last executing test programs: 13.485274801s ago: executing program 2 (id=557): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = io_uring_setup(0xc40, &(0x7f0000000100)) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) 12.501111345s ago: executing program 2 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) 12.409638922s ago: executing program 2 (id=562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 12.225247368s ago: executing program 2 (id=563): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 12.074284011s ago: executing program 2 (id=564): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 11.585016793s ago: executing program 2 (id=565): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) 5.072773687s ago: executing program 4 (id=588): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000480), 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.98305322s ago: executing program 1 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a888e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.889386138s ago: executing program 1 (id=591): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141201) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) 3.743439281s ago: executing program 1 (id=592): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x6) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000) r1 = dup(r0) read$dsp(r1, &(0x7f0000000100)=""/167, 0xa7) 3.356924013s ago: executing program 3 (id=593): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0x9}, 0x10) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x98) 2.633131695s ago: executing program 1 (id=597): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000380)=r3, 0x12) write$cgroup_pid(r1, &(0x7f0000000180), 0x4a) 2.607400747s ago: executing program 1 (id=598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.443379681s ago: executing program 3 (id=599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.256963767s ago: executing program 3 (id=600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000008fc0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/175, 0xaf}], 0x1}, 0xffffff8e}], 0x1, 0x40000002, 0x0) 2.209369151s ago: executing program 3 (id=601): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 2.123151189s ago: executing program 3 (id=602): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000280)='./file0\x00', 0x2008412, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.972931322s ago: executing program 4 (id=603): mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000040), 0x4240a2a0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0) 1.884259549s ago: executing program 4 (id=604): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) dup2(r1, r0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) 1.626209081s ago: executing program 4 (id=605): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.473291184s ago: executing program 0 (id=606): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r2, 0x5437, 0x0) 1.465438315s ago: executing program 4 (id=607): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fcb602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9", @ANYBLOB="3db1bd3c9388ce300f92cc8091d7ddbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced7ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64], 0x1, 0x624c, &(0x7f0000001f80)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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") chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x5490, 0x0) getdents(r0, 0x0, 0x0) 1.348621354s ago: executing program 0 (id=608): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x110, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=macromanian,dmask=00000000000000000000000,errors=remount-ro,errors=continue,fmask=00000000000000000122753,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6d6163726f6d616e69616e2c646973636172642c757466382c6572726f72733d636f6e74696e75652c00b24a414a138ea1f090829675858b09596dae40b2fee0"], 0x4, 0x1528, &(0x7f00000037c0)="$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") rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000002a00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYRES64=r2, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 961.577567ms ago: executing program 0 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 689.377371ms ago: executing program 0 (id=610): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}) 443.168402ms ago: executing program 0 (id=611): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./control\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x1, 0x12) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) listxattr(0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) 199.249023ms ago: executing program 3 (id=612): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="a388f5b82da67c239243507a556dc2d6eef9f6c897569cca3ccc8b5334b227be71582abcc0f0d7032a22d4123741748a74d9b2783f924cacb7b325725b88df896ddf1ee6d1f7c1a108c7475f43f18d808fe5d186ed13b2f2eefde5bb6c71bfa8e09866ae161f24710a8a2f1751fe1cb910609bfa50505baccfd9a26e9bf402e87076cb51d463827c449ce87f86c14b7b8463752b16894983f5e2f0b6fc91b31c0389ac9b7fc91ef21f50689fbecbc99e5634e8655ff02c", 0xb7, 0x4040850, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{0x0, 0x0, &(0x7f0000003bc0)}}], 0x2, 0x40000121, 0x0) 33.217057ms ago: executing program 4 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 12.729398ms ago: executing program 0 (id=614): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=616): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x3a) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @dev}, 0x8000004}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): t 1(bridge_slave_0) entered blocking state [ 112.928521][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.943889][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.962921][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.972358][ T3784] usb 4-1: 0:2 : does not exist [ 112.983552][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.007908][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.015371][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.040724][ T3784] usb 4-1: USB disconnect, device number 5 [ 113.059278][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.098193][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.112571][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.130504][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.141878][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.162862][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.173146][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.181712][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.196247][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.211377][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.223206][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.234121][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.464399][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.477132][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.526053][ T4700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.623352][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.648716][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.703647][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.720835][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.761387][ T4700] device veth0_vlan entered promiscuous mode [ 113.801536][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.814207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.839202][ T4700] device veth1_vlan entered promiscuous mode [ 113.879860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.907084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.940371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.976813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.024103][ T4700] device veth0_macvtap entered promiscuous mode [ 114.038178][ T4887] loop0: detected capacity change from 0 to 4096 [ 114.047596][ T4700] device veth1_macvtap entered promiscuous mode [ 114.070392][ T4887] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 114.115365][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.132645][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.148515][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.159556][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.188900][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.252560][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.269974][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.301735][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.324137][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.335016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.353466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.373608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.394628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.456366][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.479233][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.526066][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.546821][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.588258][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.624034][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.672000][ T4700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.680547][ T4880] loop3: detected capacity change from 0 to 32768 [ 114.711989][ T4700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.730713][ T4880] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.229 (4880) [ 114.763065][ T4700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.775370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.793113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.802396][ T3645] Bluetooth: hci4: command tx timeout [ 114.828812][ T4880] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.831591][ T4700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.839224][ T4880] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 114.857167][ T4880] BTRFS info (device loop3): enabling auto defrag [ 114.863852][ T4880] BTRFS info (device loop3): max_inline at 0 [ 114.869929][ T4880] BTRFS info (device loop3): enabling ssd optimizations [ 114.898474][ T4880] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 114.908353][ T4700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.923115][ T4880] BTRFS info (device loop3): use lzo compression, level 0 [ 114.940512][ T4880] BTRFS info (device loop3): not using ssd optimizations [ 114.952091][ T4700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.967329][ T4880] BTRFS info (device loop3): using free space tree [ 114.971977][ T4700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.211085][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.256529][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.257194][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.278452][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.293575][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.351498][ T26] audit: type=1804 audit(1729189116.450:4567): pid=4920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.229" name="/newroot/36/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 115.376687][ T4899] loop0: detected capacity change from 0 to 32768 [ 115.383888][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.500322][ T4924] loop4: detected capacity change from 0 to 1024 [ 115.549889][ T4924] hfsplus: unable to parse mount options [ 115.575091][ T3925] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.595527][ T26] audit: type=1800 audit(1729189116.690:4568): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 115.699065][ T26] audit: type=1800 audit(1729189116.740:4569): pid=4899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 116.871320][ T4960] loop0: detected capacity change from 0 to 1024 [ 116.889477][ T4962] loop1: detected capacity change from 0 to 1024 [ 116.991568][ T4960] process 'syz.0.242' launched './file1' with NULL argv: empty string added [ 117.112529][ T4966] loop2: detected capacity change from 0 to 1024 [ 117.183653][ T75] hfsplus: b-tree write err: -5, ino 4 [ 117.195493][ T4966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.260093][ T4944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 117.342107][ T4951] loop3: detected capacity change from 0 to 40427 [ 117.356567][ T4951] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 117.370235][ T4944] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.387648][ T4951] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 117.433928][ T4951] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.534381][ T4700] EXT4-fs (loop2): unmounting filesystem. [ 117.582090][ T4951] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 117.628389][ T4951] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.755701][ T26] audit: type=1804 audit(1729189118.860:4570): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.239" name="/newroot/38/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 117.858203][ T26] audit: type=1804 audit(1729189118.890:4571): pid=4951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.239" name="/newroot/38/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 118.131848][ T3734] tipc: Subscription rejected, illegal request [ 118.167301][ T3925] syz-executor: attempt to access beyond end of device [ 118.167301][ T3925] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.283733][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 118.559404][ T5017] loop1: detected capacity change from 0 to 512 [ 118.604746][ T5017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.661040][ T5017] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.268: invalid indirect mapped block 4294967295 (level 1) [ 118.712144][ T5017] EXT4-fs (loop1): Remounting filesystem read-only [ 118.718693][ T5017] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.268: invalid indirect mapped block 4294967295 (level 1) [ 118.746406][ T5017] EXT4-fs (loop1): Remounting filesystem read-only [ 118.760342][ T5017] EXT4-fs (loop1): 2 truncates cleaned up [ 118.795974][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.977904][ T5017] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.268: bg 0: block 5: invalid block bitmap [ 119.142123][ T5017] EXT4-fs (loop1): Remounting filesystem read-only [ 119.257982][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 119.270949][ T5041] loop3: detected capacity change from 0 to 256 [ 119.285755][ T5018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 119.339749][ T5018] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.484207][ T5045] loop1: detected capacity change from 0 to 4096 [ 119.517749][ T5045] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 119.986980][ T5059] Bluetooth: MGMT ver 1.22 [ 120.211391][ T5066] loop2: detected capacity change from 0 to 64 [ 120.233119][ T3791] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.253852][ T5066] hfs: unable to locate alternate MDB [ 120.269864][ T5066] hfs: continuing without an alternate MDB [ 120.339040][ T26] audit: type=1800 audit(1729189121.440:4572): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 120.358610][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.400829][ T5047] loop3: detected capacity change from 0 to 40427 [ 120.408024][ T26] audit: type=1800 audit(1729189121.440:4573): pid=5066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.283" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 120.456859][ T5047] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 120.482514][ T5047] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 120.542803][ T5047] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.612508][ T3791] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.631048][ T3791] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.641404][ T5047] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 120.653787][ T5047] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.682099][ T3791] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.707656][ T3791] usb 2-1: config 1 interface 0 has no altsetting 0 [ 120.721747][ T26] audit: type=1804 audit(1729189121.820:4574): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.276" name="/newroot/42/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 120.756612][ T26] audit: type=1804 audit(1729189121.860:4575): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.276" name="/newroot/42/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 120.833368][ T5062] loop4: detected capacity change from 0 to 32768 [ 120.847850][ T5062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.281 (5062) [ 120.871857][ T5062] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.890227][ T5062] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 120.899498][ T5062] BTRFS info (device loop4): using free space tree [ 120.906588][ T3791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.915832][ T3791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.925615][ T3791] usb 2-1: Product: syz [ 120.929905][ T3791] usb 2-1: Manufacturer: syz [ 120.938727][ T3791] usb 2-1: SerialNumber: syz [ 121.085863][ T5062] BTRFS info (device loop4): enabling ssd optimizations [ 121.160377][ T3925] syz-executor: attempt to access beyond end of device [ 121.160377][ T3925] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.201137][ T3681] usb 2-1: USB disconnect, device number 5 [ 121.347759][ T3642] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.398400][ T5084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'. [ 121.414554][ T5084] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.836501][ T5103] loop2: detected capacity change from 0 to 4096 [ 121.875216][ T5103] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 122.082270][ T3645] Bluetooth: hci0: command 0x1407 tx timeout [ 122.088473][ T3650] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 122.116387][ T5107] loop0: detected capacity change from 0 to 4096 [ 122.231982][ T5107] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 122.306032][ T5107] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 122.337460][ T5115] loop4: detected capacity change from 0 to 4096 [ 122.380411][ T5115] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 122.468159][ T3698] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 122.489858][ T5115] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 122.585219][ T26] audit: type=1800 audit(1729189123.690:4576): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="bus" dev="loop4" ino=0 res=0 errno=0 [ 122.659476][ T5121] input: syz1 as /devices/virtual/input/input6 [ 122.670006][ T75] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 122.691236][ T4116] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 122.844598][ T5126] loop0: detected capacity change from 0 to 2048 [ 122.936752][ T5126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 122.976894][ T5136] loop2: detected capacity change from 0 to 256 [ 123.011530][ T5111] loop3: detected capacity change from 0 to 32768 [ 123.060735][ T26] audit: type=1800 audit(1729189124.160:4577): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 123.118970][ T5136] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 123.156708][ T26] audit: type=1800 audit(1729189124.160:4578): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.291" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 123.182002][ T3789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.200650][ T4116] EXT4-fs (loop0): unmounting filesystem. [ 123.356776][ T5136] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 123.395483][ T5136] exFAT-fs (loop2): Filesystem has been set read-only [ 123.442122][ T3789] usb 2-1: Using ep0 maxpacket: 32 [ 123.608412][ T5147] loop4: detected capacity change from 0 to 4096 [ 123.634286][ T5147] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 123.722339][ T3789] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 123.731425][ T3789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.783665][ T3789] usb 2-1: Product: syz [ 123.787873][ T3789] usb 2-1: Manufacturer: syz [ 123.803011][ T3789] usb 2-1: SerialNumber: syz [ 123.817722][ T3789] usb 2-1: config 0 descriptor?? [ 123.845769][ T5158] loop0: detected capacity change from 0 to 1024 [ 123.862800][ T3789] hub 2-1:0.0: bad descriptor, ignoring hub [ 123.868743][ T3789] hub: probe of 2-1:0.0 failed with error -5 [ 123.908454][ T5156] loop3: detected capacity change from 0 to 2048 [ 124.027194][ T5156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.265460][ T3925] EXT4-fs (loop3): unmounting filesystem. [ 124.283106][ T4002] hfsplus: b-tree write err: -5, ino 4 [ 124.298991][ T5154] loop2: detected capacity change from 0 to 40427 [ 124.362136][ T3109] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 124.383366][ T5154] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.391132][ T5154] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.451754][ T5165] loop4: detected capacity change from 0 to 4096 [ 124.454834][ T5154] F2FS-fs (loop2): invalid crc value [ 124.479667][ T5165] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 124.515773][ T5154] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.530029][ T5165] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 124.655533][ T5154] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.673136][ T5154] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 124.709093][ T5178] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 125.146255][ T3642] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 125.182655][ T4936] usb 2-1: USB disconnect, device number 6 [ 125.201281][ T5174] loop0: detected capacity change from 0 to 40427 [ 125.235033][ T5174] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 125.275098][ T5174] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 125.323829][ T5180] loop3: detected capacity change from 0 to 32768 [ 125.343069][ T5174] F2FS-fs (loop0): Found nat_bits in checkpoint [ 125.383737][ T26] audit: type=1800 audit(1729189126.490:4579): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.322" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 125.408386][ T26] audit: type=1800 audit(1729189126.510:4580): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.322" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 125.481219][ T5174] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 125.492041][ T5174] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.546372][ T26] audit: type=1804 audit(1729189126.650:4581): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.320" name="/newroot/41/file2/bus" dev="loop0" ino=10 res=1 errno=0 [ 125.569683][ T26] audit: type=1804 audit(1729189126.650:4582): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.320" name="/newroot/41/file2/bus" dev="loop0" ino=10 res=1 errno=0 [ 125.672402][ T4936] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.719837][ T5196] loop1: detected capacity change from 0 to 128 [ 125.901464][ T4116] syz-executor: attempt to access beyond end of device [ 125.901464][ T4116] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.946462][ T4936] usb 5-1: Using ep0 maxpacket: 8 [ 126.018887][ T5206] loop2: detected capacity change from 0 to 1024 [ 126.082550][ T4936] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.109117][ T4936] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.135638][ T4936] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.182115][ T4936] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.212718][ T4936] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.232025][ T4936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.440076][ T5212] loop2: detected capacity change from 0 to 128 [ 126.532119][ T4936] usb 5-1: usb_control_msg returned -32 [ 126.538039][ T4936] usbtmc 5-1:16.0: can't read capabilities [ 126.841229][ T5228] loop2: detected capacity change from 0 to 256 [ 127.097055][ T3784] usb 5-1: USB disconnect, device number 6 [ 127.131696][ T5229] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 127.269492][ T5216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 127.329158][ T5216] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.456379][ T5226] loop3: detected capacity change from 0 to 32768 [ 127.540083][ T26] audit: type=1800 audit(1729189128.640:4583): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 127.581409][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.646578][ T26] audit: type=1800 audit(1729189128.670:4584): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 127.849826][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.891120][ T5238] loop4: detected capacity change from 0 to 2048 [ 127.942875][ T5238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.968483][ T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.988436][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 128.004191][ T9] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.004191][ T9] [ 128.014776][ T9] EXT4-fs (loop4): Total free blocks count 0 [ 128.020909][ T9] EXT4-fs (loop4): Free/Dirty block details [ 128.037466][ T9] EXT4-fs (loop4): free_blocks=2415919104 [ 128.047170][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.051562][ T9] EXT4-fs (loop4): dirty_blocks=48 [ 128.063573][ T9] EXT4-fs (loop4): Block reservation details [ 128.069839][ T9] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 128.088967][ T5238] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 128.121495][ T5233] loop1: detected capacity change from 0 to 40427 [ 128.148221][ T5233] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 128.205543][ T5233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 128.230989][ T5246] loop0: detected capacity change from 0 to 1024 [ 128.256559][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.278910][ T5246] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 128.291462][ T5246] hfsplus: xattr search failed [ 128.418536][ T5233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 128.498660][ T5253] device wlan0 entered promiscuous mode [ 128.514584][ T5253] device macsec1 entered promiscuous mode [ 128.537793][ T5253] device wlan0 left promiscuous mode [ 128.552712][ T5233] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 128.560905][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.572082][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.586962][ T3645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.589673][ T5233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 128.612360][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.621598][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 128.629140][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.849317][ T26] audit: type=1804 audit(1729189129.950:4585): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.343" name="/newroot/78/file2/bus" dev="loop1" ino=10 res=1 errno=0 [ 128.936685][ T26] audit: type=1804 audit(1729189129.990:4586): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.343" name="/newroot/78/file2/bus" dev="loop1" ino=10 res=1 errno=0 [ 128.957544][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.358858][ T5272] capability: warning: `syz.3.355' uses deprecated v2 capabilities in a way that may be insecure [ 129.374850][ T5251] loop4: detected capacity change from 0 to 32768 [ 129.392089][ T3646] syz-executor: attempt to access beyond end of device [ 129.392089][ T3646] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.413278][ T5251] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 129.444231][ T3628] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 129.620790][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 129.814436][ T5285] loop3: detected capacity change from 0 to 2048 [ 129.922551][ T5285] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.095283][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.124901][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.156617][ T5254] device bridge_slave_0 entered promiscuous mode [ 130.156884][ T3925] EXT4-fs (loop3): unmounting filesystem. [ 130.184132][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.191390][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.278252][ T5254] device bridge_slave_1 entered promiscuous mode [ 130.575149][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.616408][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.724060][ T48] Bluetooth: hci4: command tx timeout [ 130.778341][ T5298] loop4: detected capacity change from 0 to 32768 [ 130.785627][ T5298] XFS: ikeep mount option is deprecated. [ 130.838814][ T5298] XFS (loop4): Mounting V5 Filesystem [ 130.906212][ T5254] team0: Port device team_slave_0 added [ 130.949445][ T5298] XFS (loop4): Ending clean mount [ 131.005500][ T5254] team0: Port device team_slave_1 added [ 131.021579][ T5298] XFS (loop4): Quotacheck needed: Please wait. [ 131.117524][ T5298] XFS (loop4): Quotacheck: Done. [ 131.138269][ T5309] loop1: detected capacity change from 0 to 32768 [ 131.146170][ T5309] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.357 (5309) [ 131.169333][ T48] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 131.191259][ T5309] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 131.292494][ T5309] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 131.307994][ T3642] XFS (loop4): Unmounting Filesystem [ 131.341611][ T5309] BTRFS info (device loop1): using free space tree [ 131.369510][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.393524][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.477316][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.513403][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.520467][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.705733][ T5309] BTRFS info (device loop1): enabling ssd optimizations [ 131.795832][ T26] audit: type=1804 audit(1729189132.900:4587): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.357" name="/newroot/79/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 131.819285][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.897736][ T75] device hsr_slave_0 left promiscuous mode [ 131.904516][ T26] audit: type=1804 audit(1729189133.010:4588): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.357" name="/newroot/79/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 131.957253][ T75] device hsr_slave_1 left promiscuous mode [ 132.015870][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.024360][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.108773][ T3646] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 132.142790][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.150335][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.187212][ T75] device bridge_slave_1 left promiscuous mode [ 132.222348][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.514254][ T75] device bridge_slave_0 left promiscuous mode [ 132.520494][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.643602][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.649954][ T1241] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.802192][ T48] Bluetooth: hci4: command tx timeout [ 132.818130][ T75] device veth1_macvtap left promiscuous mode [ 132.832100][ T75] device veth0_macvtap left promiscuous mode [ 132.838338][ T75] device veth1_vlan left promiscuous mode [ 132.883058][ T75] device veth0_vlan left promiscuous mode [ 133.041337][ T5352] loop0: detected capacity change from 0 to 32768 [ 133.166223][ T5352] XFS (loop0): Mounting V5 Filesystem [ 133.279689][ T5352] XFS (loop0): Starting recovery (logdev: internal) [ 133.332011][ T5352] XFS (loop0): Ending recovery (logdev: internal) [ 133.465779][ T5363] loop4: detected capacity change from 0 to 40427 [ 133.471509][ T4116] XFS (loop0): Unmounting Filesystem [ 133.500281][ T5363] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 133.522951][ T5363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 133.610411][ T5363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.717690][ T5363] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 133.729430][ T5363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.810344][ T26] audit: type=1804 audit(1729189134.910:4589): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.367" name="/newroot/74/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 133.881195][ T26] audit: type=1804 audit(1729189134.930:4590): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.367" name="/newroot/74/file2/bus" dev="loop4" ino=10 res=1 errno=0 [ 134.136584][ T3642] syz-executor: attempt to access beyond end of device [ 134.136584][ T3642] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.304647][ T75] team0 (unregistering): Port device team_slave_1 removed [ 134.389250][ T75] team0 (unregistering): Port device team_slave_0 removed [ 134.442070][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.521808][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.744583][ T3787] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.892058][ T48] Bluetooth: hci4: command tx timeout [ 135.002073][ T3787] usb 5-1: Using ep0 maxpacket: 8 [ 135.024945][ T75] bond0 (unregistering): Released all slaves [ 135.126505][ T3787] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.127419][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 135.149809][ T3787] usb 5-1: config 179 has no interface number 0 [ 135.156301][ T3787] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.175126][ T3787] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.189635][ T3787] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.203497][ T3650] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 135.212153][ T3650] Bluetooth: hci0: Injecting HCI hardware error event [ 135.221149][ T3650] Bluetooth: hci0: hardware error 0x00 [ 135.227857][ T5389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 135.240272][ T3787] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.251869][ T3787] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.272538][ T3787] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.275680][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.281717][ T3787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.302341][ T5398] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.350860][ T5402] loop1: detected capacity change from 0 to 164 [ 135.374481][ T5400] loop0: detected capacity change from 0 to 32768 [ 135.380956][ T5393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.415013][ T26] audit: type=1800 audit(1729189136.520:4591): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.378" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 135.462600][ T26] audit: type=1800 audit(1729189136.520:4592): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.378" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 135.588415][ T3787] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7 [ 135.693956][ T5254] device hsr_slave_0 entered promiscuous mode [ 135.713014][ T5254] device hsr_slave_1 entered promiscuous mode [ 135.762243][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.779429][ T3787] usb 5-1: USB disconnect, device number 7 [ 135.785382][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 135.785453][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.805832][ T5254] Cannot create hsr debugfs directory [ 135.857341][ T3787] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 136.238885][ T5416] loop1: detected capacity change from 0 to 512 [ 136.280136][ T5416] ext2: Unknown parameter 'seclabel' [ 136.529714][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.541504][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.726521][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.962075][ T48] Bluetooth: hci4: command tx timeout [ 136.972914][ T5442] loop4: detected capacity change from 0 to 64 [ 136.980980][ T3787] kernel read not supported for file /eth0 (pid: 3787 comm: kworker/1:12) [ 137.109412][ T5254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.164219][ T5254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.190437][ T5254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.249254][ T5254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.362015][ T3650] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 137.523208][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.585815][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.613364][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.631427][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.659464][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.680130][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.712585][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.719726][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.776191][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.802672][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.824157][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.831309][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.872508][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.897255][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.993596][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.009996][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.051657][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.065345][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.076289][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.085518][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.108109][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.126966][ T5254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.150967][ T5254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.187568][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.199078][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.221328][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.389467][ T5451] loop3: detected capacity change from 0 to 32768 [ 138.474057][ T5451] JBD2: Ignoring recovery information on journal [ 138.583663][ T5451] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 138.839196][ T3925] ocfs2: Unmounting device (7,3) on (node local) [ 138.854106][ T5493] Illegal XDP return value 1582883753 on prog (id 59) dev N/A, expect packet loss! [ 138.881757][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.899040][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.929305][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.039524][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.067504][ T5468] loop1: detected capacity change from 0 to 32768 [ 139.070381][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.146641][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.162874][ T26] audit: type=1800 audit(1729189140.260:4593): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.397" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 139.193708][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.224795][ T5254] device veth0_vlan entered promiscuous mode [ 139.231318][ T26] audit: type=1800 audit(1729189140.300:4594): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.397" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 139.286622][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.302988][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.335979][ T5254] device veth1_vlan entered promiscuous mode [ 139.449442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.473519][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.523124][ T5254] device veth0_macvtap entered promiscuous mode [ 139.559234][ T5254] device veth1_macvtap entered promiscuous mode [ 139.645384][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.690489][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.731728][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.766423][ T5511] loop3: detected capacity change from 0 to 4096 [ 139.772822][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.772846][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.772861][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.774535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 139.783097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.793472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.829153][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.870127][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.897288][ T5511] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 139.957219][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.036699][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.068412][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.130191][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.167301][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.209060][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.260151][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.290922][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.347969][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.370272][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.401404][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.437332][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.479540][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.545554][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.595231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.642972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.655361][ T5525] loop3: detected capacity change from 0 to 128 [ 140.710370][ T5254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.738348][ T5525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 140.763906][ T5525] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.764441][ T5254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.833750][ T5254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.844669][ T5254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.022400][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.030474][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.068520][ T3925] EXT4-fs (loop3): unmounting filesystem. [ 141.116800][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.171703][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.236802][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.268685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.403375][ T5507] loop4: detected capacity change from 0 to 40427 [ 141.441601][ T5507] F2FS-fs (loop4): invalid crc value [ 141.508244][ T5507] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.728824][ T5507] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.942534][ T3642] syz-executor: attempt to access beyond end of device [ 141.942534][ T3642] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 141.985444][ T5550] loop2: detected capacity change from 0 to 8 [ 142.006180][ T5521] loop1: detected capacity change from 0 to 32768 [ 142.050762][ T5521] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.407 (5521) [ 142.103348][ T5550] squashfs image failed sanity check [ 142.122298][ T5521] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.192884][ T5521] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 142.232479][ T5521] BTRFS info (device loop1): enabling auto defrag [ 142.238972][ T5521] BTRFS info (device loop1): max_inline at 0 [ 142.288901][ T5521] BTRFS info (device loop1): enabling ssd optimizations [ 142.327373][ T5521] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 142.381959][ T5521] BTRFS info (device loop1): use lzo compression, level 0 [ 142.389391][ T5521] BTRFS info (device loop1): using free space tree [ 142.670974][ T5567] kvm: MONITOR instruction emulated as NOP! [ 142.757410][ T5532] loop3: detected capacity change from 0 to 40427 [ 142.781693][ T5532] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 142.801213][ T5532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 142.874009][ T26] audit: type=1804 audit(1729189143.980:4595): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.407" name="/newroot/89/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 142.952088][ T5532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.069422][ T3646] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 143.117650][ T5532] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 143.130248][ T5532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 143.242481][ T26] audit: type=1804 audit(1729189144.350:4596): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.409" name="/newroot/70/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 143.280804][ T5546] loop0: detected capacity change from 0 to 32768 [ 143.322087][ T26] audit: type=1804 audit(1729189144.410:4597): pid=5532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.409" name="/newroot/70/file2/bus" dev="loop3" ino=10 res=1 errno=0 [ 143.369090][ T5550] loop2: detected capacity change from 0 to 32768 [ 143.375756][ T5546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.411 (5546) [ 143.417935][ T5550] XFS (loop2): invalid logbufsize: 93 [not 16k,32k,64k,128k or 256k] [ 143.586925][ T5546] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.627141][ T5546] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 143.688803][ T5546] BTRFS info (device loop0): using free space tree [ 143.752512][ T3925] syz-executor: attempt to access beyond end of device [ 143.752512][ T3925] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.830690][ T5599] loop1: detected capacity change from 0 to 2048 [ 144.010740][ T5606] loop4: detected capacity change from 0 to 128 [ 144.012788][ T5599] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.025080][ T5591] loop2: detected capacity change from 0 to 8192 [ 144.038658][ T5606] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 144.080838][ T5606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.134725][ T5546] BTRFS info (device loop0): enabling ssd optimizations [ 144.154941][ T5591] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.191541][ T5599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.418: bg 0: block 234: padding at end of block bitmap is not set [ 144.232400][ T5591] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 144.267499][ T5591] REISERFS (device loop2): using ordered data mode [ 144.274520][ T5599] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 356 with error 117 [ 144.322105][ T5591] reiserfs: using flush barriers [ 144.337033][ T4116] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.352051][ T5591] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.372500][ T5599] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.372500][ T5599] [ 144.382971][ T5591] REISERFS (device loop2): checking transaction log (loop2) [ 144.523368][ T5591] REISERFS (device loop2): Using r5 hash to sort names [ 144.601254][ T5591] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 144.926028][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 145.357634][ T3684] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.462655][ T5638] loop3: detected capacity change from 0 to 32768 [ 145.505175][ T26] audit: type=1800 audit(1729189146.610:4598): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.417" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 145.585179][ T26] audit: type=1800 audit(1729189146.610:4599): pid=5638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.417" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 145.613527][ T3684] usb 1-1: Using ep0 maxpacket: 16 [ 145.732562][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.782136][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.811968][ T3684] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.887668][ T3684] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.911964][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.977597][ T3684] usb 1-1: config 0 descriptor?? [ 147.843885][ T3684] usb 1-1: can't set config #0, error -71 [ 147.868511][ T3684] usb 1-1: USB disconnect, device number 4 [ 147.909962][ T5668] loop2: detected capacity change from 0 to 256 [ 147.953299][ T5668] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.270827][ T5674] loop4: detected capacity change from 0 to 1024 [ 148.291120][ T5678] loop3: detected capacity change from 0 to 164 [ 148.352127][ T3787] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.401821][ T5682] loop0: detected capacity change from 0 to 64 [ 148.445726][ T5674] hfsplus: xattr searching failed [ 148.552989][ T3734] hfsplus: b-tree write err: -5, ino 3 [ 148.585147][ T3642] hfsplus: node 4:3 still has 1 user(s)! [ 148.602021][ T3787] usb 2-1: Using ep0 maxpacket: 8 [ 148.627054][ T5689] loop0: detected capacity change from 0 to 64 [ 148.722426][ T3787] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 148.749084][ T3787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.773953][ T3787] usb 2-1: config 0 descriptor?? [ 148.814836][ T3787] usb 2-1: unknown interface protocol 0x3f, assuming v1 [ 148.821835][ T3787] usb 2-1: cannot find UAC_HEADER [ 148.931010][ T3787] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 149.022079][ T3787] usb 2-1: USB disconnect, device number 7 [ 149.559547][ T5696] loop3: detected capacity change from 0 to 32768 [ 149.578608][ T5696] XFS: ikeep mount option is deprecated. [ 149.639869][ T5710] loop2: detected capacity change from 0 to 1024 [ 149.651639][ T5707] loop0: detected capacity change from 0 to 32768 [ 149.667557][ T5707] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.445 (5707) [ 149.695543][ T5696] XFS (loop3): Mounting V5 Filesystem [ 149.727790][ T5707] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 149.813098][ T5707] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 149.824081][ T5696] XFS (loop3): Ending clean mount [ 149.832463][ T5707] BTRFS info (device loop0): using free space tree [ 149.848128][ T5696] XFS (loop3): Quotacheck needed: Please wait. [ 149.907415][ T5696] XFS (loop3): Quotacheck: Done. [ 149.935547][ T3927] hfsplus: b-tree write err: -5, ino 4 [ 150.033635][ T5727] loop2: detected capacity change from 0 to 256 [ 150.148863][ T5727] FAT-fs (loop2): Directory bread(block 64) failed [ 150.186038][ T5727] FAT-fs (loop2): Directory bread(block 65) failed [ 150.206326][ T5727] FAT-fs (loop2): Directory bread(block 66) failed [ 150.236680][ T3925] XFS (loop3): Unmounting Filesystem [ 150.246692][ T5737] loop1: detected capacity change from 0 to 512 [ 150.253093][ T5727] FAT-fs (loop2): Directory bread(block 67) failed [ 150.280239][ T5727] FAT-fs (loop2): Directory bread(block 68) failed [ 150.344364][ T5727] FAT-fs (loop2): Directory bread(block 69) failed [ 150.351126][ T5727] FAT-fs (loop2): Directory bread(block 70) failed [ 150.360588][ T5727] FAT-fs (loop2): Directory bread(block 71) failed [ 150.368539][ T5727] FAT-fs (loop2): Directory bread(block 72) failed [ 150.371829][ T5707] BTRFS info (device loop0): enabling ssd optimizations [ 150.375322][ T5727] FAT-fs (loop2): Directory bread(block 73) failed [ 150.406280][ T5737] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.449: inode #1: comm syz.1.449: iget: illegal inode # [ 150.488870][ T5737] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.449: error while reading EA inode 1 err=-117 [ 150.535251][ T26] audit: type=1804 audit(1729189151.630:4600): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.445" name="/newroot/66/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 150.558816][ T5737] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.449: inode #1: comm syz.1.449: iget: illegal inode # [ 150.607298][ T5737] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.449: error while reading EA inode 1 err=-117 [ 150.620668][ T26] audit: type=1804 audit(1729189151.710:4601): pid=5707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.445" name="/newroot/66/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 150.660949][ T5737] EXT4-fs (loop1): 1 orphan inode deleted [ 150.680196][ T5737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.757694][ T4116] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 150.968213][ T5751] loop4: detected capacity change from 0 to 1024 [ 151.017626][ T5751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.082600][ T5751] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.084263][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 151.274417][ T5760] loop0: detected capacity change from 0 to 64 [ 151.286686][ T3642] EXT4-fs (loop4): unmounting filesystem. [ 151.469967][ T5769] loop3: detected capacity change from 0 to 512 [ 151.482294][ T5760] loop0: detected capacity change from 64 to 0 [ 151.500457][ T5769] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 151.529372][ T75] loop: Write error at byte offset 9223372036854783999, length 512. [ 151.538357][ T3734] loop: Write error at byte offset 9223372036854807551, length 512. [ 151.546816][ T75] loop: Write error at byte offset 9223372036854783999, length 512. [ 151.556740][ C0] I/O error, dev loop0, sector 62 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 151.566543][ C0] Buffer I/O error on dev loop0, logical block 62, lost sync page write [ 151.576964][ T75] loop: Write error at byte offset 9223372036854783999, length 512. [ 151.586145][ C0] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.598306][ T5768] hfs: unable to read volume bitmap [ 151.604362][ T75] loop: Write error at byte offset 9223372036854783999, length 512. [ 151.625759][ T75] loop: Write error at byte offset 9223372036854779903, length 512. [ 151.633813][ C0] I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 151.633844][ C0] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 151.633866][ C0] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 151.633884][ C0] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 151.633902][ C0] Buffer I/O error on dev loop0, logical block 19, lost async page write [ 151.680015][ T75] loop: Write error at byte offset 9223372036854779903, length 512. [ 151.688540][ T75] loop: Write error at byte offset 9223372036854779903, length 512. [ 151.715328][ T75] loop: Write error at byte offset 9223372036854779903, length 512. [ 151.742237][ C0] I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 151.751523][ C0] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 151.759920][ C0] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 151.768299][ C0] Buffer I/O error on dev loop0, logical block 10, lost async page write [ 151.776758][ C0] Buffer I/O error on dev loop0, logical block 11, lost async page write [ 151.790187][ T5774] loop1: detected capacity change from 0 to 2048 [ 151.794294][ T75] loop: Write error at byte offset 9223372036854783999, length 512. [ 151.870226][ C0] I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 4 prio class 2 [ 151.879824][ C0] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 151.888350][ C0] I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 4 prio class 2 [ 151.961799][ T5774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.984461][ T4116] hfs: walked past end of dir [ 152.134203][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 152.290627][ T5782] loop1: detected capacity change from 0 to 512 [ 152.368691][ C1] I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 152.378118][ C1] I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x0 phys_seg 4 prio class 2 [ 152.400141][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.421126][ C1] I/O error, dev loop0, sector 16 op 0x1:(WRITE) flags 0x800 phys_seg 4 prio class 2 [ 152.430716][ C1] I/O error, dev loop0, sector 8 op 0x1:(WRITE) flags 0x800 phys_seg 4 prio class 2 [ 152.461639][ T5782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 152.477558][ T5782] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.581867][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.687530][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 152.753907][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.877448][ T26] audit: type=1326 audit(1729189153.970:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 152.925865][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.930449][ T26] audit: type=1326 audit(1729189153.970:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 153.031473][ T26] audit: type=1326 audit(1729189153.980:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca9657c990 code=0x7ffc0000 [ 153.055611][ T26] audit: type=1326 audit(1729189153.980:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9657dbfb code=0x7ffc0000 [ 153.083613][ T26] audit: type=1326 audit(1729189153.980:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9657dbfb code=0x7ffc0000 [ 153.115227][ T26] audit: type=1326 audit(1729189154.010:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9657dbfb code=0x7ffc0000 [ 153.151187][ T26] audit: type=1326 audit(1729189154.010:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9657dbfb code=0x7ffc0000 [ 153.182120][ T41] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.225149][ T26] audit: type=1326 audit(1729189154.330:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.1.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca9657dbfb code=0x7ffc0000 [ 153.329202][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.339694][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.348854][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.358322][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.367744][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.379353][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.485294][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.495083][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.513447][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.524631][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.532361][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.540467][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.554390][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.582416][ T41] usb 2-1: config 0 has no interfaces? [ 153.614571][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.623401][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.633696][ T5806] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 153.742321][ T41] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.772412][ T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.789567][ T41] usb 2-1: Product: syz [ 153.794534][ T41] usb 2-1: Manufacturer: syz [ 153.804240][ T41] usb 2-1: SerialNumber: syz [ 153.814888][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 153.822551][ T41] usb 2-1: config 0 descriptor?? [ 154.077066][ T41] usb 2-1: USB disconnect, device number 8 [ 154.291875][ T5830] loop4: detected capacity change from 0 to 1024 [ 154.326316][ T5830] hfsplus: request for non-existent node -709361664 in B*Tree [ 154.339809][ T5830] hfsplus: request for non-existent node -709361664 in B*Tree [ 154.353870][ T5830] hfsplus: b-tree write err: -5, ino 8 [ 154.481355][ T5830] loop4: detected capacity change from 0 to 1024 [ 154.488919][ T5830] ext4: Bad value for 'sb' [ 154.828784][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 154.924036][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 154.951532][ T5847] loop4: detected capacity change from 0 to 512 [ 154.987461][ T5847] EXT4-fs: Ignoring removed oldalloc option [ 154.994573][ T5847] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.026832][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 155.034276][ T5849] loop1: detected capacity change from 0 to 1024 [ 155.066825][ T5847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.092302][ T5849] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.110554][ T5847] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.124849][ T5849] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.139591][ T5849] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.489: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.160471][ T5849] EXT4-fs (loop1): 1 orphan inode deleted [ 155.173055][ T5849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 155.263722][ T3642] EXT4-fs (loop4): unmounting filesystem. [ 155.279706][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 155.442045][ T3650] Bluetooth: hci0: command tx timeout [ 155.602187][ T3650] Bluetooth: hci1: command tx timeout [ 155.611467][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.619321][ T41] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.640773][ T41] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.803366][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.806761][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 155.806774][ T26] audit: type=1326 audit(1729189156.910:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21717dff9 code=0x7ffc0000 [ 155.838922][ T26] audit: type=1326 audit(1729189156.930:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fc21717dff9 code=0x7ffc0000 [ 155.844579][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.862481][ T26] audit: type=1326 audit(1729189156.930:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21717dff9 code=0x7ffc0000 [ 155.893589][ T5801] device bridge_slave_0 entered promiscuous mode [ 155.900867][ T26] audit: type=1326 audit(1729189156.970:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5884 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21717dff9 code=0x7ffc0000 [ 155.967790][ T75] device hsr_slave_0 left promiscuous mode [ 155.983042][ T75] device hsr_slave_1 left promiscuous mode [ 156.015822][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.033652][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.051074][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.066005][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.075488][ T75] device bridge_slave_1 left promiscuous mode [ 156.081827][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.118999][ T75] device bridge_slave_0 left promiscuous mode [ 156.127522][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.179408][ T75] device veth1_macvtap left promiscuous mode [ 156.190550][ T75] device veth0_macvtap left promiscuous mode [ 156.208780][ T75] device veth1_vlan left promiscuous mode [ 156.230213][ T75] device veth0_vlan left promiscuous mode [ 156.280448][ T5891] kvm [5890]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x6626 [ 156.407280][ T5895] syz.4.497 uses obsolete (PF_INET,SOCK_PACKET) [ 156.834653][ T5913] loop1: detected capacity change from 0 to 256 [ 156.903667][ T5913] FAT-fs (loop1): Directory bread(block 64) failed [ 156.942022][ T5913] FAT-fs (loop1): Directory bread(block 65) failed [ 156.948696][ T5913] FAT-fs (loop1): Directory bread(block 66) failed [ 156.955776][ T5913] FAT-fs (loop1): Directory bread(block 67) failed [ 156.963874][ T5913] FAT-fs (loop1): Directory bread(block 68) failed [ 156.970499][ T5913] FAT-fs (loop1): Directory bread(block 69) failed [ 156.981970][ T5913] FAT-fs (loop1): Directory bread(block 70) failed [ 156.988519][ T5913] FAT-fs (loop1): Directory bread(block 71) failed [ 156.995234][ T5913] FAT-fs (loop1): Directory bread(block 72) failed [ 157.001771][ T5913] FAT-fs (loop1): Directory bread(block 73) failed [ 157.099421][ T3698] kworker/u4:5: attempt to access beyond end of device [ 157.099421][ T3698] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 157.277381][ T5921] loop1: detected capacity change from 0 to 512 [ 157.337712][ T5921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.347260][ T5921] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.409801][ T5921] EXT4-fs (loop1): shut down requested (0) [ 157.411314][ T75] team0 (unregistering): Port device team_slave_1 removed [ 157.487912][ T75] team0 (unregistering): Port device team_slave_0 removed [ 157.522373][ T3650] Bluetooth: hci0: command tx timeout [ 157.537927][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 157.546470][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.622667][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.682490][ T3650] Bluetooth: hci1: command tx timeout [ 158.174320][ T5935] fuse: root generation should be zero [ 158.241837][ T75] bond0 (unregistering): Released all slaves [ 158.414737][ T5941] futex_wake_op: syz.1.511 tries to shift op by 32; fix this program [ 158.513872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 158.531943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 158.540229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 158.548487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 158.556773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 158.565038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 158.573312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 159.187844][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.195123][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.205647][ T5801] device bridge_slave_1 entered promiscuous mode [ 159.220521][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.228494][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.241163][ T5807] device bridge_slave_0 entered promiscuous mode [ 159.399062][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.407997][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.416715][ T5807] device bridge_slave_1 entered promiscuous mode [ 159.484192][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.567072][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.602004][ T48] Bluetooth: hci0: command tx timeout [ 159.611345][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.650327][ T5949] loop4: detected capacity change from 0 to 2048 [ 159.671884][ T26] audit: type=1326 audit(1729189160.770:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 159.694176][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.721392][ T26] audit: type=1326 audit(1729189160.780:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 159.751754][ T26] audit: type=1326 audit(1729189160.780:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 159.774042][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.781471][ T5957] loop1: detected capacity change from 0 to 1024 [ 159.787928][ T48] Bluetooth: hci1: command tx timeout [ 159.795363][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.810628][ T26] audit: type=1326 audit(1729189160.780:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 159.841511][ T5957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.865564][ T5801] team0: Port device team_slave_0 added [ 159.928833][ T5957] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.935941][ T26] audit: type=1326 audit(1729189160.780:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 159.963712][ T26] audit: type=1326 audit(1729189160.800:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5953 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9657dff9 code=0x7ffc0000 [ 159.993591][ T5801] team0: Port device team_slave_1 added [ 160.022248][ T5807] team0: Port device team_slave_0 added [ 160.030117][ T5807] team0: Port device team_slave_1 added [ 160.110105][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.117296][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.143218][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.175808][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 160.187653][ T5967] loop4: detected capacity change from 0 to 512 [ 160.206994][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.250671][ T5967] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 160.275886][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.289620][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.348171][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.372280][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.374888][ T5967] EXT4-fs (loop4): 1 orphan inode deleted [ 160.379267][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.388051][ T5967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.411039][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.447330][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.452556][ T5967] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.533866][ T3698] EXT4-fs error (device loop4): ext4_release_dquot:6824: comm kworker/u4:5: Failed to release dquot type 1 [ 160.564533][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.571509][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.597405][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.651847][ T3642] EXT4-fs (loop4): unmounting filesystem. [ 160.662209][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.834298][ T5801] device hsr_slave_0 entered promiscuous mode [ 160.851813][ T5801] device hsr_slave_1 entered promiscuous mode [ 161.077085][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.124759][ T5807] device hsr_slave_0 entered promiscuous mode [ 161.142440][ T5807] device hsr_slave_1 entered promiscuous mode [ 161.154738][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.188730][ T5807] Cannot create hsr debugfs directory [ 161.231812][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.350397][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.489766][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.682185][ T3650] Bluetooth: hci0: command tx timeout [ 161.842615][ T48] Bluetooth: hci1: command tx timeout [ 162.006614][ T6020] loop4: detected capacity change from 0 to 512 [ 162.033923][ T6020] EXT4-fs: Ignoring removed orlov option [ 162.052564][ T6020] EXT4-fs (loop4): unable to read superblock [ 162.617614][ T4642] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.659100][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.708001][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.728721][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.740879][ T6020] loop4: detected capacity change from 0 to 32768 [ 162.786637][ T6020] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 162.805805][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.828530][ T3628] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 162.882161][ T4642] usb 2-1: Using ep0 maxpacket: 8 [ 162.998169][ T6041] loop4: detected capacity change from 0 to 128 [ 163.021809][ T4642] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 163.040388][ T6041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.043258][ T4642] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.075890][ T6041] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.116514][ T4642] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.169060][ T4642] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.215077][ T4642] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.264590][ T4642] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 163.302062][ T4642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.347430][ T3642] EXT4-fs (loop4): unmounting filesystem. [ 163.612144][ T4642] usb 2-1: usb_control_msg returned -32 [ 163.617766][ T4642] usbtmc 2-1:16.0: can't read capabilities [ 163.807639][ T6038] loop2: detected capacity change from 0 to 40427 [ 163.850260][ T6038] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 163.867087][ T6038] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 163.899839][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.908505][ T6038] F2FS-fs (loop2): invalid crc value [ 163.935042][ T6038] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.997467][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.005371][ T6062] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 164.018203][ T3785] usb 2-1: USB disconnect, device number 9 [ 164.031186][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.136847][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.145030][ T6038] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 164.155958][ T75] device hsr_slave_0 left promiscuous mode [ 164.163200][ T6038] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.171295][ T75] device hsr_slave_1 left promiscuous mode [ 164.201315][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.215481][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 164.215495][ T26] audit: type=1800 audit(1729189165.320:4643): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.537" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 164.242770][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.268735][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.282181][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.302144][ T75] device bridge_slave_1 left promiscuous mode [ 164.308387][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.329355][ T5254] syz-executor: attempt to access beyond end of device [ 164.329355][ T5254] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 164.346056][ T75] device bridge_slave_0 left promiscuous mode [ 164.353885][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.391959][ T75] device veth1_macvtap left promiscuous mode [ 164.398025][ T75] device veth0_macvtap left promiscuous mode [ 164.414098][ T75] device veth1_vlan left promiscuous mode [ 164.419936][ T75] device veth0_vlan left promiscuous mode [ 164.828546][ T6066] loop4: detected capacity change from 0 to 32768 [ 164.842269][ T6066] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 164.932920][ T3628] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.943820][ T6081] loop1: detected capacity change from 0 to 16 [ 164.998056][ T6081] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 165.222677][ T6084] loop2: detected capacity change from 0 to 4096 [ 165.240260][ T6084] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 165.533989][ T6088] loop4: detected capacity change from 0 to 256 [ 165.610021][ T6088] FAT-fs (loop4): Directory bread(block 64) failed [ 165.624300][ T6088] FAT-fs (loop4): Directory bread(block 65) failed [ 165.645613][ T6088] FAT-fs (loop4): Directory bread(block 66) failed [ 165.661449][ T6088] FAT-fs (loop4): Directory bread(block 67) failed [ 165.668532][ T6088] FAT-fs (loop4): Directory bread(block 68) failed [ 165.690240][ T6088] FAT-fs (loop4): Directory bread(block 69) failed [ 165.705824][ T6088] FAT-fs (loop4): Directory bread(block 70) failed [ 165.712756][ T6088] FAT-fs (loop4): Directory bread(block 71) failed [ 165.745402][ T6088] FAT-fs (loop4): Directory bread(block 72) failed [ 165.752402][ T6088] FAT-fs (loop4): Directory bread(block 73) failed [ 166.028498][ T75] team0 (unregistering): Port device team_slave_1 removed [ 166.048033][ T6081] loop1: detected capacity change from 0 to 40427 [ 166.059800][ T6081] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 166.073579][ T6093] loop2: detected capacity change from 0 to 8192 [ 166.086587][ T6081] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 166.096370][ T6093] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 166.116572][ T6093] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 166.126619][ T6093] REISERFS (device loop2): using ordered data mode [ 166.133856][ T6093] reiserfs: using flush barriers [ 166.159827][ T6093] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.160591][ T6081] F2FS-fs (loop1): invalid crc value [ 166.192622][ T6093] REISERFS (device loop2): checking transaction log (loop2) [ 166.225457][ T75] team0 (unregistering): Port device team_slave_0 removed [ 166.275533][ T6081] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.336722][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.358937][ T6081] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 166.394703][ T6081] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 166.399563][ T6093] REISERFS (device loop2): Using tea hash to sort names [ 166.404584][ T6081] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 166.422379][ T6093] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 166.485888][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.502358][ T6093] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 167.220496][ T6113] binder: 6112:6113 ioctl c018620c 200005c0 returned -22 [ 167.762140][ T26] audit: type=1326 audit(1729189168.790:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21717dff9 code=0x7fc00000 [ 168.091919][ C0] sched: RT throttling activated [ 168.101343][ T75] bond0 (unregistering): Released all slaves [ 168.167482][ T6111] loop1: detected capacity change from 0 to 131072 [ 168.190651][ T6111] F2FS-fs (loop1): Found nat_bits in checkpoint [ 168.236091][ T6111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 168.347581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.372869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.384246][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.391319][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.400554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.417377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.425998][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.433140][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.452019][ T26] audit: type=1326 audit(1729189169.550:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6121 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc21717dff9 code=0x7fc00000 [ 168.479397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.519605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.531834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.556270][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.649392][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.711080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.747820][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.757838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.773538][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.788223][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.809792][ T5801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.838035][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.851068][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.867662][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.882717][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.901574][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.921161][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.939953][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.959374][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.981984][ T3681] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.222237][ T3681] usb 5-1: Using ep0 maxpacket: 16 [ 169.339768][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.352542][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 169.376520][ T3681] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 169.406067][ T3681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.407397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.432658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.448097][ T3681] usb 5-1: config 0 descriptor?? [ 169.482979][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.517107][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.552952][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.582182][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.589334][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.667932][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.682932][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.722291][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.752881][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.760006][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.800302][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.815735][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.837473][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.891210][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.912165][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.931120][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.934201][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.973567][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.008954][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.026940][ T3681] hid (null): unknown global tag 0x83 [ 170.030108][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 170.035919][ T3681] hid (null): unknown global tag 0xc [ 170.049821][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 170.057089][ T3681] hid (null): global environment stack underflow [ 170.058713][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 170.084291][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 170.087074][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 170.100540][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.106466][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.109466][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.125216][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.133719][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.149522][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.155221][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.164733][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.181963][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.189152][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.197547][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.210006][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.215228][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.227292][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.236427][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.240970][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.251260][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.251481][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.283018][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.291153][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.304637][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.314530][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.325415][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.335309][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.343178][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.350591][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.358443][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.366304][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.373816][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.381206][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.388648][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.396328][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.404394][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.411792][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.419239][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.426699][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.434576][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.442933][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.453405][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.460801][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.468546][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.476463][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.484168][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.491692][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.511982][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.519414][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.532101][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.539519][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.547910][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.555708][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.563436][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.571150][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.578818][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.586462][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.595382][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.604027][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.611521][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.619304][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.631712][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.639628][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.647284][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.654810][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.666301][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.673986][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.681382][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.688836][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.689605][ T6170] loop1: detected capacity change from 0 to 128 [ 170.696260][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.696286][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.696307][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.696329][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.696349][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.747833][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.755723][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.758351][ T6170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.763193][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.763221][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.763243][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.763265][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.763287][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.777691][ T6170] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.779197][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.826885][ T3681] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 170.834366][ T3681] hid-generic 0003:0158:0100.0003: collection stack underflow [ 170.841855][ T3681] hid-generic 0003:0158:0100.0003: item 0 0 0 12 parsing failed [ 170.850012][ T3681] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 170.861241][ T3681] usb 5-1: USB disconnect, device number 8 [ 170.883981][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.906215][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.916281][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.927150][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.936023][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.944285][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 170.964227][ T5807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.025121][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.134350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.166765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.192674][ T5801] device veth0_vlan entered promiscuous mode [ 171.209749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.223873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.318165][ T5801] device veth1_vlan entered promiscuous mode [ 171.718531][ T5801] device veth0_macvtap entered promiscuous mode [ 171.732883][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.749283][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.808850][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.845942][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.872215][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.021490][ T5801] device veth1_macvtap entered promiscuous mode [ 172.031435][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.109808][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.120786][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.134518][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.147957][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.166511][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.197465][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.230403][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.248390][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.270554][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.298820][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.322159][ T3650] Bluetooth: hci4: command tx timeout [ 172.375205][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.394619][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.421673][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.443781][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.465652][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.488102][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.503471][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.523064][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.553535][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.573366][ T6161] chnl_net:caif_netlink_parms(): no params data found [ 172.612879][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.624974][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.654155][ T5801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.664640][ T5801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.678688][ T5801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.688088][ T5801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.693014][ T6213] loop1: detected capacity change from 0 to 32768 [ 172.708021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.723239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.742323][ T6213] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.575 (6213) [ 172.791629][ T6213] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 172.816798][ T6213] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 172.840325][ T6213] BTRFS info (device loop1): using free space tree [ 172.920265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.934022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.949779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.959013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.990141][ T5807] device veth0_vlan entered promiscuous mode [ 173.130018][ T6213] BTRFS info (device loop1): enabling ssd optimizations [ 173.137248][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.148041][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.187121][ T6161] device bridge_slave_0 entered promiscuous mode [ 173.219957][ T26] audit: type=1800 audit(1729189174.320:4646): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.575" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 173.259931][ T5807] device veth1_vlan entered promiscuous mode [ 173.357153][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.376717][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.397949][ T6161] device bridge_slave_1 entered promiscuous mode [ 173.624118][ T3646] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 173.745313][ T6161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.832692][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.849754][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.882636][ T5807] device veth0_macvtap entered promiscuous mode [ 173.906535][ T4002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.932695][ T4002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.950324][ T6161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.171114][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.190496][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.280971][ T5807] device veth1_macvtap entered promiscuous mode [ 174.312097][ T4002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.335823][ T6161] team0: Port device team_slave_0 added [ 174.342448][ T4002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.361147][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.376574][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.401961][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.412495][ T48] Bluetooth: hci4: command tx timeout [ 174.428294][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.439251][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.450584][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.461252][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.472327][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.486387][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.532219][ T75] device hsr_slave_0 left promiscuous mode [ 174.546291][ T75] device hsr_slave_1 left promiscuous mode [ 174.553100][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.560530][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.575362][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.586000][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.600562][ T75] device bridge_slave_1 left promiscuous mode [ 174.617398][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.628724][ T75] device bridge_slave_0 left promiscuous mode [ 174.656793][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.738606][ T75] device veth1_macvtap left promiscuous mode [ 174.762262][ T75] device veth0_macvtap left promiscuous mode [ 174.775113][ T75] device veth1_vlan left promiscuous mode [ 174.787668][ T75] device veth0_vlan left promiscuous mode [ 175.378986][ T6301] loop4: detected capacity change from 0 to 40427 [ 175.423968][ T6301] F2FS-fs (loop4): invalid crc value [ 175.441973][ T6301] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.501390][ T6301] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.535764][ T75] team0 (unregistering): Port device team_slave_1 removed [ 175.539655][ T6301] syz.4.586: attempt to access beyond end of device [ 175.539655][ T6301] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.565886][ T6301] syz.4.586: attempt to access beyond end of device [ 175.565886][ T6301] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 175.610912][ T3642] syz-executor: attempt to access beyond end of device [ 175.610912][ T3642] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 175.643631][ T75] team0 (unregistering): Port device team_slave_0 removed [ 175.689928][ T3645] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.708020][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.802459][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.278622][ T4645] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.390098][ T75] bond0 (unregistering): Released all slaves [ 176.478049][ T6161] team0: Port device team_slave_1 added [ 176.482347][ T3650] Bluetooth: hci4: command tx timeout [ 176.504579][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.514268][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.523376][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.535227][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.545983][ T4645] usb 5-1: Using ep0 maxpacket: 8 [ 176.551344][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.561278][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.572290][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.582828][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.593532][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.605225][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.645989][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.660565][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.687884][ T6161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.699915][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.721724][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.757815][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.772548][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.781301][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.790355][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.802450][ T6161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.810112][ T6161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.837441][ T6161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.853151][ T4645] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 176.862423][ T4645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.884954][ T4645] usb 5-1: Product: syz [ 176.894175][ T4645] usb 5-1: Manufacturer: syz [ 176.898801][ T4645] usb 5-1: SerialNumber: syz [ 176.937947][ T4645] usb 5-1: config 0 descriptor?? [ 177.035034][ T6161] device hsr_slave_0 entered promiscuous mode [ 177.052415][ T6161] device hsr_slave_1 entered promiscuous mode [ 177.077527][ T6161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.086386][ T6161] Cannot create hsr debugfs directory [ 177.099860][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.120166][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.209166][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.211616][ T4645] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 177.263428][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.286643][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.334653][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.957496][ T6161] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.975606][ T6161] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.995902][ T6161] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.022999][ T6161] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.140507][ T6161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.161778][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.181021][ T6283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.198841][ T6161] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.214856][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.234697][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.254480][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.261613][ T4002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.285561][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.333933][ T3790] libceph: connect (1)[c::]:6789 error -101 [ 178.339099][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.340613][ T3790] libceph: mon0 (1)[c::]:6789 connect error [ 178.358926][ T3790] libceph: connect (1)[c::]:6789 error -101 [ 178.365058][ T3790] libceph: mon0 (1)[c::]:6789 connect error [ 178.370074][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.426884][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.434254][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.453275][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.477872][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.544304][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.562130][ T3650] Bluetooth: hci4: command tx timeout [ 178.568969][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.577535][ T4645] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 178.587258][ T4645] usb 5-1: USB disconnect, device number 9 [ 178.622669][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.635343][ T3790] libceph: connect (1)[c::]:6789 error -101 [ 178.648452][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.656376][ T3790] libceph: mon0 (1)[c::]:6789 connect error [ 178.675995][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.704752][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.726251][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.738819][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.761646][ T6161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.801742][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.822099][ T3786] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.066537][ T3786] usb 2-1: Using ep0 maxpacket: 32 [ 179.097430][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.108774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.125361][ T6161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.148325][ T6352] ceph: No mds server is up or the cluster is laggy [ 179.165162][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.181751][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.190931][ T3682] libceph: connect (1)[c::]:6789 error -101 [ 179.206325][ T3786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.228367][ T3682] libceph: mon0 (1)[c::]:6789 connect error [ 179.235986][ T3786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.271502][ T3786] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.282946][ T3786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.291051][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.314168][ T3786] usb 2-1: config 0 descriptor?? [ 179.324355][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.348410][ T6161] device veth0_vlan entered promiscuous mode [ 179.357105][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.365594][ T3786] hub 2-1:0.0: USB hub found [ 179.380195][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.406989][ T6161] device veth1_vlan entered promiscuous mode [ 179.478908][ T6161] device veth0_macvtap entered promiscuous mode [ 179.503458][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.519455][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.538021][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.570995][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.590477][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.593799][ T3786] hub 2-1:0.0: 1 port detected [ 179.627871][ T6161] device veth1_macvtap entered promiscuous mode [ 179.669780][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.711303][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.727082][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.763413][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.783496][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.799374][ T6394] loop0: detected capacity change from 0 to 256 [ 179.816023][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.843697][ T6394] exfat: Deprecated parameter 'utf8' [ 179.846913][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.851720][ T6378] loop3: detected capacity change from 0 to 40427 [ 179.880330][ T6394] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 179.882268][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.899351][ T6378] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 179.917013][ T6378] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 179.957795][ T6378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.976900][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.007327][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.027320][ T6378] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 180.034678][ T6378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.043394][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.077310][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.109769][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.121693][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.135796][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.145753][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.156427][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.167981][ T6161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.178794][ T6161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.191437][ T6161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.235108][ T6161] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.244218][ T6161] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.253582][ T3787] hub 2-1:0.0: activate --> -90 [ 180.260913][ T6161] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.270101][ T6161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.298137][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.317346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.492273][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.497042][ T3790] usb 2-1: USB disconnect, device number 10 [ 180.513179][ T3787] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 180.518087][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.563509][ T4002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 180.620956][ T6392] loop4: detected capacity change from 0 to 32768 [ 180.636285][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.648314][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.668523][ T6392] [ 180.668523][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.668523][ T6392] [ 180.700067][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.725405][ T6407] loop0: detected capacity change from 0 to 512 [ 180.761422][ T6392] [ 180.761422][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.761422][ T6392] [ 180.798710][ T6407] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.611: casefold flag without casefold feature [ 180.807139][ T6392] [ 180.807139][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.807139][ T6392] [ 180.834046][ T6407] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.611: couldn't read orphan inode 15 (err -117) [ 180.841254][ T6392] [ 180.841254][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.841254][ T6392] [ 180.856262][ T6407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.867588][ T6392] [ 180.867588][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.867588][ T6392] [ 180.878793][ T6392] [ 180.878793][ T6392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.878793][ T6392] [ 180.896940][ T105] [ 180.896940][ T105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.896940][ T105] [ 181.022097][ T33] [ 181.022097][ T33] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.022097][ T33] [ 181.074836][ T5807] EXT4-fs (loop0): unmounting filesystem. [ 181.075121][ T33] [ 181.075121][ T33] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.075121][ T33] [ 181.159761][ T3642] [ 181.159761][ T3642] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.159761][ T3642] [ 181.179766][ T3642] [ 181.179766][ T3642] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.179766][ T3642] [ 181.203213][ T105] ================================================================== [ 181.211305][ T105] BUG: KASAN: use-after-free in __mutex_lock+0x6d2/0xd80 [ 181.218349][ T105] Read of size 8 at addr ffff88805a09b908 by task jfsCommit/105 [ 181.225989][ T105] [ 181.228363][ T105] CPU: 1 PID: 105 Comm: jfsCommit Not tainted 6.1.113-syzkaller #0 [ 181.236254][ T105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.246320][ T105] Call Trace: [ 181.249599][ T105] [ 181.252534][ T105] dump_stack_lvl+0x1e3/0x2cb [ 181.257220][ T105] ? nf_tcp_handle_invalid+0x642/0x642 [ 181.262688][ T105] ? panic+0x764/0x764 [ 181.266768][ T105] ? _printk+0xd1/0x111 [ 181.270932][ T105] ? __virt_addr_valid+0x17f/0x530 [ 181.276050][ T105] ? __virt_addr_valid+0x17f/0x530 [ 181.281175][ T105] print_report+0x15f/0x4f0 [ 181.285687][ T105] ? __virt_addr_valid+0x17f/0x530 [ 181.290810][ T105] ? __virt_addr_valid+0x17f/0x530 [ 181.295930][ T105] ? __virt_addr_valid+0x45b/0x530 [ 181.301047][ T105] ? __phys_addr+0xb6/0x170 [ 181.305553][ T105] ? __mutex_lock+0x6d2/0xd80 [ 181.310235][ T105] kasan_report+0x136/0x160 [ 181.314744][ T105] ? __mutex_lock+0x6d2/0xd80 [ 181.319430][ T105] __mutex_lock+0x6d2/0xd80 [ 181.323942][ T105] ? __mutex_lock+0x53c/0xd80 [ 181.328626][ T105] ? jfs_syncpt+0x22/0x90 [ 181.332962][ T105] ? mutex_lock_nested+0x10/0x10 [ 181.337911][ T105] ? do_raw_spin_unlock+0x137/0x8a0 [ 181.343119][ T105] jfs_syncpt+0x22/0x90 [ 181.347284][ T105] txEnd+0x30b/0x560 [ 181.351191][ T105] jfs_lazycommit+0x610/0xb60 [ 181.355875][ T105] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 181.361780][ T105] ? lockdep_hardirqs_on+0x94/0x130 [ 181.366992][ T105] ? txFreelock+0x580/0x580 [ 181.371506][ T105] ? do_task_dead+0xd0/0xd0 [ 181.376018][ T105] ? _raw_spin_unlock+0x40/0x40 [ 181.380868][ T105] ? __kthread_parkme+0x168/0x1c0 [ 181.385890][ T105] kthread+0x28d/0x320 [ 181.389947][ T105] ? txFreelock+0x580/0x580 [ 181.394434][ T105] ? kthread_blkcg+0xd0/0xd0 [ 181.399010][ T105] ret_from_fork+0x1f/0x30 [ 181.403419][ T105] [ 181.406421][ T105] [ 181.408725][ T105] Allocated by task 6392: [ 181.413034][ T105] kasan_set_track+0x4b/0x70 [ 181.417614][ T105] __kasan_kmalloc+0x97/0xb0 [ 181.422188][ T105] lmLogOpen+0x314/0x1030 [ 181.426499][ T105] jfs_mount_rw+0xe3/0x640 [ 181.430900][ T105] jfs_fill_super+0x67d/0xc40 [ 181.435560][ T105] mount_bdev+0x2c9/0x3f0 [ 181.439876][ T105] legacy_get_tree+0xeb/0x180 [ 181.444539][ T105] vfs_get_tree+0x88/0x270 [ 181.448938][ T105] do_new_mount+0x2ba/0xb40 [ 181.453430][ T105] __se_sys_mount+0x2d5/0x3c0 [ 181.458092][ T105] do_syscall_64+0x3b/0xb0 [ 181.462489][ T105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.468369][ T105] [ 181.470678][ T105] Freed by task 3642: [ 181.474639][ T105] kasan_set_track+0x4b/0x70 [ 181.479217][ T105] kasan_save_free_info+0x27/0x40 [ 181.484223][ T105] ____kasan_slab_free+0xd6/0x120 [ 181.489226][ T105] __kmem_cache_free+0x25c/0x3c0 [ 181.494147][ T105] lmLogClose+0x29d/0x530 [ 181.498457][ T105] jfs_umount+0x298/0x370 [ 181.503293][ T105] jfs_put_super+0x86/0x180 [ 181.507780][ T105] generic_shutdown_super+0x130/0x340 [ 181.513138][ T105] kill_block_super+0x7a/0xe0 [ 181.517799][ T105] deactivate_locked_super+0xa0/0x110 [ 181.523158][ T105] cleanup_mnt+0x490/0x520 [ 181.527559][ T105] task_work_run+0x246/0x300 [ 181.532134][ T105] exit_to_user_mode_loop+0xde/0x100 [ 181.537409][ T105] exit_to_user_mode_prepare+0xb1/0x140 [ 181.542937][ T105] syscall_exit_to_user_mode+0x60/0x270 [ 181.548466][ T105] do_syscall_64+0x47/0xb0 [ 181.552863][ T105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.558743][ T105] [ 181.561050][ T105] Last potentially related work creation: [ 181.566744][ T105] kasan_save_stack+0x3b/0x60 [ 181.571408][ T105] __kasan_record_aux_stack+0xb0/0xc0 [ 181.576765][ T105] kvfree_call_rcu+0x116/0x8c0 [ 181.581510][ T105] __prealloc_shrinker+0x51f/0x7c0 [ 181.586609][ T105] alloc_super+0x759/0x930 [ 181.591019][ T105] sget+0x1f6/0x4d0 [ 181.594812][ T105] mount_bdev+0xf0/0x3f0 [ 181.599050][ T105] legacy_get_tree+0xeb/0x180 [ 181.604059][ T105] vfs_get_tree+0x88/0x270 [ 181.608469][ T105] do_new_mount+0x2ba/0xb40 [ 181.612957][ T105] __se_sys_mount+0x2d5/0x3c0 [ 181.617618][ T105] do_syscall_64+0x3b/0xb0 [ 181.622017][ T105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.627898][ T105] [ 181.630202][ T105] The buggy address belongs to the object at ffff88805a09b800 [ 181.630202][ T105] which belongs to the cache kmalloc-1k of size 1024 [ 181.644236][ T105] The buggy address is located 264 bytes inside of [ 181.644236][ T105] 1024-byte region [ffff88805a09b800, ffff88805a09bc00) [ 181.657580][ T105] [ 181.659889][ T105] The buggy address belongs to the physical page: [ 181.666290][ T105] page:ffffea0001682600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a098 [ 181.676422][ T105] head:ffffea0001682600 order:3 compound_mapcount:0 compound_pincount:0 [ 181.684732][ T105] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 181.692700][ T105] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888017c41dc0 [ 181.701615][ T105] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 181.710176][ T105] page dumped because: kasan: bad access detected [ 181.716579][ T105] page_owner tracks the page as allocated [ 181.722274][ T105] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3082, tgid 3082 (klogd), ts 59846482529, free_ts 11213761285 [ 181.743004][ T105] post_alloc_hook+0x18d/0x1b0 [ 181.747753][ T105] get_page_from_freelist+0x322e/0x33b0 [ 181.753281][ T105] __alloc_pages+0x28d/0x770 [ 181.757857][ T105] alloc_slab_page+0x6a/0x150 [ 181.762520][ T105] new_slab+0x84/0x2d0 [ 181.766576][ T105] ___slab_alloc+0xc20/0x1270 [ 181.771240][ T105] __kmem_cache_alloc_node+0x19f/0x260 [ 181.776682][ T105] kmalloc_trace+0x26/0xe0 [ 181.781080][ T105] syslog_print+0x11d/0x9b0 [ 181.785573][ T105] do_syslog+0x819/0x910 [ 181.789805][ T105] __x64_sys_syslog+0x78/0x90 [ 181.794476][ T105] do_syscall_64+0x3b/0xb0 [ 181.798878][ T105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.804759][ T105] page last free stack trace: [ 181.809413][ T105] free_unref_page_prepare+0xf63/0x1120 [ 181.814946][ T105] free_unref_page+0x33/0x3e0 [ 181.819606][ T105] free_contig_range+0x9a/0x150 [ 181.824445][ T105] destroy_args+0xfe/0x997 [ 181.828855][ T105] debug_vm_pgtable+0x416/0x46b [ 181.833692][ T105] do_one_initcall+0x265/0x8f0 [ 181.838459][ T105] do_initcall_level+0x157/0x207 [ 181.843394][ T105] do_initcalls+0x49/0x86 [ 181.847713][ T105] kernel_init_freeable+0x45c/0x60f [ 181.852905][ T105] kernel_init+0x19/0x290 [ 181.857229][ T105] ret_from_fork+0x1f/0x30 [ 181.861641][ T105] [ 181.863954][ T105] Memory state around the buggy address: [ 181.869570][ T105] ffff88805a09b800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.877622][ T105] ffff88805a09b880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.885671][ T105] >ffff88805a09b900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.893733][ T105] ^ [ 181.898050][ T105] ffff88805a09b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.906098][ T105] ffff88805a09ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 181.914144][ T105] ================================================================== [ 181.924716][ T105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.931928][ T105] CPU: 1 PID: 105 Comm: jfsCommit Not tainted 6.1.113-syzkaller #0 [ 181.939824][ T105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.949894][ T105] Call Trace: [ 181.953186][ T105] [ 181.956126][ T105] dump_stack_lvl+0x1e3/0x2cb [ 181.960812][ T105] ? nf_tcp_handle_invalid+0x642/0x642 [ 181.966290][ T105] ? panic+0x764/0x764 [ 181.970373][ T105] ? vscnprintf+0x59/0x80 [ 181.974729][ T105] panic+0x318/0x764 [ 181.978644][ T105] ? check_panic_on_warn+0x1d/0xa0 [ 181.983763][ T105] ? memcpy_page_flushcache+0xfc/0xfc [ 181.989149][ T105] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 181.995053][ T105] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 182.000945][ T105] ? _raw_spin_unlock+0x40/0x40 [ 182.005790][ T105] ? print_report+0x4a3/0x4f0 [ 182.010469][ T105] check_panic_on_warn+0x7e/0xa0 [ 182.015401][ T105] ? __mutex_lock+0x6d2/0xd80 [ 182.020067][ T105] end_report+0x66/0x110 [ 182.024296][ T105] kasan_report+0x143/0x160 [ 182.028810][ T105] ? __mutex_lock+0x6d2/0xd80 [ 182.033492][ T105] __mutex_lock+0x6d2/0xd80 [ 182.038000][ T105] ? __mutex_lock+0x53c/0xd80 [ 182.042671][ T105] ? jfs_syncpt+0x22/0x90 [ 182.046989][ T105] ? mutex_lock_nested+0x10/0x10 [ 182.051922][ T105] ? do_raw_spin_unlock+0x137/0x8a0 [ 182.057114][ T105] jfs_syncpt+0x22/0x90 [ 182.061257][ T105] txEnd+0x30b/0x560 [ 182.065140][ T105] jfs_lazycommit+0x610/0xb60 [ 182.069810][ T105] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 182.075693][ T105] ? lockdep_hardirqs_on+0x94/0x130 [ 182.080878][ T105] ? txFreelock+0x580/0x580 [ 182.085364][ T105] ? do_task_dead+0xd0/0xd0 [ 182.089858][ T105] ? _raw_spin_unlock+0x40/0x40 [ 182.094701][ T105] ? __kthread_parkme+0x168/0x1c0 [ 182.099719][ T105] kthread+0x28d/0x320 [ 182.103773][ T105] ? txFreelock+0x580/0x580 [ 182.108265][ T105] ? kthread_blkcg+0xd0/0xd0 [ 182.112839][ T105] ret_from_fork+0x1f/0x30 [ 182.117247][ T105] [ 182.120532][ T105] Kernel Offset: disabled [ 182.124842][ T105] Rebooting in 86400 seconds..