][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.393278][ T6585] loop0: detected capacity change from 0 to 1024 [ 109.658309][ T946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.673313][ T946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.686582][ T946] bond0 (unregistering): Released all slaves [ 109.729136][ T6592] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 110.233751][ T6617] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.294893][ T946] hsr_slave_0: left promiscuous mode [ 110.333776][ T946] hsr_slave_1: left promiscuous mode [ 110.376896][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.384349][ T946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.414410][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.424838][ T946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.432332][ T946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.473984][ T946] veth1_macvtap: left promiscuous mode [ 110.507195][ T946] veth0_macvtap: left promiscuous mode [ 110.523551][ T946] veth1_vlan: left promiscuous mode [ 110.540537][ T946] veth0_vlan: left promiscuous mode [ 110.882520][ T6653] loop4: detected capacity change from 0 to 256 [ 110.996258][ T5125] Bluetooth: hci1: command tx timeout [ 111.087885][ T6655] Falling back ldisc for ptm0. [ 111.681318][ T6671] loop0: detected capacity change from 0 to 512 [ 111.732967][ T6671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.880828][ T5380] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.047725][ T6678] loop4: detected capacity change from 0 to 2048 [ 112.060821][ T946] team0 (unregistering): Port device team_slave_1 removed [ 112.110569][ T6678] loop4: p1 p2 < > p3 p4 < p5 > [ 112.124642][ T6678] loop4: partition table partially beyond EOD, truncated [ 112.151130][ T6678] loop4: p1 start 2305 is beyond EOD, truncated [ 112.169642][ T6678] loop4: p2 start 4294902784 is beyond EOD, truncated [ 112.187340][ T946] team0 (unregistering): Port device team_slave_0 removed [ 112.192880][ T6678] loop4: p3 start 4278191616 is beyond EOD, truncated [ 112.321341][ T6678] loop4: p5 start 2305 is beyond EOD, truncated [ 112.362747][ T6684] Falling back ldisc for ptm0. [ 112.961594][ T6680] loop0: detected capacity change from 0 to 32768 [ 113.085635][ T5125] Bluetooth: hci1: command tx timeout [ 113.440694][ T6569] chnl_net:caif_netlink_parms(): no params data found [ 113.522208][ T6699] loop3: detected capacity change from 0 to 512 [ 113.633310][ T6699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.670786][ T6700] loop0: detected capacity change from 0 to 4096 [ 113.758168][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.783544][ T5579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.807064][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.814314][ T6569] bridge_slave_0: entered allmulticast mode [ 113.848006][ T6569] bridge_slave_0: entered promiscuous mode [ 113.871631][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.906013][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.913266][ T6569] bridge_slave_1: entered allmulticast mode [ 113.938203][ T6569] bridge_slave_1: entered promiscuous mode [ 114.079368][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.109687][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.223436][ T6569] team0: Port device team_slave_0 added [ 114.258297][ T6569] team0: Port device team_slave_1 added [ 114.328283][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.367603][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.417895][ T6731] loop4: detected capacity change from 0 to 1024 [ 114.424361][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.441307][ T6731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.471856][ T6731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.492141][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.536765][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.632117][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.660875][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.768923][ T6569] hsr_slave_0: entered promiscuous mode [ 114.778823][ T6721] loop3: detected capacity change from 0 to 32768 [ 114.790720][ T6569] hsr_slave_1: entered promiscuous mode [ 114.924155][ T6569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.956454][ T6569] Cannot create hsr debugfs directory [ 115.620844][ T5125] Bluetooth: hci1: command tx timeout [ 116.388019][ T6754] x_tables: unsorted underflow at hook 2 [ 116.837456][ T1034] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.014151][ T1034] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.055749][ T6569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.102478][ T6569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.137315][ T6569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.182141][ T1034] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.229300][ T6569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.337796][ T1034] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.511907][ T6734] loop0: detected capacity change from 0 to 65536 [ 117.557286][ T6754] loop2: detected capacity change from 0 to 40427 [ 117.585468][ T6754] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.610071][ T6754] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.655604][ T1034] bridge_slave_1: left allmulticast mode [ 117.661993][ T1034] bridge_slave_1: left promiscuous mode [ 117.686395][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.701938][ T5124] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.702482][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.729594][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.739414][ T5124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.749003][ T6754] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.750274][ T1034] bridge_slave_0: left allmulticast mode [ 117.755385][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.769000][ T5124] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.769037][ T1034] bridge_slave_0: left promiscuous mode [ 117.783278][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.796305][ T5117] Bluetooth: hci1: command tx timeout [ 117.928818][ T6754] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.948841][ T6754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.134149][ T6754] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 118.161387][ T6754] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 118.462322][ T6783] binder: 6782:6783 ioctl c0306201 20000480 returned -22 [ 118.742629][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.784611][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.825273][ T1034] bond0 (unregistering): Released all slaves [ 118.850352][ T1034] bond1 (unregistering): Released all slaves [ 118.941913][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.001346][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.069843][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.201601][ T1034] mac80211_hwsim hwsim15 wlan1 (unregistering): left allmulticast mode [ 119.240185][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.247395][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.304205][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.311412][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.443750][ T6805] loop2: detected capacity change from 0 to 2048 [ 119.451794][ T6805] udf: Bad value for 'rootdir' [ 119.493439][ T6807] fscrypt (sda1, inode 1953): Unsupported encryption flags (0x10) [ 119.502663][ T6569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.531474][ T6569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.780367][ T1034] hsr_slave_0: left promiscuous mode [ 119.793738][ T1034] hsr_slave_1: left promiscuous mode [ 119.801131][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.813386][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.737319][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.745504][ T5125] Bluetooth: hci4: command tx timeout [ 120.760982][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.864310][ T6811] loop0: detected capacity change from 0 to 2048 [ 120.898554][ T6811] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 120.942226][ T1034] veth1_macvtap: left promiscuous mode [ 120.961616][ T1034] veth0_macvtap: left promiscuous mode [ 120.981099][ T1034] veth1_vlan: left promiscuous mode [ 121.004221][ T1034] veth0_vlan: left promiscuous mode [ 121.200876][ T6814] loop2: detected capacity change from 0 to 1024 [ 121.248983][ T6814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.272898][ T6814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.849359][ T5125] Bluetooth: hci4: command tx timeout [ 123.121367][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 123.228862][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 124.137156][ T6847] loop0: detected capacity change from 0 to 4096 [ 124.187676][ T6849] loop2: detected capacity change from 0 to 64 [ 124.425065][ T6767] chnl_net:caif_netlink_parms(): no params data found [ 124.629558][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.956037][ T5125] Bluetooth: hci4: command tx timeout [ 125.516056][ T6869] loop4: detected capacity change from 0 to 1024 [ 125.560804][ T6869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.585731][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.592831][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.619116][ T6767] bridge_slave_0: entered allmulticast mode [ 125.626847][ T6869] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.637707][ T6767] bridge_slave_0: entered promiscuous mode [ 125.672759][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.682881][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.696652][ T6767] bridge_slave_1: entered allmulticast mode [ 125.704443][ T6767] bridge_slave_1: entered promiscuous mode [ 125.725005][ T6569] veth0_vlan: entered promiscuous mode [ 125.825712][ T6767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.840358][ T6767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.887253][ T6569] veth1_vlan: entered promiscuous mode [ 125.944491][ T6767] team0: Port device team_slave_0 added [ 125.972878][ T6767] team0: Port device team_slave_1 added [ 126.032260][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.039852][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.065830][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.111131][ T6767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.128143][ T6767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.146307][ T6767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.189867][ T6767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.384165][ T6767] hsr_slave_0: entered promiscuous mode [ 126.394735][ T6767] hsr_slave_1: entered promiscuous mode [ 126.408224][ T6767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.431771][ T6767] Cannot create hsr debugfs directory [ 126.599670][ T6569] veth0_macvtap: entered promiscuous mode [ 126.682833][ T6569] veth1_macvtap: entered promiscuous mode [ 126.975908][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.987438][ T6872] loop2: detected capacity change from 0 to 65536 [ 126.995686][ T5125] Bluetooth: hci4: command tx timeout [ 127.003281][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.013641][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.024952][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.035583][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.046493][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.059863][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.088933][ T6872] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 127.143025][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.162113][ T5125] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 127.171890][ T5125] Bluetooth: hci2: Injecting HCI hardware error event [ 127.181012][ T5124] Bluetooth: hci2: hardware error 0x00 [ 127.194297][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.216682][ T6872] XFS (loop2): Ending clean mount [ 127.235380][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.250932][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.261122][ T6569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.263694][ T6872] XFS (loop2): Quotacheck needed: Please wait. [ 127.271582][ T6569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.273230][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.341367][ T6893] loop4: detected capacity change from 0 to 2048 [ 127.359675][ T6893] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 127.364547][ T6872] XFS (loop2): Quotacheck: Done. [ 127.376196][ T6569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.384913][ T6569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.393778][ T6569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.404795][ T6569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.579080][ T6895] loop0: detected capacity change from 0 to 512 [ 127.639238][ T5122] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 127.783194][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.808377][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.906554][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.914428][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.027272][ T6767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.051018][ T6767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.081433][ T6905] loop4: detected capacity change from 0 to 1024 [ 128.111148][ T6767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.139852][ T6767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.181697][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.274412][ T6914] loop2: detected capacity change from 0 to 256 [ 128.284192][ T6914] FAT-fs (loop2): Unrecognized mount option "À" or missing value [ 128.304460][ T6905] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.340684][ T6912] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 128.447951][ T6915] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 129.183981][ T6907] loop0: detected capacity change from 0 to 32768 [ 129.191784][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.201418][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.395445][ T5124] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 130.039933][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.113140][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.515388][ T5124] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 130.526310][ T5124] Bluetooth: hci0: Injecting HCI hardware error event [ 130.535020][ T5125] Bluetooth: hci0: hardware error 0x00 [ 130.850122][ T6915] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.875250][ T6915] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.890877][ T6915] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.917085][ T6915] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.104337][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.145861][ T29] audit: type=1326 audit(1717484414.069:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9d247cf69 code=0x0 [ 132.215205][ T6767] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.245405][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.252575][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.317456][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.324617][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.404527][ T6767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 132.426002][ T6767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.549058][ T6949] loop1: detected capacity change from 0 to 32768 [ 132.607718][ T5125] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 132.759904][ T6767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.863844][ T6767] veth0_vlan: entered promiscuous mode [ 132.889667][ T6767] veth1_vlan: entered promiscuous mode [ 133.164302][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164414][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.892691][ T6767] veth0_macvtap: entered promiscuous mode [ 133.903494][ T6767] veth1_macvtap: entered promiscuous mode [ 133.987537][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.001530][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.024996][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.041355][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.060882][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.084244][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.101027][ T6999] loop4: detected capacity change from 0 to 256 [ 134.101204][ T7000] loop2: detected capacity change from 0 to 736 [ 134.113159][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.129837][ T6999] FAT-fs (loop4): Unrecognized mount option "À" or missing value [ 134.141386][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.150411][ T7000] iso9660: Unknown parameter 'é¦ÊŒóôä…¬(†]c^Ü0x0000000000000005œb[†Ò—¶×¨ZÓ°²Š0" Öΰô6¢ DÝIÄ6œ½»]Hsã²Ãa€ÚÈ*Øù×F€›/ZL' [ 134.168723][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.197423][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.210753][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.221047][ T6767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.231879][ T6767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.245094][ T6767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.284931][ T6767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.296726][ T6767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.322143][ T6767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.334353][ T6767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.497715][ T7007] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 134.909194][ T7024] Process accounting resumed [ 135.099448][ T29] audit: type=1800 audit(1717484417.029:11): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1946 res=0 errno=0 [ 135.140940][ T29] audit: type=1804 audit(1717484417.059:12): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3065581339/syzkaller.z91Ijs/14/file0" dev="sda1" ino=1946 res=1 errno=0 [ 135.165972][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.221888][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.230756][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.717738][ T7026] loop2: detected capacity change from 0 to 40427 [ 135.737917][ T7026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.851491][ T7026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.904724][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.039425][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.263770][ T7043] syz-executor.2: attempt to access beyond end of device [ 136.263770][ T7043] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 136.280971][ T7043] syz-executor.2: attempt to access beyond end of device [ 136.280971][ T7043] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 136.531689][ T29] audit: type=1800 audit(1717484418.159:13): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 136.937882][ T5122] syz-executor.2: attempt to access beyond end of device [ 136.937882][ T5122] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.972581][ T5122] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 137.313849][ T7037] loop1: detected capacity change from 0 to 32768 [ 137.331726][ T7037] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-1073741824016, 24-25 [ 137.331726][ T7037] journal_v2 (size 40): [ 137.331726][ T7037] Buckets: 9-1073741824016 24-25 [ 137.331726][ T7037] [ 137.390276][ T7007] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.405198][ T7007] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.414105][ T7007] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.435017][ T7007] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.637368][ T7007] bond1: left allmulticast mode [ 137.800129][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.813011][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.918567][ T7054] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.938714][ T7055] geneve2: entered promiscuous mode [ 137.945119][ T7054] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 137.945714][ T7055] geneve2: entered allmulticast mode [ 138.079733][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.124327][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.147307][ T7066] loop4: detected capacity change from 0 to 128 [ 138.187441][ T7066] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.213209][ T7066] ext4 filesystem being mounted at /root/syzkaller-testdir1311938463/syzkaller.C2UhkG/192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.334402][ T7071] netlink: 16186 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.598805][ T5112] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.155760][ T7084] RDS: rds_bind could not find a transport for ff::, load rds_tcp or rds_rdma? [ 139.739967][ T7057] loop2: detected capacity change from 0 to 32768 [ 139.896504][ T7087] jfs: Unrecognized mount option "ÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ" or missing value [ 139.919977][ T7057] read_mapping_page failed! [ 139.975409][ T7057] ERROR: (device loop2): txCommit: [ 139.975409][ T7057] [ 140.569764][ T7078] loop1: detected capacity change from 0 to 32768 [ 140.643444][ T7082] loop4: detected capacity change from 0 to 32768 [ 140.677922][ T7082] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-1073741824016, 24-25 [ 140.677922][ T7082] journal_v2 (size 40): [ 140.677922][ T7082] Buckets: 9-1073741824016 24-25 [ 140.677922][ T7082] [ 141.091798][ T29] audit: type=1800 audit(1717484423.019:14): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 141.167314][ T29] audit: type=1800 audit(1717484423.049:15): pid=7093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 141.276225][ T7095] loop3: detected capacity change from 0 to 1024 [ 142.139310][ T7112] kvm: kvm [7111]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x20 [ 142.168208][ T7112] kvm: kvm [7111]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x20 [ 142.470223][ T7107] loop3: detected capacity change from 0 to 32768 [ 142.835431][ T5165] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 142.870284][ T7107] loop3: detected capacity change from 0 to 64 [ 142.908022][ T7118] loop1: detected capacity change from 0 to 256 [ 143.037408][ T5165] usb 5-1: Using ep0 maxpacket: 8 [ 143.050309][ T5165] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 143.061591][ T5165] usb 5-1: config 179 has no interface number 0 [ 143.083506][ T5165] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 143.107146][ T5165] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 143.133079][ T5165] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.167696][ T5165] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 143.187798][ T5165] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 143.203982][ T5165] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 143.219228][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.237491][ T7116] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.253384][ T7122] loop1: detected capacity change from 0 to 2048 [ 143.289771][ T7122] hpfs: filesystem error: invalid number of hotfixes: 0, used: 1; already mounted read-only [ 143.334282][ T7122] hpfs: filesystem error: improperly stopped [ 143.345202][ T7122] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.352973][ T7122] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 143.514660][ T7129] loop0: detected capacity change from 0 to 256 [ 143.717701][ T7138] loop1: detected capacity change from 0 to 64 [ 143.733462][ T7138] hfs: unable to change codepage [ 143.738876][ T7138] hfs: unable to parse mount options [ 143.827351][ T7138] loop1: detected capacity change from 0 to 1024 [ 143.966908][ T61] hfsplus: b-tree write err: -5, ino 4 [ 144.637455][ T7144] loop0: detected capacity change from 0 to 32768 [ 144.654672][ T7144] btrfs: Deprecated parameter 'usebackuproot' [ 144.667648][ T7144] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 145.019199][ T7150] loop1: detected capacity change from 0 to 32768 [ 145.027835][ T7150] XFS: attr2 mount option is deprecated. [ 145.034253][ T7150] XFS: ikeep mount option is deprecated. [ 145.040293][ T7150] XFS: noikeep mount option is deprecated. [ 145.078864][ T7150] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 145.153688][ T7150] XFS (loop1): Ending clean mount [ 145.184341][ T7150] XFS (loop1): Quotacheck needed: Please wait. [ 145.312296][ T7150] XFS (loop1): Quotacheck: Done. [ 145.440493][ T7167] loop0: detected capacity change from 0 to 256 [ 145.530155][ T6569] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 145.595542][ T5165] usb 5-1: USB disconnect, device number 2 [ 145.595598][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 145.609758][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 145.751158][ T12] tipc: Subscription rejected, illegal request [ 145.983329][ T7183] loop1: detected capacity change from 0 to 256 [ 145.992846][ T7183] FAT-fs (loop1): bogus number of directory entries (4) [ 146.005440][ T7183] FAT-fs (loop1): Can't find a valid FAT filesystem [ 146.544918][ T7181] loop0: detected capacity change from 0 to 32768 [ 146.555547][ T7181] btrfs: Deprecated parameter 'usebackuproot' [ 146.561912][ T7181] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 147.146903][ T7198] loop0: detected capacity change from 0 to 256 [ 147.433992][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.877163][ T7222] loop0: detected capacity change from 0 to 1024 [ 147.976949][ T7226] smc: net device vlan0 applied user defined pnetid SYZ1 [ 147.997098][ T7226] smc: net device wg0 applied user defined pnetid SYZ0 [ 148.420783][ T7215] loop1: detected capacity change from 0 to 32768 [ 148.437291][ T7215] btrfs: Deprecated parameter 'usebackuproot' [ 148.451259][ T7215] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 148.479325][ T7215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7215) [ 148.522487][ T7215] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 148.546249][ T7215] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 148.628877][ T7228] loop0: detected capacity change from 0 to 32768 [ 148.683050][ T7215] BTRFS info (device loop1): rebuilding free space tree [ 148.745586][ T7215] BTRFS info (device loop1): disabling free space tree [ 148.752546][ T7215] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.768446][ T7215] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.873196][ T7215] BTRFS info (device loop1): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 148.960301][ T6569] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.230240][ T7274] loop1: detected capacity change from 0 to 8 [ 159.448797][ T7281] loop0: detected capacity change from 0 to 512 [ 159.681953][ T7293] ip6gretap1: entered promiscuous mode [ 159.704916][ T7293] ip6gretap1: entered allmulticast mode [ 159.774928][ T7291] loop1: detected capacity change from 0 to 8192 [ 159.803857][ T7291] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.352153][ T7314] openvswitch: netlink: Missing key (keys=40, expected=80) [ 160.493201][ T7317] loop0: detected capacity change from 0 to 1024 [ 160.528946][ T7318] loop3: detected capacity change from 0 to 1024 [ 160.703027][ T7306] loop4: detected capacity change from 0 to 32768 [ 160.759475][ T7306] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.821874][ T29] audit: type=1800 audit(1717484442.749:16): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 160.868988][ T7310] loop1: detected capacity change from 0 to 32768 [ 160.896371][ T7310] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7310) [ 160.926267][ T7310] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.938000][ T7306] XFS (loop4): Ending clean mount [ 160.961940][ T7310] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 160.973381][ T7306] XFS (loop4): Quotacheck needed: Please wait. [ 160.987473][ T7310] BTRFS info (device loop1): using free-space-tree [ 161.040761][ T7306] XFS (loop4): Quotacheck: Done. [ 161.168325][ T7357] loop0: detected capacity change from 0 to 512 [ 161.238204][ T6569] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.634084][ T5112] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.359452][ T7389] loop4: detected capacity change from 0 to 1024 [ 162.665410][ T7401] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 162.784871][ T7408] ip6gretap1: entered promiscuous mode [ 162.816005][ T7408] ip6gretap1: entered allmulticast mode [ 162.942621][ T7420] mmap: syz-executor.1 (7420) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.179417][ T7423] loop1: detected capacity change from 0 to 2048 [ 163.223060][ T7423] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 163.317208][ T7420] fuse: Bad value for 'group_id' [ 163.427677][ T7427] loop4: detected capacity change from 0 to 256 [ 163.497739][ T7427] Bluetooth: MGMT ver 1.23 [ 163.949124][ T7434] RDS: rds_bind could not find a transport for ff::, load rds_tcp or rds_rdma? [ 164.815341][ T782] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 164.874692][ T7444] loop0: detected capacity change from 0 to 1024 [ 165.025254][ T782] usb 2-1: Using ep0 maxpacket: 32 [ 165.032285][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.048624][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.060608][ T782] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.073013][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.091798][ T782] usb 2-1: config 0 descriptor?? [ 165.112407][ T782] hub 2-1:0.0: USB hub found [ 165.252178][ T7455] tap0: tun_chr_ioctl cmd 2147767507 [ 165.327563][ T782] hub 2-1:0.0: 1 port detected [ 165.513140][ T7433] loop3: detected capacity change from 0 to 65536 [ 165.606427][ T7460] loop0: detected capacity change from 0 to 256 [ 165.795017][ T7460] loop0: detected capacity change from 0 to 1024 [ 165.857343][ T7465] input: syz0 as /devices/virtual/input/input7 [ 165.992546][ T45] hub 2-1:0.0: activate --> -90 [ 166.106627][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.117579][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.295266][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.416923][ T782] usb 2-1: USB disconnect, device number 4 [ 166.425997][ T45] usb 2-1-port1: cannot reset (err = -71) [ 166.441140][ T45] usb 2-1-port1: attempt power cycle [ 166.487824][ T7483] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.515391][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 166.532895][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.543542][ T9] usb 5-1: config 179 has no interface number 0 [ 166.555225][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.575177][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.595537][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.615986][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.634056][ T7469] loop0: detected capacity change from 0 to 40427 [ 166.640559][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.655293][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.664348][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.674502][ T7472] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.273934][ T7492] loop0: detected capacity change from 0 to 1024 [ 167.360134][ T29] audit: type=1800 audit(1717484449.149:17): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 168.200086][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.235403][ T7503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.598456][ T7499] loop3: detected capacity change from 0 to 32768 [ 168.659801][ T7498] loop1: detected capacity change from 0 to 40427 [ 168.675283][ T7498] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 168.683441][ T7498] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 168.706170][ T7498] F2FS-fs (loop1): invalid crc value [ 168.725360][ T7498] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.847956][ T7498] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 168.855673][ T7498] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 168.952872][ T6569] syz-executor.1: attempt to access beyond end of device [ 168.952872][ T6569] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.975807][ T6569] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 169.038429][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 169.046754][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 169.055467][ T5164] usb 5-1: USB disconnect, device number 3 [ 169.127083][ T7516] loop3: detected capacity change from 0 to 64 [ 169.193024][ T29] audit: type=1800 audit(1717484451.119:18): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1963 res=0 errno=0 [ 169.522115][ T7522] kvm: emulating exchange as write [ 169.692715][ T7533] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 170.108071][ T7541] RDS: rds_bind could not find a transport for ff::, load rds_tcp or rds_rdma? [ 170.925055][ T7553] loop1: detected capacity change from 0 to 128 [ 170.967460][ T7553] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.991928][ T7553] ext4 filesystem being mounted at /root/syzkaller-testdir3065581339/syzkaller.z91Ijs/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.099128][ T6569] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.124460][ T7563] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.224000][ T7570] loop1: detected capacity change from 0 to 512 [ 171.239463][ T7570] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 171.253074][ T7572] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 171.291666][ T7570] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value out of bounds [ 171.315739][ T7570] EXT4-fs (loop1): Remounting filesystem read-only [ 171.323849][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.383290][ T6569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.689609][ T29] audit: type=1804 audit(1717484453.619:19): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1311938463/syzkaller.C2UhkG/245/file1" dev="sda1" ino=1957 res=1 errno=0 [ 171.779412][ T7603] loop4: detected capacity change from 0 to 512 [ 171.790302][ T7603] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 171.806105][ T7603] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: e_value out of bounds [ 171.820803][ T7603] EXT4-fs (loop4): Remounting filesystem read-only [ 171.828861][ T7603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.863788][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.045664][ T782] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 172.238323][ T782] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 172.247617][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.261776][ T782] usb 2-1: config 0 descriptor?? [ 172.325269][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 172.517897][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 172.529006][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 172.539018][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.552168][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.562149][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.572527][ T9] usb 4-1: config 0 descriptor?? [ 173.007071][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 173.021195][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 173.034682][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 173.083926][ T782] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.094941][ T782] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 173.106688][ T29] audit: type=1804 audit(1717484455.029:20): pid=7627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1311938463/syzkaller.C2UhkG/254/file1" dev="sda1" ino=1963 res=1 errno=0 [ 173.141282][ T782] asix 2-1:0.0: probe with driver asix failed with error -71 [ 173.154361][ T782] usb 2-1: USB disconnect, device number 9 [ 173.298124][ T9] usb 4-1: USB disconnect, device number 2 [ 173.409845][ T7638] loop4: detected capacity change from 0 to 4096 [ 173.425074][ T7638] NILFS (loop4): invalid segment: Checksum error in segment payload [ 173.434054][ T7638] NILFS (loop4): trying rollback from an earlier position [ 173.450601][ T7638] NILFS (loop4): recovery complete [ 173.460461][ T7639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.866663][ T7655] loop1: detected capacity change from 0 to 1024 [ 173.895415][ T7655] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 173.911208][ T7655] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 173.936912][ T7655] jbd2_journal_init_inode: Cannot locate journal superblock [ 173.945029][ T7655] EXT4-fs (loop1): Could not load journal inode [ 174.225840][ T29] audit: type=1804 audit(1717484456.159:21): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir114964153/syzkaller.65TlUo/64/file1" dev="sda1" ino=1963 res=1 errno=0 [ 174.345085][ T29] audit: type=1326 audit(1717484456.269:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7673 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1883a7cf69 code=0x0 [ 174.440837][ T7653] loop4: detected capacity change from 0 to 32768 [ 174.456836][ T7653] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.553369][ T7653] XFS (loop4): Ending clean mount [ 174.564612][ T7653] XFS (loop4): Quotacheck needed: Please wait. [ 174.600909][ T7653] XFS (loop4): Quotacheck: Done. [ 174.800102][ T5112] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.845471][ T782] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 175.049909][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 175.069071][ T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 175.090908][ T782] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.117730][ T782] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.138890][ T782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.172110][ T782] usb 2-1: config 0 descriptor?? [ 175.288348][ T7703] loop4: detected capacity change from 0 to 512 [ 175.318717][ T7703] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 175.336349][ T7703] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 175.382472][ T7703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.445724][ T7697] loop0: detected capacity change from 0 to 40427 [ 175.454413][ T7697] F2FS-fs (loop0): heap/no_heap options were deprecated [ 175.464038][ T7697] F2FS-fs (loop0): invalid crc value [ 175.469520][ T7697] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 175.485570][ T7697] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.567879][ T7697] F2FS-fs (loop0): write access unavailable, skipping recovery [ 175.578670][ T7697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.619394][ T782] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 175.635107][ T782] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 175.673587][ T782] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 175.908406][ T5138] usb 2-1: USB disconnect, device number 10 [ 176.330466][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.504092][ T7724] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.632512][ T7718] loop3: detected capacity change from 0 to 40427 [ 177.285711][ T7740] loop3: detected capacity change from 0 to 1024 [ 177.304698][ T29] audit: type=1800 audit(1717484459.109:23): pid=7740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 177.883448][ T7744] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.915582][ T7744] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 177.923699][ T7744] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.105864][ T7756] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 178.456087][ T5138] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 178.550028][ T7759] loop1: detected capacity change from 0 to 32768 [ 178.559570][ T7759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7759) [ 178.581227][ T7759] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.594977][ T7759] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 178.605213][ T7759] BTRFS info (device loop1): using free-space-tree [ 178.666880][ T5138] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 178.685252][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.697428][ T5138] usb 5-1: config 0 descriptor?? [ 178.758090][ T29] audit: type=1800 audit(1717484460.689:24): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 178.846878][ T6569] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.156014][ T7768] loop3: detected capacity change from 0 to 40427 [ 179.522564][ T5138] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 179.545520][ T5138] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 179.563175][ T7791] netlink: 3084 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.565334][ T5138] asix 5-1:0.0: probe with driver asix failed with error -71 [ 179.578593][ T7791] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 179.594720][ T7791] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.600068][ T5138] usb 5-1: USB disconnect, device number 4 [ 179.797412][ T7787] loop1: detected capacity change from 0 to 40427 [ 179.824306][ T7787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.891181][ T7787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.944245][ T7804] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 180.056916][ T7806] Invalid ELF header len 1 [ 180.162677][ T7806] Zero length message leads to an empty skb [ 180.312489][ T7812] syz-executor.1: attempt to access beyond end of device [ 180.312489][ T7812] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 180.327336][ T7812] syz-executor.1: attempt to access beyond end of device [ 180.327336][ T7812] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 180.528698][ T29] audit: type=1800 audit(1717484462.209:25): pid=7812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 180.992231][ T6569] syz-executor.1: attempt to access beyond end of device [ 180.992231][ T6569] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.040228][ T6569] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 181.315300][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 181.520290][ T7810] loop4: detected capacity change from 0 to 32768 [ 181.537125][ T7810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7810) [ 181.562799][ T7810] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.586711][ T7810] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 181.602666][ T7810] BTRFS info (device loop4): using free-space-tree [ 181.775011][ T7836] loop1: detected capacity change from 0 to 8 [ 181.796452][ T7836] squashfs: Unknown parameter 'Êl80211' [ 181.828838][ T29] audit: type=1800 audit(1717484463.759:26): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 181.904568][ T7818] loop0: detected capacity change from 0 to 40427 [ 181.919835][ T5112] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.962483][ T7840] loop1: detected capacity change from 0 to 64 [ 182.604344][ T7863] loop4: detected capacity change from 0 to 512 [ 182.617167][ T7863] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 182.635234][ T7863] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 182.658300][ T7863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.425243][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 183.628896][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 183.648791][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.674619][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.717941][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 183.774538][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 183.790145][ T8] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 183.804874][ T8] usb 2-1: Manufacturer: syz [ 183.813890][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.823354][ T8] usb 2-1: config 0 descriptor?? [ 183.881439][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.109938][ T7886] xt_connbytes: Forcing CT accounting to be enabled [ 184.130828][ T7886] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 184.262268][ T8] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 184.295423][ T8] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 184.307714][ T8] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 184.318544][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.345710][ T7872] loop0: detected capacity change from 0 to 40427 [ 184.510383][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.977246][ T7912] loop3: detected capacity change from 0 to 256 [ 185.061283][ T7902] loop0: detected capacity change from 0 to 32768 [ 185.137456][ T5165] usb 2-1: USB disconnect, device number 11 [ 186.395567][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.544657][ T7984] loop1: detected capacity change from 0 to 2048 [ 186.567571][ T7984] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 186.591576][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 186.603382][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.614495][ T7988] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.614927][ T7984] syz-executor.1: attempt to access beyond end of device [ 186.614927][ T7984] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 186.625282][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.625313][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 186.626694][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 186.672867][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 186.683451][ T8] usb 5-1: Manufacturer: syz [ 186.690902][ T8] usb 5-1: config 0 descriptor?? [ 186.733121][ T7984] syz-executor.1: attempt to access beyond end of device [ 186.733121][ T7984] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 186.761975][ T7984] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 186.771323][ T7984] NILFS (loop1): error -5 reading inode: ino=12 [ 186.911913][ T7984] syz-executor.1: attempt to access beyond end of device [ 186.911913][ T7984] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 186.934472][ T7984] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 186.943094][ T7984] NILFS (loop1): error -5 reading inode: ino=15 [ 186.960947][ T7984] syz-executor.1: attempt to access beyond end of device [ 186.960947][ T7984] loop1: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 186.981793][ T7984] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=3) [ 186.992374][ T7984] NILFS (loop1): error -5 reading inode: ino=15 [ 187.134607][ T8] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 187.149678][ T8] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 187.171092][ T8] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 187.701418][ T8011] loop0: detected capacity change from 0 to 32768 [ 187.940184][ T8016] loop1: detected capacity change from 0 to 8 [ 187.951143][ T8016] squashfs: Unknown parameter 'Êl80211' [ 187.981604][ T5165] usb 5-1: USB disconnect, device number 5 [ 188.040976][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.091553][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.299813][ T8038] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 189.331127][ T8038] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.681602][ T8046] loop4: detected capacity change from 0 to 32768 [ 189.694924][ T8046] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.752035][ T8046] XFS (loop4): Ending clean mount [ 189.791594][ T5112] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.026699][ T8060] loop3: detected capacity change from 0 to 8 [ 190.034002][ T8060] squashfs: Unknown parameter 'Êl80211' [ 190.049000][ T8062] loop4: detected capacity change from 0 to 1024 [ 190.056647][ T8062] hfsplus: type requires a 4 character value [ 190.062639][ T8062] hfsplus: unable to parse mount options [ 190.291732][ T8066] Invalid ELF header len 1 [ 192.165773][ T8064] loop4: detected capacity change from 0 to 40427 [ 192.203430][ T8064] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.293446][ T8064] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.603786][ T8120] syz-executor.4: attempt to access beyond end of device [ 192.603786][ T8120] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 192.617901][ T8120] syz-executor.4: attempt to access beyond end of device [ 192.617901][ T8120] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 192.666457][ T29] audit: type=1800 audit(1717484474.529:27): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 193.163681][ T8119] loop1: detected capacity change from 0 to 8 [ 193.170800][ T5112] syz-executor.4: attempt to access beyond end of device [ 193.170800][ T5112] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.200627][ T8119] squashfs: Unknown parameter 'Êl80211' [ 193.215422][ T5112] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 194.780086][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.787172][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.813013][ T8116] loop3: detected capacity change from 0 to 32768 [ 195.171683][ T8146] loop0: detected capacity change from 0 to 8 [ 195.182699][ T8146] squashfs: Unknown parameter 'Êl80211' [ 195.518604][ T8167] loop4: detected capacity change from 0 to 512 [ 195.562377][ T8171] loop1: detected capacity change from 0 to 1024 [ 195.582684][ T8167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.604376][ T8167] ext4 filesystem being mounted at /root/syzkaller-testdir1311938463/syzkaller.C2UhkG/301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.617650][ T8178] input: syz0 as /devices/virtual/input/input8 [ 195.634387][ T8171] hfsplus: type requires a 4 character value [ 195.657835][ T8171] hfsplus: unable to parse mount options [ 195.695410][ T8167] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 195.726962][ T8167] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 195.768829][ T8167] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 195.801130][ T8167] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 195.932076][ T29] audit: type=1804 audit(1717484477.859:28): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1311938463/syzkaller.C2UhkG/301/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 195.990901][ T29] audit: type=1804 audit(1717484477.869:29): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1311938463/syzkaller.C2UhkG/301/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 196.075825][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.362666][ T8182] loop0: detected capacity change from 0 to 32768 [ 196.405286][ T5122] jfs_flush_journal: synclist not empty [ 196.410928][ T5122] metapage: ffff88801c395000: 00001000 00000000 00003ab4 00000000 [ 196.439395][ T5122] metapage: ffff88801c395010: 440c5a28 ffff8880 440c5a28 ffff8880 [ 196.468701][ T5122] metapage: ffff88801c395020: 00000004 00000000 00000000 00000000 [ 196.495941][ T5122] metapage: ffff88801c395030: 62b89000 ffff8880 0000002c 00000000 [ 196.503845][ T5122] metapage: ffff88801c395040: 00000000 dead4ead ffffffff 00000000 [ 196.553604][ T5122] metapage: ffff88801c395050: ffffffff ffffffff 949030c0 ffffffff [ 196.580010][ T5122] metapage: ffff88801c395060: 92d34278 ffffffff 00000000 00000000 [ 196.598122][ T5122] metapage: ffff88801c395070: 8c02ad40 ffffffff 00000200 00000000 [ 196.607237][ T5122] metapage: ffff88801c395080: 1c395080 ffff8880 1c395080 ffff8880 [ 196.616819][ T5122] metapage: ffff88801c395090: 018ae240 ffffea00 1ee80000 ffff8880 [ 196.628291][ T5122] metapage: ffff88801c3950a0: 00001000 00003d38 00000001 00000000 [ 196.652715][ T5122] metapage: ffff88801c3950b0: 440c5800 ffff8880 [ 196.667763][ T5122] page: ffffea00018ae240: 00fff5000000422c ffffea0001886048 [ 196.678020][ T5122] page: ffffea00018ae250: ffffea0000924388 ffff88805b02c6d8 [ 196.685706][ T5122] page: ffffea00018ae260: 000000000000002c ffff88801c395000 [ 196.694884][ T5122] page: ffffea00018ae270: 00000003ffffffff ffff88801ee10000 [ 196.924207][ T8206] loop1: detected capacity change from 0 to 32768 [ 196.956275][ T8224] loop0: detected capacity change from 0 to 512 [ 196.959924][ T8206] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 196.993075][ T8206] XFS (loop1): Ending clean mount [ 197.012164][ T8206] XFS (loop1): Quotacheck needed: Please wait. [ 197.050492][ T8206] XFS (loop1): Quotacheck: Done. [ 197.276212][ T6569] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 197.818294][ T8257] loop0: detected capacity change from 0 to 512 [ 197.972963][ T8243] loop4: detected capacity change from 0 to 40427 [ 198.016126][ T8243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 198.094665][ T8243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 198.537902][ T8278] syz-executor.4: attempt to access beyond end of device [ 198.537902][ T8278] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 198.552695][ T8278] syz-executor.4: attempt to access beyond end of device [ 198.552695][ T8278] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 198.767523][ T29] audit: type=1800 audit(1717484480.439:30): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 199.231335][ T5112] syz-executor.4: attempt to access beyond end of device [ 199.231335][ T5112] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.262855][ T5112] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 199.503852][ T8267] loop1: detected capacity change from 0 to 32768 [ 199.533815][ T8292] loop0: detected capacity change from 0 to 512 [ 199.547046][ T8267] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 199.623332][ T8267] XFS (loop1): Ending clean mount [ 199.637212][ T8267] XFS (loop1): Quotacheck needed: Please wait. [ 199.748357][ T8267] XFS (loop1): Quotacheck: Done. [ 200.184443][ T6569] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.804550][ T8330] loop4: detected capacity change from 0 to 512 [ 200.868164][ T8330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.884456][ T8330] ext4 filesystem being mounted at /root/syzkaller-testdir1311938463/syzkaller.C2UhkG/312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.965981][ T8330] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 201.008915][ T8330] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 201.022169][ T8330] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 201.042723][ T8330] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 201.165385][ T29] audit: type=1804 audit(1717484483.089:31): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1311938463/syzkaller.C2UhkG/312/bus/bus" dev="loop4" ino=19 res=1 errno=0 [ 201.256320][ T29] audit: type=1804 audit(1717484483.129:32): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1311938463/syzkaller.C2UhkG/312/bus/bus" dev="loop4" ino=19 res=1 errno=0 [ 201.322956][ T5112] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.922142][ T8357] input: syz0 as /devices/virtual/input/input9 [ 202.090778][ T8363] loop3: detected capacity change from 0 to 512 [ 202.257137][ T8349] loop0: detected capacity change from 0 to 32768 [ 202.702786][ T29] audit: type=1800 audit(1717484484.629:33): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 202.727199][ T8391] input: syz0 as /devices/virtual/input/input10 [ 203.478528][ T29] audit: type=1800 audit(1717484485.409:34): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 203.567324][ T8422] input: syz0 as /devices/virtual/input/input11 [ 203.646565][ T8415] loop0: detected capacity change from 0 to 32768 [ 204.211711][ T8444] syz-executor.0[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.212040][ T8444] syz-executor.0[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.363968][ T8438] loop4: detected capacity change from 0 to 40427 [ 204.420509][ T8438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 204.509352][ T8438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 204.924025][ T8468] syz-executor.4: attempt to access beyond end of device [ 204.924025][ T8468] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 204.940092][ T8468] syz-executor.4: attempt to access beyond end of device [ 204.940092][ T8468] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 205.214836][ T29] audit: type=1800 audit(1717484486.819:35): pid=8468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 205.614631][ T5112] syz-executor.4: attempt to access beyond end of device [ 205.614631][ T5112] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.662730][ T5112] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 205.760098][ T8473] syz-executor.3[8473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.760330][ T8473] syz-executor.3[8473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.946181][ T8461] loop1: detected capacity change from 0 to 32768 [ 206.010017][ T8461] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 206.054507][ T8461] XFS (loop1): Ending clean mount [ 206.066036][ T8461] XFS (loop1): Quotacheck needed: Please wait. [ 206.125901][ T8461] XFS (loop1): Quotacheck: Done. [ 206.301081][ T6569] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 207.021333][ T5124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.037141][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.045966][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.054751][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.068334][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.082261][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.130391][ T1034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.247789][ T1034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.325823][ T1034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.379898][ T8508] loop4: detected capacity change from 0 to 40427 [ 207.388971][ T8508] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 207.401082][ T8508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 207.423867][ T8508] F2FS-fs (loop4): invalid crc value [ 207.427986][ T1034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.433218][ T8508] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.533089][ T8508] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 207.540304][ T8508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 207.568019][ T8520] syz-executor.3[8520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.568358][ T8520] syz-executor.3[8520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.630833][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 207.671247][ T1034] bridge_slave_1: left allmulticast mode [ 207.677224][ T1034] bridge_slave_1: left promiscuous mode [ 207.687169][ T1034] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.738470][ T1034] bridge_slave_0: left allmulticast mode [ 207.744165][ T1034] bridge_slave_0: left promiscuous mode [ 207.753175][ T1034] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.878030][ T2813] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 207.921379][ T2813] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 208.314333][ T8525] loop3: detected capacity change from 0 to 32768 [ 208.614403][ T1034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.647350][ T1034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.659324][ T1034] bond0 (unregistering): Released all slaves [ 208.697499][ T1034] bond1 (unregistering): Released all slaves [ 208.969274][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.976777][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.984171][ T8510] bridge_slave_0: entered allmulticast mode [ 208.992426][ T8510] bridge_slave_0: entered promiscuous mode [ 209.002209][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.009543][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.017872][ T8510] bridge_slave_1: entered allmulticast mode [ 209.025396][ T8510] bridge_slave_1: entered promiscuous mode [ 209.094585][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.106507][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.141716][ T8510] team0: Port device team_slave_0 added [ 209.152626][ T8510] team0: Port device team_slave_1 added [ 209.168769][ T5124] Bluetooth: hci2: command tx timeout [ 209.200965][ T1034] hsr_slave_0: left promiscuous mode [ 209.207363][ T1034] hsr_slave_1: left promiscuous mode [ 209.213451][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.221737][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.232505][ T1034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.240193][ T1034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.266541][ T1034] veth1_macvtap: left promiscuous mode [ 209.272059][ T1034] veth0_macvtap: left promiscuous mode [ 209.279019][ T1034] veth1_vlan: left promiscuous mode [ 209.284296][ T1034] veth0_vlan: left promiscuous mode [ 209.510426][ T8550] syz-executor.4[8550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.510650][ T8550] syz-executor.4[8550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.930935][ T1034] team0 (unregistering): Port device team_slave_1 removed [ 210.044763][ T1034] team0 (unregistering): Port device team_slave_0 removed [ 210.184354][ T8552] loop4: detected capacity change from 0 to 40427 [ 210.205293][ T8552] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 210.214218][ T8552] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 210.233396][ T8552] F2FS-fs (loop4): invalid crc value [ 210.257389][ T8552] F2FS-fs (loop4): Found nat_bits in checkpoint [ 210.368497][ T8552] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 210.398581][ T8552] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.700771][ T4378] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 210.759519][ T4378] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 210.944641][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.952336][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.981764][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.035348][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.042327][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.105163][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.213597][ T8510] hsr_slave_0: entered promiscuous mode [ 211.225326][ T8580] loop4: detected capacity change from 0 to 256 [ 211.239593][ T8510] hsr_slave_1: entered promiscuous mode [ 211.246005][ T5124] Bluetooth: hci2: command tx timeout [ 211.487020][ T8585] loop4: detected capacity change from 0 to 1024 [ 211.517260][ T2839] hfsplus: b-tree write err: -5, ino 4 [ 211.755401][ T8510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.768634][ T8510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.779365][ T8510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.794352][ T8510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.854181][ T8593] loop4: detected capacity change from 0 to 24 [ 211.871002][ T8593] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 211.896626][ T8593] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 211.924567][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.965064][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.983469][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.990607][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.016726][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.023829][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.313256][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.342941][ T8608] loop4: detected capacity change from 0 to 256 [ 212.438133][ T8510] veth0_vlan: entered promiscuous mode [ 212.462491][ T8510] veth1_vlan: entered promiscuous mode [ 212.464855][ T8611] loop3: detected capacity change from 0 to 1024 [ 212.531214][ T8510] veth0_macvtap: entered promiscuous mode [ 212.550715][ T8510] veth1_macvtap: entered promiscuous mode [ 212.587450][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.598246][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.619797][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.621367][ T8613] loop4: detected capacity change from 0 to 24 [ 212.652905][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.672396][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.698979][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.734234][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.752786][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.764606][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.788025][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.812436][ T8510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.831258][ T8617] loop3: detected capacity change from 0 to 24 [ 212.838333][ T8510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.848650][ T8617] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 212.855340][ T8510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.864051][ T8510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.042207][ T8599] loop1: detected capacity change from 0 to 40427 [ 213.050628][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.069513][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.079492][ T8599] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 213.089950][ T8599] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 213.121197][ T8599] F2FS-fs (loop1): invalid crc value [ 213.135629][ T8599] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.157072][ T2813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.164971][ T2813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.255265][ T8599] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 213.262365][ T8599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.325342][ T5124] Bluetooth: hci2: command tx timeout [ 213.451711][ T2813] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 213.468779][ T2813] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 213.469289][ T8640] loop3: detected capacity change from 0 to 256 [ 213.703741][ T8644] loop3: detected capacity change from 0 to 24 [ 213.872964][ T8647] loop3: detected capacity change from 0 to 24 [ 213.916694][ T8647] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 214.057941][ T8635] loop0: detected capacity change from 0 to 40427 [ 214.197023][ T8656] loop1: detected capacity change from 0 to 1024 [ 214.315856][ T1034] hfsplus: b-tree write err: -5, ino 4 [ 214.382986][ T8665] loop4: detected capacity change from 0 to 256 [ 214.593250][ T8671] loop3: detected capacity change from 0 to 24 [ 214.872807][ T8675] loop0: detected capacity change from 0 to 1024 [ 214.897951][ T29] audit: type=1800 audit(1717484496.709:36): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 215.402249][ T5124] Bluetooth: hci2: command tx timeout [ 215.608689][ T8679] loop0: detected capacity change from 0 to 24 [ 215.616600][ T8679] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 215.781071][ T8687] loop0: detected capacity change from 0 to 1024 [ 216.029319][ T8697] loop4: detected capacity change from 0 to 256 [ 216.070010][ T8699] loop0: detected capacity change from 0 to 24 [ 216.076205][ T8667] loop1: detected capacity change from 0 to 40427 [ 216.084630][ T8667] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.093706][ T8667] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.108306][ T8667] F2FS-fs (loop1): invalid crc value [ 216.120821][ T8667] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.251115][ T8667] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.266661][ T8667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.438907][ T8720] loop3: detected capacity change from 0 to 24 [ 216.447141][ T8720] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 216.483103][ T2813] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.494961][ T2813] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 216.746153][ T8729] loop4: detected capacity change from 0 to 24 [ 216.978546][ T8739] loop1: detected capacity change from 0 to 1024 [ 217.047807][ T35] hfsplus: b-tree write err: -5, ino 4 [ 217.732279][ T8746] loop4: detected capacity change from 0 to 40427 [ 217.740893][ T8746] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 217.755335][ T8746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 217.767936][ T8746] F2FS-fs (loop4): invalid crc value [ 217.786094][ T8746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.848828][ T8773] loop1: detected capacity change from 0 to 64 [ 217.908403][ T8746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 217.931381][ T8746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 218.109766][ T2839] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 218.137273][ T2839] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 218.450078][ T8795] loop0: detected capacity change from 0 to 1024 [ 218.691347][ T8802] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 218.700416][ T8802] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.835832][ T8812] loop0: detected capacity change from 0 to 64 [ 219.026770][ T8826] loop0: detected capacity change from 0 to 256 [ 219.033136][ T29] audit: type=1800 audit(1717484500.959:37): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 219.073762][ T8830] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 219.083891][ T8830] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.095293][ T8830] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 219.124330][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.337456][ T5124] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002e: 0000 [#1] PREEMPT SMP KASAN PTI [ 219.337485][ T5124] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 219.337514][ T5124] CPU: 0 PID: 5124 Comm: kworker/u9:6 Tainted: G W 6.10.0-rc2-next-20240604-syzkaller #0 [ 219.337541][ T5124] Tainted: [W]=WARN [ 219.337548][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 219.337559][ T5124] Workqueue: hci2 hci_rx_work [ 219.337590][ T5124] RIP: 0010:l2cap_sock_recv_cb+0x1af/0x4f0 [ 219.337618][ T5124] Code: 80 3c 07 00 74 08 4c 89 ef e8 6d f1 70 f7 4d 8b 7d 00 49 8d bf 74 01 00 00 48 89 f8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df <42> 0f b6 04 28 84 c0 0f 85 b5 02 00 00 41 8b 9f 74 01 00 00 49 81 [ 219.337632][ T5124] RSP: 0018:ffffc900040af468 EFLAGS: 00010207 [ 219.337647][ T5124] RAX: 000000000000002e RBX: ffff88802a8f9000 RCX: 0000000000040000 [ 219.337659][ T5124] RDX: ffffc9001259e000 RSI: 0000000000000cbf RDI: 0000000000000174 2024/06/04 07:01:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 219.337689][ T5124] RBP: ffff8880642ab000 R08: ffffffff89544e10 R09: 1ffff1100551f20c [ 219.337704][ T5124] R10: dffffc0000000000 R11: ffffed100551f20d R12: 1ffff1100c855605 [ 219.337719][ T5124] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.337730][ T5124] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 219.337746][ T5124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.337758][ T5124] CR2: 00007ffdceb6fea8 CR3: 00000000425b8000 CR4: 00000000003506f0 [ 219.337773][ T5124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.337783][ T5124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.337794][ T5124] Call Trace: [ 219.337801][ T5124] [ 219.337809][ T5124] ? __die_body+0x88/0xe0 [ 219.337835][ T5124] ? die_addr+0x108/0x140 [ 219.337861][ T5124] ? exc_general_protection+0x3dd/0x5d0 [ 219.337899][ T5124] ? asm_exc_general_protection+0x26/0x30 [ 219.337926][ T5124] ? __sock_queue_rcv_skb+0x5d0/0x9b0 [ 219.337951][ T5124] ? l2cap_sock_recv_cb+0x1af/0x4f0 [ 219.337975][ T5124] ? l2cap_sock_recv_cb+0x177/0x4f0 [ 219.338001][ T5124] l2cap_recv_frame+0x8b6d/0x105f0 [ 219.338022][ T5124] ? validate_chain+0x11e/0x5920 [ 219.338048][ T5124] ? validate_chain+0x11e/0x5920 [ 219.338071][ T5124] ? validate_chain+0x11e/0x5920 [ 219.338092][ T5124] ? __pfx_validate_chain+0x10/0x10 [ 219.338116][ T5124] ? __pfx_validate_chain+0x10/0x10 [ 219.338140][ T5124] ? __pfx_validate_chain+0x10/0x10 [ 219.338165][ T5124] ? validate_chain+0x11e/0x5920 [ 219.338190][ T5124] ? __pfx_validate_chain+0x10/0x10 [ 219.338212][ T5124] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 219.338231][ T5124] ? __pfx_validate_chain+0x10/0x10 [ 219.338256][ T5124] ? mark_lock+0x9a/0x360 [ 219.338275][ T5124] ? mark_lock+0x9a/0x360 [ 219.338296][ T5124] ? __lock_acquire+0x1359/0x2000 [ 219.338325][ T5124] ? mark_lock+0x9a/0x360 [ 219.338353][ T5124] ? hci_rx_work+0x4e7/0xca0 [ 219.338372][ T5124] ? __pfx_lock_release+0x10/0x10 [ 219.338399][ T5124] ? __mutex_unlock_slowpath+0x21d/0x750 [ 219.338427][ T5124] ? __pfx_lock_release+0x10/0x10 [ 219.338450][ T5124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 219.338470][ T5124] ? hci_conn_enter_active_mode+0x260/0x370 [ 219.338497][ T5124] ? l2cap_recv_acldata+0x48e/0x1550 [ 219.338518][ T5124] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 219.338540][ T5124] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 219.338564][ T5124] hci_rx_work+0x50f/0xca0 [ 219.338587][ T5124] ? process_scheduled_works+0x945/0x1830 [ 219.338606][ T5124] process_scheduled_works+0xa2c/0x1830 [ 219.338638][ T5124] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.338661][ T5124] ? assign_work+0x364/0x3d0 [ 219.338680][ T5124] worker_thread+0x86d/0xd50 [ 219.338706][ T5124] ? __kthread_parkme+0x169/0x1d0 [ 219.338727][ T5124] ? __pfx_worker_thread+0x10/0x10 [ 219.338745][ T5124] kthread+0x2f0/0x390 [ 219.338765][ T5124] ? __pfx_worker_thread+0x10/0x10 [ 219.338784][ T5124] ? __pfx_kthread+0x10/0x10 [ 219.338804][ T5124] ret_from_fork+0x4b/0x80 [ 219.338826][ T5124] ? __pfx_kthread+0x10/0x10 [ 219.338847][ T5124] ret_from_fork_asm+0x1a/0x30 [ 219.338877][ T5124] [ 219.338883][ T5124] Modules linked in: [ 219.338905][ T5124] ---[ end trace 0000000000000000 ]--- [ 219.410656][ T8854] bridge_slave_0: left allmulticast mode [ 219.416584][ T5124] RIP: 0010:l2cap_sock_recv_cb+0x1af/0x4f0 [ 219.516031][ T8854] bridge_slave_0: left promiscuous mode [ 219.520484][ T5124] Code: 80 3c 07 00 74 08 4c 89 ef e8 6d f1 70 f7 4d 8b 7d 00 49 8d bf 74 01 00 00 48 89 f8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df <42> 0f b6 04 28 84 c0 0f 85 b5 02 00 00 41 8b 9f 74 01 00 00 49 81 [ 219.569835][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.575751][ T5124] RSP: 0018:ffffc900040af468 EFLAGS: 00010207 [ 219.805178][ T5124] RAX: 000000000000002e RBX: ffff88802a8f9000 RCX: 0000000000040000 [ 219.813308][ T5124] RDX: ffffc9001259e000 RSI: 0000000000000cbf RDI: 0000000000000174 [ 219.821351][ T5124] RBP: ffff8880642ab000 R08: ffffffff89544e10 R09: 1ffff1100551f20c [ 219.829386][ T5124] R10: dffffc0000000000 R11: ffffed100551f20d R12: 1ffff1100c855605 [ 219.837419][ T5124] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.845448][ T5124] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 219.854397][ T5124] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.861052][ T5124] CR2: 00007ffdceb6fea8 CR3: 00000000206d8000 CR4: 00000000003506f0 [ 219.869092][ T5124] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.877598][ T5124] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.885705][ T5124] Kernel panic - not syncing: Fatal exception [ 219.891864][ T5124] Kernel Offset: disabled [ 219.896174][ T5124] Rebooting in 86400 seconds..