last executing test programs: 18.300110432s ago: executing program 4 (id=392): socket(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 15.97799218s ago: executing program 4 (id=393): io_setup(0x2007, &(0x7f0000000980)=0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002c40)='./file0\x00', 0x20000, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x8040587f, &(0x7f00000000c0)={0x29, 0x8000000000000001, 0x3}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02"], 0x3, 0x25a, &(0x7f0000000240)="$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") syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="004dc193e3ec31d5df1954e99ed68bd1bf89294370f846ad2126b1d2e5477a17e875979d8861dced54621081109f681847698194fef8a12512b5d2fe37ba747a2d4af8162b8a0fd57aabbd38b2da25987cabfad18db5c51b0d5d6fe7eb1f86c791b7521006ffcf2ce1867cfb872cf65adcad122c23f62fade220f385561a8a91ef27f62b816aec5115a0ddf142aa0a072d272af2df270b6518a79b2392c9f07f0f1c1f5a78605753e3793a4948da2d5cc323caf8318da94be4723ccf18d56907b66f407a267ad3982d4c58270ecfc4990459768f58dd92cc643aeefb23abd076"], 0x1, 0xa07, &(0x7f0000001540)="$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") futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0) io_destroy(r0) 13.226737882s ago: executing program 1 (id=401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fsopen(0x0, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 12.949834064s ago: executing program 2 (id=403): socket(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 11.501930141s ago: executing program 0 (id=404): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x810010, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES64=r1, @ANYRESDEC=0x0], 0x1, 0x1fb, &(0x7f0000000280)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x0) dup(0xffffffffffffffff) 11.501442751s ago: executing program 2 (id=405): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0, 0xdc0450e999c92311, 0x1}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 11.194354996s ago: executing program 4 (id=407): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000007f40)=ANY=[@ANYBLOB="00dab9ef0f812cef41d3cf9c8b7ff5124d6df16a47a96a22c0e21bd704acf07fbfc5993ca7175a983af6232955a984a377cade2dfd19d9d669cc165c39c07b811c740102acfa1ae7df9fcb074ab864eb1a6c917b5676e2b47fa6c79dd882264b691c890b0b4efd9a7639a6435baba8324b21b0f06e6ba64955f2a1084e52acc0f27c5ab037853682085f84dfa17afcfec6336d70bd652932611d6c3188424256089124f95dce7e2a71e63197c4bef6f5d4b807239fcfc183d00ae4c92ae0cfc3b8336397cb019a5f11"], 0x5, 0x483, &(0x7f0000000580)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="9000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) syz_io_uring_setup(0x470, 0x0, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xe895}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xff2}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.294569789s ago: executing program 2 (id=408): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0xf0f018}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xc31fa41e) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 9.992564513s ago: executing program 2 (id=409): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000480)) io_uring_enter(r0, 0x4866, 0xea86, 0xb, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket(0x1000000000000010, 0x80802, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0x288a, 0x4) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r6, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) 9.949961427s ago: executing program 0 (id=410): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/mdstat\x00', 0x0, 0x0) 9.109966245s ago: executing program 0 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x20}}, './file0\x00'}) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000001c0)={r0, 0x1, 0xc}) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x3b) keyctl$chown(0x4, r7, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x14, 0x2, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x5) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398b", 0xcb, 0xc001, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f00000000c0), 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x4004084, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.078390697s ago: executing program 4 (id=412): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="661dd86d73db6c75f11a65f20fb1b06909a9fa10d887c981a9", 0x19}], 0x1, 0x0, 0x58, 0x4c001}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40012040, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.651174291s ago: executing program 2 (id=413): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000040)) 8.433793239s ago: executing program 2 (id=414): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 6.785555292s ago: executing program 0 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) epoll_create1(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x8}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x39) close_range(r6, 0xffffffffffffffff, 0x2) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e06006572726f72733d72656d6f756e742d726f2c696e74722c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00"], 0x1, 0x4450, &(0x7f000000cd80)="$eJzs3c9PG9kdAPA3A0kgzQ9Ic0ilSrXUSK3aCkFObYlUQkgIJDRt2qRVL44BJ6E1OAJT9RCp9Ba1p0o9VD1EXWlvnCIOe83+CXvZY/Ycafewl5VWipaV7TEwY3vxZu2wJJ/PgWHevB9f8515fj6YFycqD5bWcktrucJKrrxwb+1C7q/l0vpyMcSvScvxj7y+8elML+6Tg7733mY3L1/93Z0LIby/+OGL7e3t7VDVH1oa2/P7Z58+Wth7bIgzbar9tu6tW/4UQjjbFFdVXwjhj++FEIUQLiVlk8lxMIRwMtSv3Xn0r7u5LkXz9HnxYv7l3OOt8fOzm0+22r/2KIT/lb73s/vLH/+wb/yjn3RpeAAAAAAAAAAAAAAAAAAADrnpWzdv/2Z0LDyLQv9m1Px93enk2O77sdtd84Pev1gAAAAAAAAAAAAAAAAAAAD4ltr9/n8uOtPi+/9TyXGiTfvtX/U+Rnpn5tc3p66MjiX7v0dN13+eFH1yqS8Mt9j3Pbv/+6VM+9b7vzeP86oa8TXGHQpRPJI6j+ORkRDeSTZ+Pxcdj0vltcpP75XXVxa7Fsahlc5/fff+VHaSDf07zf9kpv/e7///3aa7qXp+t/kW+/s/exvIoZTOf1/beu/+I+oo/5cz7b4y/wPfNPpQyz+vLp3//lrZ4N4KE/UJoJr/f/fvn/+pTP+9ev5PhRByUTXWXGoGqK5hquXt1iukpfN/pFaWmjqTP2S75//zTP6vZPo/qPl/I/tGREvp/B+tlaWn5d3nfzje//m/mun/IPJfjX+je0vMN1o6/8fqhf2pKrW/ZKfz/3Sm/17l/3acxHkqSt0Bm1G9vN3/qyMtnf/mBdnu57+4o/XftUz75vz/oSef/xrjNj7/Nab/H0f1z3+0ls7/YNt6nT7/M5l2vZ7/J2rrP15VOv/Ha2XptfNQ7Wen+Z/N9N+r/NdWJQON/O/OJ18cq5f/3/qvI+n8f6deGO+tsVH7WVv/Rfuv/69n+m+T/6PdewXN679q/Btx90Z4k6Xzf6JtvWr+P+jg/f9Gpl2b/P/2dHfCD+FIV5cTb510/k+2rVd7/gf2z/9cpl2v3/9/1MvOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ByeQ4FKJ4JHUexyMjIVxOzs+F49F8YTE/Xyov/GUthKmkPBfORPdL5flCKb+0Ul4s5gulUnkhhCvJ9bNhIForlSv55cLDqzt9DUYPioXVynyxUAkhTCfl3w8nG33NL1WWCw9DCNd2rp2Oy6sPHxRW8otLq78cHR0dDTM7MQxHxb9ViiuV+uj1qyHM7rQdivYEV7t8fSeWE9Gfy+urK4VSrfzGnjal8kKhtKfNXHLtP2E4qqyurywUKsV8qXy/Md5BmkiOUzO3fn/rxljT9btR/Tj5esMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Gt6Nv6L/4YQ+utncQhhovFL1Kr+0+fFi/mXc4+3xs/Pbj7ZetGuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAlO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdilY5QGgigMwG/GQu08htWy29muKKKFK4In0GN4GD2Kl/AOKVKkTRECySyEzS5sk1Tf1zyYn5n3YB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM8/TefbzVTUSKq81lxN/X/+Iwfyn15378/sUZZuR0nl+7h8e6Kf+ejvK7crRs8y5dr74/Y6T2fgd7Mtynvb7P9eRcU/s2NV/f9yZSriKiLfltyrmq5r0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJYdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//kkogsw==") 6.713024318s ago: executing program 3 (id=417): socket(0x10, 0x3, 0x0) syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') 5.632000716s ago: executing program 3 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) 4.989836557s ago: executing program 1 (id=419): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 4.989412597s ago: executing program 4 (id=420): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0xf0f018}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xc31fa41e) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) 4.931345242s ago: executing program 1 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) 3.710613191s ago: executing program 3 (id=422): openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/mdstat\x00', 0x0, 0x0) 3.640787076s ago: executing program 1 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x800, 0x0) dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0x70bd29, 0x0, [@sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x6, 0xc7, 0x2, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x24}}}]}, 0x38}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x33) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) 3.46726986s ago: executing program 3 (id=424): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000480)) io_uring_enter(r0, 0x4866, 0xea86, 0xb, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() socket(0x1000000000000010, 0x80802, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000180)=0x288a, 0x4) bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r6, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) close_range(r1, 0xffffffffffffffff, 0x0) 2.504121738s ago: executing program 3 (id=425): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabf, &(0x7f0000002340)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000040)) 2.379473138s ago: executing program 1 (id=426): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04020f01aaaaaaaa8111099802afa355ff019a436fb96002ff695c0c34b6434162bad64f30fe60fe9beaafb5eaa995dc13718949ac07cbb5cf66eb12ae388364161475efbbbe08000000000000009b694e23902226d7d1b4d4861588c69c1b976f216015aa134c837b0100743195120e897654810942dbfa9cd44e9a9c7549cd63ad0c5e8fd872ad27f65ee4aa098544df73639a9c1b517bdd0542f60a7e476df0d874f1426eac45f146f46179fd35ccef19c334f27f9ea8fbdd19470f67de7ff8e000df8cb01052c6f3fe4ae5ac92a907ccc323dca667921d76dc"], 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x149102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x1000000000003, 0x4100, 0xe, 0x0, 0x4, 0x400000000, 0x6, 0x7f, 0x100, 0x3, 0x7, 0x7, 0x7, 0x9b, 0x5, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x94a, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe, 0xf}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x3, 0x40, 0x853e, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) symlink(&(0x7f0000000100)='./control\x00', &(0x7f0000000780)='./control\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f00000000c0)=ANY=[@ANYBLOB="001000000c0000000f0000000400000007000000"]) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x101, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 1.105690981s ago: executing program 0 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x20}}, './file0\x00'}) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000001c0)={r0, 0x1, 0xc}) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0x3b) keyctl$chown(0x4, r7, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x14, 0x2, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x5) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398b", 0xcb, 0xc001, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f00000000c0), 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x4004084, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 337.657143ms ago: executing program 3 (id=428): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000140)='./bus\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/158, 0x9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0xfffffccf) 200.904144ms ago: executing program 0 (id=429): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[], 0x1, 0x5dd, &(0x7f0000000680)="$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") setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000000), &(0x7f0000000180)=@v2={0x5, 0x1, 0x14, 0x4}, 0x9, 0x1) 114.500901ms ago: executing program 1 (id=430): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="661dd86d73db6c75f11a65f20fb1b06909a9fa10d887c981a9", 0x19}], 0x1, 0x0, 0x58, 0x4c001}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x40012040, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=431): ioperm(0x80083, 0x2, 0x2) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x2, 0x6f7, &(0x7f00000010c0)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) openat(r0, &(0x7f0000000200)='./file1\x00', 0x2ca040, 0x40) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000180)=0x7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) write$proc_mixer(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="444947a854414c3120274d696327203030303030b030303030303030303030303030300a494741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a564f4c554d45202753796e7468272030303030303030303030303030303030303030300a4c494e4520274d617374657220506c6079626163d8181e40856e31348c6b20566f6c756d6527"], 0xcc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xb8) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100"], 0x1c}}, 0x20000000) close(r1) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r1, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.304623][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.679310][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 68.779013][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 68.808925][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 68.895378][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.905281][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.915438][ T4266] device bridge_slave_0 entered promiscuous mode [ 68.941662][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 68.959160][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.966583][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.975147][ T4266] device bridge_slave_1 entered promiscuous mode [ 68.982980][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 69.043203][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.050450][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.058743][ T4267] device bridge_slave_0 entered promiscuous mode [ 69.091496][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.099124][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.107450][ T4267] device bridge_slave_1 entered promiscuous mode [ 69.119851][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.132129][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.143539][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.151275][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.161446][ T4276] device bridge_slave_0 entered promiscuous mode [ 69.193110][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.203754][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.213208][ T4276] device bridge_slave_1 entered promiscuous mode [ 69.267114][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.287986][ T4266] team0: Port device team_slave_0 added [ 69.312156][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.322899][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.330265][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.339148][ T4268] device bridge_slave_0 entered promiscuous mode [ 69.347743][ T4266] team0: Port device team_slave_1 added [ 69.363922][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.373752][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.381129][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.389129][ T4275] device bridge_slave_0 entered promiscuous mode [ 69.400258][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.408117][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.416936][ T4275] device bridge_slave_1 entered promiscuous mode [ 69.431041][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.438672][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.447489][ T4268] device bridge_slave_1 entered promiscuous mode [ 69.461795][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.497227][ T4267] team0: Port device team_slave_0 added [ 69.509881][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.517098][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.544305][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.558366][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.565477][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.594655][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.621277][ T4267] team0: Port device team_slave_1 added [ 69.643476][ T4276] team0: Port device team_slave_0 added [ 69.651298][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.671582][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.692410][ T4276] team0: Port device team_slave_1 added [ 69.707177][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.724690][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.754119][ T4266] device hsr_slave_0 entered promiscuous mode [ 69.761453][ T4266] device hsr_slave_1 entered promiscuous mode [ 69.787261][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.795069][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.823042][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.844180][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.852671][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.880536][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.903622][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.911057][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.940048][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.959864][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.967561][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.994267][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.017291][ T4275] team0: Port device team_slave_0 added [ 70.029036][ T4268] team0: Port device team_slave_0 added [ 70.049999][ T4275] team0: Port device team_slave_1 added [ 70.067151][ T4268] team0: Port device team_slave_1 added [ 70.131990][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.141752][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.170578][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.182999][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.190488][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.218315][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.237343][ T4276] device hsr_slave_0 entered promiscuous mode [ 70.244860][ T4276] device hsr_slave_1 entered promiscuous mode [ 70.252401][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.261359][ T4276] Cannot create hsr debugfs directory [ 70.274088][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.281575][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.310125][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.323021][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 70.323031][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 70.329254][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 70.344639][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.351802][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.379846][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.402504][ T4282] Bluetooth: hci1: command 0x0409 tx timeout [ 70.402516][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 70.419103][ T4267] device hsr_slave_0 entered promiscuous mode [ 70.427365][ T4267] device hsr_slave_1 entered promiscuous mode [ 70.434660][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.443166][ T4267] Cannot create hsr debugfs directory [ 70.513375][ T4268] device hsr_slave_0 entered promiscuous mode [ 70.520436][ T4268] device hsr_slave_1 entered promiscuous mode [ 70.528317][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.536156][ T4268] Cannot create hsr debugfs directory [ 70.545067][ T4275] device hsr_slave_0 entered promiscuous mode [ 70.552640][ T4275] device hsr_slave_1 entered promiscuous mode [ 70.559180][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.568530][ T4275] Cannot create hsr debugfs directory [ 70.781499][ T4266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.817709][ T4266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.827587][ T4266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.851274][ T4266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.928103][ T4267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.938212][ T4267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.949758][ T4267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.969851][ T4267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.071884][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.087295][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.106519][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.121513][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.167024][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.188651][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.198673][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.208827][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.229018][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.238474][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.261500][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.272032][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.284033][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.293966][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.302008][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.334237][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.346246][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.355806][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.366861][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.376666][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.384960][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.395406][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.404792][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.430053][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.458554][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.470441][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.480760][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.490142][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.498859][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.513368][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.524628][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.559947][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.570947][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.581381][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.591978][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.605325][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.608353][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.619378][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.621569][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.665750][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.705526][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.720202][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.730942][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.740872][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.753213][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.763797][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.773372][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.781813][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.791934][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.807009][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.821062][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.853246][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.865900][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.885055][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.914463][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.925937][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.940469][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.951884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.961887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.970580][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.980821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.992894][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.002587][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.026638][ T4267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.039365][ T4267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.059178][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.070053][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.080958][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.091022][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.100526][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.109684][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.119636][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.127168][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.135989][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.145973][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.177900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.195435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.208337][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.217538][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.266727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.282923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.294007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.303689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.314961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.326658][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.341782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.352863][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.386290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.403627][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 72.403669][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 72.410402][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 72.420039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.469939][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.483153][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 72.483162][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 72.504691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.514665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.559681][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.584888][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.609478][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.640124][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.656747][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.671078][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.695344][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.730472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.749610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.782595][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.795663][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.829142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.837577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.851018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.868195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.879158][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.888538][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.898113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.932190][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.954941][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.972912][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.982998][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.007158][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.023000][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.042092][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.050593][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.070187][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.081578][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.098660][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.108345][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.117385][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.129595][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.140112][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.150906][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.161620][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.174689][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.208350][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.220321][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.233063][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.243482][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.253890][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.265520][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.275246][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.287698][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.309924][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.329606][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.340230][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.350691][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.362848][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.371613][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.383513][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.395706][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.409009][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.429215][ T4267] device veth0_vlan entered promiscuous mode [ 73.450597][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.465377][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.476300][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.488035][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.534588][ T4267] device veth1_vlan entered promiscuous mode [ 73.554368][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.564402][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.573901][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.583420][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.594117][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.604615][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.614672][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.624728][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.634226][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.658257][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.673461][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.698342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.708337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.743395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.752899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.781125][ T4266] device veth0_vlan entered promiscuous mode [ 73.793937][ T4276] device veth0_vlan entered promiscuous mode [ 73.808508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.827655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.839925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.851740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.867872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.899227][ T4266] device veth1_vlan entered promiscuous mode [ 73.911955][ T4276] device veth1_vlan entered promiscuous mode [ 73.942752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.951831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.986361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.999752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.020953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.030206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.046160][ T4266] device veth0_macvtap entered promiscuous mode [ 74.058133][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.069496][ T4267] device veth0_macvtap entered promiscuous mode [ 74.086554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.098219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.112012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.121624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.136569][ T4267] device veth1_macvtap entered promiscuous mode [ 74.170262][ T4266] device veth1_macvtap entered promiscuous mode [ 74.179611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.188391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.199564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.208853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.220501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.228397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.238838][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.251738][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.265276][ T4276] device veth0_macvtap entered promiscuous mode [ 74.281428][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.292087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.300815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.311631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.322694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.333628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.350796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.360618][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.372229][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.381750][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.391292][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.400867][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.427953][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.439267][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.452102][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.466670][ T4276] device veth1_macvtap entered promiscuous mode [ 74.476796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.485054][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 74.493240][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 74.499393][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 74.501014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.517632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.528780][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.539574][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.551097][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.563119][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 74.569363][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 74.579419][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.593876][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.603232][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.613594][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.623335][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.633773][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.644637][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.653320][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.661967][ T4268] device veth0_vlan entered promiscuous mode [ 74.673253][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.685187][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.697547][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.709385][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.721266][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.746174][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756065][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.766273][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.775642][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.787828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.798332][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.820108][ T4275] device veth0_vlan entered promiscuous mode [ 74.841669][ T4268] device veth1_vlan entered promiscuous mode [ 74.875645][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.886511][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.898257][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.908927][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.920510][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.928863][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.940149][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.948814][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.957865][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.969720][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.980640][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.999443][ T4275] device veth1_vlan entered promiscuous mode [ 75.019930][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.034603][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.044161][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.053507][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100829][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.114741][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.149571][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.158675][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.168208][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.186408][ T4268] device veth0_macvtap entered promiscuous mode [ 75.197987][ T4268] device veth1_macvtap entered promiscuous mode [ 75.223395][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.235691][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.246572][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.257217][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.267475][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.278496][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.321039][ T4275] device veth0_macvtap entered promiscuous mode [ 75.333849][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.342073][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.344746][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.368843][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.380672][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.395343][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407569][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.420906][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.436462][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.459210][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.469837][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.480052][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.492052][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.505094][ T4275] device veth1_macvtap entered promiscuous mode [ 75.515856][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.529715][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.540828][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.554363][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.565363][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.576412][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.587749][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.619382][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.629050][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.643743][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.658056][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.663656][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.668663][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.687749][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.697787][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.706370][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.715907][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.725834][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.735180][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.746030][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.777372][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.796404][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.808698][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.822442][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.834606][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.848796][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859705][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.871724][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.885807][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.906927][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.917418][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.934556][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.946568][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.960092][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.997012][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.016059][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.047619][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.062478][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.077981][ T4378] loop0: detected capacity change from 0 to 1024 [ 76.080596][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.099360][ T4378] hfsplus: failed to load root directory [ 76.110869][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.126102][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.140366][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.154709][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.171893][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.182216][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.192858][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.202058][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.225215][ T4375] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.229190][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.247338][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.279866][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.302035][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.426901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.446806][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.482656][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.563032][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 76.570127][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 76.570186][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 76.598176][ T71] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.643267][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 76.651120][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 76.690524][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.722764][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.757220][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.768968][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.815628][ T4389] loop2: detected capacity change from 0 to 1024 [ 76.853355][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.855271][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.885911][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.923731][ T4389] hfsplus: failed to load root directory [ 76.967089][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.055343][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.127614][ T4392] loop1: detected capacity change from 0 to 512 [ 77.292113][ T4395] loop2: detected capacity change from 0 to 128 [ 77.360019][ T4392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.360163][ T4392] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.408231][ T4395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.408971][ T4395] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.672533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.682709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.682905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.682964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.683014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.683148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.683212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.721364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.240262][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 78.310401][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 78.598944][ T4411] loop2: detected capacity change from 0 to 2048 [ 78.699400][ T4383] loop4: detected capacity change from 0 to 40427 [ 78.723137][ T4411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.735631][ T4413] loop1: detected capacity change from 0 to 2048 [ 78.786383][ T4383] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 78.806345][ T4413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.841385][ T4416] loop0: detected capacity change from 0 to 512 [ 78.862190][ T4383] F2FS-fs (loop4): invalid crc value [ 78.961128][ T4383] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.121961][ T4416] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.472450][ T4416] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.502697][ T4416] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #17: comm syz.0.11: inline data xattr refers to an external xattr inode [ 79.524300][ T4416] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.11: couldn't read orphan inode 17 (err -117) [ 79.539140][ T4416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.626525][ T4416] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 79.744582][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 79.917906][ T4409] loop3: detected capacity change from 0 to 32768 [ 79.949689][ T4409] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.9 (4409) [ 80.258978][ T4409] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 80.310492][ T4409] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 80.369190][ T4437] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.634045][ T4409] BTRFS info (device loop3): using free space tree [ 80.761925][ T4430] loop0: detected capacity change from 0 to 4096 [ 80.836086][ T4430] ntfs3: Unknown parameter 'windows_names' [ 80.870604][ T4440] loop1: detected capacity change from 0 to 1024 [ 81.115936][ T4440] ======================================================= [ 81.115936][ T4440] WARNING: The mand mount option has been deprecated and [ 81.115936][ T4440] and is ignored by this kernel. Remove the mand [ 81.115936][ T4440] option from the mount to silence this warning. [ 81.115936][ T4440] ======================================================= [ 81.153833][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.715963][ T4409] BTRFS error (device loop3): open_ctree failed: -12 [ 81.716450][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 82.888920][ T4381] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (4381) [ 84.098850][ T4495] netlink: 108 bytes leftover after parsing attributes in process `syz.3.26'. [ 84.157760][ T4479] loop1: detected capacity change from 0 to 32768 [ 84.297438][ T4497] loop3: detected capacity change from 0 to 128 [ 84.328316][ T4479] JBD2: Ignoring recovery information on journal [ 84.364848][ T4479] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 84.420204][ T4479] JBD2: bad block at offset 32 [ 84.491581][ T4479] (syz.1.19,4479,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 84.496853][ T4502] loop0: detected capacity change from 0 to 16 [ 84.527562][ T4497] syz.3.27: attempt to access beyond end of device [ 84.527562][ T4497] loop3: rw=2049, sector=145, nr_sectors = 288 limit=128 [ 84.529482][ T4479] (syz.1.19,4479,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 84.591310][ T4502] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.592493][ T4479] (syz.1.19,4479,1):ocfs2_check_volume:2461 ERROR: status = -22 [ 84.663358][ T4479] (syz.1.19,4479,1):ocfs2_check_volume:2489 ERROR: status = -22 [ 84.695893][ T4479] (syz.1.19,4479,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 84.857241][ T4479] (syz.1.19,4479,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 84.869703][ T4491] loop2: detected capacity change from 0 to 32768 [ 84.916509][ T4491] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 84.961534][ T4504] autofs4:pid:4504:autofs_fill_super: called with bogus options [ 85.041437][ T4491] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 85.097304][ T4491] BTRFS info (device loop2): setting nodatacow, compression disabled [ 85.134679][ T4491] BTRFS info (device loop2): setting datacow [ 85.161310][ T4491] BTRFS info (device loop2): turning on flush-on-commit [ 85.204684][ T4491] BTRFS info (device loop2): turning off barriers [ 85.239748][ T4491] BTRFS info (device loop2): disabling free space tree [ 85.277113][ T4491] BTRFS info (device loop2): enabling ssd optimizations [ 85.337901][ T4491] BTRFS info (device loop2): using spread ssd allocation scheme [ 85.369203][ T4491] BTRFS info (device loop2): not using ssd optimizations [ 85.399490][ T4491] BTRFS info (device loop2): not using spread ssd allocation scheme [ 85.433117][ T4491] BTRFS error (device loop2): cannot disable free space tree [ 85.594949][ T4491] BTRFS error (device loop2): open_ctree failed: -22 [ 85.673821][ T4469] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 85.944954][ T4469] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.977844][ T4469] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 86.215641][ T4469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.443165][ T4469] usb 5-1: config 0 descriptor?? [ 86.655738][ T4522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 86.976427][ T41] cfg80211: failed to load regulatory.db [ 87.111949][ T4514] loop3: detected capacity change from 0 to 32768 [ 87.147402][ T4534] Bluetooth: MGMT ver 1.22 [ 87.177879][ T4514] (syz.3.32,4514,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 87.223815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #110!!! [ 87.236392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #312!!! [ 87.319754][ T4514] (syz.3.32,4514,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 87.371793][ T4532] loop2: detected capacity change from 0 to 4096 [ 87.395663][ T4514] JBD2: Ignoring recovery information on journal [ 87.406871][ T4469] usbhid 5-1:0.0: can't add hid device: -71 [ 87.492680][ T4469] usbhid: probe of 5-1:0.0 failed with error -71 [ 87.601060][ T4469] usb 5-1: USB disconnect, device number 2 [ 87.625783][ T4514] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 88.394674][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 88.428081][ T4539] loop1: detected capacity change from 0 to 32768 [ 88.523881][ T4544] loop2: detected capacity change from 0 to 4096 [ 88.548942][ T4539] XFS (loop1): Mounting V5 Filesystem [ 88.714486][ T4539] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 88.933078][ T4539] XFS (loop1): Starting recovery (logdev: internal) [ 89.077208][ T4563] loop3: detected capacity change from 0 to 64 [ 89.334586][ T4556] process 'syz.2.39' launched '/dev/fd/-1' with NULL argv: empty string added [ 89.358655][ T4539] XFS (loop1): Ending recovery (logdev: internal) [ 89.537275][ T4539] XFS (loop1): Quotacheck needed: Please wait. [ 89.547899][ T4424] kworker/u4:10: attempt to access beyond end of device [ 89.547899][ T4424] loop3: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 89.603943][ T4424] Buffer I/O error on dev loop3, logical block 134217734, lost async page write [ 89.653874][ T4539] XFS (loop1): Quotacheck: Done. [ 90.053303][ T4268] XFS (loop1): Unmounting Filesystem [ 90.394450][ T4578] Zero length message leads to an empty skb [ 91.362732][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 92.788476][ T4595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'. [ 92.803741][ T4598] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 93.028145][ T4604] loop4: detected capacity change from 0 to 16 [ 93.029748][ T4602] loop2: detected capacity change from 0 to 128 [ 93.088851][ T4604] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.117421][ T4600] loop1: detected capacity change from 0 to 4096 [ 93.194326][ T4606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.55'. [ 93.557877][ T4612] autofs4:pid:4612:autofs_fill_super: called with bogus options [ 94.121034][ T4616] loop3: detected capacity change from 0 to 4096 [ 96.239065][ T4626] loop1: detected capacity change from 0 to 512 [ 96.385859][ T4626] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.440879][ T4626] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 96.492460][ T4626] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.59: Corrupt directory, running e2fsck is recommended [ 96.538942][ T4626] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 96.579451][ T4626] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.59: corrupted in-inode xattr [ 96.659338][ T4626] EXT4-fs (loop1): Remounting filesystem read-only [ 96.699063][ T4626] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.59: couldn't read orphan inode 15 (err -117) [ 96.776061][ T4626] EXT4-fs (loop1): Remounting filesystem read-only [ 96.796088][ T4626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.812196][ T4468] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.082101][ T4468] usb 1-1: Using ep0 maxpacket: 16 [ 97.148237][ T4633] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.187312][ T4633] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 97.225007][ T4468] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.244530][ T4633] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.59: Corrupt directory, running e2fsck is recommended [ 97.294023][ T4468] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 97.298680][ T4633] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.59: path /10/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 97.345521][ T4468] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.490687][ T4633] EXT4-fs (loop1): Remounting filesystem read-only [ 97.493546][ T4468] usb 1-1: Product: syz [ 98.291846][ T4468] usb 1-1: Manufacturer: syz [ 98.317492][ T4468] usb 1-1: SerialNumber: syz [ 98.348842][ T4468] usb 1-1: config 0 descriptor?? [ 98.403412][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 98.414025][ T4468] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 98.461470][ T4468] gspca_stv06xx: st6422 sensor detected [ 98.557147][ T4643] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 98.959051][ T4468] STV06xx: probe of 1-1:0.0 failed with error -71 [ 98.994975][ T4468] usb 1-1: USB disconnect, device number 2 [ 99.496273][ T4657] loop2: detected capacity change from 0 to 4096 [ 100.134913][ T4664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.68'. [ 100.386331][ T4666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 101.468340][ T4676] loop2: detected capacity change from 0 to 2048 [ 101.574271][ T4678] loop1: detected capacity change from 0 to 8 [ 101.600902][ T4672] loop0: detected capacity change from 0 to 4096 [ 101.659906][ T4679] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.836118][ T4690] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 102.945630][ T4692] loop2: detected capacity change from 0 to 16 [ 103.016123][ T4692] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.230072][ T4694] loop1: detected capacity change from 0 to 128 [ 103.249114][ T4692] autofs4:pid:4692:autofs_fill_super: called with bogus options [ 103.569308][ T4701] loop3: detected capacity change from 0 to 4096 [ 103.610374][ T4705] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 104.434645][ T4717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.82'. [ 105.771734][ T4728] loop2: detected capacity change from 0 to 128 [ 105.817895][ T4728] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 105.861670][ T4728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.084251][ T4730] netlink: 'syz.2.86': attribute type 22 has an invalid length. [ 106.092883][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 106.125233][ T4730] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.135972][ T4730] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.146093][ T4730] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.158479][ T4730] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.182522][ T4730] netlink: 'syz.2.86': attribute type 22 has an invalid length. [ 106.195298][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 107.378812][ T4732] loop2: detected capacity change from 0 to 2048 [ 107.446409][ T4732] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 107.508130][ T4732] NILFS (loop2): mounting unchecked fs [ 107.617574][ T4381] udevd[4381]: incorrect nilfs2 checksum on /dev/loop2 [ 107.639656][ T4732] NILFS (loop2): recovery complete [ 107.667011][ T4738] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.747835][ T4739] loop4: detected capacity change from 0 to 1024 [ 108.136865][ T4745] loop1: detected capacity change from 0 to 1024 [ 108.186643][ T4732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.267805][ T4732] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.296007][ T26] audit: type=1800 audit(1754035047.165:2): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 108.346154][ T4732] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 108.381459][ T4732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.397314][ T4732] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.408372][ T4749] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 108.769401][ T26] audit: type=1800 audit(1754035047.635:3): pid=4746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.103275][ T4732] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 109.883496][ T4732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.891948][ T26] audit: type=1800 audit(1754035048.755:4): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.87" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.960530][ T4732] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.003595][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.022983][ T4732] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 110.036053][ T4732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.043275][ T4732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.049565][ T4732] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 110.289409][ T4753] hfsplus: b-tree write err: -5, ino 4 [ 110.322393][ T4380] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 110.442495][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.632594][ T4466] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 111.722847][ T4774] loop1: detected capacity change from 0 to 16 [ 111.758037][ T4775] netlink: 'syz.3.95': attribute type 1 has an invalid length. [ 111.776640][ T4774] erofs: (device loop1): mounted with root inode @ nid 36. [ 111.980995][ T4774] autofs4:pid:4774:autofs_fill_super: called with bogus options [ 112.219385][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.227960][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.234839][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 112.565290][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 112.765113][ T4380] usb 5-1: device descriptor read/all, error -71 [ 112.886214][ T11] hfsplus: b-tree write err: -5, ino 4 [ 112.900288][ T4787] loop3: detected capacity change from 0 to 128 [ 112.961859][ T4787] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 112.996657][ T4784] loop1: detected capacity change from 0 to 4096 [ 113.033082][ T4788] loop2: detected capacity change from 0 to 4096 [ 113.055757][ T4787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.897392][ T4793] netlink: 'syz.3.100': attribute type 22 has an invalid length. [ 113.905528][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 113.936626][ T4793] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.947967][ T4793] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.957327][ T4793] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.966367][ T4793] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.994235][ T4793] netlink: 'syz.3.100': attribute type 22 has an invalid length. [ 114.002783][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 114.322550][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 114.328753][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 116.338143][ T4818] loop0: detected capacity change from 0 to 2048 [ 116.371087][ T4818] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.463124][ T4818] NILFS (loop0): mounting unchecked fs [ 116.541621][ T4818] NILFS (loop0): recovery complete [ 116.581756][ T4821] loop1: detected capacity change from 0 to 16 [ 116.590120][ T4823] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.467986][ T4821] erofs: (device loop1): mounted with root inode @ nid 36. [ 117.603661][ T26] audit: type=1800 audit(1754035056.475:5): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.107" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 117.677514][ T4821] autofs4:pid:4821:autofs_fill_super: called with bogus options [ 117.794619][ T4818] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.801922][ T4830] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 117.825467][ T4818] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.865900][ T26] audit: type=1800 audit(1754035056.615:6): pid=4827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.107" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 117.890390][ T4818] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 117.897723][ T26] audit: type=1800 audit(1754035056.695:7): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.107" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 117.927288][ T4818] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.941648][ T4818] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.952609][ T4818] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 117.960718][ T4818] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.973779][ T4818] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.986076][ T4818] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 117.995119][ T4818] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.009073][ T4818] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 118.016865][ T4818] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 118.035084][ T4830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.068013][ T4838] loop3: detected capacity change from 0 to 128 [ 118.390879][ T4846] loop2: detected capacity change from 0 to 128 [ 118.414595][ T4841] loop0: detected capacity change from 0 to 4096 [ 118.447994][ T4846] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 118.454221][ T4845] loop1: detected capacity change from 0 to 1024 [ 118.547785][ T4846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.092461][ T4468] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.614936][ T4851] netlink: 'syz.2.115': attribute type 22 has an invalid length. [ 119.672475][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 119.683049][ T4468] usb 2-1: config 2 has an invalid interface number: 219 but max is 0 [ 119.694923][ T4468] usb 2-1: config 2 has no interface number 0 [ 119.702114][ T4468] usb 2-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 119.716691][ T4468] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.733161][ T4468] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 119.842463][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.486177][ T4468] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 120.572513][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.579890][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.586424][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.603938][ T4468] pac7311: probe of 2-1:2.219 failed with error -71 [ 120.664526][ T4851] netlink: 'syz.2.115': attribute type 22 has an invalid length. [ 120.687655][ T4851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 120.757218][ T4468] usb 2-1: USB disconnect, device number 2 [ 121.061422][ T4856] loop2: detected capacity change from 0 to 2048 [ 121.226580][ T4753] hfsplus: b-tree write err: -5, ino 4 [ 121.942364][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 121.967895][ T4862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 122.702060][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 122.708714][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 122.858712][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 123.875353][ T4883] loop0: detected capacity change from 0 to 16 [ 123.921151][ T4885] loop2: detected capacity change from 0 to 2048 [ 123.938757][ T4885] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.956319][ T4885] NILFS (loop2): mounting unchecked fs [ 123.976020][ T4885] NILFS (loop2): recovery complete [ 123.988607][ T4883] erofs: (device loop0): mounted with root inode @ nid 36. [ 123.994488][ T4886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.309364][ T4890] autofs4:pid:4890:autofs_fill_super: called with bogus options [ 124.457079][ T4889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.463243][ T26] audit: type=1800 audit(1754035063.325:8): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 124.539328][ T4889] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.594308][ T4889] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 124.607271][ T4889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.615559][ T4889] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.626793][ T4889] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 124.644334][ T4889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.843995][ T26] audit: type=1800 audit(1754035063.495:9): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 124.908759][ T4889] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.915533][ T4889] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 124.925545][ T4889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.933342][ T4889] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 124.940992][ T4889] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 125.125520][ T26] audit: type=1800 audit(1754035063.825:10): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 125.518806][ T4900] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 125.632982][ T4900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.715149][ T4904] loop2: detected capacity change from 0 to 4096 [ 125.726686][ T4906] loop3: detected capacity change from 0 to 128 [ 125.927411][ T4906] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 126.538645][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.643490][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.755697][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.815814][ T4906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.962471][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.675083][ T4917] netlink: 'syz.3.128': attribute type 22 has an invalid length. [ 127.683469][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 127.701543][ T4917] netlink: 'syz.3.128': attribute type 22 has an invalid length. [ 127.709487][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 127.976490][ T4919] loop0: detected capacity change from 0 to 2048 [ 128.089441][ T4922] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.360809][ T4926] loop3: detected capacity change from 0 to 1024 [ 128.582512][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 128.844045][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 128.853227][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 129.102799][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 129.374358][ T4934] loop0: detected capacity change from 0 to 16 [ 129.418295][ T4934] erofs: (device loop0): mounted with root inode @ nid 36. [ 129.942936][ T4940] autofs4:pid:4940:autofs_fill_super: called with bogus options [ 129.955056][ T41] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 130.230623][ T4952] loop1: detected capacity change from 0 to 1024 [ 130.358758][ T41] usb 4-1: config 2 has an invalid interface number: 219 but max is 0 [ 130.382050][ T41] usb 4-1: config 2 has no interface number 0 [ 130.382460][ T4953] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 130.390263][ T41] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 130.415943][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.556792][ T41] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 130.677432][ T4956] loop0: detected capacity change from 0 to 4096 [ 130.786081][ T41] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 130.801939][ T41] pac7311: probe of 4-1:2.219 failed with error -71 [ 130.833865][ T41] usb 4-1: USB disconnect, device number 2 [ 131.790130][ T4752] hfsplus: b-tree write err: -5, ino 4 [ 132.594467][ T4972] loop2: detected capacity change from 0 to 128 [ 132.769416][ T4972] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 133.422730][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.460097][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.649908][ T4753] hfsplus: b-tree write err: -5, ino 4 [ 134.507441][ T4972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'. [ 134.578520][ T4993] loop1: detected capacity change from 0 to 16 [ 134.809125][ T4993] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.157881][ T5001] autofs4:pid:5001:autofs_fill_super: called with bogus options [ 135.950301][ T5012] loop4: detected capacity change from 0 to 1024 [ 136.653314][ T5017] loop1: detected capacity change from 0 to 2048 [ 136.755267][ T5017] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 138.669617][ T5017] NILFS (loop1): mounting unchecked fs [ 138.882440][ T41] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 139.407099][ T5017] NILFS (loop1): recovery complete [ 139.711237][ T41] usb 5-1: device descriptor read/all, error -71 [ 140.225436][ T5017] NILFS (loop1): error -4 creating segctord thread [ 140.294312][ T4751] hfsplus: b-tree write err: -5, ino 4 [ 140.448010][ T5032] loop2: detected capacity change from 0 to 2048 [ 140.526733][ T5035] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.002404][ T41] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.212391][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 141.221360][ T41] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 141.244974][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.264228][ T41] usb 5-1: Product: syz [ 141.268459][ T41] usb 5-1: Manufacturer: syz [ 141.282057][ T41] usb 5-1: SerialNumber: syz [ 141.294937][ T41] usb 5-1: config 0 descriptor?? [ 141.510331][ T41] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 141.545722][ T5048] loop0: detected capacity change from 0 to 16 [ 141.596521][ T5048] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.841500][ T5051] autofs4:pid:5051:autofs_fill_super: called with bogus options [ 142.019669][ T5056] loop3: detected capacity change from 0 to 64 [ 142.716454][ T5060] loop0: detected capacity change from 0 to 4096 [ 142.998010][ T41] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.071625][ T41] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 143.186261][ T41] usb 5-1: media controller created [ 143.528253][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.685159][ T41] dvb_usb_rtl28xxu 5-1:0.0: unknown tuner MAX3543 [ 143.811269][ T5066] loop0: detected capacity change from 0 to 1024 [ 143.876357][ T41] usb 5-1: USB disconnect, device number 6 [ 144.759787][ T5075] loop4: detected capacity change from 0 to 2048 [ 144.768370][ T5058] loop3: detected capacity change from 0 to 32768 [ 144.833449][ T5075] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.837944][ T5077] loop1: detected capacity change from 0 to 512 [ 144.850166][ T5075] NILFS (loop4): mounting unchecked fs [ 144.878447][ T5058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.168 (5058) [ 144.891808][ T5077] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.920575][ T5075] NILFS (loop4): recovery complete [ 144.939637][ T5058] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.959464][ T5077] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.174: inline data xattr refers to an external xattr inode [ 144.972655][ T5058] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 144.993662][ T5077] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.174: couldn't read orphan inode 17 (err -117) [ 145.002453][ T5080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.008003][ T4333] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 145.067719][ T5058] BTRFS info (device loop3): disabling tree log [ 145.077151][ T5058] BTRFS info (device loop3): allowing degraded mounts [ 145.088660][ T5058] BTRFS info (device loop3): force zlib compression, level 3 [ 145.102795][ T5058] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 145.117705][ T5058] BTRFS info (device loop3): use zstd compression, level 3 [ 145.142146][ T5058] BTRFS info (device loop3): force clearing of disk cache [ 145.165427][ T5077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.185431][ T26] audit: type=1800 audit(1754035084.055:11): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 145.214556][ T5058] BTRFS info (device loop3): max_inline at 4096 [ 145.217357][ T4333] usb 1-1: config 2 has an invalid interface number: 219 but max is 0 [ 145.221192][ T5058] BTRFS info (device loop3): using free space tree [ 145.221706][ T5075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.253893][ T4333] usb 1-1: config 2 has no interface number 0 [ 145.261585][ T4333] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 145.304619][ T5075] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 145.316331][ T5075] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 145.326528][ T5075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.337592][ T5075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.346674][ T5075] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 145.357309][ T5075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.365659][ T5075] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.372616][ T5075] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 145.407277][ T4333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.418017][ T5075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.425359][ T26] audit: type=1800 audit(1754035084.205:12): pid=5081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 145.448520][ T5075] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 145.455057][ T5075] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 145.534568][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 145.575055][ T4333] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 145.693833][ T26] audit: type=1800 audit(1754035084.495:13): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.173" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 145.698385][ T5062] loop2: detected capacity change from 0 to 40427 [ 145.727309][ T5058] BTRFS error (device loop3): open_ctree failed: -12 [ 145.742426][ T4333] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 145.768863][ T4854] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (4854) [ 145.778659][ T4333] pac7311: probe of 1-1:2.219 failed with error -71 [ 145.932504][ T4333] usb 1-1: USB disconnect, device number 4 [ 146.912746][ T66] hfsplus: b-tree write err: -5, ino 4 [ 147.282595][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.309210][ T5126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 147.362392][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.386815][ T5126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 147.442511][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 147.442588][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.675000][ T5130] loop3: detected capacity change from 0 to 4096 [ 147.944123][ T5135] loop0: detected capacity change from 0 to 2048 [ 148.343262][ T5138] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 149.412422][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 149.442443][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 149.553898][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 149.554248][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 150.824769][ T5156] input: syz1 as /devices/virtual/input/input8 [ 150.906967][ T4333] kernel read not supported for file /bus/input/devices (pid: 4333 comm: kworker/1:8) [ 152.040917][ T5164] loop3: detected capacity change from 0 to 1024 [ 152.692576][ T4374] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 152.918620][ T4374] usb 4-1: config 2 has an invalid interface number: 219 but max is 0 [ 152.939647][ T4374] usb 4-1: config 2 has no interface number 0 [ 153.010278][ T4374] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 153.028149][ T4374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.084973][ T4374] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 153.224398][ T5175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.194'. [ 153.267118][ T5177] loop2: detected capacity change from 0 to 128 [ 153.287724][ T4374] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 153.314301][ T4374] pac7311: probe of 4-1:2.219 failed with error -71 [ 153.346511][ T5175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 153.398689][ T4374] usb 4-1: USB disconnect, device number 3 [ 153.724438][ T5184] loop4: detected capacity change from 0 to 1024 [ 153.935070][ T5185] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 154.291025][ T5182] loop1: detected capacity change from 0 to 2048 [ 154.305039][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 154.422591][ T5187] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.703370][ T40] hfsplus: b-tree write err: -5, ino 4 [ 155.542192][ T5198] loop1: detected capacity change from 0 to 16 [ 155.673319][ T5198] erofs: (device loop1): mounted with root inode @ nid 36. [ 156.513934][ T5208] loop3: detected capacity change from 0 to 16 [ 156.526937][ T4469] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 156.561385][ T5208] erofs: (device loop3): mounted with root inode @ nid 36. [ 156.764728][ T4469] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.876842][ T5213] autofs4:pid:5213:autofs_fill_super: called with bogus options [ 157.446015][ T4469] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 158.117216][ T4469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.127507][ T4469] usb 3-1: config 0 descriptor?? [ 158.141655][ T4469] usb 3-1: can't set config #0, error -71 [ 158.149397][ T4469] usb 3-1: USB disconnect, device number 2 [ 158.274841][ T5219] ufs: You didn't specify the type of your ufs filesystem [ 158.274841][ T5219] [ 158.274841][ T5219] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 158.274841][ T5219] [ 158.274841][ T5219] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 158.376294][ T5206] autofs4:pid:5206:autofs_fill_super: called with bogus options [ 158.409202][ T5219] ufs: ufstype=old is supported read-only [ 158.431893][ T5226] loop2: detected capacity change from 0 to 256 [ 158.452873][ T5219] ufs: ufs_fill_super(): bad magic number [ 158.708062][ T5229] loop3: detected capacity change from 0 to 8 [ 159.390613][ T26] audit: type=1800 audit(1754035098.255:14): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.209" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 159.681596][ T5237] loop1: detected capacity change from 0 to 128 [ 160.028475][ T5241] loop3: detected capacity change from 0 to 2048 [ 160.145412][ T5244] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.637709][ T5258] loop1: detected capacity change from 0 to 32768 [ 161.644959][ T5258] XFS: attr2 mount option is deprecated. [ 161.770583][ T5258] XFS (loop1): Mounting V5 Filesystem [ 161.824356][ T4374] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 161.842660][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 161.881045][ T5258] XFS (loop1): Ending clean mount [ 161.899665][ T5258] XFS (loop1): Quotacheck needed: Please wait. [ 161.978850][ T5258] XFS (loop1): Quotacheck: Done. [ 162.122335][ T4374] usb 3-1: config 0 has no interfaces? [ 162.130906][ T4374] usb 3-1: string descriptor 0 read error: -22 [ 162.153690][ T4374] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 162.812404][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.852873][ T4374] usb 3-1: config 0 descriptor?? [ 162.865957][ T4268] XFS (loop1): Unmounting Filesystem [ 162.949729][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.958945][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.056472][ T5278] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 163.096524][ T5275] loop4: detected capacity change from 0 to 128 [ 163.099411][ T7] usb 3-1: USB disconnect, device number 3 [ 163.300049][ T5278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.310877][ T5283] syz.4.220: attempt to access beyond end of device [ 163.310877][ T5283] loop4: rw=2049, sector=145, nr_sectors = 176 limit=128 [ 163.542391][ T4374] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 163.549684][ T5285] loop3: detected capacity change from 0 to 8 [ 163.762876][ T26] audit: type=1800 audit(1754035102.635:15): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.222" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 163.785898][ T46] kworker/u4:3: attempt to access beyond end of device [ 163.785898][ T46] loop4: rw=1, sector=145, nr_sectors = 176 limit=128 [ 163.794419][ T4374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.832371][ T4374] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 163.969134][ T5290] loop2: detected capacity change from 0 to 1024 [ 164.016107][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.057509][ T4374] usb 2-1: config 0 descriptor?? [ 164.083038][ T5292] loop4: detected capacity change from 0 to 2048 [ 164.707765][ T5295] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.963158][ T4466] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 165.164223][ T4466] usb 3-1: config 2 has an invalid interface number: 219 but max is 0 [ 165.241946][ T4466] usb 3-1: config 2 has no interface number 0 [ 165.864136][ T4466] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 165.912784][ T4466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.387967][ T4466] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 166.403126][ T4466] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 166.411809][ T4466] pac7311: probe of 3-1:2.219 failed with error -71 [ 167.442136][ T4466] usb 3-1: USB disconnect, device number 4 [ 167.452609][ T4374] usbhid 2-1:0.0: can't add hid device: -71 [ 167.458625][ T4374] usbhid: probe of 2-1:0.0 failed with error -71 [ 167.476325][ T4374] usb 2-1: USB disconnect, device number 3 [ 167.635844][ T5315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 167.695364][ T5315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 167.938410][ T5320] loop1: detected capacity change from 0 to 1024 [ 169.354102][ T9] hfsplus: b-tree write err: -5, ino 4 [ 169.358876][ T5327] loop4: detected capacity change from 0 to 4096 [ 169.379542][ T5327] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 169.950590][ T5334] loop1: detected capacity change from 0 to 4096 [ 169.965954][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 170.109911][ T4441] hfsplus: b-tree write err: -5, ino 4 [ 171.965294][ T5351] loop3: detected capacity change from 0 to 128 [ 172.162924][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 172.195214][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 173.492404][ T4374] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.751650][ T4374] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 173.788664][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.842612][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.904098][ T4374] usb 5-1: config 0 descriptor?? [ 173.995877][ T4374] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 174.082505][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 174.101017][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 174.111522][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.136746][ T7] usb 3-1: config 0 descriptor?? [ 174.159731][ T5379] loop1: detected capacity change from 0 to 2048 [ 174.161900][ T7] usb 3-1: interface 1 not found [ 174.215078][ T5379] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 174.248397][ T5379] NILFS (loop1): mounting unchecked fs [ 174.255567][ T4381] udevd[4381]: incorrect nilfs2 checksum on /dev/loop1 [ 174.279880][ T5379] NILFS (loop1): recovery complete [ 174.308035][ T5382] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.342896][ T4374] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 174.364019][ T5385] loop0: detected capacity change from 0 to 128 [ 174.415787][ T5385] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 174.423853][ T4380] usb 3-1: USB disconnect, device number 5 [ 174.461667][ T5379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.469739][ T5385] hpfs: filesystem error: improperly stopped [ 174.478309][ T5385] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.479505][ T26] audit: type=1800 audit(1754035113.345:16): pid=5386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.249" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 174.486637][ T5379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 174.517227][ T5385] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 174.528353][ T5385] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 174.534692][ T5379] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 174.546922][ T5379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.602448][ T5379] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 174.608720][ T5379] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 174.625671][ T26] audit: type=1800 audit(1754035113.495:17): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.249" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 174.665237][ T5388] capability: warning: `syz.4.246' uses deprecated v2 capabilities in a way that may be insecure [ 174.810348][ T5379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.816790][ T5379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 174.823202][ T5379] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 174.830808][ T5379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 174.837212][ T5379] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 174.843706][ T5379] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 175.132413][ T4374] gspca_cpia1: usb_control_msg 02, error -71 [ 175.160958][ T5394] netlink: 'syz.1.252': attribute type 22 has an invalid length. [ 175.169838][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 175.184606][ T4374] gspca_cpia1: usb_control_msg 05, error -71 [ 175.206535][ T5394] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.215402][ T5394] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.224353][ T5394] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.233147][ T5394] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.250822][ T5394] netlink: 'syz.1.252': attribute type 22 has an invalid length. [ 175.259113][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 175.281779][ T4374] cpia1 5-1:0.0: unexpected systemstate: 00 [ 175.380807][ T4374] usb 5-1: USB disconnect, device number 7 [ 175.815553][ T5397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.254'. [ 175.899486][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 175.988843][ T5395] loop0: detected capacity change from 0 to 4096 [ 176.882746][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.884325][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.927987][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.934641][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.369934][ T5407] loop4: detected capacity change from 0 to 16 [ 177.380813][ T5407] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.601978][ T5410] loop1: detected capacity change from 0 to 2048 [ 177.729302][ T5418] autofs4:pid:5418:autofs_fill_super: called with bogus options [ 178.263504][ T5410] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 178.308150][ T5410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.758666][ T5426] loop0: detected capacity change from 0 to 2048 [ 178.800105][ T5426] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.818061][ T5426] NILFS (loop0): mounting unchecked fs [ 178.840611][ T4381] udevd[4381]: incorrect nilfs2 checksum on /dev/loop0 [ 178.871378][ T5426] NILFS (loop0): recovery complete [ 178.885885][ T5428] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.962888][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 178.969159][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 178.972502][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 178.975302][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 179.011483][ T5426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.144256][ T26] audit: type=1800 audit(1754035118.015:18): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.262" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 179.152115][ T5426] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.292545][ T5426] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 179.359993][ T5426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.377519][ T5426] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 179.396839][ T5426] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 180.018092][ T5426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.026629][ T5426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.034045][ T5426] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 180.041956][ T5426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 180.048479][ T5426] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 180.054976][ T5426] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 180.455944][ T26] audit: type=1800 audit(1754035119.325:19): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.262" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 181.052494][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.087918][ T5443] loop0: detected capacity change from 0 to 1024 [ 181.323191][ T5443] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.362393][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.984158][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 182.082482][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 182.233315][ T5458] loop2: detected capacity change from 0 to 128 [ 182.396275][ T5456] loop4: detected capacity change from 0 to 4096 [ 182.402849][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.138724][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 183.442509][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 184.349074][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 184.701116][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 185.686079][ T5493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.692188][ T5493] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 185.757448][ T5493] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 185.788593][ T5493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.818936][ T5493] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.825347][ T5493] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 185.837908][ T5493] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 185.845081][ T5493] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.869124][ T5493] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 185.880810][ T5493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.894940][ T5493] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.908292][ T5493] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 186.169140][ T5500] loop4: detected capacity change from 0 to 2048 [ 186.313025][ T5501] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.522771][ T5491] loop0: detected capacity change from 0 to 40427 [ 187.547786][ T5491] F2FS-fs (loop0): build fault injection attr: rate: 25, type: 0x3ffff [ 187.561497][ T5491] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe [ 187.612961][ T5491] F2FS-fs (loop0): invalid crc value [ 187.644812][ T5491] F2FS-fs (loop0) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_segment_manager+0x58a4/0x7160 [ 187.672362][ T5491] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 187.762425][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.843019][ T4269] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.849155][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.922409][ T4269] Bluetooth: hci4: command 0x0c1a tx timeout [ 189.049443][ T5527] sctp: [Deprecated]: syz.1.287 (pid 5527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.049443][ T5527] Use struct sctp_sack_info instead [ 189.155507][ T5527] loop1: detected capacity change from 0 to 4096 [ 189.732887][ T5527] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 189.821399][ T5534] loop0: detected capacity change from 0 to 2048 [ 189.843118][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 189.856922][ T5534] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 189.932453][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 189.938521][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 190.002463][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 190.043871][ T5534] NILFS (loop0): mounting unchecked fs [ 190.106501][ T5538] loop4: detected capacity change from 0 to 164 [ 190.168258][ T5538] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 190.202082][ T5538] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 190.219725][ T5538] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 190.609449][ T5534] NILFS (loop0): recovery complete [ 190.705598][ T5543] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.896854][ T26] audit: type=1800 audit(1754035129.765:20): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 191.352871][ T26] audit: type=1800 audit(1754035129.845:21): pid=5549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 191.406846][ T5551] loop4: detected capacity change from 0 to 2048 [ 191.416606][ T5534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.427485][ T5534] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 191.438356][ T5551] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 191.450237][ T5534] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 191.459020][ T5534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.465367][ T5551] NILFS (loop4): mounting unchecked fs [ 191.472981][ T5534] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 191.483892][ T5534] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 191.522060][ T5534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.539812][ T5551] NILFS (loop4): recovery complete [ 191.549716][ T5534] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.723137][ T5556] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.737718][ T5534] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 191.752592][ T5534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.761502][ T5534] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 191.779855][ T5534] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 192.132750][ T26] audit: type=1800 audit(1754035130.875:22): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.293" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 192.751098][ T26] audit: type=1800 audit(1754035131.365:23): pid=5560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.293" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 193.095265][ T26] audit: type=1800 audit(1754035131.955:24): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.293" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 193.163771][ T5551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.190406][ T5551] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.201754][ T5551] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 193.222049][ T5551] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.236863][ T5551] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.261209][ T5551] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 193.284651][ T5551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 193.300408][ T5551] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 193.312614][ T1715] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.326198][ T5551] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 193.338057][ T5551] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 193.349165][ T5551] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 193.356439][ T5551] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 193.360647][ T5566] loop0: detected capacity change from 0 to 4096 [ 193.502394][ T1715] usb 2-1: Using ep0 maxpacket: 16 [ 193.526149][ T1715] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 193.568923][ T1715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.587475][ T1715] usb 2-1: Product: syz [ 193.591745][ T1715] usb 2-1: Manufacturer: syz [ 193.598110][ T5569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 193.617272][ T1715] usb 2-1: SerialNumber: syz [ 193.643216][ T1715] usb 2-1: config 0 descriptor?? [ 193.662896][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 193.855891][ T5571] loop4: detected capacity change from 0 to 4096 [ 194.064465][ T1715] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 194.139133][ T1715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.186169][ T1715] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 194.276435][ T5553] dtv5100: wlen = 0, aborting. [ 194.426075][ T1715] usb 2-1: media controller created [ 194.546132][ T5564] loop3: detected capacity change from 0 to 40427 [ 194.610699][ T5564] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 194.671549][ T1715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.690719][ T5564] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 194.726044][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.733008][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.759739][ T5564] F2FS-fs (loop3): invalid crc value [ 194.801866][ T5564] F2FS-fs (loop3): Found nat_bits in checkpoint [ 194.865050][ T1715] zl10353_read_register: readreg error (reg=127, ret==0) [ 194.902382][ T1715] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 194.940934][ T1715] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 194.963704][ T5564] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 194.996948][ T1715] usb 2-1: USB disconnect, device number 4 [ 195.002017][ T5564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 195.112931][ T1715] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 195.212406][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 195.282380][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 195.372421][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 195.378490][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 195.466797][ T5592] loop1: detected capacity change from 0 to 16 [ 196.021309][ T5592] erofs: (device loop1): mounted with root inode @ nid 36. [ 196.031432][ T5564] syz.3.296 (5564): drop_caches: 2 [ 196.946683][ T5600] loop1: detected capacity change from 0 to 2048 [ 197.040512][ T5600] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.092439][ T5600] NILFS (loop1): mounting unchecked fs [ 197.219677][ T5604] loop0: detected capacity change from 0 to 128 [ 197.292473][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.372790][ T4282] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.442745][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.442821][ T4282] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.542070][ T5600] NILFS (loop1): recovery complete [ 197.822718][ T5605] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.951595][ T26] audit: type=1800 audit(1754035136.815:25): pid=5610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 198.300312][ T26] audit: type=1800 audit(1754035136.905:26): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.307" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 198.332858][ T5600] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.371177][ T5600] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 198.498390][ T5600] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 198.514739][ T5600] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.542207][ T5600] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 198.583626][ T5600] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 198.599388][ T5617] netlink: 4264 bytes leftover after parsing attributes in process `syz.4.310'. [ 198.609002][ T5600] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.615808][ T5600] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 198.631283][ T5600] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 198.649168][ T5600] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.668433][ T5600] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.701753][ T5600] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 198.718028][ T5618] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 198.757674][ T5618] device syz_tun entered promiscuous mode [ 198.838214][ T5618] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 198.870439][ T5621] loop4: detected capacity change from 0 to 1024 [ 199.052202][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 199.837951][ T5631] loop2: detected capacity change from 0 to 1024 [ 199.940775][ T5631] hfsplus: session requires an argument [ 200.402346][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.652430][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.658568][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.696601][ T5631] hfsplus: unable to parse mount options [ 200.737577][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 200.806206][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 200.904644][ T5636] device hsr0 entered promiscuous mode [ 200.917500][ T5636] device macvlan2 entered promiscuous mode [ 201.228772][ T5640] loop1: detected capacity change from 0 to 16 [ 201.252666][ T5640] erofs: (device loop1): mounted with root inode @ nid 36. [ 202.215708][ T5638] loop4: detected capacity change from 0 to 4096 [ 202.240312][ T5644] loop2: detected capacity change from 0 to 1024 [ 202.487860][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 202.722528][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 202.728936][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 202.772430][ T4374] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 202.802605][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 203.028447][ T4374] usb 3-1: config 2 has an invalid interface number: 219 but max is 0 [ 203.062317][ T4374] usb 3-1: config 2 has no interface number 0 [ 203.068562][ T4374] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 203.102404][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.165237][ T4374] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 203.371412][ T4374] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 203.402440][ T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 203.418195][ T4374] pac7311: probe of 3-1:2.219 failed with error -71 [ 203.483375][ T4374] usb 3-1: USB disconnect, device number 6 [ 203.636163][ T14] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 203.661649][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.716943][ T14] usb 2-1: config 0 descriptor?? [ 203.987092][ T71] hfsplus: b-tree write err: -5, ino 4 [ 204.173482][ T14] ath6kl: Unsupported hardware version: 0x0 [ 204.189744][ T5663] loop2: detected capacity change from 0 to 2048 [ 204.200084][ T14] ath6kl: Failed to init ath6kl core: -22 [ 204.223004][ T5663] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 204.252475][ T5663] NILFS (loop2): mounting unchecked fs [ 204.306587][ T14] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 204.307524][ T5663] NILFS (loop2): recovery complete [ 204.328916][ T5666] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.397008][ T14] usb 2-1: USB disconnect, device number 5 [ 204.428994][ T5663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.472619][ T5663] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.483393][ T5663] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 204.486126][ T26] audit: type=1800 audit(1754035143.355:27): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 204.522439][ T5663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.553657][ T5663] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.622944][ T5663] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 204.631739][ T5663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.638352][ T5663] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.644917][ T5663] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 204.661374][ T26] audit: type=1800 audit(1754035143.525:28): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 204.690070][ T5663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.696501][ T5663] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 204.703487][ T5663] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 205.039387][ T5672] loop3: detected capacity change from 0 to 1024 [ 205.225273][ T5672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 205.269673][ T5672] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.344236][ T5672] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 3: comm syz.3.325: lblock 3 mapped to illegal pblock 3 (length 13) [ 205.385981][ T5679] loop4: detected capacity change from 0 to 256 [ 205.463482][ T5679] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.481042][ T5672] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 205.586658][ T5679] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.112703][ T5672] EXT4-fs (loop3): This should not happen!! Data will be lost [ 206.112703][ T5672] [ 206.249785][ T5681] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.325: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.397697][ T5681] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: block 3: comm syz.3.325: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.458094][ T5686] loop2: detected capacity change from 0 to 512 [ 206.482376][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.503032][ T5686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.573294][ T5688] loop1: detected capacity change from 0 to 65 [ 206.594666][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.606852][ T5688] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 206.642509][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 206.722400][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 206.937747][ T5686] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #17: comm syz.2.328: inline data xattr refers to an external xattr inode [ 207.196835][ T5686] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.328: couldn't read orphan inode 17 (err -117) [ 207.213055][ T5686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.248087][ T5694] loop4: detected capacity change from 0 to 16 [ 207.324343][ T5694] erofs: (device loop4): mounted with root inode @ nid 36. [ 207.357661][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 208.296445][ T5700] loop1: detected capacity change from 0 to 2048 [ 208.371322][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 208.389529][ T5704] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.562370][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 208.585826][ T5708] loop0: detected capacity change from 0 to 4096 [ 208.596202][ T5712] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 208.619697][ T5711] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 208.642461][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 208.693358][ T5712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.702929][ T5711] netlink: 12844 bytes leftover after parsing attributes in process `syz.1.337'. [ 208.723071][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 208.802443][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 208.885972][ T5717] loop2: detected capacity change from 0 to 1024 [ 208.941456][ T5717] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 208.962413][ T5717] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 208.971940][ T5717] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.339: Failed to acquire dquot type 0 [ 209.094643][ T5717] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 209.150370][ T5717] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.339: corrupted inode contents [ 209.210733][ T5717] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #13: comm syz.2.339: mark_inode_dirty error [ 209.243025][ T5717] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.339: corrupted inode contents [ 209.286933][ T5717] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.339: mark_inode_dirty error [ 209.343224][ T5717] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.339: corrupted inode contents [ 209.397768][ T5717] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 209.448369][ T5717] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.339: corrupted inode contents [ 209.475032][ T5717] EXT4-fs error (device loop2): ext4_truncate:4312: inode #13: comm syz.2.339: mark_inode_dirty error [ 209.504915][ T5717] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 209.532847][ T5717] EXT4-fs (loop2): 1 truncate cleaned up [ 209.549218][ T5717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.559968][ T5728] loop1: detected capacity change from 0 to 4096 [ 209.679856][ T5717] EXT4-fs: Ignoring removed orlov option [ 209.724859][ T5717] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 209.740648][ T5735] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.820332][ T5717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.903280][ T5717] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 210.784194][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 210.903058][ T5742] loop4: detected capacity change from 0 to 4096 [ 212.520690][ T5758] netlink: 'syz.4.350': attribute type 1 has an invalid length. [ 212.688659][ T5762] loop2: detected capacity change from 0 to 4096 [ 212.698621][ T5758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.836921][ T5764] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.277358][ T5774] netlink: 'syz.0.355': attribute type 1 has an invalid length. [ 213.510700][ T5782] loop2: detected capacity change from 0 to 16 [ 213.705516][ T5782] erofs: (device loop2): mounted with root inode @ nid 36. [ 214.852351][ T4380] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 215.062460][ T4380] usb 1-1: Using ep0 maxpacket: 8 [ 215.082467][ T4380] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 215.194051][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.329510][ T4380] usb 1-1: config 0 has no interface number 0 [ 215.365943][ T4380] usb 1-1: config 0 interface 52 has no altsetting 0 [ 215.369645][ T5767] loop4: detected capacity change from 0 to 32768 [ 215.391217][ T4380] usb 1-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice= 8.00 [ 215.421803][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=184 [ 215.440329][ T4380] usb 1-1: SerialNumber: syz [ 215.503920][ T4380] usb 1-1: config 0 descriptor?? [ 215.589776][ T5805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'. [ 215.629595][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 215.637112][ T26] audit: type=1800 audit(1754035154.505:29): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.352" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 215.829043][ T5810] loop2: detected capacity change from 0 to 4096 [ 215.965991][ T4380] usb 1-1: USB disconnect, device number 5 [ 216.330904][ T5820] loop4: detected capacity change from 0 to 4096 [ 216.647560][ T5823] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 216.794270][ T5825] loop0: detected capacity change from 0 to 64 [ 217.063555][ T5825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.369'. [ 217.603500][ T4266] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 217.642624][ T4266] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 218.976036][ T5841] loop1: detected capacity change from 0 to 16 [ 219.133179][ T5841] erofs: (device loop1): mounted with root inode @ nid 36. [ 219.251668][ T5843] loop0: detected capacity change from 0 to 4096 [ 220.444300][ T5857] lo speed is unknown, defaulting to 1000 [ 220.452585][ T5857] lo speed is unknown, defaulting to 1000 [ 220.472518][ T5857] lo speed is unknown, defaulting to 1000 [ 220.503781][ T5857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 220.540536][ T5857] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 220.690376][ T5857] lo speed is unknown, defaulting to 1000 [ 220.703905][ T5857] lo speed is unknown, defaulting to 1000 [ 220.716690][ T5857] lo speed is unknown, defaulting to 1000 [ 220.727867][ T5857] lo speed is unknown, defaulting to 1000 [ 220.738608][ T5857] lo speed is unknown, defaulting to 1000 [ 221.336056][ T5867] loop3: detected capacity change from 0 to 256 [ 222.530149][ T5873] loop4: detected capacity change from 0 to 16 [ 222.742246][ C1] sched: RT throttling activated [ 223.156784][ T5873] erofs: (device loop4): erofs_read_inode: unsupported i_format 31 of nid 36 [ 223.580848][ T4381] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.252412][ T4466] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 226.487707][ T4466] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.566117][ T4466] usb 4-1: config 0 interface 0 has no altsetting 0 [ 226.678954][ T4466] usb 4-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 226.811296][ T4466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.039729][ T4466] usb 4-1: config 0 descriptor?? [ 227.413279][ T5887] loop2: detected capacity change from 0 to 2048 [ 227.443759][ T5888] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.659390][ T4466] logitech-djreceiver 0003:046D:C52F.0001: hidraw0: USB HID v8.00 Device [HID 046d:c52f] on usb-dummy_hcd.3-1/input0 [ 227.985420][ T4466] usb 4-1: USB disconnect, device number 4 [ 228.077229][ T5899] tmpfs: Bad value for 'mpol' [ 228.178531][ T5896] fido_id[5896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 228.199677][ T5903] loop4: detected capacity change from 0 to 16 [ 228.210740][ T5903] erofs: (device loop4): mounted with root inode @ nid 36. [ 228.422717][ T5908] autofs4:pid:5908:autofs_fill_super: called with bogus options [ 229.157258][ T5909] syz.2.390 uses obsolete (PF_INET,SOCK_PACKET) [ 229.178467][ T5909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.390'. [ 230.778742][ T5905] loop0: detected capacity change from 0 to 1024 [ 230.943694][ T5912] loop4: detected capacity change from 0 to 128 [ 231.224886][ T5916] capability: warning: `syz.3.394' uses 32-bit capabilities (legacy support in use) [ 231.954682][ T46] hfsplus: b-tree write err: -5, ino 4 [ 233.111614][ T5927] loop3: detected capacity change from 0 to 2048 [ 233.212608][ T5927] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 233.293571][ T5927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.357146][ T5929] loop2: detected capacity change from 0 to 2048 [ 233.366798][ T5927] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 233.447178][ T5936] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.092903][ T5954] loop0: detected capacity change from 0 to 8 [ 235.283692][ T26] audit: type=1800 audit(1754035174.155:30): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.404" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 235.342412][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 236.171038][ T7] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 236.181761][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.202512][ T7] usb 4-1: Product: syz [ 236.207178][ T7] usb 4-1: Manufacturer: syz [ 236.217385][ T7] usb 4-1: SerialNumber: syz [ 236.249137][ T7] usb 4-1: config 0 descriptor?? [ 236.268220][ T7] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 236.343669][ T5963] loop4: detected capacity change from 0 to 128 [ 236.422525][ T5963] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 236.519933][ T5963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.714527][ T5970] netlink: 'syz.4.407': attribute type 22 has an invalid length. [ 236.724457][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 236.768280][ T5970] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.778325][ T5970] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.787528][ T5970] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.797746][ T5970] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.817218][ T5970] netlink: 'syz.4.407': attribute type 22 has an invalid length. [ 236.826479][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 236.902934][ T7] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 237.180294][ T7] sq905c: probe of 4-1:0.0 failed with error -71 [ 237.426007][ T7] usb 4-1: USB disconnect, device number 5 [ 237.864691][ T5978] loop2: detected capacity change from 0 to 2048 [ 237.893849][ T5979] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.917646][ T6001] loop3: detected capacity change from 0 to 16 [ 239.927937][ T6001] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.139797][ T6004] autofs4:pid:6004:autofs_fill_super: called with bogus options [ 244.112313][ T3599] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 244.191577][ T6035] loop1: detected capacity change from 0 to 64 [ 245.204655][ T6033] loop3: detected capacity change from 0 to 2048 [ 245.233475][ T3599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.270205][ T3599] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 245.280019][ T3599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.299090][ T3599] usb 5-1: config 0 descriptor?? [ 245.462114][ T6042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 246.133869][ T3599] usbhid 5-1:0.0: can't add hid device: -71 [ 246.149172][ T3599] usbhid: probe of 5-1:0.0 failed with error -71 [ 246.277595][ T3599] usb 5-1: USB disconnect, device number 8 [ 246.385296][ T6049] loop3: detected capacity change from 0 to 512 [ 246.438203][ T6048] loop0: detected capacity change from 0 to 1024 [ 246.539748][ T6048] ------------[ cut here ]------------ [ 246.545859][ T6048] kernel BUG at fs/hfsplus/xattr.c:175! [ 246.627695][ T6048] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 246.633835][ T6048] CPU: 0 PID: 6048 Comm: syz.0.429 Not tainted 6.1.147-syzkaller #0 [ 246.641834][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.646244][ T6052] loop4: detected capacity change from 0 to 1024 [ 246.652332][ T6048] RIP: 0010:__hfsplus_setxattr+0x1f47/0x1f60 [ 246.652366][ T6048] Code: 8b 8a ff e9 61 fb ff ff e8 26 6e 3a ff 4c 89 e7 48 c7 c6 c0 98 a2 8a e8 17 fa 74 ff 0f 0b e8 10 6e 3a ff 0f 0b e8 09 6e 3a ff <0f> 0b e8 02 6e 3a ff e9 76 f1 ff ff 66 2e 0f 1f 84 00 00 00 00 00 [ 246.652385][ T6048] RSP: 0018:ffffc90004a574e0 EFLAGS: 00010283 [ 246.690633][ T6048] RAX: ffffffff824658d7 RBX: 1ffff9200094aeb8 RCX: 0000000000080000 [ 246.698621][ T6048] RDX: ffffc90005001000 RSI: 000000000000acd5 RDI: 000000000000acd6 [ 246.706657][ T6048] RBP: ffffc90004a57998 R08: dffffc0000000000 R09: ffffed100aa13708 [ 246.714651][ T6048] R10: ffffed100aa13708 R11: 1ffff1100aa13707 R12: dffffc0000000000 [ 246.722672][ T6048] R13: 0000000000000000 R14: 0000000000010000 R15: ffff88805509b7b0 [ 246.730647][ T6048] FS: 00007f0950e1e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 246.739573][ T6048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.746153][ T6048] CR2: 00007efd02594000 CR3: 0000000055629000 CR4: 00000000003506f0 [ 246.754122][ T6048] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.762535][ T6048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.770736][ T6048] Call Trace: [ 246.774026][ T6048] [ 246.777142][ T6048] ? lock_chain_count+0x20/0x20 [ 246.782010][ T6048] ? hfsplus_delete_all_attrs+0x3a0/0x3a0 [ 246.787736][ T6048] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 246.793653][ T6048] ? lockdep_hardirqs_on+0x94/0x140 [ 246.798848][ T6048] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 246.804742][ T6048] ? stack_trace_save+0x98/0xe0 [ 246.809597][ T6048] hfsplus_setxattr+0xd8/0x120 [ 246.814355][ T6048] hfsplus_security_setxattr+0x3c/0x50 [ 246.819899][ T6048] ? hfsplus_security_getxattr+0x40/0x40 [ 246.824295][ T6049] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.825514][ T6048] __vfs_setxattr+0x3e0/0x420 [ 246.825544][ T6048] __vfs_setxattr_noperm+0x129/0x5e0 [ 246.842324][ T6048] vfs_setxattr+0x168/0x2f0 [ 246.846851][ T6048] ? xattr_permission+0x500/0x500 [ 246.851900][ T6048] ? _copy_from_user+0x10b/0x170 [ 246.856848][ T6048] ? setxattr+0x243/0x2d0 [ 246.861269][ T6048] setxattr+0x2b2/0x2d0 [ 246.865427][ T6048] ? path_setxattr+0x280/0x280 [ 246.870186][ T6048] ? __mnt_want_write+0x21f/0x2a0 [ 246.875203][ T6048] path_setxattr+0x142/0x280 [ 246.879803][ T6048] ? simple_xattr_list_add+0xf0/0xf0 [ 246.885090][ T6048] ? lock_chain_count+0x20/0x20 [ 246.889961][ T6048] __x64_sys_setxattr+0xb7/0xd0 [ 246.894846][ T6048] do_syscall_64+0x4c/0xa0 [ 246.899272][ T6048] ? clear_bhb_loop+0x60/0xb0 [ 246.903953][ T6048] ? clear_bhb_loop+0x60/0xb0 [ 246.908721][ T6048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.914620][ T6048] RIP: 0033:0x7f094ff8eb69 [ 246.919042][ T6048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.938728][ T6048] RSP: 002b:00007f0950e1e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 246.947249][ T6048] RAX: ffffffffffffffda RBX: 00007f09501b5fa0 RCX: 00007f094ff8eb69 [ 246.955222][ T6048] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000200000000340 [ 246.963188][ T6048] RBP: 00007f0950011df1 R08: 0000000000000001 R09: 0000000000000000 [ 246.971238][ T6048] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 246.979207][ T6048] R13: 0000000000000000 R14: 00007f09501b5fa0 R15: 00007ffcbc0c6bd8 [ 246.987357][ T6048] [ 246.990407][ T6048] Modules linked in: [ 246.997436][ T6052] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 247.036596][ T6049] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.068892][ T4752] hfsplus: b-tree write err: -5, ino 4 [ 247.085426][ T6048] ---[ end trace 0000000000000000 ]--- [ 247.106078][ T6048] RIP: 0010:__hfsplus_setxattr+0x1f47/0x1f60 [ 247.113027][ T6048] Code: 8b 8a ff e9 61 fb ff ff e8 26 6e 3a ff 4c 89 e7 48 c7 c6 c0 98 a2 8a e8 17 fa 74 ff 0f 0b e8 10 6e 3a ff 0f 0b e8 09 6e 3a ff <0f> 0b e8 02 6e 3a ff e9 76 f1 ff ff 66 2e 0f 1f 84 00 00 00 00 00 [ 247.133342][ T6048] RSP: 0018:ffffc90004a574e0 EFLAGS: 00010283 [ 247.139665][ T6049] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.428: bad orphan inode 131083 [ 247.139977][ T6048] RAX: ffffffff824658d7 RBX: 1ffff9200094aeb8 RCX: 0000000000080000 [ 247.158488][ T6049] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.159326][ T6048] RDX: ffffc90005001000 RSI: 000000000000acd5 RDI: 000000000000acd6 [ 247.175274][ T6048] RBP: ffffc90004a57998 R08: dffffc0000000000 R09: ffffed100aa13708 [ 247.183344][ T6048] R10: ffffed100aa13708 R11: 1ffff1100aa13707 R12: dffffc0000000000 [ 247.191347][ T6048] R13: 0000000000000000 R14: 0000000000010000 R15: ffff88805509b7b0 [ 247.199945][ T6048] FS: 00007f0950e1e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 247.211998][ T6048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.218823][ T6048] CR2: 00007f49f6f812f8 CR3: 0000000055629000 CR4: 00000000003506f0 [ 247.227039][ T6048] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.235233][ T6048] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.243278][ T6048] Kernel panic - not syncing: Fatal exception [ 247.249741][ T6048] Kernel Offset: disabled [ 247.254060][ T6048] Rebooting in 86400 seconds..