last executing test programs: 41.514447251s ago: executing program 1 (id=314): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 41.291991074s ago: executing program 1 (id=316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x28, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) 41.037789268s ago: executing program 1 (id=319): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) 40.750951405s ago: executing program 1 (id=321): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 40.114760932s ago: executing program 1 (id=329): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x1000, 0x1001000}) 39.387681813s ago: executing program 1 (id=332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/4, 0x4}], 0x1) 39.10438994s ago: executing program 32 (id=332): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/4, 0x4}], 0x1) 4.621493484s ago: executing program 2 (id=628): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) close(r0) lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 4.366972239s ago: executing program 2 (id=629): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x18, 0x8, 0x2, 0x1, {0x1c, 0x20, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1, 0x2600}}, 0x7}, 0x1, 0x0, 0x0, 0x44040}, 0x6080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.212469588s ago: executing program 2 (id=631): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x34, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x10000}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x28}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004080}, 0x2000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 4.023105209s ago: executing program 2 (id=634): r0 = io_uring_setup(0x5, &(0x7f00000002c0)) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0xf4c, '\x00', @p_u16=0x0}}) readv(r1, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.879569657s ago: executing program 0 (id=636): r0 = syz_io_uring_setup(0x5f7b, &(0x7f00000003c0)={0x0, 0xe0d2, 0x800, 0x0, 0x8000000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/186, 0xb7}], 0x200}, 0x0, 0x40000103}) sendmmsg(r3, &(0x7f000000a180)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001a00)="31c061ac5c194b0d9a4cf248c38a774e9028aeb92123e5bc2a13e8f73ca4f4bc", 0x20}], 0x1}}], 0x1, 0x800) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) 3.791871852s ago: executing program 2 (id=637): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0xe2ac1acafd15c67d, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212000100000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.698300377s ago: executing program 0 (id=638): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x3ff) write$ppp(r0, &(0x7f0000000100)="5fa5", 0x2) 3.583933494s ago: executing program 0 (id=642): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0xb, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x110, 0x3, &(0x7f0000000100), 0x4) 3.461007481s ago: executing program 3 (id=644): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x1a1101, 0x8) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 3.30741805s ago: executing program 3 (id=647): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x100000001) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 2.974899799s ago: executing program 3 (id=651): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) close(0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) 2.903748293s ago: executing program 4 (id=652): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 2.814430568s ago: executing program 3 (id=653): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 1.891772051s ago: executing program 4 (id=658): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xfffffffffffffff5, 0x1) 1.866545293s ago: executing program 3 (id=659): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.73831999s ago: executing program 4 (id=660): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x1c, r0, 0xf21, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20448d5}, 0x24008840) 1.522982062s ago: executing program 4 (id=662): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000640)={[{@nodiscard}, {@noblock_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noblock_validity}, {@noblock_validity}, {@minixdf}, {@nolazytime}, {@nouid32}, {@noauto_da_alloc}]}, 0x0, 0x515, &(0x7f0000000c40)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x2c) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 1.472140935s ago: executing program 5 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x28000600) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x60000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffff9, 0xe000, 0x4, r2, 0x11}) 1.433328327s ago: executing program 3 (id=664): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/1278, @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$eJzs3EtvG1UUAOA7TpPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKKhJ48R9fJ80PjPX12fusUaRzkzkADy15tPff03CxXAmhDATQjifhHw/KbbcSgwvhBAuhRBK/9iSYvzvgbkQwtkQwsVR8pgzKd768srw8vIvb/323Q+nT5376tsfp1c1MG0vhhC6m3F/pxtj1orxTjFeG7bz2L0+LGJ8o3u3OM5i3Gmu5xl2auN5tTxea8X52eZ2fxQ3OrX6KLbaG/n4Zi+esD9sjfPkH7hT28qPG831PLb7WR5be3Fdu3vxb9tefxDzNIp8H+fpw2AwjnG8uduM9WzezWO9NyjGY96s0dwdxWERi9OFetZp5OtYP8o3/Wh7u93b3k2Hza1+O+uly5XqS5XqjXJ1K2s0B83r5Vq3ceN6utDqjKaVB81ad6WVZa1Os1LPuovpQqteL1er6cLN5nq71kur1cq1ytXy8mKxdyV9/fb7aaeRLoziq+3e9ly70083sq00fmIxXapce3kxvVxN311dS9feuXVrde29D29+cPuV1TdfKybdt6x0Yenq0lK5erW8VF18cI1zx13/6AQHrH9wlPo/KxZ9iPqTQ10NcEguMIBDu6//D/p/4OFdPOC8x73/D5Ps/0ctlf7/wf1v6ej9/5H634fs/ydW/wTufzxq9cOR6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5aP81+/Ua+Mx+PzxXjF4qh54rjJIRQCiH8+R9mwty+nDNFntn/mT/7rzV8n4Q8w+gcp4vtbAhhpdj+ePa4vwUAAAB4cn3zyaUvYrceX+anvSBOUrxpUzr/0YTyJSGE2fmfJ5StNHp5fkLJ8uv7VNidULb8BtYzE0oWb7mdmlS2A5kZh08v3BvMC0piKJ3ocgAAgBMxsy+cbBcCAADASfp82gtgOpIwfpQ5fhac/+f9vUebZ/a9BwAAADyGkmkvAAAAADh2ef/v9/8AAADgyRZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnbvJWRqI4wD8b/uWDz8iMe69ijs4hkdw6VI4gJfgCHgFL8AZcOcRDDW0E5IqJMZObSTPk3TKtOQ3M9DNTJMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMX2rD5svn95+HppzbobJMxoAAADgllN92LQfVl39ebr+Ml16nepFRJQR8fvMfRlVzHqZVcqpb36/aepf+vA1ok24tDFPx7OIeJeO6tXYvwIAAAA8ruNuv+5m612xmrpD/Evdok354n2mvCIi6tX3TGnlpXiTKax9vp/iY6a0dgFrkSmsW3J7un1vlquRvqp3SiNZbNs/sa2V47QLAABMqT8TuDMLAQAA4AF8mLoDTKO4Ftf3jPPulF4ILns1AAAA4D9UTN0BAAAAYHTt/H/4/n9NM/b+fz/s/wcAAAB/rdv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDGd6sPmuNuv793f/mHOuRkm34gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Mn+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xtFFQcA/Ls7O0tBibWaHqoGEw96kXZBkKMeNI0H/wSTpmyxuogCByGNphc9mZ5J1OjRGBNNvfE/cKYJF7xx6KEmnjXzqww/lA2pM0v7+SRv3nd2J+993+yG8O2bFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKttvx4vdMk6yw3QRV6/d3Flbzvqt+/rM9Y1bc1nL4s6jJvr6rb1PfrK9VD85Nls7+bL5ZAAAADgYkqq+j4jb6eZi1nen8/o/ra7Jav4fjhZxVc/fX/dv7axNlW/NVfX/77/deX53oulinmzQldXRcOHBVHr/0xIn3jOPvKKX3/n8Zy9J/oF031t/bjvN72fnmxs33unn4aEmsgUAHsfxqi+D6v9DWT9oMzEADoxerfCu6v9kut2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqwvR5PVXEnIuZ6d+PM1s7a8sP66xu35qp2+tq1jfqY2RBpRKysjoZpg2uZdJeuXP14aTQaXmw+OBYR7c1eBh+McU3Ef19Tfj2jvVX8e9CZjDRaDbrl5zMp+exlUH339n7klv5BAgBgH0qORlmPp2VdfzvdXMxe68xE/P3jvfX/q7U4xqz/73x4+mZ9xnr9P2hqmRPv2+8izn86f+nK1ddXzy+dG54bfvLGicGbg5NnTp06M5/dq4X5legOF9pOFAAAgCdYv2z1+r878+D+/5FaHGPW/599P/iiPlei/n+ou5t+bWcCAABwEPV3o2df/uvPTv2tqaLr9Pvx+dLlyxcHxXH3/ERxbDzlx3CobPX6P5lpOysAAACgCdvrnXv2/8/W4hhz///pn174pT5mEhGHIy5ExPD48oXR2eaWM9Ga+EXlfKJ+2ysFAACgLYfLVuz/9/L9/zR//r+7+8hDNyJee6WIq791NU79n7z71c/1uerP/59sbokTqTtb3I+8n43ozbadEQAAAPvZVNmyYv+PdHPxo1+PvN/3/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4JAAD//880Myg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) clock_gettime(0x0, &(0x7f00000000c0)) 1.430573648s ago: executing program 2 (id=665): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r1, 0x0, 0x0) 1.172901552s ago: executing program 5 (id=666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) 883.532669ms ago: executing program 5 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}}, 0x0) 748.636877ms ago: executing program 4 (id=668): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc41, &(0x7f0000002280)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb5nZ19b+a9mdWMRPDNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4g9euXT6THrYrQAAHqQrI189fdb9HwAeK9f8+x8AAAAAAAAAAAAAAA66FEU8GSlmr6ymsep1R/1yu+/2ndGh4a2rHUlVzUNV+fKrfubsufNfemHwQjcvt6c/oP5e+2y8NnLtUuPlmVuzc5Pz85MTjdHp9vjMxOSOt7Db+pudrA5A49brtydu3JhvnH3+3Ia37wy83//E8YGLg8+eeqZbdnRoeHhkvUi9t3ztvhvSsd0Ij8NRxKlI8dz3fppaEVHE7o9F/cGe+82OVJ04WXVidGi46shUuzW9UL55tXsgiohGT6Vm9xhtfS6i1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9m+uLImqR4jvHVtP1iDjUPQ5frAYGb9+OYh/7uANlOxt9EUvFI3DODrD+KOLVSPGzd07EeL7OVNeaL0S8WuYPIt4q86WIVH4wzke8t8XniEdTLYr4y/L8X1xNE9X1oHtdufy1xlemb8z0lO1eVz7i/eGeK8VDuj8c2ZQPxgG/NtWjiFZ1xV9N9/+XHQAAAAAAAAAAAAAAAAD22pEo4jOR4pX/+JNqXHFU49KPXRz8w4Ff7R0z/vSHbKcs+3xELBY7G5N7OA8MvJqupvSQxxI/zupRxJ/m8X/f+gj1ju5jmwAAAAAAAAAAAAAAAAAAAB5PRfwkUrz47om0FL1zirenbzauta5PdWaF7c79250zfW1tba2ROtnsZC3y68WcSzmXc67kjCLXz9nMOZZzMedSzuWcKznjUK6fs5lzLOdizqWcyzlXckYt18/ZzDmWczHnUs7lnCs544DM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HFSRBG/iBTf/sZqihQRzYix6ORy/8NuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FfD9SNP6oeXddLSJS9X/HifLb+WgeLvOT0Rws86VoXsrZqrLW/NZDaD+705eK+HGk6K+/ffeE5/Pf13l192MQb31z/dVna5081H1z4P3+J44fuzg4/BtPb7ectmrAycvt6dt3GqNDw8MjPatree+f7Fk3kPdb7E3XiYj5N958vTU1NTl3/wvlR2AX1R+hhVR7XHp6Xwv1iDgAzdjDhagdiGY8nL7zGCjv/+9Fit999z+7N/zO/b8ev9J5dfcOHz//s/X7/4ubN7TD+39tc718/y/v6Vvd/5/sWfdi/ttIXy2ivnBrtu94RH3+jTdPtW+1bk7enJw+f/r0lwcHv3zudN/hiPqN9tRkz9KeHC4AAAAAAAAAAAAAAACABycV8fuRovXj1dSIiDvVeK2Bi4PPnnrmUByqxlttGLf92si1S42XZ27Nzk3Oz09ONEan2+MzE5M73V29Gu41OjS8L535UEf2uf1H6i/PzL4x1775xwtbvn+0fun6/MJca3zrt+NIFBHN3jUnqwaPDg1XjZ5qt6arqle3HEz/0fWlIv4rUoyfb6TP53V5/P/mEf4bxv8vbt7QPo3//0TPunKfKRXx80jxO3/1dHy+aufRuOeY5XJ/FylOXvhcLheHy3LdNnSeK9AZGViW/b9I8U+/2Fi2Ox7yyfWyZ3Z8YB8R5fk/Fim+/xffjd/M6zY+/2Hr839084b26fw/1bPu6IbnFey66+TzfypSvPTk2/Fbed0HPf+j++yNE7nw3edz7NP5/1TPuoG839/em64DAAAAAAAAAAA80vpSEX8fKX44XEsv5HU7+f2/ic0b2qff//p0z7qJvZmv6EMXdn1QAQAAAOCA6EtF/CRS3Fx4++4Y6o3jv3vGf/7e+vjPobTp3ernfL9WPTdgL3/+12sg73ds990GAAAAAAAAAAAAAAAAAACAAyWlIl7I86mPVeP5J7adT305UrzyP8/lcul4Wa47D/xA9b1+ZWb61KWpqZnx1kLr+tRkY2S2NT5Z1n0qUqz+7edy3aKaX70733xnjvf1udjnIsXwP3TLduZi785N/tR62TNl2U9Eiv/+x41lu/NYf2q97Nmy7N9Eiq//y9Zlj6+XPVeW/W6k+NHXG92yR8uy3eejfnq97PPjM8U+nBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97a+nuWP48/39fz8vKW9/sme9/kzvVPP8D1fz/2y3fz/z/1XMFFrfbKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfDylKOLNSDF7ZTUt95evO+qX29O374wODW9d7Uiqah6qypdf9TNnz53/0guDF7r5wfX32mfitZFrlxovz9yanZucn5+caIxOt8dnJiZ3vIXd1t/sZHUAGrdevz1x48Z84+zz5za8fWfg/f4njg9cHHz21DPdsqNDw8MjPWVqffe993ukbdYfjiL+OlI8972fph/2RxSx+2PxIZ+d/Xak6sTJqhOjQ8NVR6baremF8s2r3QNRRDR6KjW7x+gBnItdaUYsVgvV96Hhxshsa651fWqycbU1t9BeaM9MX02d1pb9aUQRF1LEUkSs9N+7ub4o4vVI8Z1jq+lf+yMOdY/DF6+MfPX02e3bUexXB3embGejL2KpeATO2QHWH0X8c6T42Tsn4t/6I2rR+YovRLxa5g8i3orO+U7lB+N8xHtbfI54NNWiiP8vz//F1fROf3k9KP88lZfNy19rfGX6xkxP2e515ZG/PzxIB/zaVI8iflRd8VfTv/tzDQAAAAAAAAAAAAAAAHCAFPHrkeLFd0+kanxwNfZvZLY1156+2bjWuj7VGdbXHfvXHTO9tra21kidbOYcy7nYydQtt5zXr+SMItfP2SyzvrY2ll8v5lzKuZxzJWccyvVzNnOO5VzMuZRzOedKzqjl+jmbOcdyLuZcyrmccyVnHJCxewAAAAAAAAAAAAAAAAAAwMdLUf2X4tvfWE1r/Z35pceik8vmA/3Y+2UAAAD//+ic894=") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid}]}) 692.90596ms ago: executing program 5 (id=669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x160) 603.384686ms ago: executing program 0 (id=670): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x5d) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485}]}) 535.669439ms ago: executing program 5 (id=671): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000ac0)={r1, 0xd0}, &(0x7f0000000b00)=0x8) listen(r0, 0x2) 378.937368ms ago: executing program 5 (id=672): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xf, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file0\x00', 0x2200000, &(0x7f0000000600)={[{@dax}]}, 0x1, 0xba4c, &(0x7f0000020c00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 334.621121ms ago: executing program 0 (id=673): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000011400000000005270000000000000500010500040000000000000005006f2d9e1ec5b82c0705000000490002"], 0x58}}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) 48.482848ms ago: executing program 4 (id=674): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 0s ago: executing program 0 (id=675): read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@usrjquota}, {@orlov}, {@dax_always}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000ac0)="$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") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): DRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.823955][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.838029][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.848149][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.858702][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.865854][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.882085][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.890251][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.903988][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.932365][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.939913][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.947988][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 55.954452][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 55.960761][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.969434][ T4240] Bluetooth: hci2: command 0x041b tx timeout [ 55.975750][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.985077][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 55.992322][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.002181][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.016190][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.025124][ T4240] Bluetooth: hci0: command 0x041b tx timeout [ 56.032748][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.042853][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.057958][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.066827][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.077223][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.113227][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.121766][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.131152][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.142276][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.151205][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.161024][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.169779][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.196916][ T4186] device veth0_vlan entered promiscuous mode [ 56.212464][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.223072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.232781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.242389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.251311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.260127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.270192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.278618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.296683][ T4184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.307639][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.328423][ T4188] device veth0_vlan entered promiscuous mode [ 56.343443][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.360364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.372277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.388095][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.397460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.406341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.415974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.427216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.437687][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.451206][ T4186] device veth1_vlan entered promiscuous mode [ 56.463948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.477069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.488040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.498958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.508934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.533745][ T4188] device veth1_vlan entered promiscuous mode [ 56.583012][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.594899][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.603164][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.618111][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.628278][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.636890][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.648884][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.672058][ T4188] device veth0_macvtap entered promiscuous mode [ 56.683308][ T4188] device veth1_macvtap entered promiscuous mode [ 56.692429][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.709428][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.721440][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.732990][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.742751][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.761764][ T4185] device veth0_vlan entered promiscuous mode [ 56.783411][ T4186] device veth0_macvtap entered promiscuous mode [ 56.792649][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.801371][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.810136][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.833439][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.842179][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.851725][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.861671][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.869914][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.880158][ T4186] device veth1_macvtap entered promiscuous mode [ 56.891856][ T4185] device veth1_vlan entered promiscuous mode [ 56.914920][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.922388][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.931944][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.940485][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.949687][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.958812][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.967623][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.981293][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.993063][ T4184] device veth0_vlan entered promiscuous mode [ 57.003339][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.011914][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.024439][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.035879][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.048001][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.063377][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.081762][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.091022][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.100349][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.109518][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.120707][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.129393][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.138362][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.147859][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.159232][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.169962][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.180587][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.191989][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.207806][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.217984][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.229587][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.239692][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.252645][ T4184] device veth1_vlan entered promiscuous mode [ 57.266670][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.275742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.283635][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.292656][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.302016][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.312738][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.350464][ T4185] device veth0_macvtap entered promiscuous mode [ 57.362432][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.371427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.380140][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.396102][ T4187] device veth0_vlan entered promiscuous mode [ 57.410779][ T4185] device veth1_macvtap entered promiscuous mode [ 57.438242][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.446942][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.461434][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.478759][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.502572][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.513546][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.523790][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.537763][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.549336][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.560585][ T4187] device veth1_vlan entered promiscuous mode [ 57.575023][ T4184] device veth0_macvtap entered promiscuous mode [ 57.583293][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.591712][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.600787][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.609901][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.618438][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.627578][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.657577][ T4184] device veth1_macvtap entered promiscuous mode [ 57.671021][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.681753][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.693250][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.705960][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.717150][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.729219][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.738234][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.747015][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.755736][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.796837][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.810434][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.821702][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.832670][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.842779][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.854162][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.867789][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.876326][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.885677][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.895096][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.903606][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.913651][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.922362][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.945959][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.957542][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.967526][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.978267][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.988199][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.998705][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.010013][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.024796][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.024839][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 58.033519][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.040317][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 58.055347][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.055619][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 58.064051][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.070502][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 58.092900][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.103212][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.111810][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 58.115520][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.127705][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.139269][ T4187] device veth0_macvtap entered promiscuous mode [ 58.148585][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.183039][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.196769][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.222971][ T4187] device veth1_macvtap entered promiscuous mode [ 58.231336][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.237718][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.251415][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.259795][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.262165][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.278100][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.286589][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.294604][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.384226][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.397868][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.403120][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.410195][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.429151][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.447258][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.463303][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.474023][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.485251][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.496217][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.507687][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.519422][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.531085][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.543271][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.560285][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.570430][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.581132][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.592594][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.603288][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.613393][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.623996][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.639026][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.657245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.670061][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.678239][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.687344][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.696506][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.705385][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.727415][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.737346][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.746804][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.755863][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.777382][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.789256][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.820912][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.830243][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.858157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.890978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.958061][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.978760][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.007454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.072633][ T4296] loop1: detected capacity change from 0 to 1024 [ 59.116115][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.169575][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.200103][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.205906][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.239852][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.302967][ T480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.430809][ T4296] hfsplus: xattr search failed [ 59.527995][ T4186] hfsplus: node 4:3 still has 1 user(s)! [ 59.800832][ T4294] loop4: detected capacity change from 0 to 32768 [ 59.852776][ T4294] (syz.4.5,4294,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.888653][ T4294] (syz.4.5,4294,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 59.979885][ T4294] JBD2: Ignoring recovery information on journal [ 60.052445][ T4294] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 60.074505][ T4264] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.104776][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 60.111612][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 60.129902][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 60.144660][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 60.144670][ T4319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'. [ 60.184575][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 60.306508][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 60.317756][ T4264] usb 3-1: Using ep0 maxpacket: 16 [ 60.345559][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 60.372833][ T4188] ocfs2: Unmounting device (7,4) on (node local) [ 60.438257][ T4264] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.459119][ T4264] usb 3-1: config 0 has no interfaces? [ 60.494576][ T4264] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 60.503719][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.554586][ T4264] usb 3-1: config 0 descriptor?? [ 60.876233][ T4332] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 60.913548][ T4335] loop4: detected capacity change from 0 to 1024 [ 60.932421][ T4332] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.112884][ T4341] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 61.242405][ T4344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 61.300653][ T4248] usb 3-1: USB disconnect, device number 2 [ 61.312537][ T4349] loop4: detected capacity change from 0 to 1024 [ 61.416328][ T4348] loop1: detected capacity change from 0 to 8192 [ 61.419791][ T4353] loop3: detected capacity change from 0 to 1024 [ 61.451710][ T4349] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,resgid=0x0000000000000000,min_batch_time=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resgid=0x0000000000000000,errors=remount-ro,grpid,jqfmt=vfsv0,. Quota mode: none. [ 61.453048][ T4348] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 61.514047][ T4348] REISERFS (device loop1): using ordered data mode [ 61.517076][ T4349] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.520756][ T4348] reiserfs: using flush barriers [ 61.525674][ T4359] loop0: detected capacity change from 0 to 256 [ 61.546271][ T4353] EXT4-fs (loop3): Ignoring removed orlov option [ 61.567402][ T4348] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 61.594503][ T4348] REISERFS (device loop1): checking transaction log (loop1) [ 61.611355][ T4353] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,max_dir_size_kb=0x0000000000010000,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 61.642071][ T4348] REISERFS (device loop1): Using r5 hash to sort names [ 61.651168][ T4359] ======================================================= [ 61.651168][ T4359] WARNING: The mand mount option has been deprecated and [ 61.651168][ T4359] and is ignored by this kernel. Remove the mand [ 61.651168][ T4359] option from the mount to silence this warning. [ 61.651168][ T4359] ======================================================= [ 61.701101][ T4349] syz.4.24 (4349) used greatest stack depth: 21136 bytes left [ 61.789732][ T4348] process 'syz.1.25' launched '/dev/fd/4' with NULL argv: empty string added [ 61.829051][ T4359] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 62.286781][ T4375] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.894523][ T4388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 63.323516][ T26] audit: type=1326 audit(1770032097.416:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4400 comm="syz.2.42" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c6c42ceb9 code=0x0 [ 63.344868][ C0] vkms_vblank_simulate: vblank timer overrun [ 63.548564][ T4380] loop4: detected capacity change from 0 to 32768 [ 63.703548][ T4380] XFS (loop4): Mounting V5 Filesystem [ 63.894416][ T4380] XFS (loop4): Ending clean mount [ 63.917181][ T4380] XFS (loop4): Quotacheck needed: Please wait. [ 64.001653][ T4380] XFS (loop4): Quotacheck: Done. [ 64.473057][ T4188] XFS (loop4): Unmounting Filesystem [ 64.760289][ T1109] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.810474][ T4437] Zero length message leads to an empty skb [ 65.136031][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.157741][ T4426] loop2: detected capacity change from 0 to 131072 [ 65.180324][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.231581][ T1109] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 65.267568][ T4426] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 65.276248][ T4426] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 65.288567][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.309051][ T4426] F2FS-fs (loop2): invalid crc value [ 65.330765][ T1109] usb 1-1: config 0 descriptor?? [ 65.355609][ T4426] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.429702][ T4426] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 65.437042][ T4426] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 65.541529][ T4449] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 65.600423][ T4449] netlink: 'syz.3.56': attribute type 2 has an invalid length. [ 65.635585][ T4453] 9pnet: p9_errstr2errno: server reported unknown error @cƒÿÿÿÿÿÿÿÿ [ 65.869692][ T1109] belkin 0003:1020:0006.0001: unknown main item tag 0x2 [ 65.915539][ T1109] belkin 0003:1020:0006.0001: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0 [ 66.097269][ T4459] loop1: detected capacity change from 0 to 4096 [ 66.130216][ T4191] usb 1-1: USB disconnect, device number 2 [ 66.228118][ T4459] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.296790][ T4464] fido_id[4464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 66.475741][ T4473] netlink: 104 bytes leftover after parsing attributes in process `syz.3.67'. [ 67.562241][ T4514] loop2: detected capacity change from 0 to 512 [ 67.852042][ T4526] Illegal XDP return value 4294967274, expect packet loss! [ 68.275566][ T4547] loop1: detected capacity change from 0 to 256 [ 68.282130][ T4486] loop4: detected capacity change from 0 to 32768 [ 68.315223][ T4486] xfs: Unknown parameter 'smackfstransmute' [ 68.342798][ T4544] loop0: detected capacity change from 0 to 4096 [ 68.461630][ T4544] NILFS (loop0): invalid segment: Checksum error in segment payload [ 68.511097][ T4544] NILFS (loop0): trying rollback from an earlier position [ 68.629332][ T4544] NILFS (loop0): recovery complete [ 68.681791][ T4555] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.891640][ T4557] loop1: detected capacity change from 0 to 2048 [ 69.039419][ T4557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.588590][ T4577] loop2: detected capacity change from 0 to 2048 [ 69.701070][ T4577] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 69.785529][ T4577] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 69.872257][ T4577] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 69.982330][ T4577] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.982330][ T4577] [ 70.012761][ T4577] EXT4-fs (loop2): Total free blocks count 0 [ 70.044917][ T4241] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.099178][ T4577] EXT4-fs (loop2): Free/Dirty block details [ 70.156764][ T4577] EXT4-fs (loop2): free_blocks=2415919504 [ 70.162736][ T4577] EXT4-fs (loop2): dirty_blocks=48 [ 70.172308][ T4604] loop3: detected capacity change from 0 to 2048 [ 70.180579][ T4608] loop0: detected capacity change from 0 to 64 [ 70.188664][ T4609] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 70.188664][ T4609] The task syz.1.115 (4609) triggered the difference, watch for misbehavior. [ 70.232920][ T4604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.258158][ T4577] EXT4-fs (loop2): Block reservation details [ 70.267564][ T4608] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 70.320174][ T4241] usb 5-1: Using ep0 maxpacket: 8 [ 70.322413][ T4577] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 70.587913][ T4614] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 70.625230][ T4618] loop3: detected capacity change from 0 to 512 [ 70.650935][ T4241] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 70.672986][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.688307][ T4618] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 70.701503][ T4241] usb 5-1: Product: syz [ 70.721854][ T4241] usb 5-1: Manufacturer: syz [ 70.721865][ T4618] UDF-fs: Scanning with blocksize 512 failed [ 70.748358][ T4241] usb 5-1: SerialNumber: syz [ 70.760475][ T4618] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 70.762629][ T4241] usb 5-1: config 0 descriptor?? [ 70.778194][ T4618] UDF-fs: Scanning with blocksize 1024 failed [ 70.788163][ T4618] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 70.796073][ T4618] UDF-fs: Scanning with blocksize 2048 failed [ 70.802930][ T4618] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 70.821112][ T4618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.836501][ T4241] gspca_main: se401-2.14.0 probing 047d:5003 [ 70.844000][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 70.974986][ T4623] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.261033][ T4241] gspca_se401: Bayer format not supported! [ 71.315262][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.322084][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.483628][ T4639] loop3: detected capacity change from 0 to 1024 [ 71.555098][ T4641] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -11 0 [ 71.610027][ T1109] usb 5-1: USB disconnect, device number 2 [ 71.674187][ T2239] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.683373][ T4379] hfsplus: b-tree write err: -5, ino 3 [ 71.752383][ T4617] loop2: detected capacity change from 0 to 40427 [ 71.819115][ T4617] F2FS-fs (loop2): invalid crc value [ 71.857440][ T4617] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.909789][ C1] sd 0:0:1:0: tag#1447 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 71.919784][ C1] sd 0:0:1:0: tag#1447 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 71.958063][ T2239] usb 2-1: Using ep0 maxpacket: 8 [ 71.992189][ T4617] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.032967][ T4653] loop3: detected capacity change from 0 to 256 [ 72.060014][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.094869][ T4653] exfat: Deprecated parameter 'utf8' [ 72.105629][ T2239] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 72.136145][ T2239] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.153476][ T4653] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 72.193631][ T2239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.214520][ T2239] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.234025][ T2239] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.280417][ T2239] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.344397][ T2239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.411125][ T4187] attempt to access beyond end of device [ 72.411125][ T4187] loop2: rw=2049, want=45112, limit=40427 [ 72.449327][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.493284][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.544519][ T21] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 72.594469][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.644248][ T2239] usb 2-1: usb_control_msg returned -32 [ 72.650162][ T2239] usbtmc 2-1:16.0: can't read capabilities [ 72.672210][ T21] usb 1-1: config 0 descriptor?? [ 73.066184][ T4658] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 73.088289][ T2239] usb 2-1: USB disconnect, device number 2 [ 73.191498][ T21] wacom 0003:056A:030C.0002: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.0-1/input0 [ 73.289902][ T4657] loop4: detected capacity change from 0 to 32768 [ 73.459035][ T4657] XFS (loop4): Mounting V5 Filesystem [ 73.491230][ T4248] usb 1-1: USB disconnect, device number 3 [ 73.520094][ T4673] loop2: detected capacity change from 0 to 256 [ 73.536335][ T4673] exfat: Bad value for 'fmask' [ 73.618685][ T4657] XFS (loop4): Ending clean mount [ 73.637671][ T4657] XFS (loop4): Quotacheck needed: Please wait. [ 73.696232][ T4675] loop2: detected capacity change from 0 to 512 [ 73.752022][ T4657] XFS (loop4): Quotacheck: Done. [ 73.945775][ T4188] XFS (loop4): Unmounting Filesystem [ 73.993455][ T4681] loop2: detected capacity change from 0 to 256 [ 74.164453][ T4681] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.204529][ T4681] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 74.246521][ T4681] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 74.420175][ T4689] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 74.763651][ T4698] bridge0: port 3(vlan2) entered blocking state [ 74.797238][ T4698] bridge0: port 3(vlan2) entered disabled state [ 74.800978][ T4693] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh [ 74.838924][ T4698] device vlan2 entered promiscuous mode [ 74.875732][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 74.907119][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 74.942869][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 74.981049][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.008512][ T4693] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 75.026817][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.094382][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.134978][ T4693] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 75.220618][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.256041][ T4683] set_capacity_and_notify: 2 callbacks suppressed [ 75.256056][ T4683] loop0: detected capacity change from 0 to 32768 [ 75.279442][ T4693] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 75.341660][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.404776][ T4693] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 75.444537][ T4693] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 75.483858][ T4720] loop1: detected capacity change from 0 to 512 [ 75.627266][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.162: iget: bad i_size value: 38620345925642 [ 75.738559][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.162: couldn't read orphan inode 15 (err -117) [ 75.812487][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 75.893711][ T4728] loop4: detected capacity change from 0 to 256 [ 76.005426][ T155] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap [ 76.084608][ T4732] loop3: detected capacity change from 0 to 256 [ 76.091684][ T155] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 76.125597][ T155] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.125597][ T155] [ 76.145548][ T155] EXT4-fs (loop1): Total free blocks count 0 [ 76.214283][ T155] EXT4-fs (loop1): Free/Dirty block details [ 76.228858][ T155] EXT4-fs (loop1): free_blocks=0 [ 76.234033][ T155] EXT4-fs (loop1): dirty_blocks=1 [ 76.268562][ T4734] binder: 4733:4734 ioctl c0306201 2000000003c0 returned -14 [ 76.311662][ T155] EXT4-fs (loop1): Block reservation details [ 76.337250][ T155] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 76.427972][ T13] cfg80211: failed to load regulatory.db [ 76.847219][ T4757] sctp: [Deprecated]: syz.0.178 (pid 4757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 76.847219][ T4757] Use struct sctp_sack_info instead [ 77.014284][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.076728][ T2239] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 77.204238][ T4253] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.254195][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 77.293415][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.374293][ T2239] usb 3-1: Using ep0 maxpacket: 8 [ 77.374344][ T21] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 77.399523][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.416895][ T21] usb 5-1: config 0 has no interface number 0 [ 77.514405][ T2239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.544264][ T2239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.564135][ T2239] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.564373][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 77.583692][ T2239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.584416][ T21] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 77.592293][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 77.613568][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.622264][ T2239] usb 3-1: config 0 descriptor?? [ 77.632925][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.660203][ T21] usb 5-1: Product: syz [ 77.664745][ T21] usb 5-1: Manufacturer: syz [ 77.669364][ T21] usb 5-1: SerialNumber: syz [ 77.680391][ T4253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 77.725783][ T21] usb 5-1: config 0 descriptor?? [ 77.773020][ T21] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 77.780443][ T21] usb 5-1: No valid video chain found. [ 77.794367][ T13] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 77.803526][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.865796][ T4253] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 77.884187][ T4253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.892436][ T4253] usb 2-1: Product: syz [ 77.898306][ T2239] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 77.902592][ T4253] usb 2-1: Manufacturer: syz [ 77.911233][ T13] pvrusb2: Hardware description: Terratec Grabster AV400 [ 77.928504][ T4253] usb 2-1: SerialNumber: syz [ 77.941291][ T13] pvrusb2: ********** [ 77.950218][ T4253] usb 2-1: config 0 descriptor?? [ 77.970277][ T13] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 77.987070][ T13] pvrusb2: Important functionality might not be entirely working. [ 77.998089][ T13] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 78.020396][ T13] pvrusb2: ********** [ 78.035418][ T4767] loop3: detected capacity change from 0 to 32768 [ 78.038022][ T2239] usb 5-1: USB disconnect, device number 3 [ 78.140954][ T4755] iowarrior 3-1:0.0: Error -90 while submitting URB [ 78.149060][ T2421] pvrusb2: Invalid write control endpoint [ 78.215671][ T4767] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 78.229349][ T4253] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 78.279795][ T4253] usb 3-1: USB disconnect, device number 3 [ 78.371860][ T2421] pvrusb2: Invalid write control endpoint [ 78.384243][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 78.430702][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 78.448802][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 78.470213][ T2421] pvrusb2: Device being rendered inoperable [ 78.488690][ T1109] usb 2-1: USB disconnect, device number 3 [ 78.496341][ T4761] pvrusb2: Attempted to execute control transfer when device not ok [ 78.513914][ T4184] (syz-executor,4184,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 78.516787][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 78.532233][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 78.540808][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 78.541184][ T21] usb 1-1: USB disconnect, device number 4 [ 78.552113][ T2421] pvrusb2: Attached sub-driver cx25840 [ 78.574233][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 78.611427][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 78.878987][ T4787] loop2: detected capacity change from 0 to 1024 [ 78.914301][ T2239] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.926354][ T4787] EXT4-fs (loop2): Ignoring removed orlov option [ 78.966457][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 79.080180][ T4799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.188'. [ 79.091419][ T4799] netlink: 92 bytes leftover after parsing attributes in process `syz.1.188'. [ 79.214999][ T2239] usb 4-1: Using ep0 maxpacket: 16 [ 79.534302][ T2239] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 79.564017][ T2239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.650396][ T2239] usb 4-1: Product: syz [ 79.670661][ T2239] usb 4-1: Manufacturer: syz [ 79.698619][ T2239] usb 4-1: SerialNumber: syz [ 79.706614][ T4830] loop4: detected capacity change from 0 to 128 [ 79.743282][ T2239] usb 4-1: config 0 descriptor?? [ 79.805364][ T2239] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 79.851431][ T4830] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 79.882924][ T4806] loop1: detected capacity change from 0 to 32768 [ 79.900902][ T4830] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.041503][ T4806] XFS (loop1): Mounting V5 Filesystem [ 80.103988][ T1109] usb 4-1: USB disconnect, device number 2 [ 80.187220][ T4806] XFS (loop1): Ending clean mount [ 80.326699][ T4850] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 80.331949][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 80.420054][ T4186] XFS (loop1): Unmounting Filesystem [ 81.042030][ T4869] loop3: detected capacity change from 0 to 256 [ 81.151111][ T4869] exfat: Deprecated parameter 'utf8' [ 81.174896][ T4869] exfat: Deprecated parameter 'utf8' [ 81.204565][ T4869] exfat: Deprecated parameter 'utf8' [ 81.261810][ T4869] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 81.277806][ T4854] loop4: detected capacity change from 0 to 32768 [ 81.362328][ T26] audit: type=1800 audit(1770032115.456:3): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.203" name="file1" dev="loop3" ino=1048602 res=0 errno=0 [ 81.499013][ T4253] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.869387][ T4253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.883946][ T4253] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.910984][ T4253] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.970382][ T4253] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.996888][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.063645][ T4253] usb 3-1: config 0 descriptor?? [ 82.586304][ T4253] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 82.601017][ T4253] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 82.675148][ T4253] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 82.808860][ T4900] loop4: detected capacity change from 0 to 32768 [ 82.916981][ T4900] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.215 (4900) [ 82.962450][ T4900] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 82.964982][ T4253] usb 3-1: USB disconnect, device number 4 [ 82.972561][ T4900] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.987918][ T4900] BTRFS info (device loop4): use zstd compression, level 3 [ 82.995217][ T4900] BTRFS info (device loop4): using free space tree [ 83.001748][ T4900] BTRFS info (device loop4): has skinny extents [ 83.271558][ T4900] BTRFS info (device loop4): enabling ssd optimizations [ 83.865679][ T4927] loop2: detected capacity change from 0 to 16 [ 83.918988][ T4927] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 84.883797][ T4922] loop0: detected capacity change from 0 to 40427 [ 85.001648][ T4922] F2FS-fs (loop0): invalid crc value [ 85.039165][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 85.266161][ T4922] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.354022][ T4968] loop2: detected capacity change from 0 to 32768 [ 85.404853][ T4968] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.413349][ T4968] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.439074][ T4968] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 85.502051][ T4922] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 85.504851][ T4968] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 85.576644][ T4922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 85.734208][ T4253] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 85.874212][ T26] audit: type=1800 audit(1770032119.956:4): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.216" name="file3" dev="loop0" ino=14 res=0 errno=0 [ 85.906228][ T4922] attempt to access beyond end of device [ 85.906228][ T4922] loop0: rw=2049, want=45112, limit=40427 [ 86.135155][ T4253] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.168085][ T4253] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.196552][ T4253] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 86.227879][ T4253] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.344555][ T4253] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.360407][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.380380][ T4253] usb 5-1: SerialNumber: syz [ 86.543309][ T5001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.650196][ T4995] loop2: detected capacity change from 0 to 32768 [ 86.690322][ T4253] usb 5-1: 0:2 : does not exist [ 86.702908][ T4253] usb 5-1: unit 5 not found! [ 86.756195][ T4253] usb 5-1: USB disconnect, device number 4 [ 86.838192][ T4995] XFS (loop2): Mounting V5 Filesystem [ 86.988125][ T4995] XFS (loop2): Ending clean mount [ 87.106159][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.206471][ T5023] loop1: detected capacity change from 0 to 2048 [ 87.355453][ T5023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.375361][ T5023] EXT4-fs (loop1): shut down requested (2) [ 87.489571][ T4264] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 87.565259][ T4264] XFS (loop2): Unmount and run xfs_repair [ 87.571041][ T4264] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 87.612139][ T4264] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 87.661871][ T4264] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 87.681804][ T4264] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 87.691817][ T4264] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 87.731989][ T4264] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 87.748612][ T4264] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.760815][ T4264] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.773867][ T4264] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 87.789634][ T1109] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74 [ 87.853599][ T1109] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x156f/0x1b80 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 87.883084][ T1109] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 87.903769][ T4187] XFS (loop2): Unmounting Filesystem [ 88.304328][ T1109] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.304519][ T2239] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.466853][ T5065] netlink: 'syz.3.268': attribute type 6 has an invalid length. [ 88.614216][ T2239] usb 1-1: Using ep0 maxpacket: 8 [ 88.633459][ T5069] loop2: detected capacity change from 0 to 2048 [ 88.667956][ T1109] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 88.682074][ T5073] loop4: detected capacity change from 0 to 2048 [ 88.693923][ T1109] usb 2-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config [ 88.717407][ T5069] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 88.744392][ T5069] UDF-fs: Scanning with blocksize 512 failed [ 88.753079][ T1109] usb 2-1: config 0 has no interface number 0 [ 88.766593][ T1109] usb 2-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 88.777589][ T1109] usb 2-1: config 0 interface 216 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.785571][ T5069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.791256][ T1109] usb 2-1: config 0 interface 216 has no altsetting 0 [ 88.806692][ T1109] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 88.816021][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.843630][ T1109] usb 2-1: config 0 descriptor?? [ 88.884721][ T5051] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 88.906253][ T1109] usb 2-1: NFC: intf ffff888020ca3000 id ffffffff8cb52440 [ 88.984529][ T2239] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 89.003885][ T2239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.014008][ T2239] usb 1-1: Product: syz [ 89.019778][ T2239] usb 1-1: Manufacturer: syz [ 89.033282][ T2239] usb 1-1: SerialNumber: syz [ 89.034181][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.046968][ T2239] usb 1-1: config 0 descriptor?? [ 89.207762][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.223583][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.238997][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.241548][ T5080] loop4: detected capacity change from 0 to 256 [ 89.287531][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 89.332565][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.352640][ T5051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.384870][ T2239] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 89.445019][ T21] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 89.458831][ T13] usb 2-1: USB disconnect, device number 4 [ 89.471267][ T4936] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.483390][ T21] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.538123][ T21] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.556226][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.594654][ T5071] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 89.744228][ T4936] usb 3-1: Using ep0 maxpacket: 32 [ 89.876618][ T4936] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 89.890077][ T4936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.924608][ T21] usb 4-1: USB disconnect, device number 3 [ 89.930438][ T4936] usb 3-1: config 0 descriptor?? [ 90.187628][ T5097] loop4: detected capacity change from 0 to 64 [ 90.214297][ T4936] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 90.231470][ T4936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.275954][ T4936] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 90.284417][ T2239] usb write operation failed. (-71) [ 90.316696][ T4936] usb 3-1: media controller created [ 90.322407][ T2239] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.376076][ T5097] Trying to free block not in datazone [ 90.392130][ T4936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.402620][ T5097] Trying to free block not in datazone [ 90.433136][ T5101] hugetlbfs: syz.1.283 (5101): Using mlock ulimits for SHM_HUGETLB is deprecated [ 90.434725][ T2239] dvbdev: DVB: registering new adapter (Terratec H7) [ 90.481757][ T2239] usb 1-1: media controller created [ 90.524412][ T2239] usb read operation failed. (-71) [ 90.547150][ T4936] DVB: Unable to find symbol dib7000p_attach() [ 90.555101][ T2239] usb write operation failed. (-71) [ 90.563621][ T4936] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 90.579025][ T2239] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 90.610473][ T2239] usb 1-1: USB disconnect, device number 5 [ 90.779388][ T4936] rc_core: IR keymap rc-dib0700-rc5 not found [ 90.795005][ T4936] Registered IR keymap rc-empty [ 90.811423][ T4936] dvb-usb: could not initialize remote control. [ 90.829742][ T4936] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 90.862248][ T4936] usb 3-1: USB disconnect, device number 5 [ 90.943597][ T4936] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 91.466227][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.525074][ T5152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.611841][ T5152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.694497][ T5158] device syzkaller1 entered promiscuous mode [ 91.704572][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.712741][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.727271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.740697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.818492][ T5151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.904611][ T5188] bridge0: port 3(syz_tun) entered blocking state [ 92.974470][ T5188] bridge0: port 3(syz_tun) entered disabled state [ 93.052381][ T5188] device syz_tun entered promiscuous mode [ 93.085560][ T5188] bridge0: port 3(syz_tun) entered blocking state [ 93.092560][ T5188] bridge0: port 3(syz_tun) entered forwarding state [ 93.169446][ T5173] loop2: detected capacity change from 0 to 131072 [ 93.193270][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.260220][ T13] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 93.271526][ T5173] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 93.281531][ T5173] F2FS-fs (loop2): invalid crc value [ 93.297559][ T5173] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 93.359609][ T5173] F2FS-fs (loop2): recover fsync data on readonly fs [ 93.367958][ T5173] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 93.402373][ T5197] loop1: detected capacity change from 0 to 2048 [ 93.433829][ T5201] netlink: 'syz.4.323': attribute type 2 has an invalid length. [ 93.442310][ T5202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.477811][ T5197] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.528749][ T5173] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=ba0003, run fsck to fix. [ 93.658911][ T5197] overlayfs: upper fs needs to support d_type. [ 93.700008][ T5197] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 93.734435][ T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 93.764025][ T5197] overlayfs: failed to set xattr on upper [ 93.774126][ T13] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.794205][ T5197] overlayfs: ...falling back to index=off,metacopy=off. [ 93.821873][ T13] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 93.865380][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.881896][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh [ 93.884571][ T13] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 93.910410][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.940772][ T13] usb 1-1: config 0 descriptor?? [ 93.961181][ T4186] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh [ 94.271416][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.452897][ T13] hid-alps 0003:044E:120C.0004: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 94.543619][ T4186] syz-executor (4186) used greatest stack depth: 20784 bytes left [ 94.686636][ T13] usb 1-1: USB disconnect, device number 6 [ 94.751270][ T5217] fido_id[5217]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 94.998418][ T5215] loop3: detected capacity change from 0 to 32768 [ 95.147689][ T5215] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 95.147689][ T5215] [ 95.193932][ T5215] ERROR: (device loop3): remounting filesystem as read-only [ 95.609846][ T4826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.650192][ T5244] loop0: detected capacity change from 0 to 64 [ 95.766923][ T4826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.796714][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 95.909413][ T4826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.013777][ T5241] loop3: detected capacity change from 0 to 32768 [ 96.035448][ T4826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.126727][ T5241] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 96.126727][ T5241] [ 96.207795][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.215564][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.224679][ T5232] device bridge_slave_0 entered promiscuous mode [ 96.233659][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.252651][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.267879][ T5232] device bridge_slave_1 entered promiscuous mode [ 96.284420][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.295914][ T5241] ERROR: (device loop3): remounting filesystem as read-only [ 96.326273][ T5241] ERROR: (device loop3): jfs_unlink: [ 96.326273][ T5241] [ 96.354437][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.379253][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.435886][ T5260] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 96.435886][ T5260] [ 96.493880][ T5260] ERROR: (device loop3): remounting filesystem as read-only [ 96.528317][ T5232] team0: Port device team_slave_0 added [ 96.544204][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 96.563780][ T5260] xtLookup: xtSearch returned -5 [ 96.593463][ T5232] team0: Port device team_slave_1 added [ 96.656729][ T5260] syz.3.338 (5260) used greatest stack depth: 20208 bytes left [ 96.664706][ T21] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 96.696479][ T21] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.727828][ T5249] loop2: detected capacity change from 0 to 32768 [ 96.740243][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.750304][ T21] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.776495][ T5265] input: syz0 as /devices/virtual/input/input12 [ 96.781054][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.794118][ T5265] input: failed to attach handler leds to device input12, error: -6 [ 96.816264][ T21] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.834627][ T4184] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 96.834627][ T4184] [ 96.887525][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.957935][ T5270] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 96.957935][ T5270] [ 96.984446][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.014187][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.022227][ T21] usb 1-1: Product: syz [ 97.032667][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.044118][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.074862][ T5270] ERROR: (device loop2): remounting filesystem as read-only [ 97.083879][ T5270] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 97.083879][ T5270] [ 97.104226][ T21] usb 1-1: Manufacturer: syz [ 97.108860][ T21] usb 1-1: SerialNumber: syz [ 97.168988][ T5270] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 97.168988][ T5270] [ 97.184184][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.194346][ T5270] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 97.194346][ T5270] [ 97.224416][ T4253] Bluetooth: hci1: command 0x0409 tx timeout [ 97.339562][ T5232] device hsr_slave_0 entered promiscuous mode [ 97.353149][ T5270] blkno = b00, nblocks = 400 [ 97.359340][ T5270] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 97.359340][ T5270] [ 97.375961][ T5232] device hsr_slave_1 entered promiscuous mode [ 97.384806][ T4264] net_ratelimit: 4 callbacks suppressed [ 97.384821][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.432076][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.442073][ T5232] Cannot create hsr debugfs directory [ 97.447622][ T5270] blkno = b00, nblocks = 400 [ 97.452367][ T5270] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 97.452367][ T5270] [ 97.508212][ T5270] blkno = b00, nblocks = 400 [ 97.544299][ T5270] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 97.544299][ T5270] [ 97.555993][ T21] usb 1-1: USB disconnect, device number 7 [ 97.682232][ T5287] loop3: detected capacity change from 0 to 2048 [ 97.793034][ T5287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.983638][ T5232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.076963][ T5232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.116261][ T5232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.163034][ T5232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.214542][ T4936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.741957][ T5330] netlink: 3 bytes leftover after parsing attributes in process `syz.4.361'. [ 98.773500][ T5330] 0ªX¹¦À: renamed from caif0 [ 98.804548][ T5330] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 99.090075][ T4826] device hsr_slave_0 left promiscuous mode [ 99.131790][ T4826] device hsr_slave_1 left promiscuous mode [ 99.165405][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.172906][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.205990][ T4826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.235711][ T4826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.266795][ T4826] device bridge_slave_1 left promiscuous mode [ 99.278573][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.304300][ T1109] Bluetooth: hci1: command 0x041b tx timeout [ 99.350486][ T5360] loop4: detected capacity change from 0 to 512 [ 99.365769][ T4826] device bridge_slave_0 left promiscuous mode [ 99.372126][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.444804][ T4826] device veth1_macvtap left promiscuous mode [ 99.484332][ T4826] device veth0_macvtap left promiscuous mode [ 99.492751][ T5360] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 99.535091][ T4826] device veth1_vlan left promiscuous mode [ 99.541251][ T4826] device veth0_vlan left promiscuous mode [ 99.552015][ T5360] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.783031][ T5360] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 100.055020][ T4826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.147819][ T4826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.220229][ T5378] loop3: detected capacity change from 0 to 32768 [ 100.263809][ T4826] bond0 (unregistering): Released all slaves [ 100.292431][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.307780][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 100.332591][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 100.347806][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 100.362678][ T5378] JBD2: Ignoring recovery information on journal [ 100.491658][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 100.505811][ T5378] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 100.509214][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.527362][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 100.545242][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 100.672406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.706138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.719224][ T5392] loop4: detected capacity change from 0 to 1024 [ 100.759476][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.793269][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 100.803757][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.826596][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.832444][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 100.835668][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.848397][ T5378] (syz.3.379,5378,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 100.855418][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.875790][ T5378] (syz.3.379,5378,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 100.887070][ T5378] (syz.3.379,5378,0):ocfs2_quota_read:201 ERROR: status = -5 [ 100.894685][ T5378] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 100.905297][ T5378] (syz.3.379,5378,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 100.908469][ T5392] EXT4-fs (loop4): Ignoring removed oldalloc option [ 100.914291][ T5378] (syz.3.379,5378,0):ocfs2_mknod:314 ERROR: status = -5 [ 100.927694][ T5378] (syz.3.379,5378,0):ocfs2_mknod:502 ERROR: status = -5 [ 100.953567][ T5397] loop2: detected capacity change from 0 to 1024 [ 100.962225][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.979008][ T5392] EXT4-fs (loop4): Ignoring removed bh option [ 101.023982][ T5392] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.024791][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.133564][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.167806][ T145] hfsplus: b-tree write err: -5, ino 3 [ 101.196547][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.203662][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.206747][ T5392] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 101.211645][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.243199][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.288871][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.359909][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.374544][ T4184] ocfs2: Unmounting device (7,3) on (node local) [ 101.402205][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 101.409248][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.446649][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.482614][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.493913][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.585236][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.647797][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.719413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.737853][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.767523][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.977511][ T5433] loop3: detected capacity change from 0 to 512 [ 102.105034][ T5433] EXT4-fs (loop3): Ignoring removed oldalloc option [ 102.125785][ T5433] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 102.164237][ T5433] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.279600][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.294977][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.341844][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.379109][ T5433] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.388: corrupted inode contents [ 102.408986][ T5433] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #16: comm syz.3.388: mark_inode_dirty error [ 102.501139][ T5433] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.388: corrupted inode contents [ 102.544905][ T5433] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.388: mark_inode_dirty error [ 102.611507][ T5433] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.388: corrupted inode contents [ 102.676367][ T5433] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 102.710542][ T5433] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #16: comm syz.3.388: corrupted inode contents [ 102.724249][ T4929] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.751811][ T5433] EXT4-fs error (device loop3): ext4_truncate:4279: inode #16: comm syz.3.388: mark_inode_dirty error [ 102.790845][ T5433] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 102.807584][ T5424] loop0: detected capacity change from 0 to 32768 [ 102.851183][ T5433] EXT4-fs (loop3): 1 truncate cleaned up [ 102.872732][ T5433] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,oldalloc,data=journal,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 102.904262][ T5433] ext4 filesystem being mounted at /93/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.908879][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 103.004189][ T4929] usb 3-1: Using ep0 maxpacket: 16 [ 103.019969][ T5424] XFS (loop0): Mounting V5 Filesystem [ 103.116963][ T5424] XFS (loop0): Ending clean mount [ 103.170757][ T5424] XFS (loop0): Quotacheck needed: Please wait. [ 103.177435][ T4929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 103.343693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.372693][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.387515][ T5424] XFS (loop0): Quotacheck: Done. [ 103.404600][ T4929] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 103.433657][ T4929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.456032][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.462735][ T4929] usb 3-1: Product: syz [ 103.464400][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 103.476287][ T4929] usb 3-1: Manufacturer: syz [ 103.490857][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.494411][ T4929] usb 3-1: SerialNumber: syz [ 103.531716][ T5232] device veth0_vlan entered promiscuous mode [ 103.551299][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.574846][ T4929] usb 3-1: config 0 descriptor?? [ 103.575086][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.615875][ T4929] hub 3-1:0.0: bad descriptor, ignoring hub [ 103.637148][ T5232] device veth1_vlan entered promiscuous mode [ 103.644562][ T4929] hub: probe of 3-1:0.0 failed with error -5 [ 103.736538][ T5232] device veth0_macvtap entered promiscuous mode [ 103.776773][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.834844][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.843047][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.905681][ T13] usb 3-1: USB disconnect, device number 6 [ 103.973513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.015077][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.059312][ T5232] device veth1_macvtap entered promiscuous mode [ 104.139527][ T4185] XFS (loop0): Unmounting Filesystem [ 104.150270][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.216292][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.253983][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.278334][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.298093][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.309086][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.330683][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.341777][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.391418][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.437256][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.456333][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.476736][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.504593][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.523895][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.544163][ T4253] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.551865][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.572412][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.608735][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.631704][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.652294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.671179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.705297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.736449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.767244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.787657][ T5232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.811676][ T5232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.812161][ T5505] loop2: detected capacity change from 0 to 128 [ 104.839646][ T5232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.853603][ T5232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.928168][ T5505] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 105.020965][ T5505] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.055787][ T5505] ext2 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.087506][ T4253] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 105.128341][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.181300][ T4253] usb 4-1: Product: syz [ 105.214236][ T4253] usb 4-1: Manufacturer: syz [ 105.218162][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.228447][ T4253] usb 4-1: SerialNumber: syz [ 105.248045][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.255010][ T4253] usb 4-1: config 0 descriptor?? [ 105.294412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.346563][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.377322][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.438872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.762557][ T5529] netlink: 'syz.0.411': attribute type 6 has an invalid length. [ 105.784577][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 105.824551][ T5529] bond0: option use_carrier: invalid value (8) [ 105.920382][ T5533] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.000784][ T5533] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 106.084300][ T4253] mos7840 4-1:0.0: required endpoints missing [ 106.133063][ T4253] usb 4-1: USB disconnect, device number 4 [ 106.315414][ T4264] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 106.491581][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 106.685918][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.710273][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.741563][ T5561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.421'. [ 106.774000][ T5563] loop5: detected capacity change from 0 to 512 [ 106.787452][ T5561] netlink: 2 bytes leftover after parsing attributes in process `syz.2.421'. [ 106.834529][ T4264] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.859106][ T4264] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 106.882757][ T4264] usb 1-1: Manufacturer: syz [ 106.909913][ T4264] usb 1-1: config 0 descriptor?? [ 106.924369][ T13] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.949148][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.975031][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.007726][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 107.035956][ T5563] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.068460][ T5563] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.128872][ T26] audit: type=1800 audit(1770032141.226:5): pid=5563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.420" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 107.184385][ T13] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 107.213886][ T13] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 107.223118][ T13] usb 5-1: Manufacturer: syz [ 107.228507][ T2239] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.257942][ T13] usb 5-1: config 0 descriptor?? [ 107.507057][ T5601] netlink: 88 bytes leftover after parsing attributes in process `syz.5.429'. [ 107.517997][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.429'. [ 107.638979][ T2239] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.656237][ T2239] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.673276][ T2239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.700207][ T2239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 107.731647][ T13] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 107.738993][ T2239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 107.759824][ T13] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 107.782336][ T13] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 107.934290][ T2239] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.943408][ T2239] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.981633][ T5616] loop3: detected capacity change from 0 to 512 [ 107.989360][ T2239] usb 3-1: Product: syz [ 107.993572][ T2239] usb 3-1: Manufacturer: syz [ 108.037871][ T5616] EXT4-fs (loop3): 1 truncate cleaned up [ 108.054377][ T4227] usb 5-1: USB disconnect, device number 5 [ 108.065222][ T2239] cdc_wdm 3-1:1.0: skipping garbage [ 108.070471][ T2239] cdc_wdm 3-1:1.0: skipping garbage [ 108.098922][ T2239] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 108.100516][ T5616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.105141][ T2239] cdc_wdm 3-1:1.0: Unknown control protocol [ 108.124471][ T4264] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 108.138511][ T5607] loop5: detected capacity change from 0 to 40427 [ 108.167732][ T5607] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 108.178113][ T4264] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 108.201566][ T5607] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 108.222283][ T4264] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 108.232763][ T5616] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.431: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 108.243256][ T4264] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 108.281279][ T5607] F2FS-fs (loop5): invalid crc value [ 108.349020][ T5607] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 108.360765][ T4264] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 108.384346][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.391773][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.404363][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.410998][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.425072][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.431807][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.439210][ T4264] usb 1-1: USB disconnect, device number 8 [ 108.445121][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.445181][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.464123][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.470759][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.484136][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.490893][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.504195][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.510942][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.524213][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.530869][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.544134][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.550798][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.565477][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 108.572121][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 108.587501][ T5607] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 108.590303][ T4227] usb 3-1: USB disconnect, device number 7 [ 108.646665][ T5607] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 108.860473][ T5607] attempt to access beyond end of device [ 108.860473][ T5607] loop5: rw=10241, want=53256, limit=40427 [ 108.947915][ T5607] attempt to access beyond end of device [ 108.947915][ T5607] loop5: rw=2049, want=53264, limit=40427 [ 109.040821][ T5232] attempt to access beyond end of device [ 109.040821][ T5232] loop5: rw=2049, want=45104, limit=40427 [ 109.436057][ T5656] loop3: detected capacity change from 0 to 4096 [ 109.447676][ T5658] loop4: detected capacity change from 0 to 512 [ 109.454385][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 109.573644][ T5658] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 109.617521][ T5664] sctp: [Deprecated]: syz.5.439 (pid 5664) Use of int in max_burst socket option deprecated. [ 109.617521][ T5664] Use struct sctp_assoc_value instead [ 109.619104][ T5660] loop2: detected capacity change from 0 to 4096 [ 109.641291][ T5658] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.688641][ T5660] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 109.714790][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 109.875118][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.889105][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.948647][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.976842][ T5656] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 109.988725][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.019491][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.082877][ T13] usb 1-1: config 0 descriptor?? [ 110.103609][ T5673] loop5: detected capacity change from 0 to 8 [ 110.136922][ T4184] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 110.222621][ T5673] unable to read fragment index table [ 110.386924][ T5685] loop4: detected capacity change from 0 to 736 [ 110.400631][ T5673] netlink: 'syz.5.449': attribute type 2 has an invalid length. [ 110.410892][ T5673] netlink: 'syz.5.449': attribute type 2 has an invalid length. [ 110.424888][ T2239] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 110.610547][ T13] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input13 [ 110.676322][ T13] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 110.880620][ T2239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 110.900331][ T2239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 110.919825][ T2239] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 110.932528][ T2239] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 110.934354][ T4264] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.971402][ T4227] usb 1-1: USB disconnect, device number 9 [ 111.099356][ T5692] loop5: detected capacity change from 0 to 32768 [ 111.100732][ T5699] loop4: detected capacity change from 0 to 256 [ 111.124435][ T2239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.141456][ T2239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.150469][ T2239] usb 3-1: Product: syz [ 111.165914][ T5699] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 111.180184][ T2239] usb 3-1: Manufacturer: syz [ 111.220761][ T2239] usb 3-1: SerialNumber: syz [ 111.272114][ T5692] XFS (loop5): Mounting V5 Filesystem [ 111.274496][ T5675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.314332][ T4264] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 111.319866][ T2239] cdc_mbim 3-1:1.0: skipping garbage [ 111.329545][ T4264] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 111.345325][ T4264] usb 4-1: config 0 has no interfaces? [ 111.350920][ T4264] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 111.351972][ T5692] XFS (loop5): Ending clean mount [ 111.360261][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.375907][ T4264] usb 4-1: config 0 descriptor?? [ 111.483164][ T5232] XFS (loop5): Unmounting Filesystem [ 111.553914][ T5675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.562496][ T5675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.660566][ T4227] usb 4-1: USB disconnect, device number 5 [ 111.823089][ T5712] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 111.854354][ T4929] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.954296][ T5718] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.214974][ T5675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.222655][ T5675] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.238474][ T5723] loop3: detected capacity change from 0 to 2048 [ 112.254714][ T2239] cdc_mbim 3-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 112.263115][ T2239] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 112.284597][ T4929] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.298959][ T4929] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 112.309787][ T4929] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.319140][ T5723] loop3: p1 < > p3 [ 112.333369][ T4929] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 112.345006][ T5723] loop3: p3 size 134217728 extends beyond EOD, truncated [ 112.403509][ T4929] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 112.474302][ T2239] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 112.484508][ T2239] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 112.521471][ T5728] loop3: detected capacity change from 0 to 512 [ 112.545871][ T5086] udevd[5086]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 112.546939][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 112.561338][ T2239] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 7e:39:0f:5d:aa:cd [ 112.581040][ T5728] EXT4-fs (loop3): Ignoring removed oldalloc option [ 112.588280][ T4929] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.597581][ T4929] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.607525][ T4929] usb 1-1: Product: syz [ 112.621088][ T4929] usb 1-1: Manufacturer: syz [ 112.636572][ T2239] usb 3-1: USB disconnect, device number 8 [ 112.648608][ T5728] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,journal_dev=0x0000000000000008,data_err=abort,,errors=continue. Quota mode: writeback. [ 112.648951][ T2239] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 112.690156][ T5728] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.723608][ T4929] cdc_wdm 1-1:1.0: skipping garbage [ 112.730223][ T4929] cdc_wdm 1-1:1.0: skipping garbage [ 112.739374][ T4929] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 112.751914][ T4929] cdc_wdm 1-1:1.0: Unknown control protocol [ 113.154167][ T1109] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.535534][ T1109] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 113.564250][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.567194][ T5750] loop2: detected capacity change from 0 to 4096 [ 113.581786][ T1109] usb 6-1: config 0 descriptor?? [ 113.588707][ T5737] loop4: detected capacity change from 0 to 40427 [ 113.625689][ T1109] cp210x 6-1:0.0: cp210x converter detected [ 113.642420][ T5737] F2FS-fs (loop4): invalid crc value [ 113.650155][ T5737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.717159][ T5750] ntfs: volume version 3.1. [ 113.781582][ T5757] loop7: detected capacity change from 0 to 7 [ 113.789218][ T5737] F2FS-fs (loop4): Start checkpoint disabled! [ 113.832609][ T5757] Dev loop7: unable to read RDB block 7 [ 113.858080][ T5757] loop7: AHDI p1 p2 p3 [ 113.872602][ T5737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 113.879755][ T5757] loop7: partition table partially beyond EOD, truncated [ 113.900449][ T5757] loop7: p1 start 1601398130 is beyond EOD, truncated [ 113.936243][ T5757] loop7: p2 start 1702059890 is beyond EOD, truncated [ 114.041116][ T5737] attempt to access beyond end of device [ 114.041116][ T5737] loop4: rw=2049, want=45104, limit=40427 [ 114.049289][ T5735] loop5: detected capacity change from 0 to 256 [ 114.066035][ T1109] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 114.197825][ T5735] FAT-fs (loop5): Directory bread(block 64) failed [ 114.237960][ T5735] FAT-fs (loop5): Directory bread(block 65) failed [ 114.261045][ T5735] FAT-fs (loop5): Directory bread(block 66) failed [ 114.283219][ T5735] FAT-fs (loop5): Directory bread(block 67) failed [ 114.299052][ T5735] FAT-fs (loop5): Directory bread(block 68) failed [ 114.324896][ T5735] FAT-fs (loop5): Directory bread(block 69) failed [ 114.336756][ T4273] attempt to access beyond end of device [ 114.336756][ T4273] loop4: rw=2049, want=40976, limit=40427 [ 114.339571][ T5735] FAT-fs (loop5): Directory bread(block 70) failed [ 114.362286][ T5735] FAT-fs (loop5): Directory bread(block 71) failed [ 114.369279][ T5735] FAT-fs (loop5): Directory bread(block 72) failed [ 114.382639][ T5735] FAT-fs (loop5): Directory bread(block 73) failed [ 114.437696][ T5766] Invalid ELF header magic: != ELF [ 114.533376][ T1109] usb 6-1: cp210x converter now attached to ttyUSB0 [ 114.604794][ T13] usb 1-1: USB disconnect, device number 10 [ 114.766392][ T5774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.484: bg 0: block 104: invalid block bitmap [ 114.810590][ T23] usb 6-1: USB disconnect, device number 2 [ 114.848678][ T5774] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 114.860936][ T5774] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.484: invalid indirect mapped block 1 (level 1) [ 114.877430][ T5774] EXT4-fs (loop3): 1 truncate cleaned up [ 114.885818][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 114.889339][ T5774] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.907552][ T5782] Dev loop8: unable to read RDB block 8 [ 114.933908][ T5782] loop8: unable to read partition table [ 114.971075][ T5782] loop8: partition table beyond EOD, truncated [ 114.981638][ T23] cp210x 6-1:0.0: device disconnected [ 115.001280][ T5782] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 115.192880][ T5791] tipc: Started in network mode [ 115.202643][ T5793] set_capacity_and_notify: 2 callbacks suppressed [ 115.202659][ T5793] loop3: detected capacity change from 0 to 128 [ 115.225965][ T5791] tipc: Node identity ac14142f, cluster identity 4711 [ 115.233625][ T5791] tipc: New replicast peer: 0.0.0.0 [ 115.248273][ T5791] tipc: Enabled bearer , priority 10 [ 115.259493][ T5796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.488'. [ 115.276800][ T5793] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.914560][ T5816] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.499'. [ 115.924489][ T5814] loop5: detected capacity change from 0 to 1024 [ 115.995128][ T5814] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 116.032226][ T5814] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 116.087066][ T5814] EXT4-fs (loop5): journal inode is deleted [ 116.107254][ T5821] netlink: 104 bytes leftover after parsing attributes in process `syz.3.501'. [ 116.367311][ T4227] tipc: Node number set to 2886997039 [ 116.458651][ T5808] loop2: detected capacity change from 0 to 32768 [ 117.207888][ T5868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.515'. [ 117.479706][ T5874] loop2: detected capacity change from 0 to 4096 [ 117.503577][ T5874] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 117.573515][ T5874] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 117.634786][ T4929] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.712963][ T26] audit: type=1800 audit(1770032151.806:6): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 117.743101][ T4273] ntfs3: loop2: ino=1e, "file1" Internal error [ 117.753874][ T4273] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 117.818574][ T4187] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 118.044581][ T4929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.066948][ T4929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.089256][ T4929] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 118.131882][ T4929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.165588][ T4929] usb 1-1: config 0 descriptor?? [ 118.314164][ T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.591862][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 118.646209][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.669301][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.689588][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.708763][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.713610][ T5913] loop3: detected capacity change from 0 to 2048 [ 118.718883][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.737114][ T5899] loop5: detected capacity change from 0 to 32768 [ 118.742917][ T5913] UDF-fs: bad mount option "18446744073709551615ÿ" or missing value [ 118.743826][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.759667][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.779381][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.789685][ T4929] logitech 0003:046D:CA04.0008: unknown main item tag 0x0 [ 118.797890][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.815694][ T4929] logitech 0003:046D:CA04.0008: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 118.827684][ T13] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 118.838400][ T4929] logitech 0003:046D:CA04.0008: no inputs found [ 118.847929][ T5899] XFS (loop5): Mounting V5 Filesystem [ 118.849262][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.884714][ T4929] usb 1-1: USB disconnect, device number 11 [ 118.891412][ T13] usb 3-1: config 0 descriptor?? [ 118.974140][ T5899] XFS (loop5): Ending clean mount [ 119.011678][ T5899] XFS (loop5): Quotacheck needed: Please wait. [ 119.070239][ T5899] XFS (loop5): Quotacheck: Done. [ 119.080267][ T5899] XFS (loop5): Unmounting Filesystem [ 119.090498][ T5925] fido_id[5925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 119.255697][ T5930] tap0: tun_chr_ioctl cmd 1074025675 [ 119.261072][ T5930] tap0: persist enabled [ 119.267333][ T5930] tap0: tun_chr_ioctl cmd 1074025675 [ 119.272789][ T5930] tap0: persist disabled [ 119.428351][ T5938] Set syz1 is full, maxelem 5 reached [ 119.439060][ T13] wacom 0003:056A:032F.0009: hidraw0: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 119.664156][ T4936] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.703311][ T13] usb 3-1: USB disconnect, device number 9 [ 119.904938][ T5957] loop5: detected capacity change from 0 to 4096 [ 119.926600][ T5957] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 119.936599][ T4936] usb 4-1: Using ep0 maxpacket: 32 [ 119.962809][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 120.016852][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.542'. [ 120.074362][ T4936] usb 4-1: config 3 has an invalid interface number: 199 but max is 0 [ 120.092784][ T4936] usb 4-1: config 3 has no interface number 0 [ 120.099561][ T4936] usb 4-1: config 3 interface 199 has no altsetting 0 [ 120.344704][ T4936] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=68.9e [ 120.369420][ T4936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.402084][ T4936] usb 4-1: Product: syz [ 120.424184][ T4936] usb 4-1: Manufacturer: syz [ 120.434353][ T4936] usb 4-1: SerialNumber: syz [ 120.506828][ T4936] usb 4-1: bad CDC descriptors [ 120.739251][ T5936] udc-core: couldn't find an available UDC or it's busy [ 120.754319][ T5936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.766836][ T4929] usb 4-1: USB disconnect, device number 6 [ 121.003411][ T6012] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 121.020087][ T6012] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.168574][ T6019] loop5: detected capacity change from 0 to 1024 [ 121.243886][ T6019] EXT4-fs (loop5): inline encryption not supported [ 121.273835][ T6019] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.433535][ T6019] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 121.659854][ T6019] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.557: Allocating blocks 385-513 which overlap fs metadata [ 121.684213][ T4227] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 121.769344][ T6018] EXT4-fs (loop5): pa ffff888070c27a80: logic 16, phys. 129, len 24 [ 121.778334][ T6018] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 8 [ 121.841327][ T6051] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 121.910208][ T6061] loop4: detected capacity change from 0 to 128 [ 121.934326][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 122.054346][ T4227] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 122.066256][ T6061] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 122.080153][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.119534][ T4227] usb 3-1: config 0 descriptor?? [ 122.134657][ T6061] hpfs: filesystem error: improperly stopped [ 122.166693][ T6061] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 122.176502][ T6061] hpfs: You really don't want any checks? You are crazy... [ 122.197578][ T4227] gspca_main: sunplus-2.14.0 probing 041e:400b [ 122.205028][ T6061] hpfs: hpfs_map_sector(): read error [ 122.210431][ T6061] hpfs: code page support is disabled [ 122.229766][ T6074] comedi comedi0: s526: I/O port conflict (0xffffffffffffffff,64) [ 122.235041][ T6061] hpfs: hpfs_map_4sectors(): unaligned read [ 122.257974][ T6061] hpfs: hpfs_map_4sectors(): unaligned read [ 122.267761][ T6061] hpfs: filesystem error: unable to find root dir [ 122.328306][ T6061] hpfs: hpfs_map_4sectors(): unaligned read [ 122.354968][ T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.778775][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.809752][ T13] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 122.830167][ T6100] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 122.837281][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.885532][ T13] usb 6-1: config 0 descriptor?? [ 123.294260][ T4227] gspca_sunplus: reg_w_riv err -71 [ 123.299495][ T4227] sunplus: probe of 3-1:0.0 failed with error -71 [ 123.344461][ T4227] usb 3-1: USB disconnect, device number 10 [ 123.376554][ T13] zeroplus 0003:0C12:0005.000A: unknown main item tag 0x0 [ 123.408295][ T13] zeroplus 0003:0C12:0005.000A: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.5-1/input0 [ 123.427298][ T6090] loop4: detected capacity change from 0 to 40427 [ 123.441293][ T13] zeroplus 0003:0C12:0005.000A: no inputs found [ 123.483274][ T6090] F2FS-fs (loop4): invalid crc value [ 123.529484][ T6090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.581348][ T13] usb 6-1: USB disconnect, device number 3 [ 123.623403][ T6119] fido_id[6119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 123.669716][ T6090] F2FS-fs (loop4): Start checkpoint disabled! [ 123.720945][ T6090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 123.815771][ T26] audit: type=1800 audit(1770032157.916:7): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.575" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 123.836053][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.202720][ T6141] loop5: detected capacity change from 0 to 128 [ 124.441658][ T6141] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.484458][ T6141] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.637536][ T6141] overlayfs: upper fs needs to support d_type. [ 124.684131][ T4227] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 124.934268][ T4227] usb 1-1: Using ep0 maxpacket: 32 [ 125.054355][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.066546][ T6164] loop3: detected capacity change from 0 to 40427 [ 125.071724][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.112501][ T4227] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 125.129015][ T6164] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 125.136437][ T6164] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 125.147476][ T6164] F2FS-fs (loop3): build fault injection attr: rate: 2, type: 0x1ffff [ 125.154282][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.155753][ T6164] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 125.173472][ T6164] F2FS-fs (loop3): invalid crc value [ 125.186735][ T4227] usb 1-1: config 0 descriptor?? [ 125.266557][ T6164] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.360523][ T6164] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 125.368128][ T6164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.402324][ T6182] Invalid ELF header magic: != ELF [ 125.523525][ T6164] F2FS-fs (loop3) : inject too big dir depth in f2fs_add_regular_entry of f2fs_do_add_link+0x344/0x640 [ 125.642359][ T6186] loop4: detected capacity change from 0 to 2048 [ 125.673102][ T6188] device batadv_slave_1 entered promiscuous mode [ 125.689688][ T4227] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 125.708627][ T6187] device batadv_slave_1 left promiscuous mode [ 125.743110][ T6186] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 125.843269][ T6186] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 125.980351][ T4227] usb 1-1: USB disconnect, device number 12 [ 125.981930][ T6197] input: syz0 as /devices/virtual/input/input17 [ 126.007868][ T6186] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.598: bg 0: block 234: padding at end of block bitmap is not set [ 126.048608][ T6190] loop5: detected capacity change from 0 to 8192 [ 126.082336][ T6193] fido_id[6193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 126.088218][ T6186] EXT4-fs (loop4): Remounting filesystem read-only [ 126.159110][ T6173] loop2: detected capacity change from 0 to 40427 [ 126.206098][ T6173] F2FS-fs (loop2): invalid crc value [ 126.279499][ T6173] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.367544][ T26] audit: type=1800 audit(1770032160.466:8): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.601" name="bus" dev="loop5" ino=1048608 res=0 errno=0 [ 126.419537][ T6190] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 126.454928][ T6173] F2FS-fs (loop2): Start checkpoint disabled! [ 126.500504][ T6190] FAT-fs (loop5): Filesystem has been set read-only [ 126.532514][ T6173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 126.546988][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 126.729265][ T26] audit: type=1800 audit(1770032160.826:9): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 127.545271][ T6220] loop3: detected capacity change from 0 to 40427 [ 127.652404][ T6220] F2FS-fs (loop3): invalid crc value [ 127.702721][ T6220] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.744810][ T6220] F2FS-fs (loop3): Start checkpoint disabled! [ 127.780624][ T6220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 128.136812][ T6232] loop8: detected capacity change from 0 to 8 [ 128.178482][ T6232] Dev loop8: unable to read RDB block 8 [ 128.212348][ T6232] loop8: unable to read partition table [ 128.226613][ T6232] loop8: partition table beyond EOD, truncated [ 128.261786][ T6232] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 128.645022][ T6255] loop3: detected capacity change from 0 to 1024 [ 128.911614][ T6264] loop2: detected capacity change from 0 to 256 [ 128.969591][ T4823] hfsplus: b-tree write err: -5, ino 3 [ 129.057582][ T6264] exfat: Deprecated parameter 'utf8' [ 129.062989][ T6264] exfat: Deprecated parameter 'utf8' [ 129.091935][ T6264] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 129.115614][ T6267] netlink: 14 bytes leftover after parsing attributes in process `syz.3.626'. [ 129.283933][ T6267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.342625][ T6267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.360730][ T6267] bond0 (unregistering): Released all slaves [ 129.830507][ T6279] netlink: 100 bytes leftover after parsing attributes in process `syz.2.631'. [ 130.020840][ T6268] loop5: detected capacity change from 0 to 32768 [ 130.095466][ T6268] (syz.5.627,6268,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.128732][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 130.141782][ T6268] (syz.5.627,6268,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.231193][ T6268] JBD2: Ignoring recovery information on journal [ 130.414157][ T6268] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 130.534216][ T4936] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.662234][ T5232] ocfs2: Unmounting device (7,5) on (node local) [ 131.124481][ T4936] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 131.144821][ T4936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.180124][ T4936] usb 3-1: Product: syz [ 131.212612][ T4936] usb 3-1: Manufacturer: syz [ 131.248282][ T4936] usb 3-1: SerialNumber: syz [ 131.254408][ T26] audit: type=1326 audit(2000000002.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.3.653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4483c1feb9 code=0x0 [ 131.256941][ T6331] loop5: detected capacity change from 0 to 1024 [ 131.298560][ T4936] usb 3-1: config 0 descriptor?? [ 131.356784][ T4936] ch341 3-1:0.0: ch341-uart converter detected [ 131.394284][ T6331] EXT4-fs (loop5): Ignoring removed orlov option [ 131.453984][ T6331] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x0000000000000000,barrier=0x0000000000000cbe,orlov,nogrpid,noauto_da_alloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 131.997166][ T6343] loop5: detected capacity change from 0 to 1024 [ 132.017443][ T4936] usb 3-1: failed to send control message: -71 [ 132.023737][ T4936] ch341-uart: probe of ttyUSB0 failed with error -71 [ 132.057579][ T4936] usb 3-1: USB disconnect, device number 11 [ 132.091424][ T4936] ch341 3-1:0.0: device disconnected [ 132.156934][ T6343] hfsplus: invalid file type 03755 for inode 20 [ 132.190165][ T6347] loop3: detected capacity change from 0 to 1024 [ 132.379244][ T6347] hfsplus: xattr search failed [ 132.559735][ T6353] loop4: detected capacity change from 0 to 512 [ 132.624420][ T6353] EXT4-fs (loop4): filesystem is read-only [ 132.667159][ T6353] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 132.747489][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.753888][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.776269][ T6353] EXT4-fs (loop4): filesystem is read-only [ 132.833268][ T6353] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.844336][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.926870][ T6353] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.662: bg 0: block 64: padding at end of block bitmap is not set [ 132.960695][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.666'. [ 132.979845][ T6353] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 133.000356][ T6353] EXT4-fs (loop4): 1 orphan inode deleted [ 133.020345][ T6353] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,noblock_validity,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000004000000,noblock_validity,noblock_validity,minixdf,nolazytime,nouid32,noauto_da_alloc,,errors=continue. Quota mode: none. [ 133.046318][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.088029][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 133.204335][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.241680][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.264217][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.317362][ T23] usb 3-1: config 0 descriptor?? [ 133.447382][ T6360] loop3: detected capacity change from 0 to 40427 [ 133.540822][ T6369] loop4: detected capacity change from 0 to 2048 [ 133.568909][ T6360] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.597251][ T6360] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.634298][ T6360] F2FS-fs (loop3): invalid crc value [ 133.677186][ T6369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.801453][ T6360] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.817403][ T23] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 133.985930][ T4188] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 134.015337][ T6357] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 134.027110][ T6357] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 134.035628][ T6357] CPU: 1 PID: 6357 Comm: syz.2.665 Not tainted syzkaller #0 [ 134.042935][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.053009][ T6357] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 134.058248][ T6357] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 19 d5 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 f9 d4 55 fa 4c 8b 33 4d 8d ae 70 [ 134.072759][ T6376] loop5: detected capacity change from 0 to 65536 [ 134.077959][ T6357] RSP: 0018:ffffc900031ff970 EFLAGS: 00010246 [ 134.077982][ T6357] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 134.077995][ T6357] RDX: ffffc9000cce1000 RSI: 0000000000000053 RDI: 0000000000000054 [ 134.078008][ T6357] RBP: 0000000000000001 R08: ffff888024d6a697 R09: 1ffff110049ad4d2 [ 134.110197][ T4188] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 134.115007][ T6357] R10: dffffc0000000000 R11: ffffed10049ad4d3 R12: dffffc0000000000 [ 134.115035][ T6357] R13: 1ffff110049ad42b R14: dffffc0000000000 R15: ffffc900031ffc00 [ 134.115048][ T6357] FS: 00007f8c6a6886c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 134.115066][ T6357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.115079][ T6357] CR2: 0000001b3271fff8 CR3: 000000001f2aa000 CR4: 00000000003506e0 [ 134.115095][ T6357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.115107][ T6357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.115119][ T6357] Call Trace: [ 134.115126][ T6357] [ 134.115136][ T6357] ? mcp_gpio_get+0x260/0x260 [ 134.166587][ T6360] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.170908][ T6357] __i2c_transfer+0x880/0x20b0 [ 134.179036][ T6360] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.182187][ T6357] ? i2c_cmd+0x110/0x110 [ 134.213259][ T6357] i2c_transfer+0x25d/0x3a0 [ 134.217851][ T6357] ? verify_lock_unused+0x140/0x140 [ 134.223051][ T6357] ? __i2c_transfer+0x20b0/0x20b0 [ 134.228069][ T6357] ? memset+0x1e/0x40 [ 134.232052][ T6357] i2c_transfer_buffer_flags+0x10a/0x1a0 [ 134.237681][ T6357] ? i2c_transfer+0x3a0/0x3a0 [ 134.242373][ T6357] i2cdev_read+0x84/0x170 [ 134.246708][ T6357] ? i2cdev_dev_release+0x20/0x20 [ 134.251842][ T6357] vfs_read+0x301/0xd60 [ 134.256001][ T6357] ? kernel_read+0x1e0/0x1e0 [ 134.260677][ T6357] ? __fget_files+0x40f/0x480 [ 134.265493][ T6357] ? __fdget_pos+0x1e2/0x370 [ 134.270098][ T6357] ? ksys_read+0x71/0x260 [ 134.274416][ T6357] ksys_read+0x152/0x260 [ 134.278655][ T6357] ? vfs_write+0xd60/0xd60 [ 134.283070][ T6357] ? lockdep_hardirqs_on+0x94/0x140 [ 134.288378][ T6357] do_syscall_64+0x4c/0xa0 [ 134.292789][ T6357] ? clear_bhb_loop+0x30/0x80 [ 134.297462][ T6357] ? clear_bhb_loop+0x30/0x80 [ 134.302157][ T6357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 134.308077][ T6357] RIP: 0033:0x7f8c6c42ceb9 [ 134.312493][ T6357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.332100][ T6357] RSP: 002b:00007f8c6a688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 134.340512][ T6357] RAX: ffffffffffffffda RBX: 00007f8c6c6a7fa0 RCX: 00007f8c6c42ceb9 [ 134.348476][ T6357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 134.356438][ T6357] RBP: 00007f8c6c49ac1f R08: 0000000000000000 R09: 0000000000000000 [ 134.364504][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.372507][ T6357] R13: 00007f8c6c6a8038 R14: 00007f8c6c6a7fa0 R15: 00007fff84f1eaf8 [ 134.380479][ T6357] [ 134.383487][ T6357] Modules linked in: [ 134.395342][ T6357] ---[ end trace 47561eb5d4b6d0d4 ]--- [ 134.400907][ T6357] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 134.406346][ T6357] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 19 d5 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 f9 d4 55 fa 4c 8b 33 4d 8d ae 70 [ 134.428520][ T6357] RSP: 0018:ffffc900031ff970 EFLAGS: 00010246 [ 134.436371][ T6357] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 134.444884][ T6357] RDX: ffffc9000cce1000 RSI: 0000000000000053 RDI: 0000000000000054 [ 134.476281][ T6357] RBP: 0000000000000001 R08: ffff888024d6a697 R09: 1ffff110049ad4d2 [ 134.491556][ T6357] R10: dffffc0000000000 R11: ffffed10049ad4d3 R12: dffffc0000000000 [ 134.501854][ T6357] R13: 1ffff110049ad42b R14: dffffc0000000000 R15: ffffc900031ffc00 [ 134.511147][ T6357] FS: 00007f8c6a6886c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 134.522552][ T6357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.522564][ T6376] XFS (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 134.522584][ T6376] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 134.529314][ T6357] CR2: 00007ffb118cc000 CR3: 000000001f2aa000 CR4: 00000000003506e0 [ 134.555737][ T6357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.555859][ T6376] XFS (loop5): Mounting V5 Filesystem [ 134.563822][ T6357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.579097][ T6357] Kernel panic - not syncing: Fatal exception [ 134.585604][ T6357] Kernel Offset: disabled [ 134.590026][ T6357] Rebooting in 86400 seconds..