last executing test programs: 16.138528546s ago: executing program 4 (id=486): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12.551102162s ago: executing program 4 (id=502): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f00000000c0)=0x18) 11.689708809s ago: executing program 4 (id=505): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000200), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0xfe, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) 11.178942841s ago: executing program 0 (id=507): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x900, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 9.800813302s ago: executing program 0 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$eJzs3c9vHGf9B/DP7C//yLep1UPVb4SQm5YfpTSJkxICBdoe4MClB5QrSuS6VUQKKAkorSziykLiwIm/AITEESGOiAN/QA9cuXHiRCQbCdQTg8Z+nni82e06tb2z9rxekjPzmWd2/YzfO/sjM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADx3e98b6WIiBs/TQuWIv4vuhGdiIWqXo6IheWlvH4vIp6LneZ4NiL6cxHV7Xf+eTri1Yj46GzE1vb6arX48gH78e0//O233z/z1l9/37/4nz/e6742br3793/57z89ONw2AwAAQNuUZVkW6WP+ufT5vtN0pwCAqciv/2WSl5/6+lf/eOvPs9QftVqtVqunUNeVoz2oFxGxUb9N9Z7B4XgAOGE24uOmu0CD5N9qvYg403QngJlWNN0BjsXW9vpqkfIt6q8Hy7vt+VyQfflvFI+u7xg3nWT4HJNpPb42oxvPjOnPwpT6MEty/p3h/G/stg/Sesed/7SMy3+we+lT6+T8u8P5Dzk9+XdG5t9WOf/eE+XflT8AAAAAAMyw/P//Sw0f/507/KYcyCcd/12eUh8AAAAAAAAA4Kgddvy/R4z/BwAAADOr+qxe+fXZvWXjvoutWn69iHhqaH2gZdLFMotN9wMAAAAAAAAAAAAA2qS3ew7v9SKiHxFPLS6WZVn91A3XT+qwtz/p2r790GZNP8kDAMCuj87ma/n7uwuKiPmIuJ6+66+/uLhYlvMLi+ViuTCX388O5ubLhdrn2jytls0NDvCGuDcoqzubr92ubtLn5Untw/dX/a5B2T1Ax45I+mPGmOYGAweA9AIVseUV6ZQpy6fHvfmAfez/p9BSLDX9uGL2Nf0wBQAAAI5fWZZlkb7O+1w65t9pulMAwFTk1//h4wKHqjtj2iOO5v7VarVarVZ/qrquHO1BvYiIjfptqvcMhuMHgBNmIz5uugs0SP6t1ouI55ruBDDTiqY7wLHY2l5fLVK+Rf31II3vns8F2Zf/RrFzu3z7UdNJhs8xmdbjazO68cyY/jw7pT7Mkpx/Zzj/G7vtg7Tecec/LePyH+xcMtc+Of/ucP5DTk/+nZH5t1XOv/dE+XflDwAAAAAAMyz///+S4795kwEAAAAAAADgxNnaXl/N173m4/+fGbGe6z9Pp5x/8aT5L6R5+Z9oOf/OUP5fHFqvW5t/+Obe/v+v7fXV39375//n6UHzn8szRXpkFekRUaTfVPTS9DBb97jNfndQ/aZ+0en20jk/Zf+duBW3Yy0u7Vu3k/4ee+0r+9qrnvb3tV/e1957rP3KvvZ++t6BciG3X4jV+FHcjrd32qu2uQnbPz+hvZzQnvPvev5vpZx/r/ZT5b+Y2ouhaeXhh53H9vv6dNTveePWZ39x6fg3Z6LN6D7atrpq+8430J+dv8mZQfzk7tqdC/dv3rt3ZyXSZN/Sy5EmRyzn39/5mdt7/n9htz0/79f314cfDp44/1mxGb2x+b9Qm6+296Up960JOf9B+sn5v53aR+//Jzn/8fv/yw30BwAAAAAAAAAAAAAAAD5JWZY7l4i+ERFX0/U/TV2bCQBMV379L5O8XK1Wq9Vq9emr68rRXq8XEfGX+m2q9ww/G3VnAMAs+29E/L3pTtAY+bdY/r6/avpi050Bpuru+x/84Obt22t37jbdEwAAAAAAAADg08rjfy7Xxn9+MSKWhtbbN/7rm7F82PE/e3nm0QCjRzzQ9xibnUG3Uxtu/PnYGZ/7wrjxv8/H4+N/5zFxu/XtGKM/oX0woX1uQvv8yKV7aY280KMm5/98bbzzKv9zQ8Ovt2H81+Ex79sg53++9niu8v/C0Hr1/MvfzFz+GwddcTM6+/K/eO+9H1+8+/4Hr9x67+a7a++u/fDKysqlK1evXrt27eI7t26vXdr993h6PQNy/nnsa+eBtkvOP2cu/3bJ+X8u1fJvl5z/51Mt/3bJ+ef3e/Jvl5x//uwj/3bJ+b+Uavm3S87/S6mWf7tsba/PVfm/nGr5t0ve/7+cavm3S87/lVTLv11y/hdSLf92yflfTPUB8vf18KdIzj8f4bL/t0vOfyXV8m+XnP/lVMu/XXL+V1It/3bJ+b+aavm3S87/K6mWf7vk/K+mWv7tkvP/aqrl3y45/2upln+75Py/lmr5t0vO/+upln+75PxfS7X82yXn/41Uy79dcv7fTLX82yXn/61Uy79dcv6vp1r+7bL3/f9mzMzCzM+P9g67MSPbddJmmn5mAgAAAAAAAAAAAACGTeN04qa3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd28xct31HcDP7M1rhxADITipgbVjjHGW7PoSX2hdTLg2QLklFHrBdr1rs+AbXrsEimTTQImEUVEFavrQFhBqI1UVVsUDrSjNQ9XLU2kf6EtFVQmpURWigIrUVjRbzZz//++Z2dmZXXu8nj3/z0eyf7szZ+acOXNmdr9rf/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzLW+c/VytKIr6n8ZfG4viBfWP109sbFz2ulu9hQAAAMCN+r/G38/dkS44vIwbNS3zd6/4x28uLCwsFB8Y/vLolxYW0hUTRTG6riga10VX//2DteZlgseK8dpQ0+dDPVY/3OP6kR7Xj/a4fqzH9et6XD/e4/pFO2CR9eXPYxp3tq3x4cZylxZ3FqON67Z1uNVjtXVDQ/FnOQ21xm0WRk8Uc8WpYraYblm+XLbWWP7bW+rrelsR1zXUtK7N9SPkR586HrehFvbxtpZ1XbvP6IdvKCZ+/KNPHf/jC8/c3Wn23A0t91du546t9e38TLik3NZasS7tk7idQ03bubnDczLcsp21xu3qH7dv53PL3M7ha5u5qtqf8/FiqPHxdxv7aaT5x3ppP20Ol/33vUVRXL622e3LLFpXMVRsaLlk6NrzM14ekfX7qB9KLy5GVnScblnGcVqfM9taj9P210R8/reE240ssQ3NT9MPPz226Hlf6XEa1R/1Uq+V9mOw36+VQTkG43Hx3caDfrzjMbgtPP5PbV/6GOx47HQ4BtPjbjoGt/Y6BofGhhvbnJ6EWuM2147BXS3LDzfWVGvMp7d3PwanLpw+NzX/iU++du70sZOzJ2fP7Nm1a3rPvn0HDhyYOjF3ana6/Ps69/bg21AMpdfA1rDv4mvg1W3LNh+qC1/t3+twvMvrcGPbsv1+HY60P7ja6rwgFx/T5Wvj4fpOH78yVCzxGms8Pztv/HWYHnfT63Ck6XXY8WtKh9fhyDJeh/Vlzu1c3vcsI01/Om3DzfpasLHpGGz/fqT9GOz39yODcgyOh+PiX3cu/bVgc9jexydX+v3I8KJjMD3c8N5TvyR9vz9+oDE6HZf31K+4bay4OD97/v5Hj124cH5XEcaqeEnTsdJ+vG5oekzFouN1aMXH6+G5Vzx+T4fLN4Z9Nf7a+l/jSz5X9WX23t/9uWp8deu8P1su3V2E0WervT87fTWv78+UJbvsz/oyn5m68e/FUy5tev8dXeL9N+b+58v1pbt6bHh0pHz9Dqe9M9ryftz6VI003rtqjXU/N7W89+PR8Ge134/v7PJ+vKlt2X6/H4+2P7j4flzr9dOOG9P+fI6H4+TUdPf34/oym3av9Jgc6fp+fG+YtbD/XxOSQspFTcfOUsdtWtfIyGh4XCNxDa3H6Z6W5UdDNquv68nd13ec7ri3vK/h9OiuWa3jdKJt2X4fp+n9aqnjtNbrp2/Xp/35HA/HxZ17uh+n9WWe2nvj753r44dN751jvY7B0eGx+jaPpoOwfL9fWB+PwfuL48XZ4lQx07h2rHE81RrrmnxgecfgWPiz2u+Vm7ocgzvalu33MZi+ji117NVGFj/4Pmh/PsfDcfHEA92Pwfoyb9rf3+9dd4RL0jJN37u2/3xtqZ953dO2m27mz7zq2/k3+7v/bLa+zKkDK82Z3ffTfeGS2zrsp/bX71KvqZlidfbTprCdzxxYej/Vt6e+zJcOLvN4OlwUxaWPPdj4eW/495U/v/i9b7b8u0unf9O59LEHn739xN+uZPsBWPueL8eG8mtd079MLeff/wEAAIA1Ieb+oTAT+R8AAAAqI+b++L/CE/kfAAAAKiPm/pEwk0zy/6Y3PTP3/KUiNfMXgnh92g0PlcvFjut0+Hxi4Zr65Q9+ffYnf3lpeeseKoripw/9ZsflNz0Ut6s0Ebbz6ptbL198w0vLWv/RR64t19xf/0q4//h4lnsYdKrgThdF8e07vtBYz8QHrzTmUw8dbcz3Xn78sfoyzx0sP4+3f/ol5fJ/EMq/h08ca7n902E//CDM6bd33h/xdt+48prN+99/bX3xdrWtL2w87Cc+VN5v/D05X3ysXD7u56W2/68+/+Q36ss/+qrO239pqPP2Pxnu9+th/s/Ly+Wbn4P65/F2nw3bH9cXb3f/177Tcfuvfq5c/txbyuWOhhnXvyN8vu0tz8w1769Ha8daHlfx1nK5uP7p7/1O4/p4f/H+27d//MiVlv3Rfnw89c/l/Uy1LR8vj+uJ/qJt/fX7aT4+4/qf/O2jLfu51/qvvvfpl9fvt33997UtN9x2+/bf2PSHn/1Cx/XF7Tn8Z+daHs/h94TXcVj/Ex8Kx2O4/n+vfqFlvdHR97S+/8Tlv7LxUsvjid7243L9V19/sjH/Y+Inv3/bC25/4eVX1vddUXz3feX99Vr/yT8627L9X71rZ+P5iNfHjn77+pcS13/+45Nnzs5fnJtp2quN353zjnJ71o2v31Df3jvCe2v750fOXvjw7PmJ6Ynpopio7q/Qu25fC/PZclxe6e13PhKez3t+79sbtv/T5+Pl//JwefmVt5dft14dlvtiuHxj+fwt1G5w/U9suavx+q49VX7e0mPvg83b/vPAshYMj7/9+4J4vJ976Ycb+6F+XePrRnxd3+D2f3+mvJ9vhf26EH4z89a7rq2vefn4uxGuvK98vd/w/gtvc/F5/ZPwfL/zB+X9x+2Kj/f74fuY72xqfb+Lx8e3Lg2133/jt3hcDu8nxeXy+rhU3N9Xnrur4+bF30NSXL678fnvpvu5e0UPcynzn5ifOjV35uKjUxdm5y9MzX/ik0dOn7145sKRxu/yPPKRXre/9v60ofH+NDO7b28xvb4oirPF9Cq8Yd2c7a9/tLztP/fI8Zn909tnZk8cu3jiwiPnZs+fPD4/f3x2Zn77sRMnZj/e6/ZzM4d27T64Z//uyZNzM4cOHDy45+Dk3Jmz9c0oN6qHfdMfnTxz/kjjJvOH9h7c9cADe6cnT5+dmT20f3p68mKv2ze+Nk3Wb/0bk+dnTx27MHd6dnJ+7pOzh3Yd3Ldvd8/fBnj63In5ianzF89MXZyfPT9VPpaJC42L61/7et2eapr/t/L72Xa18hfxFe+6b1/6/ax1X//0kndVLtL2C0SfCb+L5h9edO7Acj6PuX80zCST/A8AAAA5iLl/LMxE/gcAAIDKiLl/XZiJ/A8AAACVEXP/eJhJJvlf/1//f3n9//J6/f+8+v/nPlb2Std6/z/25/X/83CL+/83vH79f/3/6vX/l9+fX+vbr/+v/89ig9b/j7l/fVFkmf8BAAAgBzH3bwgzkf8BAACgMmLuvy3MRP4HAACAyoi5/wVhJpnk/xz6/+/usNgK+/+7exWuqt//XzPn/19f6P/r/zf3/+OTo/+fjRX379//cMun+v+B/r/+v/6//r/+PzdsdMlrblX/P+b+28NMMsn/AAAAkIOY+18YZiL/AwAAQGXE3H9HmIn8DwAAAJURc//GMJNM8n8O/f9OnP+/sv1/5//X/+/v+f+bNkb/f21w/v/uOvf/x25bdJH+/wr7/+P6/2ux/z/a3+0f7P5/z83X/+emGLTz/8fc/6Iwk0zyPwAAAOQg5v4Xh5nI/wAAAFAZMfe/JMxE/gcAAIDKiLn/zjCTTPK//r/+v/6//r/+f+f19z7/f/mR/v9g0f/vzvn/e3D+/7z6/33e/sHu//f7/P+jb26/vf4/nQxa/z/m/peGmWSS/wEAACAHMfffFWYi/wMAAEBlxNz/sjAT+R8AAAAqI+b+TWEmmeR//X/9f/1//X/9/87r793/L+n/Dxb9/+70/3vQ/9f/1/9fXv+/wze/+v90Mmj9/5j77w4zyST/AwAAQA5i7r8nzET+BwAAgMqIuf9nwkzkfwAAAKiMmPs3h5lkkv/1//X/9f/z6v/fN6b/r/9fbfr/3en/96D/r/+v/7/M8/8vtpL+/7ped0ZlDFr/P+b+l4eZZJL/AQAAIAcx978izET+BwAAgMqIuf+VYSbyPwAAAFRGzP0TYSaZ5H/9/2r1///0r594ZaH/r//fY/0V7f/Hw0D/P3P6/93p//eg/6//r/+/Kv1/8jFo/f+Y+7eEmWSS/wEAACAHMfdvDTOR/wEAAKAyYu6/N8xE/gcAAIDKiLl/W5hJJvlf/79a/f9I/1//v9v6K9r/T/T/86b/30HTi1T/vwf9f/3/7Pv/8btf/X/6Y9D6/zH3vyrMJJP8DwAAADmIuX97mIn8DwAAAJURc/+rw0zkfwAAAKiMmPt3hJlkkv/1//X/9f/1//X/O69f/39t0v/vbqX9/zH9f/1//f/M+v/O/09/DVr/P+b+14SZZJL/AQAAIAcx9+8MM5H/AQAAoDLi/98s/9+r/A8AAABVFHP/ZJhJJvlf/1//P6f+f03/X/9f/7/y9P+7c/7/HvT/9f/1//X/6atB6//H3P/aMJNM8j8AAADkIOb++8NM5H8AAACojJj7p8JM5H8AAACojJj7p8NMMsn/+v/6/zn1/53/X/9f/7/69P+70//vQf9f/79q/f+i0P/nlhq0/n/M/bvCTDLJ/wAAAJCDmPt3h5nI/wAAAFAZMffvCTOR/wEAAKAyYu7fG2aSSf7X/9f/1//X/9f/77x+/f+1qVv//svLuL3+f6D/r/+v/1+N/r/z/3OLDVr/P+b+B8JMMsn/AAAAkIOY+/eFmcj/AAAAUBkx9+8PMwn5v9P/6wYAAADWlpj7D4SZZPLv//r/Fen//9bft6xb/1//v9v6+9P/X6//H6b+/2Cp6Pn/218W121t9v+fT49f/1//f5C3X/9f/5/FBq3/H3P/wTCTTPI/AAAA5CDm/teFmcj/AAAAUBkx9/9smIn8DwAAAJURc//PhZlkkv/1/yvS/2+j/6//3239zv+v/19lFe3/983a7P8vcf7/If1//f/B2n79/+X0/9f1uhsq5ub3/+NHy+v/x9x/KMwkk/wPAAAAOYi5/+fDTOR/AAAAqIyY+18fZiL/AwAAQGXE3H84zCST/K//r/+v/6//f3P6/68v2g1i/79+8Oj/V4v+f3eV6v87/7/+/4Btv/6/8/+z2KCd/z/m/jeEmWSS/wEAACAHMfc/GGYi/wMAAEBlxNz/xjAT+R8AAAAqI+b+N4WZZJL/9f/1//X/9f+d/7/z+vX/1yb9/+70/3vQ/9f/1//X/6evbl3/f13H62Puf3OYSSb5HwAAAHIQc/9bwkzkfwAAAKiMmPvfGmYi/wMAAEBlxNz/tjCTTPK//r/+v/6//r/+f+f16/+vTfr/3en/96D/r/+v/6//T18N2vn/Y+7/hTCTTPI/AAAA5CDm/ofCTOR/AAAAqIyY+98eZiL/AwAAQGXE3P+OMJNM8r/+v/6//r/+v/5/5/Xr/69N+v/d6f/3oP+v/6//r/9PXw1a/z/m/neGmWSS/wEAACAHMff/YpiJ/A8AAACVEXP/u8JM5H8AAACojJj73x1mkkn+1//X/x+s/v/Cpebb6f/r/xf96v/Xb6T/nwX9/+70/3vo0P9fp/+v/6//r//PdRu0/n/M/e8JM8kk/wMAAEAOYu5/b5iJ/A8AAACVEXP/+8JM5H8AAACojJj7Hw4zyST/6/9n2f9PD3nw+v/O/6//7/z/+v83Rv+/O/3/Hpz/X/9/Tfb/R8P86GT82qT/z6AYtP5/zP2PhJlkkv8BAAAgBzH3vz/MRP4HAACAyoi5/5fCTOR/AAAAqIyY+z8QZpJJ/tf/z7L/P8Dn/69a/3+k5fjIqf8/3vR8puNS/1//fxXo/3en/9+D/r/+/yD3/8PRvH6J2zv/P4No0Pr/Mfd/MMwkk/wPAAAAOYi5/5fDTOR/AAAAqIyY+38lzET+BwAAgMqIuf9Xw0wyyf/6//r/+v/O/+/8/53Xr/+/Nun/d6f/34P+fz79/5H+b/+tO/9/Sf+fQTRo/f+Y+38tzGTJ4Pfsfy3jYQIAAAADJOb+D4WZZPLv/wAAAJCDmPuPhJnI/wAAAFAZMfcfDTPJJP/r/7f3/+MZVfX/9f/1//X/9f/Xov71/192e1Ho/+v/6/9Xtv9/E7Zf/1//n8UGrf8fc/+xMJNM8j8AAADkIOb+Xw8zkf8BAACgMmLuPx5mIv8DAABAZcTcPxNmkkn+X+3+f1Ovd3Qw+//O/3+9/f+f6v/r/wf6/53p/68O5//vTv+/B/1//X/9f/1/+mrQ+v8x98+GmWSS/wEAAKDC0o+DY+4/EWYi/wMAAEBlxNx/MsxE/gcAAIDKiLn/w2EmmeR/5//X/3f+/1vR/x9pWV7/v6T/r//fD/r/3en/96D/r/+v/6//T18NWv8/5v65MJNM8j8AAADkIOb+j4SZyP8AAABQGTH3fzTMRP4HAACAyoi5/1SYSSb5X/9f/z/3/n+tKC47/7/+f6f16/+vTfr/3en/96D/r/+v/6//T18NWv8/5v7TYSaZ5H8AAAD+n737aLLrqvo4fLGVegQfgTEjhmZkD/gATJlRxZhscrBNzmCiyWDA5JyzyTnnbHKOJhhDVVNur7Wk1r19jqQ+6nvO3s8zWa9UFn2FG7v+r+pXmx7k7r9v3GL/AwAAQDNy998vbrH/AQAAoBm5++8ft3Sy//X/+v/e+//VVt7/3//Xt9//3/53SP+v/z8Ka/39sc1/3UFR+IH9/10vu/Je+n/9v/5/kP5f/6//52xz6/9z9z8gbulk/wMAAEAPcvc/MG6x/wEAAKAZufsfFLfY/wAAANCM3P1Xxi2d7H/9v/5f/6//39f/3+j9f/3/snn/f9gy+v/Ldnd39f+b6P/n/fn1//p/1s2t/8/d/+C4pZP9DwAAAD3I3f+QuMX+BwAAgGbk7n9o3GL/AwAAQDNy9z8sbulk/+v/9f/6/6X0/ycW/P5/fD/o//X/R0D/P2wZ/b/3//X/y/z8+n/9P+vOv/8/8B/bk/T/ufsfHrd0sv8BAACgB7n7HxG32P8AAADQjNz9j4xb7H8AAABoRu7+R8Utnex//b/+X/+/lP7/iN7/1//r/xfu+tXpfybo/9fp/0eM9P+rlf5/yDn385t/e8v5/AfQ/+v/WXf+/f+B/1GT9P+5+x8dt1yxWp240N8kAAAAMCu5+x8Tt3Ty5/8AAADQg9z9V8Ut9j8AAAA0I3f/1XFLJ/tf/6//1//r//X/m7++/n+ZvP8/7PD9/13udJ9799v/e/9/mPf/p+7/b/vOaLL/l1l3ZG79f+7+a+KWTvY/AAAA9CB3/2PjFvsfAAAAmpG7/3Fxi/0PAAAAzcjd//i4pZP9r/9vrf+/dN+vO6P/36td9P9L7//vrv/X/+v/R+j/h3n/f8TeP+Z26of6f/2/9/+9/8/hzK3/z93/hLilk/0PAAAAPcjd/8S4xf4HAACAZuTuf1LcYv8DAABAM3L3Pzlu6WT/6/9b6//3/zrv/7fW/3v/f6X/1/+P0P8P0/+PaOX9/wv8rtl2P39Y2/78+n/9P+vm1v/n7n9K3NLJ/gcAAIAe5O5/atxi/wMAAEAzcvc/LW6x/wEAAKAZufufHrd0sv/1//r/ZfT/+RX0//r/i9//J/3/Mun/h+n/R7TS/1+gbffzS//8+n/9P+vm1v/n7n9G3NLJ/gcAAIAe5O5/Ztxi/wMAAEAzcvc/K26x/wEAAKAZufufHbd0sv/1//r/ZfT/3v/X/3v/X/9/bvT/w/T/I/T/+n/9v/6fSc2t/8/df23c0sn+BwAAgB7k7n9O3GL/AwAAQDNy9z83brH/AQAAoBm5+58Xt3Sy//X/+n/9v/5f/7/56+v/l0n/P0z/P0L/r//X/+v/mdSM+v8zftWp1fPjlk72PwAAAPQgd/8L4hb7HwAAAJqRu/+FcYv9DwAAAM3I3X9d3NLJ/tf/z6b/38v52ur/d1arlf5/1Wn/v3PG38/6vtT/6/+PgP5/mP5/hP5f/6//1/8zqRn1/3s/zt3/orilk/0PAAAAPcjd/+K4xf4HAACAZuTuf0ncYv8DAABAM3L3vzRu6WT/6/9n0//vaav/9/7/2d8fPfX/3v9fp/8/Gvr/Yfr/Efp//b/+X//PpObW/+fuf1ncdOL4Bf8WAQAAgJnJ3f/yuKWTP/8HAACAHuTuf0XcYv8DAADAQl279jO5+18Zt3Sy//X/0/b/J874Of2//v/s7w/9v/5f/3/x6f+H6f9H6P/1//p//T+Tmlv/n7v/VXFLJ/sfAAAAepC7//q4xf4HAACAZuTuf3XcYv8DAABAM3L3vyZu6WT/6/+9/6//1//r/zd/ff3/Mun/h+n/R+j/D+znz+VpbP3/ofv/k6f/T/0/bTiP/n93d/eqi97/5+5/bdzSyf4HAACAHuTuvyFusf8BAACgGbn7Xxe32P8AAADQjNz9r49bOtn/+v9O+//8Vl9W/3/1aqX/1//r//X/w/T/w/T/I/T/3v/3/r/+n0nN7f3/3P1viFs62f8AAADQg9z9b4xb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//r/T/t/7//p//f9R9/+3rvT/R2IR/f/OwV9/7v3/Nfp//f+A7vr/e9xt3w/1//p/1s2t/8/d/5a4pZP9DwAAAD3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bjrWyf7X/+v/9f/6f/3/5q9/xO//n1itVvr/CSyi/x8w9/5/mvf/z/5f+Wn6f/3/kj+//l//z7q59f+5+98Rt3Sy/wEAAKAHufvfGbfY/wAAANCM3P3vilvsfwAAAGhG7v53xy2d7H/9v/5f/6//b77/v2YR/b/3/yei/x82j/7/YPp//f+SP7/+X//PudtW/5+7/z1xSyf7HwAAAHqQu/+9cYv9DwAAAM3I3f++uMX+BwAAgGbk7n9/3NLJ/tf/6//Pp//Pz6n/b6v/Pzm7/v/Uvv+8Tt7/1/9PRP8/TP8/Qv+v/9f/X6v/Z0pze/8/d/8H4pZO9j8AAAD0IHf/B+PW/+vW/gcAAIBm5O7/UNxi/wMAAEAzcvd/OG7pZP/r//X/3v/X/zf//r/+vyv6/2H6/xH6f/2//t/7/0xqbv1/7v6PxC2d7H8AAADoQe7+j8Yt9j8AAAA0I3f/x+IW+x8AAACakbv/xrilk/2v/9f/6//1//r/2/8e6v/boP8fdjT9/47+X/9f/fwd4n8F+n/9/9ivp01z6/9z9388bulk/wMAAEBrjm/4udz9n4hb7H8AAABoRu7+T8Yt9j8AAAAs0rENP5e7/1NxyyL3/6YKfZj+X/+v/9f/6/83f339/zJtpf/Pbwr9v/f/Qz/9/533/Whp7/+f/e+vS1f6f/0/U5tb/5+7/9NxyyL3PwAAALBJ7v7PxC32PwAAADQjd/9n4xb7HwAAAJqRu/9zcUsn+1//r//X/+v/9f+bv77+f5m8/z9M/z9C/7/V9/OX/vn1//p/1s2t/8/d//m4pZP9DwAAAD3I3f+FuMX+BwAAgGbk7v9i3GL/AwAAQDP2dn/GZR3uf/2//l//r//X/2/++vr/ZdL/D9P/j9D/6//1//p/JjW3/v9Le7/q1OrLcUsn+x8AAAB6kLv/K3GL/Q8AAADNyN3/1bjF/gcAAIBm5O7/WtzSyf7X/+v/l9H/7+7uXqX/1//v//2c7v9vWnD/f53+f2L6/2H6/xH6f/3/7Pv/s/8teZr+nzmaW/+fu//rcUsn+x8AAAB6kLv/G3GL/Q8AAADNyN3/zbjF/gcAAIBm5O7/VtzSyf7X/8+g/z+l//f+v/5/5f1//f9E9P/D9P8jWuz/T537b3/b/fxhbfvze/9f/8+6ufX/ufu/Hbd0sv8BAACgB7n7vxO32P8AAADQjNz9341b7H8AAABoRu7+78Utnex//f/R9f+3/XfXy/v/O6vNn1//r//X/+v/Lzb9/zD9/4gW+//zsO1+fumfX/+v/2fd3Pr/3P3fj1v2D7/j5/e7BAAAAOYkd/8P4pZO/vwfAAAAepC7/4dxi/0PAAAAzcjd/6O4pZP9r/+fwfv/Dfb/3v/f/P2h/591/3+J/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu//HcUsn+x8AAAB6kLv/J3HLFTvb+kgAAADAxHL3/zRu8ef/AAAA0Izc/TfFLWfs/01tdyv0//p//b/+X/+/+evr/5dJ/z/sXPv/k6vD9f9J/6//1//32v97/5/bHXH/f/VY/5+7/2dxiz//BwAAgMU5fsDP5+7/edxi/wMAAEAzcvf/Im6x/wEAAKAZuft/GbfcfMm2PtKR0v/r//X/I/3/LfENrv/X/+v/F0H/P8z7/yP0/1P085fr/9vo/1cr/T+Hd8T9/+iPc/f/Km7x5/8AAADQjNz9v45b7H8AAABoRu7+38Qt9j8AAAA0I3f/b+OWTva//l//f8j+fy/NbLr/9/6//j/o/5dB/z9s+/3/DYNfVv/fRP/v/f9G+n/v/zOFufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8V+1/n/x/X/77/8P9v+7K/2//l//Py/6/2Hb7/+H6f/1/0v+/Pp//T/r5tb/5+7/U9zSyf4HAACAHuTu/3PcYv8DAABAM3L3/yVusf8BAACgGbn7/xq3dLL/vf+v/9f/e/9f/7/56+v/l0n/P0z/v1n9jdL/6//1//p/JjW3/j93/9/ilk72PwAAAPQgd//f4xb7HwAAAJqRu//muMX+BwAAgGbk7v9H3NLE/j82+lfo/xfZ/1cerf/X/+v/9f/sp/8fts3+/553HP+y3v/fev+fH0H/r//X/zOJufX/ufv/Gbc0sf8BAACA2+Tu/1fcYv8DAABAM3L3/ztusf8BAACgGbn7b4lbOtn/I/3/yfoL9f+DvP+///Pr/zd/f+j/9f/6/4tP/z/M+/8j9P/e/9f/6/+Z1Nz6/9z9/4lbOtn/AAAA0IPc/bfGLfY/AAAANCN3/3/jFvsfAAAAmpG7/39xSyf73/v/S+r/L9f/6//1//p//f8I/f8w/f8I/b/+X/+v/2dSc+v/c/f/PwAA///2nlJP") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) 9.587686475s ago: executing program 1 (id=512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000f500000000ffffffffffffffff000060"], 0x73) 9.007729977s ago: executing program 2 (id=513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, 0x0) 7.833488875s ago: executing program 1 (id=514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000005c0)={0x0, 0x30, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e00000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000300000008000300", @ANYRES32=r3], 0x54}}, 0x0) 7.01547748s ago: executing program 1 (id=515): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 'vcan0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000010c0)="aabf", 0x2}], 0x1, 0x0, 0x0) 6.545718624s ago: executing program 2 (id=516): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e84000204"], 0x7) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) 6.397639736s ago: executing program 1 (id=517): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5437, 0x0) 5.931100882s ago: executing program 2 (id=518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 5.826269377s ago: executing program 3 (id=519): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000780)={0x0, "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"}) 5.763046346s ago: executing program 0 (id=520): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 5.757318139s ago: executing program 1 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x90) capset(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000003c0), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 5.074462228s ago: executing program 3 (id=522): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000240)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0xe, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x40000022, 0x0, 0x0) 4.769417236s ago: executing program 0 (id=523): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f0ea3e7305b16f28aa4d590119da50c0b3bfa2f3d59c8f93ec3622a63a5160966d7498cff9cb4b2dc5c94d8cdaeb826f708fa6b28ce41a7fcf2e6526727c88631c3689733d9244c15a64ce61e7ed53b4b856afea94096c1d651b3e51b74aa3aa007bbfad8414c5fc1a223cc3e9dce0226ea5fc03fe6a5b07000000874c595090"], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./bus\x00', 0x0) unlinkat(r1, &(0x7f0000000180)='./bus\x00', 0x0) 4.510488666s ago: executing program 2 (id=524): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x66e, &(0x7f0000000cc0)="$eJzs3c1vHGcdB/DvrDd2Ni2p2yZtQJVqNRIgLBK/yAVzISCEfKhQVQ6crcRprGzSYrvIrRB1eL320D+gHHxBnJC4RyocuMCtN+RjJSQuvWBOi3Z2dr1Zv2TdNl6nfD7R7PPM88w883t+szP7YkUb4P/W0nTq91NkafqVzfb6zvZ8c2d7/k63nmQiyVZST1JLUvyn1Wp9mFxLit4wxUC5z/uri6999MnOx521erWU29eO2m9Atd3WQPNWt20qyVhVfgYPjHf9M49X9CK/luRyVcLInUnSesBP//Zkr6dP46C9z55IjMCjVXReN1O9HvdMJueqC739PqD7yls7+QiHMzHkdoPvIAAAAOBxM8xn4Kd2s5vN4vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfCFt7v/9fVEutW59K0f39//GqLVX9dHnxeJvff1RxAAAAAAAAAMAJenE3u9nM+e56qyj/5v9SuXKhfHwib2U9K1nLlWxmORvZyFpmk0z2DTS+ubyxsTY7xJ5zB+4595BAJ6qy8fnMGwAAAAAAAAC+YH6Zpb2//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGlQJGOdIsW9vubJ1OpJziYZbzdsJf/o1h9n90cdAAAAAJyAp3azm82c7663ilxI8lz5HcDZvJW72chqNtLMSm6U3wt0PvXXdrbnmzvb83fay/5xv/fvY4VRjpjOdw8HH/lSuUUjN7NatlzJ9byRZm6kVu7ZdqmKpzvqQFz32jEV360MGdmNqmzP/L2q3OfdY032MMf8MmWyzMiZXkZmqtja2Xi6e2YOPkPHPDuDR5pNrRfshYEjDUziU+X8XFW25/Pbw3I+EoOZmOt79j13dM6Tr/35jz+ZqeqnZ0rDGavKVvnY2J+J+b5MPD9MJm41796+dXN9+nHLxD4zZSYu9taX8sP8ONOZyqtZy2p+luVsZCVT+UFZW65OftF3yR+SqWsPrL36sEjGq2do52QdL6aXyn3PZzU/yhu5kZW8XP6by2y+lYUsZLHvDF88+gyXV33tkKu+9aUDg7/89arSSPK7qjzQoR2PSjuvT/fltf+eO1n29bfsZemZIbJ0zHtj/StVpX2MX1Xl6TCYidm+TDx7dCZ+X95W1pt3b6/dWn5zuMM9815VaV9HvzlVt9T28+WZ9skq1x58drT7nj2wb7bsu9Drq+3ru9jr61ypW4deqePVe7j9I82Vfc8f2Ddf9l3q6zvo/RYAp965b5wbb/yr8ffGB41fN241Xjn7/YlvT7wwnjN/OfOd+szYV2svFH/KB/nF3ud/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg01t/+53by83mytpApdVqvXtI10lX6g8JdV8lU/98or1Dt6WVXlf358xOcBZffjIZeQ5HXvlvq9WqWopDtvnDX09NolqVU5G6EVVGd08CTsbVjTtvXl1/+51vrt5Zfn3l9ZW7iwsLizOLCy/PX7252lyZ6TyOOkrgUdh70R91JAAAAAAAAAAAAMCwTuK/E4x6jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjbWk69fspMjtzZaa9vrM932wv3frelvUktSTFz5Piw+RaOksm+4YrDjvO+6uLr330yc7He2PVu9vXjtpvOFvVkqkkY53y3uc13vWqPFJx1BSK3gzbCbvcTRyM2v8CAAD///IHB5c=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) chdir(&(0x7f00000000c0)='./file0/../file0\x00') acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) 4.381097152s ago: executing program 3 (id=525): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 4.048267246s ago: executing program 4 (id=526): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 3.682949363s ago: executing program 1 (id=527): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 3.334624561s ago: executing program 0 (id=528): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r1, 0x4020744f, 0x0) 2.761380501s ago: executing program 3 (id=529): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000019c0)=@deltfilter={0xa4, 0x2d, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0x4, 0xd}, {0xc, 0xc}}, [@f_rsvp6={{0xa}, {0x4c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x5, 0xe}, {0xf4, 0xc, 0x400}, 0x62, 0x3, 0xe}}, @TCA_RSVP_DST={0x14, 0x2, @private2}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp6={{0xa}, {0x4}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008800}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000017c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB='$\x00-'], 0x40}}, 0x0) 2.564794835s ago: executing program 2 (id=530): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") sched_setscheduler(0x0, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x10) ftruncate(r1, 0x0) 2.346839451s ago: executing program 4 (id=531): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x1f) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109029f0803010000000904000000010100000a24010000000201020624040300bb0904010000010200000904010101010200000c24020200000000001cff1311240201d80000000000000800000000000b240201000000000614af09050109000000000007250100000000090402000001020000090402010101020000072401000002000b24020101000001861b3609058209000200"], 0x0) 2.281753146s ago: executing program 0 (id=532): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='0', 0x1) syz_usb_disconnect(r0) 2.004414215s ago: executing program 3 (id=533): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180), 0x3, 0x5eb, &(0x7f0000000c00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) 1.033965125s ago: executing program 2 (id=534): r0 = fanotify_init(0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x1029, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x8) read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0x2020) 932.72765ms ago: executing program 3 (id=535): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 0s ago: executing program 4 (id=536): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file2\x00', 0x208042, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1, 0xa9f, &(0x7f0000002000)="$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") r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.135506][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.231661][ T6773] hsr_slave_0: entered promiscuous mode [ 509.244875][ T6773] hsr_slave_1: entered promiscuous mode [ 509.254513][ T6773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.262668][ T6773] Cannot create hsr debugfs directory [ 509.441586][ T6780] hsr_slave_0: entered promiscuous mode [ 509.454925][ T6780] hsr_slave_1: entered promiscuous mode [ 509.464360][ T6780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.472361][ T6780] Cannot create hsr debugfs directory [ 509.808043][ T6792] team0: Port device team_slave_0 added [ 509.957869][ T6792] team0: Port device team_slave_1 added [ 510.387913][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.395488][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.422103][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.608326][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.615747][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.642284][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.877491][ T3156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.885867][ T3156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.141711][ T3272] hsr_slave_0: left promiscuous mode [ 512.150077][ T3272] hsr_slave_1: left promiscuous mode [ 512.162018][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.169743][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.182812][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.190596][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.214881][ T3272] hsr_slave_0: left promiscuous mode [ 512.226351][ T3272] hsr_slave_1: left promiscuous mode [ 512.243635][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.251740][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.264112][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.271999][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.298244][ T3272] hsr_slave_0: left promiscuous mode [ 512.307758][ T3272] hsr_slave_1: left promiscuous mode [ 512.319210][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.327186][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.339918][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.347924][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.376822][ T3272] veth1_macvtap: left promiscuous mode [ 512.383190][ T3272] veth0_macvtap: left promiscuous mode [ 512.389028][ T3272] veth1_vlan: left promiscuous mode [ 512.394825][ T3272] veth0_vlan: left promiscuous mode [ 512.405171][ T3272] veth1_macvtap: left promiscuous mode [ 512.411270][ T3272] veth0_macvtap: left promiscuous mode [ 512.417117][ T3272] veth1_vlan: left promiscuous mode [ 512.422947][ T3272] veth0_vlan: left promiscuous mode [ 512.433016][ T3272] veth1_macvtap: left promiscuous mode [ 512.438760][ T3272] veth0_macvtap: left promiscuous mode [ 512.444825][ T3272] veth1_vlan: left promiscuous mode [ 512.450349][ T3272] veth0_vlan: left promiscuous mode [ 513.340452][ T3272] infiniband syz1: set down [ 513.355563][ T8] infiniband syz1: ib_query_port failed (-19) [ 513.578372][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 513.625597][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 514.253016][ T5192] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.280361][ T5192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.293213][ T5192] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 514.308262][ T5192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 514.318361][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 514.320440][ T5192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 514.376251][ T5192] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 514.397663][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 515.028294][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 515.097773][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 515.334287][ T3009] smc: removing ib device syz1 [ 515.444829][ T6792] hsr_slave_0: entered promiscuous mode [ 515.551306][ T6792] hsr_slave_1: entered promiscuous mode [ 515.576420][ T6792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.584477][ T6792] Cannot create hsr debugfs directory [ 516.421484][ T5196] Bluetooth: hci1: command tx timeout [ 518.503223][ T5196] Bluetooth: hci1: command tx timeout [ 518.717883][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 518.921258][ T3272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.217543][ T3272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.241662][ T6765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 519.312512][ T6765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 519.406394][ T3272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.480062][ T6765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 519.515096][ T6765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 519.585884][ T3272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.848275][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.858661][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.868283][ T6857] bridge_slave_0: entered allmulticast mode [ 519.879988][ T6857] bridge_slave_0: entered promiscuous mode [ 520.038077][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.046024][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.054063][ T6857] bridge_slave_1: entered allmulticast mode [ 520.063566][ T6857] bridge_slave_1: entered promiscuous mode [ 520.338907][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.386285][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.397121][ T3272] bridge_slave_1: left allmulticast mode [ 520.403458][ T3272] bridge_slave_1: left promiscuous mode [ 520.410130][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.446297][ T3272] bridge_slave_0: left allmulticast mode [ 520.454255][ T3272] bridge_slave_0: left promiscuous mode [ 520.461228][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.591387][ T5192] Bluetooth: hci1: command tx timeout [ 520.873464][ T3272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.891442][ T3272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.909131][ T3272] bond0 (unregistering): Released all slaves [ 520.955660][ T6773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.116124][ T6773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.225038][ T6857] team0: Port device team_slave_0 added [ 521.232794][ T6773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.328036][ T6773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.385827][ T6857] team0: Port device team_slave_1 added [ 521.503149][ T6780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 521.627809][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.636246][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.664026][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.749343][ T6780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 521.776119][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.784649][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.811239][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.842989][ T6792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 521.894945][ T6792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 521.923395][ T6780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 521.956184][ T6780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 522.009602][ T3272] hsr_slave_0: left promiscuous mode [ 522.018317][ T3272] hsr_slave_1: left promiscuous mode [ 522.028023][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.038940][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.050417][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.059906][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.085378][ T3272] veth1_macvtap: left promiscuous mode [ 522.091851][ T3272] veth0_macvtap: left promiscuous mode [ 522.097810][ T3272] veth1_vlan: left promiscuous mode [ 522.103690][ T3272] veth0_vlan: left promiscuous mode [ 522.661274][ T5192] Bluetooth: hci1: command tx timeout [ 522.702096][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 522.763746][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 522.982165][ T6792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 523.017897][ T6792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 523.436480][ T6857] hsr_slave_0: entered promiscuous mode [ 523.447307][ T6857] hsr_slave_1: entered promiscuous mode [ 524.088279][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.551520][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.770161][ T6773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.784363][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.792318][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.942029][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.949961][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.993146][ T6780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.236362][ T6773] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.421945][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.437726][ T6780] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.463482][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.471292][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.593259][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.601238][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.625235][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.633058][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.664077][ T6857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 525.710287][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.762134][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.769870][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.823714][ T6857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.893644][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.901516][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.978664][ T6857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 526.048749][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.056637][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.099552][ T6857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 526.537992][ T6780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.600963][ T6792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.611849][ T6792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.831884][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.054828][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.105171][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.227807][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.235638][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.347365][ T3156] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.355219][ T3156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.058776][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.120357][ T6765] veth0_vlan: entered promiscuous mode [ 529.276375][ T6780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.334005][ T6765] veth1_vlan: entered promiscuous mode [ 529.394707][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.764853][ T6773] veth0_vlan: entered promiscuous mode [ 529.815987][ T6765] veth0_macvtap: entered promiscuous mode [ 529.934213][ T6773] veth1_vlan: entered promiscuous mode [ 530.075875][ T6780] veth0_vlan: entered promiscuous mode [ 530.087917][ T6765] veth1_macvtap: entered promiscuous mode [ 530.302420][ T6780] veth1_vlan: entered promiscuous mode [ 530.372553][ T6773] veth0_macvtap: entered promiscuous mode [ 530.417371][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.524856][ T6773] veth1_macvtap: entered promiscuous mode [ 530.599826][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.773231][ T6765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.782537][ T6765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.791831][ T6765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.801043][ T6765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.842145][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.853143][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.873647][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.899552][ T6780] veth0_macvtap: entered promiscuous mode [ 530.958922][ T6780] veth1_macvtap: entered promiscuous mode [ 531.084173][ T6773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.096094][ T6773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.111719][ T6773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.231238][ T6773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.240371][ T6773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.249688][ T6773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.258943][ T6773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.375690][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.382969][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.449991][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.461346][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.472400][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.483690][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.499094][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.769108][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.780047][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.791857][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.803641][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.822306][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.875848][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.108553][ T6780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.118366][ T6780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.127651][ T6780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.137100][ T6780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.601330][ T6857] veth0_vlan: entered promiscuous mode [ 532.690138][ T6857] veth1_vlan: entered promiscuous mode [ 533.198282][ T6792] veth0_vlan: entered promiscuous mode [ 533.378658][ T6857] veth0_macvtap: entered promiscuous mode [ 533.411388][ T6792] veth1_vlan: entered promiscuous mode [ 533.446887][ T6857] veth1_macvtap: entered promiscuous mode [ 533.736860][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.747907][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.758175][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.769008][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.779210][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.791296][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.806902][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.995542][ T6792] veth0_macvtap: entered promiscuous mode [ 534.068961][ T6792] veth1_macvtap: entered promiscuous mode [ 534.124760][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.135670][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.145897][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.157950][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.168145][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.179992][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.196242][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.361639][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.372578][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.382929][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.393774][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.404078][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.414899][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.429621][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.441590][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.457856][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.571623][ T6857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.582625][ T6857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.592769][ T6857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.601970][ T6857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.669658][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.681432][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.691956][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.702880][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.714543][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.726143][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.736488][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.747572][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.763258][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.939510][ T6792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.948925][ T6792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.958285][ T6792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.967467][ T6792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.521108][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.529208][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.699865][ T3190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.709183][ T3190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.824172][ T3190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.832455][ T3190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.079294][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.088503][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.864766][ T7028] tipc: Started in network mode [ 540.869921][ T7028] tipc: Node identity f7, cluster identity 4711 [ 540.876775][ T7028] tipc: Node number set to 247 [ 540.934327][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.943050][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.122699][ T7028] loop2: detected capacity change from 0 to 64 [ 541.230033][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.241723][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.251631][ T3364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.259624][ T3364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.365549][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.373813][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.568935][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.577314][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.628844][ T3272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.637074][ T3272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.822223][ T5289] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 545.924790][ T1611] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 545.959627][ T7063] loop1: detected capacity change from 0 to 8 [ 546.018399][ T7063] SQUASHFS error: Failed to read block 0x4e8: -5 [ 546.117452][ T1611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.124014][ T29] audit: type=1800 audit(1726673685.696:23): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.219" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 546.129748][ T1611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.151193][ T5289] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 546.165361][ T1611] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 546.170635][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.183640][ T1611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.186905][ T5289] usb 3-1: Product: syz [ 546.199768][ T5289] usb 3-1: Manufacturer: syz [ 546.204826][ T5289] usb 3-1: SerialNumber: syz [ 546.258707][ T7063] SQUASHFS error: Failed to read block 0x6e6: -5 [ 546.266448][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.274339][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.281800][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.288476][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.296205][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.303648][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.310291][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.313935][ T1611] usb 4-1: config 0 descriptor?? [ 546.317904][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.330207][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.337163][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.344882][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.352316][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.362087][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.369718][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.378021][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.385084][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.393173][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.400417][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.407349][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.415094][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.422664][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.429324][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.437154][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.444695][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.451516][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.459052][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.470176][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.477932][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.485706][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.493123][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.499775][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.507521][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.514953][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.521767][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.529326][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.536874][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.543942][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.551667][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.559009][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.569414][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.577989][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.585534][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.592340][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.599893][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.608122][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.614920][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.622603][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.629807][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.636860][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.644661][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.652080][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.658730][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.678364][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.691580][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.698783][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.706993][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.714581][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.721421][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.728960][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.736512][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.743410][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.751064][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.758280][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.765067][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.775786][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.784056][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.790690][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.798906][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.806292][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.813066][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.820607][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.828497][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.835336][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.843009][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.850209][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.857798][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.865492][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.875988][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.883642][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.891303][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.898501][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.905325][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.913202][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.920435][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.927335][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.935005][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.942702][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.949344][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.955223][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.956939][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.964698][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.974847][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.975186][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.975270][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.975560][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.975871][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.975954][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.976247][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.976560][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 546.976643][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 546.976930][ T7063] SQUASHFS error: Failed to read block 0x0: -5 [ 546.998279][ T5289] usb 3-1: config 0 descriptor?? [ 547.001467][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.069411][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 547.168050][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.176142][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 547.187657][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.196962][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 547.371288][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.379197][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 547.401249][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.408983][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 547.416699][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.424807][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 547.432603][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 547.440307][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.091418][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.102811][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.110275][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.119215][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.127371][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.135136][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.142643][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.150179][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.236781][ T7071] loop2: detected capacity change from 0 to 256 [ 548.262973][ T7073] capability: warning: `syz.0.186' uses deprecated v2 capabilities in a way that may be insecure [ 548.279131][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.287154][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.294927][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.316004][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.324294][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.332132][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.339413][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.347234][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.371292][ T1611] usbhid 4-1:0.0: can't add hid device: -71 [ 548.378018][ T1611] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 548.706571][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.718750][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.727644][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.735352][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.742934][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.750366][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.758037][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 548.765916][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 548.882429][ T1611] usb 4-1: USB disconnect, device number 5 [ 549.159755][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.167838][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.175393][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.183094][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.190318][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.198160][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.350649][ T7076] loop4: detected capacity change from 0 to 512 [ 549.463970][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.471952][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.479214][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.487062][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.494436][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.502323][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.509641][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.517964][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.574614][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.582381][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.589741][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.597410][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.605136][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.612721][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.619941][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.627591][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.713327][ T7076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.727287][ T7076] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.853520][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.865206][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.872967][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.880466][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.887832][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.895486][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 549.902782][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 549.910285][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 550.169328][ T7057] Non-string source [ 550.276935][ T5289] usb 3-1: USB disconnect, device number 9 [ 550.496012][ T7087] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 550.611860][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 550.619565][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 550.627096][ T7063] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 550.634849][ T7063] SQUASHFS error: read_indexes: reading block [6e4:0] [ 550.645765][ T7084] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.220: Directory hole found for htree leaf block 0 [ 550.796492][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 550.804770][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 550.812347][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 550.819858][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 550.827453][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 550.835064][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 550.842433][ T7065] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 550.849929][ T7065] SQUASHFS error: read_indexes: reading block [6e4:0] [ 551.563855][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.142640][ T7098] loop1: detected capacity change from 0 to 64 [ 552.592574][ T7102] ipvlan2: entered promiscuous mode [ 552.598121][ T7102] ipvlan2: entered allmulticast mode [ 552.607673][ T7102] ip6gretap0: entered allmulticast mode [ 552.768098][ T7101] loop2: detected capacity change from 0 to 512 [ 555.175272][ T7101] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 556.793508][ T5196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.825616][ T5196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.853520][ T5196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.944783][ T5201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.967070][ T7113] loop0: detected capacity change from 0 to 128 [ 557.005258][ T5201] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 557.031249][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 557.911415][ T7126] loop1: detected capacity change from 0 to 128 [ 557.924725][ T7113] bio_check_eod: 59 callbacks suppressed [ 557.924810][ T7113] syz.0.227: attempt to access beyond end of device [ 557.924810][ T7113] loop0: rw=2049, sector=153, nr_sectors = 88 limit=128 [ 558.354789][ T29] audit: type=1804 audit(1726673697.876:24): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.227" name="/newroot/3/file0/bus" dev="loop0" ino=1048672 res=1 errno=0 [ 558.377179][ T29] audit: type=1804 audit(1726673697.886:25): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.227" name="/newroot/3/file0/bus" dev="loop0" ino=1048672 res=1 errno=0 [ 558.398752][ T7136] loop2: detected capacity change from 0 to 512 [ 558.584472][ T7113] syz.0.227: attempt to access beyond end of device [ 558.584472][ T7113] loop0: rw=2049, sector=305, nr_sectors = 5 limit=128 [ 558.629138][ T7132] loop1: detected capacity change from 0 to 128 [ 558.635409][ T29] audit: type=1326 audit(1726673698.086:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7124 comm="syz.1.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe24f37def9 code=0x0 [ 559.301083][ T5201] Bluetooth: hci2: command tx timeout [ 559.401740][ T7132] vfat: Unknown parameter 'Ð;ݸÑU7‚ ‹d^ÚI;‰iÒôÅþPæô<癞ÓIÂsB2GïýI£æš5«#ɬ’„ˆÈ±HQ’JǤ×ÎHÔŽ¼úàÏŸ_\ZY}§\©<^TêIyùõ’Rª0÷ý§Ÿç‚a³rXüðèÒo‡Ï>ôÏòÇuWÕ]Õlu”¥ÖZ¿v¬5ÇVu·a*õÔ±-×Võ¦k·ýxËלÖæfWY͇ùͶíºÊjvUÃîªNKuÚ]e}dÕ›Ê4Mõ0/q2±½÷UuwqÑ*™¼~Å“Á¸þÖZ ëDÙJ‰H' [ 560.377702][ T7137] loop2: detected capacity change from 0 to 512 [ 560.469817][ T7137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 561.061637][ T7137] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 561.119771][ T7137] EXT4-fs (loop2): 1 truncate cleaned up [ 561.130927][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.467289][ T5201] Bluetooth: hci2: command tx timeout [ 561.562301][ T1280] kworker/u8:7: attempt to access beyond end of device [ 561.562301][ T1280] loop0: rw=1, sector=241, nr_sectors = 24 limit=128 [ 561.652485][ T7070] buffer_io_error: 44 callbacks suppressed [ 561.652583][ T7070] Buffer I/O error on dev loop7, logical block 4095, async page read [ 561.745480][ T3272] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.765046][ T1280] kworker/u8:7: attempt to access beyond end of device [ 561.765046][ T1280] loop0: rw=1, sector=273, nr_sectors = 32 limit=128 [ 561.863699][ T7109] chnl_net:caif_netlink_parms(): no params data found [ 561.885062][ T6765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.046285][ T3272] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.351248][ T3272] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.481687][ T7154] loop2: detected capacity change from 0 to 16 [ 562.590241][ T3272] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.726969][ T7149] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 562.736556][ T7154] erofs: (device loop2): mounted with root inode @ nid 36. [ 562.806379][ T7149] kvm: pic: single mode not supported [ 562.806837][ T7149] kvm: pic: non byte read [ 562.819481][ T7149] kvm: pic: non byte read [ 562.825585][ T7149] kvm: pic: non byte read [ 562.832822][ T7149] kvm: pic: non byte read [ 562.838577][ T7149] kvm: pic: non byte read [ 562.849097][ T7149] kvm: pic: non byte read [ 562.854795][ T7149] kvm: pic: non byte read [ 562.860133][ T7149] kvm: pic: level sensitive irq not supported [ 562.860468][ T7149] kvm: pic: non byte read [ 562.873387][ T7149] kvm: pic: level sensitive irq not supported [ 562.873781][ T7149] kvm: pic: non byte read [ 562.885999][ T7149] kvm: pic: level sensitive irq not supported [ 562.886377][ T7149] kvm: pic: non byte read [ 562.902000][ T7149] kvm: pic: single mode not supported [ 562.902080][ T7149] kvm: pic: level sensitive irq not supported [ 562.908839][ T7149] kvm: pic: single mode not supported [ 562.915565][ T7149] kvm: pic: level sensitive irq not supported [ 562.922545][ T7149] kvm: pic: level sensitive irq not supported [ 563.544122][ T5201] Bluetooth: hci2: command tx timeout [ 564.720640][ T3272] bridge_slave_1: left allmulticast mode [ 564.727225][ T3272] bridge_slave_1: left promiscuous mode [ 564.734775][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.622308][ T5201] Bluetooth: hci2: command tx timeout [ 566.024426][ T3272] bridge_slave_0: left allmulticast mode [ 566.030358][ T3272] bridge_slave_0: left promiscuous mode [ 566.037173][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.832396][ T5201] Bluetooth: hci1: link tx timeout [ 566.841162][ T5201] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.926341][ T3272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.064656][ T3272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.197091][ T3272] bond0 (unregistering): Released all slaves [ 567.223165][ T6765] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 46 [ 567.306101][ T6765] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 567.376188][ T6765] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 568.224460][ T5289] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 568.238635][ T5300] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 568.372239][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.384356][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.392503][ T7109] bridge_slave_0: entered allmulticast mode [ 568.402100][ T7109] bridge_slave_0: entered promiscuous mode [ 568.435010][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.443167][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.451366][ T7109] bridge_slave_1: entered allmulticast mode [ 568.458423][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 568.458723][ T7190] loop0: detected capacity change from 0 to 128 [ 568.488506][ T5300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.499370][ T5300] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 568.523177][ T7109] bridge_slave_1: entered promiscuous mode [ 568.534473][ T5289] usb 3-1: config 0 has an invalid interface number: 170 but max is 0 [ 568.543134][ T5289] usb 3-1: config 0 has no interface number 0 [ 568.549766][ T5289] usb 3-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 568.560992][ T5289] usb 3-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 568.573077][ T5289] usb 3-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 568.587463][ T5289] usb 3-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 568.599099][ T5289] usb 3-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 568.610493][ T5289] usb 3-1: config 0 interface 170 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 568.620938][ T5289] usb 3-1: config 0 interface 170 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 568.657953][ T5300] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.667782][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.676289][ T5300] usb 2-1: SerialNumber: syz [ 568.712405][ T7190] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 568.771299][ T5300] usb 2-1: bad CDC descriptors [ 568.782241][ T7190] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 568.826815][ T5289] usb 3-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11 [ 568.836447][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.844954][ T5289] usb 3-1: Product: syz [ 568.849397][ T5289] usb 3-1: Manufacturer: syz [ 568.854429][ T5289] usb 3-1: SerialNumber: syz [ 568.901478][ T5201] Bluetooth: hci1: command 0x0406 tx timeout [ 568.963957][ T5289] usb 3-1: config 0 descriptor?? [ 568.973408][ T7186] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 569.034688][ T5246] usb 2-1: USB disconnect, device number 6 [ 569.046231][ T3272] hsr_slave_0: left promiscuous mode [ 569.107139][ T7186] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 569.131847][ T3272] hsr_slave_1: left promiscuous mode [ 569.212494][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.220288][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.324905][ T3272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.332989][ T3272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.458613][ T3272] veth1_macvtap: left promiscuous mode [ 569.464955][ T3272] veth0_macvtap: left promiscuous mode [ 569.471105][ T3272] veth1_vlan: left promiscuous mode [ 569.476673][ T3272] veth0_vlan: left promiscuous mode [ 569.503043][ T7178] loop4: detected capacity change from 0 to 4096 [ 569.536849][ T1611] usb 3-1: USB disconnect, device number 10 [ 569.552799][ T7178] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 569.816096][ T5246] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 570.041499][ T5246] usb 1-1: Using ep0 maxpacket: 8 [ 570.099840][ T5246] usb 1-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 570.104422][ T7178] ntfs3: loop4: Failed to read $UpCase (-4). [ 570.111042][ T5246] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 570.131953][ T5246] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.145407][ T5246] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 570.155101][ T5246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.718245][ T3272] team0 (unregistering): Port device team_slave_1 removed [ 573.844471][ T3272] team0 (unregistering): Port device team_slave_0 removed [ 574.038878][ T7213] loop2: detected capacity change from 0 to 1024 [ 574.329267][ T5246] usb 1-1: string descriptor 0 read error: -71 [ 574.337121][ T5246] hub 1-1:1.0: bad descriptor, ignoring hub [ 574.343368][ T5246] hub 1-1:1.0: probe with driver hub failed with error -5 [ 574.352493][ T5246] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 574.378170][ T7213] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.432919][ T5246] usb 1-1: USB disconnect, device number 7 [ 574.712978][ T7109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.819451][ T7109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.015587][ T6857] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.757710][ T7109] team0: Port device team_slave_0 added [ 575.960580][ T7109] team0: Port device team_slave_1 added [ 576.031038][ T5246] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 576.251312][ T5246] usb 5-1: Using ep0 maxpacket: 32 [ 576.322614][ T5246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 576.404365][ T5246] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 576.414123][ T5246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.422717][ T5246] usb 5-1: Product: syz [ 576.427151][ T5246] usb 5-1: Manufacturer: syz [ 576.432227][ T5246] usb 5-1: SerialNumber: syz [ 576.454450][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.461768][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.493494][ T7109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.614160][ T5246] usb 5-1: config 0 descriptor?? [ 576.728556][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.736147][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.765293][ T7109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.933901][ T7233] loop4: detected capacity change from 0 to 1024 [ 578.875980][ T7109] hsr_slave_0: entered promiscuous mode [ 579.329134][ T5241] usb 5-1: USB disconnect, device number 2 [ 579.353095][ T7109] hsr_slave_1: entered promiscuous mode [ 579.429505][ T3518] hfsplus: b-tree write err: -5, ino 8 [ 579.461692][ T7240] unsupported nlmsg_type 40 [ 579.488278][ T7109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.496756][ T7109] Cannot create hsr debugfs directory [ 580.025469][ T7241] loop2: detected capacity change from 0 to 1024 [ 584.303697][ T7248] loop4: detected capacity change from 0 to 8 [ 584.404333][ T7248] SQUASHFS error: zlib decompression failed, data probably corrupt [ 584.412921][ T7248] SQUASHFS error: Failed to read block 0x9b: -5 [ 584.419414][ T7248] SQUASHFS error: Unable to read metadata cache entry [99] [ 584.428193][ T7248] SQUASHFS error: Unable to read inode 0x127 [ 585.124431][ T7167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.385248][ T7167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.667656][ T7167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.892830][ T7167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.470221][ T7167] bridge_slave_1: left allmulticast mode [ 586.477901][ T7167] bridge_slave_1: left promiscuous mode [ 586.484817][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.525084][ T7167] bridge_slave_0: left allmulticast mode [ 586.531280][ T7167] bridge_slave_0: left promiscuous mode [ 586.537942][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.182774][ T7167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.228026][ T7167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.308357][ T7167] bond0 (unregistering): Released all slaves [ 587.592920][ T7167] tipc: Left network mode [ 587.823328][ T7109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 588.023804][ T7282] loop7: detected capacity change from 16383 to 16384 [ 588.087663][ T7109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 588.309518][ T7167] hsr_slave_0: left promiscuous mode [ 588.353602][ T7167] hsr_slave_1: left promiscuous mode [ 588.378109][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.386439][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.401290][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.409199][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.526703][ T7167] veth1_macvtap: left promiscuous mode [ 588.530428][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.534484][ T7167] veth0_macvtap: left promiscuous mode [ 588.549676][ T7167] veth1_vlan: left promiscuous mode [ 588.555601][ T7167] veth0_vlan: left promiscuous mode [ 588.572088][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.590412][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.604463][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.616205][ T5201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 588.625899][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.561922][ T5300] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 589.746561][ T7167] team0 (unregistering): Port device team_slave_1 removed [ 589.787678][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 589.821479][ T5300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 589.824376][ T7167] team0 (unregistering): Port device team_slave_0 removed [ 589.910251][ T5300] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 589.920257][ T5300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.929005][ T5300] usb 2-1: Product: syz [ 589.933577][ T5300] usb 2-1: Manufacturer: syz [ 589.938454][ T5300] usb 2-1: SerialNumber: syz [ 590.030087][ T5300] usb 2-1: config 0 descriptor?? [ 590.096215][ T5300] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 590.295801][ T7109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.309796][ T5300] usb 2-1: USB disconnect, device number 7 [ 590.431155][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.438014][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.446101][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.465346][ T7278] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 590.478255][ T7109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.510252][ T7278] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 590.678957][ T7290] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.729707][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.739256][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.748704][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.758011][ T7278] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.985765][ T5192] Bluetooth: hci0: command tx timeout [ 591.817931][ T7314] loop1: detected capacity change from 0 to 64 [ 592.009932][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 592.569012][ T7109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.765622][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.773489][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.821612][ T7109] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.897847][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.905681][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.047129][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.054942][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.061035][ T5192] Bluetooth: hci0: command tx timeout [ 593.470051][ T7109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.648032][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.655995][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.670341][ T7290] bridge_slave_0: entered allmulticast mode [ 594.679774][ T7290] bridge_slave_0: entered promiscuous mode [ 594.838352][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.846518][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.854554][ T7290] bridge_slave_1: entered allmulticast mode [ 594.864207][ T7290] bridge_slave_1: entered promiscuous mode [ 595.178468][ T5192] Bluetooth: hci0: command tx timeout [ 595.269944][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.299847][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.577951][ T7290] team0: Port device team_slave_0 added [ 595.654099][ T7290] team0: Port device team_slave_1 added [ 595.783892][ T5246] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 595.984779][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.992552][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.019084][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.061178][ T5246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.072666][ T5246] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.101051][ T5246] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 596.110435][ T5246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.184061][ T5246] usb 1-1: config 0 descriptor?? [ 596.187094][ T7109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.206248][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.214004][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.243524][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.279964][ T7362] loop4: detected capacity change from 0 to 256 [ 596.894120][ T7290] hsr_slave_0: entered promiscuous mode [ 596.982750][ T7290] hsr_slave_1: entered promiscuous mode [ 597.171414][ T7290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.179408][ T7290] Cannot create hsr debugfs directory [ 597.240500][ T5192] Bluetooth: hci0: command tx timeout [ 597.314327][ T5246] usbhid 1-1:0.0: can't add hid device: -71 [ 597.321586][ T5246] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 597.335662][ T5246] usb 1-1: USB disconnect, device number 8 [ 597.814129][ T7109] veth0_vlan: entered promiscuous mode [ 597.925192][ T7109] veth1_vlan: entered promiscuous mode [ 598.597502][ T7383] loop0: detected capacity change from 0 to 512 [ 598.708671][ T7383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.723090][ T7383] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 598.740290][ T7109] veth0_macvtap: entered promiscuous mode [ 598.865556][ T7109] veth1_macvtap: entered promiscuous mode [ 598.913492][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 599.056760][ T7393] loop4: detected capacity change from 0 to 64 [ 599.351892][ T29] audit: type=1326 audit(1726673738.986:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7382 comm="syz.0.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9edf97def9 code=0x0 [ 599.356603][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.387588][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.398238][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.412470][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.423687][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 599.434663][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.450569][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.458419][ T7290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 599.622311][ T7290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 599.692278][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.703698][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.717112][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.729767][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.742856][ T7109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.754009][ T7109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.769354][ T7109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.804065][ T7290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 599.918111][ T7290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 600.178862][ T7109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.190600][ T7109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.200340][ T7109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.209808][ T7109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.330995][ T1280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.464715][ T6857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.537775][ T1280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.786526][ T1280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.013332][ T1280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.761777][ T1280] bridge_slave_1: left allmulticast mode [ 601.767758][ T1280] bridge_slave_1: left promiscuous mode [ 601.775026][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.846260][ T1280] bridge_slave_0: left allmulticast mode [ 601.852604][ T1280] bridge_slave_0: left promiscuous mode [ 601.863164][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.158633][ T7402] loop1: detected capacity change from 0 to 4096 [ 602.215826][ T7402] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 602.537689][ T1280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.582818][ T1280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.619481][ T1280] bond0 (unregistering): Released all slaves [ 603.638497][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.744671][ T1280] hsr_slave_0: left promiscuous mode [ 603.810441][ T1280] hsr_slave_1: left promiscuous mode [ 603.863117][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.871141][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.976941][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.984842][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.109628][ T1280] veth1_macvtap: left promiscuous mode [ 604.118780][ T1280] veth0_macvtap: left promiscuous mode [ 604.125009][ T1280] veth1_vlan: left promiscuous mode [ 604.130780][ T1280] veth0_vlan: left promiscuous mode [ 604.288884][ T5192] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.330617][ T5192] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.340270][ T5192] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.360427][ T5192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.375477][ T5192] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 604.385015][ T5192] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 605.249215][ T7439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.307'. [ 605.259836][ T7439] netlink: 5 bytes leftover after parsing attributes in process `syz.1.307'. [ 605.269192][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 605.440659][ T1280] team0 (unregistering): Port device team_slave_1 removed [ 605.473349][ T1280] team0 (unregistering): Port device team_slave_0 removed [ 605.727420][ T7443] netlink: 'syz.0.306': attribute type 3 has an invalid length. [ 605.887826][ T7446] loop1: detected capacity change from 0 to 512 [ 606.225509][ T7449] ip6gretap0 speed is unknown, defaulting to 1000 [ 606.336748][ T7443] netlink: 'syz.0.306': attribute type 3 has an invalid length. [ 606.418532][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.443826][ T5201] Bluetooth: hci3: command tx timeout [ 606.560290][ T7424] ip6gretap0 speed is unknown, defaulting to 1000 [ 606.956733][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.964755][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.194877][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.202757][ T6384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.638416][ T7290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 607.650197][ T7290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.503232][ T5201] Bluetooth: hci3: command tx timeout [ 610.598171][ T5201] Bluetooth: hci3: command tx timeout [ 610.946492][ T7424] chnl_net:caif_netlink_parms(): no params data found [ 611.238612][ T7478] loop0: detected capacity change from 0 to 16 [ 611.322469][ T7478] erofs: (device loop0): mounted with root inode @ nid 36. [ 611.493351][ T7478] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 611.562313][ T7478] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[1851] [ 611.573830][ T7478] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 612.040295][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.686809][ T5201] Bluetooth: hci3: command tx timeout [ 613.097874][ T7497] netlink: 'syz.0.315': attribute type 3 has an invalid length. [ 613.370591][ T5192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 613.385323][ T5192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 613.396702][ T5192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 613.419967][ T5192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 613.434816][ T5192] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 613.444598][ T5192] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.068835][ T7290] veth0_vlan: entered promiscuous mode [ 614.109668][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.123703][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.131695][ T7424] bridge_slave_0: entered allmulticast mode [ 614.141074][ T7424] bridge_slave_0: entered promiscuous mode [ 614.284053][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.292081][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.299970][ T7424] bridge_slave_1: entered allmulticast mode [ 614.309437][ T7424] bridge_slave_1: entered promiscuous mode [ 614.418488][ T7290] veth1_vlan: entered promiscuous mode [ 614.541164][ T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 614.607149][ T7501] ip6gretap0 speed is unknown, defaulting to 1000 [ 614.764970][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 614.802290][ T44] usb 2-1: config 0 has too many interfaces: 231, using maximum allowed: 32 [ 614.811529][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 231 [ 614.821085][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 614.868026][ T44] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice= 0.00 [ 614.878093][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 614.886568][ T44] usb 2-1: SerialNumber: syz [ 614.921241][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.961674][ T5241] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 614.994526][ T44] usb 2-1: config 0 descriptor?? [ 615.024832][ T44] input: USB Touchscreen 134c:0002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 615.139344][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.194247][ T5241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.205204][ T5241] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.218715][ T5241] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 615.228510][ T5241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.327534][ T8] usb 2-1: USB disconnect, device number 8 [ 615.371211][ T5241] usb 1-1: config 0 descriptor?? [ 615.436001][ T5241] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 615.541063][ T5201] Bluetooth: hci5: command tx timeout [ 615.757386][ T7424] team0: Port device team_slave_0 added [ 615.863469][ T6384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.909300][ T7424] team0: Port device team_slave_1 added [ 615.924114][ T7290] veth0_macvtap: entered promiscuous mode [ 616.005221][ T6384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.068456][ T7521] usb usb8: usbfs: process 7521 (syz.0.319) did not claim interface 0 before use [ 616.357322][ T6384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.483528][ T6384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.513238][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.520452][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.547282][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.613346][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.620907][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.647986][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.667092][ T7290] veth1_macvtap: entered promiscuous mode [ 617.303853][ T7424] hsr_slave_0: entered promiscuous mode [ 617.360268][ T7424] hsr_slave_1: entered promiscuous mode [ 617.398462][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.406615][ T7424] Cannot create hsr debugfs directory [ 617.545861][ T7537] loop1: detected capacity change from 0 to 128 [ 617.604255][ T7537] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 617.624221][ T5201] Bluetooth: hci5: command tx timeout [ 617.806352][ T6384] bridge_slave_1: left allmulticast mode [ 617.812622][ T6384] bridge_slave_1: left promiscuous mode [ 617.819346][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.867585][ T6384] bridge_slave_0: left allmulticast mode [ 617.873981][ T6384] bridge_slave_0: left promiscuous mode [ 617.880854][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.918544][ T7537] FAT-fs (loop1): FAT read failed (blocknr 128) [ 617.971214][ T5300] usb 1-1: USB disconnect, device number 9 [ 618.712776][ T6384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.764306][ T6384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.798846][ T6384] bond0 (unregistering): Released all slaves [ 618.849010][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.863200][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.874492][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.885271][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.895498][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.906404][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.925083][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.142368][ T7501] chnl_net:caif_netlink_parms(): no params data found [ 619.179966][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.190870][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.201076][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.211837][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.222032][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.233125][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.248124][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.436945][ T7290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.446339][ T7290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.455551][ T7290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.461832][ T5300] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 619.465513][ T7290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.560279][ T6384] hsr_slave_0: left promiscuous mode [ 619.583813][ T6384] hsr_slave_1: left promiscuous mode [ 619.596722][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.604711][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.630068][ T6384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.638856][ T6384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.672593][ T7545] loop1: detected capacity change from 0 to 4096 [ 619.679341][ T5300] usb 1-1: Using ep0 maxpacket: 32 [ 619.684073][ T6384] veth1_macvtap: left promiscuous mode [ 619.693691][ T6384] veth0_macvtap: left promiscuous mode [ 619.699669][ T6384] veth1_vlan: left promiscuous mode [ 619.705482][ T6384] veth0_vlan: left promiscuous mode [ 619.708545][ T7545] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 619.715622][ T5300] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 619.722026][ T5192] Bluetooth: hci5: command tx timeout [ 619.730666][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.994708][ T5300] usb 1-1: config 0 descriptor?? [ 620.062628][ T5300] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 620.423959][ T5192] Bluetooth: hci4: command 0x0406 tx timeout [ 620.720309][ T5300] usb 1-1: USB disconnect, device number 10 [ 620.744394][ T6384] team0 (unregistering): Port device team_slave_1 removed [ 620.781167][ T6384] team0 (unregistering): Port device team_slave_0 removed [ 621.782608][ T7554] input: syz0 as /devices/virtual/input/input9 [ 621.811357][ T5201] Bluetooth: hci5: command tx timeout [ 622.005132][ T7554] netlink: 'syz.1.327': attribute type 21 has an invalid length. [ 622.013481][ T7554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.327'. [ 622.363505][ T7555] loop1: detected capacity change from 0 to 256 [ 622.414385][ T7555] vfat: Unknown parameter 'codepace' [ 622.946432][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.960413][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.968537][ T7501] bridge_slave_0: entered allmulticast mode [ 622.977918][ T7501] bridge_slave_0: entered promiscuous mode [ 623.172709][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.180504][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.188572][ T7501] bridge_slave_1: entered allmulticast mode [ 623.198052][ T7501] bridge_slave_1: entered promiscuous mode [ 623.639967][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.814166][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.200377][ T7424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 624.280172][ T7501] team0: Port device team_slave_0 added [ 624.332583][ T7424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 624.404702][ T7501] team0: Port device team_slave_1 added [ 624.425418][ T7424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 624.656080][ T7424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 624.867027][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.874435][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.903955][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.008612][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.017057][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.044739][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.268954][ T7597] loop0: detected capacity change from 0 to 64 [ 625.491254][ T29] audit: type=1800 audit(1726673765.086:28): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.335" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 625.782238][ T7600] loop1: detected capacity change from 0 to 1024 [ 625.873014][ T7501] hsr_slave_0: entered promiscuous mode [ 625.912980][ T7501] hsr_slave_1: entered promiscuous mode [ 625.947840][ T7501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.956328][ T7501] Cannot create hsr debugfs directory [ 626.063250][ T7600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.618826][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.664044][ T6780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.042353][ T7424] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.224093][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.231976][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.369300][ T7617] loop1: detected capacity change from 0 to 1024 [ 627.397010][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.404975][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.558123][ T7617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.573965][ T7617] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.346895][ T7501] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 628.363933][ T6780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.516649][ T7501] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 628.656075][ T7501] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 628.737261][ T7501] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 628.886282][ T7634] loop1: detected capacity change from 0 to 256 [ 629.127565][ T7634] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 629.269554][ T7634] process 'syz.1.341' launched './file0/file0' with NULL argv: empty string added [ 630.045156][ T3764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.053367][ T3764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.356332][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.364786][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.416500][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.562372][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 630.682916][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.814347][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.825953][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.838766][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 630.848584][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.916274][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.943133][ T7653] sch_fq: defrate 9 ignored. [ 630.960204][ T8] usb 2-1: config 0 descriptor?? [ 631.053988][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.062258][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.078620][ T7653] sctp: [Deprecated]: syz.0.345 (pid 7653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.078620][ T7653] Use struct sctp_sack_info instead [ 631.211227][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.218990][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.571446][ T8] wacom 0003:056A:0084.0003: unknown main item tag 0x0 [ 631.923205][ T8] wacom 0003:056A:0084.0003: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.1-1/input0 [ 632.111858][ T8] usb 2-1: USB disconnect, device number 9 [ 632.715724][ T29] audit: type=1326 audit(1726673772.306:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.2.262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde14f7def9 code=0x0 [ 633.292869][ T7677] ip6gretap0 speed is unknown, defaulting to 1000 [ 633.473171][ T7680] netlink: 'syz.0.346': attribute type 4 has an invalid length. [ 634.360087][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 634.380111][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.465793][ T7424] veth0_vlan: entered promiscuous mode [ 634.691040][ T7424] veth1_vlan: entered promiscuous mode [ 635.247146][ T7424] veth0_macvtap: entered promiscuous mode [ 635.282226][ T7501] veth0_vlan: entered promiscuous mode [ 635.373751][ T7424] veth1_macvtap: entered promiscuous mode [ 635.516629][ T7501] veth1_vlan: entered promiscuous mode [ 635.647804][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.660246][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.670914][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.681762][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.692046][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.702880][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.718838][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.961857][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.962458][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 635.972695][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.972781][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.003059][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.013231][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.024202][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.039963][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.172400][ T7501] veth0_macvtap: entered promiscuous mode [ 636.223901][ T7424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.233863][ T7424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.243130][ T7424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.252295][ T7424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.305474][ T7501] veth1_macvtap: entered promiscuous mode [ 636.333002][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.346199][ T44] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 636.355751][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.433093][ T44] usb 3-1: config 0 descriptor?? [ 636.555456][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.566438][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.577939][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.589129][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.600026][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.611022][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.621226][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.632176][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.647976][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.690836][ C1] hrtimer: interrupt took 166418 ns [ 636.794226][ T7701] can0: slcan on ptm0. [ 636.963327][ T44] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 637.013249][ T7700] can0 (unregistered): slcan off ptm0. [ 637.068366][ T44] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0004/input/input13 [ 637.120854][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.132049][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.149613][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.161264][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.171739][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.182883][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.203770][ T7501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.214977][ T7501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.243358][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.473574][ T7501] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.483429][ T7501] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.493962][ T7501] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.503475][ T7501] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.594149][ T44] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 637.786958][ T44] usb 3-1: USB disconnect, device number 11 [ 639.081925][ T7717] loop1: detected capacity change from 0 to 512 [ 639.181130][ T7717] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.307022][ T7717] EXT4-fs (loop1): 1 truncate cleaned up [ 639.315011][ T7717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.484627][ T7717] tmpfs: Cannot retroactively limit inodes [ 640.132595][ T6780] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 640.232927][ T6780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.901170][ T5192] Bluetooth: hci1: command 0x0406 tx timeout [ 643.733417][ T1611] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 643.804631][ T7787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 644.000993][ T1611] usb 1-1: Using ep0 maxpacket: 8 [ 644.034962][ T1611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.051875][ T1611] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 644.062755][ T1611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.124034][ T1611] usb 1-1: config 0 descriptor?? [ 644.281980][ T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 644.403329][ T1611] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 644.598053][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.609615][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.621868][ T44] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 644.631525][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.714222][ T44] usb 2-1: config 0 descriptor?? [ 644.715043][ T8] usb 1-1: USB disconnect, device number 11 [ 644.807318][ T8] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 645.321660][ T44] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 645.329139][ T44] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 645.336704][ T44] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x7 [ 645.344290][ T44] mcp2221 0003:04D8:00DD.0005: item fetching failed at offset 4/5 [ 645.412550][ T6384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.420877][ T6384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.491421][ T44] mcp2221 0003:04D8:00DD.0005: can't parse reports [ 645.498619][ T44] mcp2221 0003:04D8:00DD.0005: probe with driver mcp2221 failed with error -22 [ 645.634658][ T44] usb 2-1: USB disconnect, device number 10 [ 645.644947][ T6384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.653802][ T6384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.758153][ T5300] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 645.775279][ T7167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.783911][ T7167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.988570][ T5300] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.001909][ T5300] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.016488][ T5300] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 646.026125][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.076940][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.085267][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.122540][ T5300] usb 3-1: config 0 descriptor?? [ 646.184309][ T5300] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 646.768212][ T7814] usb usb8: usbfs: process 7814 (syz.2.376) did not claim interface 0 before use [ 647.047985][ T7816] loop1: detected capacity change from 0 to 512 [ 647.238370][ T7816] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 647.247962][ T7816] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 647.360392][ T7816] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 647.447155][ T7816] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.378: iget: bad extended attribute block 19 [ 647.565590][ T7816] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.378: couldn't read orphan inode 15 (err -117) [ 647.643888][ T7816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.121293][ T1611] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 648.331508][ T1611] usb 2-1: Using ep0 maxpacket: 32 [ 648.375741][ T1611] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.387475][ T1611] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.397702][ T1611] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 648.407070][ T1611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.498361][ T1611] hub 2-1:4.0: USB hub found [ 648.612722][ T7819] loop0: detected capacity change from 0 to 4096 [ 648.731390][ T7819] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 648.781282][ T1611] hub 2-1:4.0: 31 ports detected [ 648.786811][ T1611] usb 2-1: selecting invalid altsetting 1 [ 648.793208][ T1611] hub 2-1:4.0: Using single TT (err -22) [ 648.891706][ T44] usb 3-1: USB disconnect, device number 12 [ 648.910256][ T1611] hub 2-1:4.0: insufficient power available to use all downstream ports [ 649.025844][ T1611] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 649.032564][ T1611] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 649.182187][ T1611] usb 2-1: USB disconnect, device number 11 [ 649.472551][ T7828] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 19: invalid block bitmap [ 649.618625][ T7820] loop3: detected capacity change from 0 to 2048 [ 649.736029][ T7820] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18881, location=18881 [ 649.995588][ T6780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.673873][ T7842] loop1: detected capacity change from 0 to 256 [ 650.871765][ T7842] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 651.404516][ T7851] netlink: 232 bytes leftover after parsing attributes in process `syz.3.385'. [ 651.413949][ T7851] netlink: 72 bytes leftover after parsing attributes in process `syz.3.385'. [ 652.059693][ T7855] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 652.167441][ T7855] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 652.599983][ T7863] loop0: detected capacity change from 0 to 512 [ 652.641463][ T7863] EXT4-fs: Ignoring removed i_version option [ 652.647778][ T7863] EXT4-fs: Ignoring removed nobh option [ 652.778951][ T7863] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 652.959385][ T7863] EXT4-fs (loop0): 1 truncate cleaned up [ 652.967227][ T7863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.547559][ T6857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.582080][ T5249] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 653.801421][ T5249] usb 2-1: Using ep0 maxpacket: 32 [ 653.918856][ T5249] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 653.928830][ T5249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.937571][ T5249] usb 2-1: Product: syz [ 653.942174][ T5249] usb 2-1: Manufacturer: syz [ 653.949126][ T5249] usb 2-1: SerialNumber: syz [ 654.033913][ T5249] usb 2-1: config 0 descriptor?? [ 654.229630][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.237139][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.768119][ T5249] (unnamed net_device) (uninitialized): Assigned a random MAC address: da:7b:cf:ca:18:00 [ 654.797770][ T5249] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 654.953895][ T5249] usb 2-1: USB disconnect, device number 12 [ 654.982405][ T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 655.187175][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 655.259561][ T44] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 655.269573][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 655.280639][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 655.291347][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 655.301785][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 655.320982][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 655.330338][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.641688][ T44] usb 3-1: GET_CAPABILITIES returned 2f [ 655.647768][ T44] usbtmc 3-1:16.0: can't read capabilities [ 655.860335][ T7903] loop0: detected capacity change from 0 to 1024 [ 655.889072][ T1611] usb 3-1: USB disconnect, device number 13 [ 656.047292][ T7903] hfsplus: extend alloc file! (8192,512,16777719) [ 656.080492][ T7900] loop4: detected capacity change from 0 to 2048 [ 656.128671][ T7900] EXT4-fs: Ignoring removed mblk_io_submit option [ 656.386854][ T7900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.573998][ T7911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 656.650920][ T7911] EXT4-fs (loop4): Remounting filesystem read-only [ 657.234211][ T7424] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.666051][ T7940] loop4: detected capacity change from 0 to 128 [ 658.768931][ T7940] EXT4-fs: Ignoring removed nobh option [ 658.990035][ T7940] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 659.020216][ T7940] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 659.106126][ T7949] loop3: detected capacity change from 0 to 64 [ 659.161598][ T7948] Trying to free block not in datazone [ 659.167480][ T7948] Trying to free block not in datazone [ 659.771346][ T7424] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 659.849751][ T7956] loop0: detected capacity change from 0 to 512 [ 659.961559][ T7956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 660.117319][ T7956] EXT4-fs (loop0): 1 truncate cleaned up [ 660.129870][ T7956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.270950][ T5300] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 660.461462][ T5300] usb 4-1: Using ep0 maxpacket: 8 [ 660.484083][ T7965] loop4: detected capacity change from 0 to 512 [ 660.570954][ T5300] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 660.580479][ T5300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.592272][ T5300] usb 4-1: Product: syz [ 660.596741][ T5300] usb 4-1: Manufacturer: syz [ 660.601741][ T5300] usb 4-1: SerialNumber: syz [ 660.697194][ T5300] usb 4-1: config 0 descriptor?? [ 660.776094][ T5300] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 660.816458][ T7965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.827063][ T6857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.830250][ T7965] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.011477][ T7971] loop2: detected capacity change from 0 to 1024 [ 661.467376][ T7424] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.486342][ T3364] hfsplus: b-tree write err: -5, ino 4 [ 661.531983][ T5300] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 662.024371][ T5300] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 662.031157][ T5300] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 662.052179][ T7987] loop2: detected capacity change from 0 to 164 [ 662.286852][ T5300] usb 4-1: USB disconnect, device number 6 [ 662.309148][ T7987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 662.695155][ T7987] ip6gretap0 speed is unknown, defaulting to 1000 [ 663.269187][ T7978] loop1: detected capacity change from 0 to 4096 [ 663.330553][ T7996] loop0: detected capacity change from 0 to 256 [ 663.417233][ T7978] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 663.858795][ T8001] loop3: detected capacity change from 0 to 128 [ 663.895238][ T8003] loop4: detected capacity change from 0 to 8 [ 663.948780][ T7978] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 664.057961][ T8001] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 664.081078][ T8001] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.272177][ T8003] SQUASHFS error: Corrupted symlink [ 664.418705][ T8001] EXT4-fs (loop3): shut down requested (0) [ 665.053294][ T7501] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.845418][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 666.898567][ T8012] loop0: detected capacity change from 0 to 4096 [ 667.693501][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'. [ 669.171824][ T8063] loop0: detected capacity change from 0 to 256 [ 669.190352][ T8063] exfat: Deprecated parameter 'namecase' [ 669.417916][ T8063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 669.668296][ T29] audit: type=1800 audit(1726673809.256:30): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.457" name="file1" dev="loop0" ino=1048688 res=0 errno=0 [ 669.690858][ T29] audit: type=1800 audit(1726673809.276:31): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.457" name="file1" dev="loop0" ino=1048688 res=0 errno=0 [ 670.015925][ T8072] loop3: detected capacity change from 0 to 8 [ 670.069640][ T8067] loop2: detected capacity change from 0 to 2048 [ 670.229906][ T8075] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 670.257530][ T8072] SQUASHFS error: Failed to read block 0x4de: -5 [ 670.273095][ T8072] SQUASHFS error: Failed to read block 0x4de: -5 [ 670.338187][ T29] audit: type=1800 audit(1726673809.926:32): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.460" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 670.359291][ T29] audit: type=1800 audit(1726673809.996:33): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.458" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 670.387321][ T8067] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2097152) [ 670.431402][ T8072] SQUASHFS error: Failed to read block 0x4de: -5 [ 670.438657][ T8072] SQUASHFS error: Failed to read block 0x4de: -5 [ 670.446107][ T8072] SQUASHFS error: Failed to read block 0x4de: -5 [ 670.453382][ T8072] SQUASHFS error: Failed to read block 0x4de: -5 [ 670.461600][ T8067] Remounting filesystem read-only [ 670.624880][ T5300] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 670.796720][ T8060] loop1: detected capacity change from 0 to 4096 [ 670.915355][ T8081] bridge1: entered promiscuous mode [ 670.922327][ T8081] bridge1: entered allmulticast mode [ 671.010191][ T5300] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 671.010284][ T8082] Bluetooth: MGMT ver 1.23 [ 671.024369][ T5300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.052308][ T5300] usb 5-1: config 0 descriptor?? [ 671.951251][ T5300] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 671.993990][ T7290] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 672.015719][ T7290] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 672.023424][ T7290] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 672.031293][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.040532][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.049974][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.191692][ T5300] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 672.200289][ T7290] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 672.211080][ T7290] NILFS (loop2): discard dirty block: blocknr=3, size=1024 [ 672.218567][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.228911][ T7290] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 672.236581][ T7290] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 672.244514][ T7290] NILFS (loop2): discard dirty page: offset=268697600, ino=6 [ 672.252782][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.262110][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 672.269600][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 672.277232][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 672.286499][ T5300] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 672.629488][ T7290] NILFS (loop2): discard dirty page: offset=4096, ino=2097152 [ 672.637820][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 672.646276][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.655561][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.665340][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.679257][ T1611] usb 5-1: USB disconnect, device number 3 [ 672.955504][ T7290] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 672.962704][ T7290] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 672.970291][ T7290] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 672.978201][ T7290] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 672.988134][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 672.997943][ T7290] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 673.005564][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 673.014903][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 673.024133][ T7290] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 673.034951][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 673.045223][ T7290] NILFS (loop2): discard dirty page: offset=67371008, ino=3 [ 673.052976][ T7290] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 673.062250][ T5201] Bluetooth: hci0: command tx timeout [ 673.062283][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 673.075369][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 673.082972][ T7290] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 674.488762][ T8100] loop3: detected capacity change from 0 to 8 [ 674.851920][ T8100] kvm: kvm [8099]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0xe55 [ 675.754792][ T8089] loop0: detected capacity change from 0 to 4096 [ 675.851209][ T8089] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 676.298389][ T8089] ntfs3: loop0: ino=1b, "file0" attr_set_size [ 676.307921][ T8089] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 676.566479][ T8118] loop3: detected capacity change from 0 to 2048 [ 676.646569][ T8118] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 676.863904][ T8127] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 677.231456][ T29] audit: type=1800 audit(1726673816.816:34): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.476" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 677.252658][ T29] audit: type=1800 audit(1726673816.816:35): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.476" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 677.436262][ T8136] loop2: detected capacity change from 0 to 256 [ 677.783584][ T8136] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 678.152963][ T29] audit: type=1804 audit(1726673817.726:36): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.483" name="/newroot/30/file2/bus" dev="loop2" ino=1048689 res=1 errno=0 [ 680.142950][ T8161] loop2: detected capacity change from 0 to 2048 [ 680.252266][ T8161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 680.629418][ T8172] loop1: detected capacity change from 0 to 512 [ 680.692527][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 680.781814][ T8172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.795304][ T8172] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.901595][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 680.929652][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 680.941387][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 680.951953][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 680.962321][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.975858][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 680.985516][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.054646][ T8172] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.499: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 681.145924][ T8172] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.499: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 681.232403][ T8172] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.499: path /85/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 681.337047][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 681.343054][ T8] usbtmc 1-1:16.0: can't read capabilities [ 681.374216][ T8177] EXT4-fs error (device loop1): ext4_map_blocks:609: inode #2: block 18: comm syz.1.499: lblock 23 mapped to illegal pblock 18 (length 1) [ 681.476805][ T8184] loop2: detected capacity change from 0 to 256 [ 681.592778][ T8] usb 1-1: USB disconnect, device number 12 [ 681.914661][ T6780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.638100][ T8213] ip6gretap0 speed is unknown, defaulting to 1000 [ 683.877643][ T8214] loop2: detected capacity change from 0 to 1024 [ 685.091216][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 685.354792][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.366305][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.376528][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 685.389932][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 685.399378][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.476361][ T8] usb 3-1: config 0 descriptor?? [ 686.004587][ T8] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 686.094339][ T8] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 686.250041][ T8] usb 3-1: USB disconnect, device number 14 [ 688.138483][ T8241] loop0: detected capacity change from 0 to 128 [ 688.299049][ T8241] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 688.332780][ T8241] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 688.446171][ T8242] loop1: detected capacity change from 0 to 512 [ 688.551037][ T8242] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.521: casefold flag without casefold feature [ 688.641055][ T8242] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.521: couldn't read orphan inode 15 (err -117) [ 688.733680][ T8242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.920955][ T6857] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 689.305872][ T8250] loop0: detected capacity change from 0 to 64 [ 689.672298][ T8254] netlink: 'syz.3.525': attribute type 1 has an invalid length. [ 689.680248][ T8254] netlink: 'syz.3.525': attribute type 4 has an invalid length. [ 689.688464][ T8254] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.525'. [ 689.798653][ T8252] loop2: detected capacity change from 0 to 1024 [ 690.014275][ T6780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.365337][ T8256] netlink: 72 bytes leftover after parsing attributes in process `syz.4.526'. [ 690.374848][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.526'. [ 690.422837][ T8252] Process accounting resumed [ 691.141519][ T5249] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 691.346141][ T8263] netlink: 'syz.3.529': attribute type 2 has an invalid length. [ 691.405808][ T5249] usb 2-1: Using ep0 maxpacket: 8 [ 691.451215][ T5249] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 691.463463][ T5201] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 691.463645][ T5201] Bluetooth: hci0: Injecting HCI hardware error event [ 691.464243][ T5201] Bluetooth: hci0: hardware error 0x00 [ 691.490048][ T5249] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.500325][ T5249] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.512995][ T5249] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.523816][ T5249] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.537353][ T5249] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 691.547093][ T5249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.876708][ T5300] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 691.891026][ T1611] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 691.899854][ T5249] usb 2-1: usb_control_msg returned -32 [ 691.906635][ T5249] usbtmc 2-1:16.0: can't read capabilities [ 691.983486][ T8266] loop2: detected capacity change from 0 to 2048 [ 692.006639][ T8272] loop3: detected capacity change from 0 to 1024 [ 692.051331][ T8266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.087437][ T8272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.115160][ T1611] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 692.115907][ T5300] usb 5-1: config index 0 descriptor too short (expected 2207, got 159) [ 692.132157][ T5300] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 692.140592][ T5300] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 692.149795][ T5300] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.152787][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.160453][ T5300] usb 5-1: config 1 has no interface number 1 [ 692.169546][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.178166][ T5300] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 692.178361][ T5300] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 692.178572][ T5300] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.230954][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.273251][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.275228][ T5300] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 692.288891][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.295022][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.295176][ T5300] usb 5-1: Product: syz [ 692.295298][ T5300] usb 5-1: Manufacturer: syz [ 692.295418][ T5300] usb 5-1: SerialNumber: syz [ 692.329571][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.340417][ T29] audit: type=1800 audit(1726673831.916:37): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.533" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 692.398644][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.408125][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.419846][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.476473][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.492182][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.505586][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.556536][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.566078][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.577807][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.677112][ T5300] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 692.684174][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.694910][ T7501] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.714692][ T7290] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.726024][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.737346][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.836832][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.846411][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.858006][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 692.939286][ T1611] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 692.948872][ T1611] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 692.961320][ T1611] usb 1-1: config 0 interface 0 has no altsetting 0 [ 693.027892][ T5300] hub 5-1:1.3: bad descriptor, ignoring hub [ 693.034388][ T5300] hub 5-1:1.3: probe with driver hub failed with error -5 [ 693.047269][ T1611] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 693.057464][ T1611] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 693.068109][ T1611] usb 1-1: Product: syz [ 693.073110][ T1611] usb 1-1: Manufacturer: syz [ 693.077976][ T1611] usb 1-1: SerialNumber: syz [ 693.116578][ T1611] usb 1-1: config 0 descriptor?? [ 693.159683][ T1611] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 [ 693.175159][ T5300] usb 5-1: USB disconnect, device number 4 [ 693.606761][ T8270] ===================================================== [ 693.625338][ T5201] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 693.633315][ T8270] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x597/0x2350 [ 693.650236][ T8270] usb_submit_urb+0x597/0x2350 [ 693.655594][ T8270] usbtmc_write+0xc2c/0x1210 [ 693.661505][ T8270] vfs_write+0x487/0x1540 [ 693.666783][ T8270] ksys_write+0x20f/0x4c0 [ 693.671774][ T8270] __x64_sys_write+0x93/0xe0 [ 693.676845][ T8270] x64_sys_call+0x306a/0x3ba0 [ 693.682217][ T8270] do_syscall_64+0xcd/0x1e0 [ 693.687031][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.693685][ T8270] [ 693.696215][ T8270] Uninit was created at: [ 693.701308][ T8270] __kmalloc_cache_noprof+0x4f0/0xb00 [ 693.707051][ T8270] usbtmc_write+0x3cd/0x1210 [ 693.726543][ T8270] vfs_write+0x487/0x1540 [ 693.731604][ T8270] ksys_write+0x20f/0x4c0 [ 693.736242][ T8270] __x64_sys_write+0x93/0xe0 [ 693.741356][ T8270] x64_sys_call+0x306a/0x3ba0 [ 693.746412][ T8270] do_syscall_64+0xcd/0x1e0 [ 693.751578][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.757870][ T8270] [ 693.760450][ T8270] Bytes 13-15 of 16 are uninitialized [ 693.766298][ T8270] Memory access of size 16 starts at ffff88804d55e000 [ 693.773650][ T8270] [ 693.776248][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.0.532 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 693.787131][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 693.797745][ T8270] ===================================================== [ 693.805226][ T8270] Disabling lock debugging due to kernel taint [ 693.812263][ T8270] Kernel panic - not syncing: kmsan.panic set ... [ 693.818853][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.0.532 Tainted: G B 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 693.830824][ T8270] Tainted: [B]=BAD_PAGE [ 693.835104][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 693.845330][ T8270] Call Trace: [ 693.848748][ T8270] [ 693.851823][ T8270] dump_stack_lvl+0x216/0x2d0 [ 693.856764][ T8270] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 693.862814][ T8270] dump_stack+0x1e/0x30 [ 693.867181][ T8270] panic+0x4e2/0xce0 [ 693.871383][ T8270] ? kmsan_get_metadata+0x41/0x1c0 [ 693.876732][ T8270] kmsan_report+0x2c7/0x2d0 [ 693.881431][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 693.886824][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 693.892204][ T8270] ? kmsan_internal_check_memory+0x48c/0x560 [ 693.898401][ T8270] ? kmsan_handle_urb+0x2c/0x40 [ 693.903452][ T8270] ? usb_submit_urb+0x597/0x2350 [ 693.908570][ T8270] ? usbtmc_write+0xc2c/0x1210 [ 693.913523][ T8270] ? vfs_write+0x487/0x1540 [ 693.918200][ T8270] ? ksys_write+0x20f/0x4c0 [ 693.922884][ T8270] ? __x64_sys_write+0x93/0xe0 [ 693.927838][ T8270] ? x64_sys_call+0x306a/0x3ba0 [ 693.932887][ T8270] ? do_syscall_64+0xcd/0x1e0 [ 693.937740][ T8270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.944202][ T8270] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 693.950208][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 693.955596][ T8270] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 693.962231][ T8270] ? kmsan_internal_poison_memory+0x7d/0x90 [ 693.968323][ T8270] ? x64_sys_call+0x306a/0x3ba0 [ 693.973438][ T8270] ? kmsan_internal_poison_memory+0x49/0x90 [ 693.979563][ T8270] ? kmsan_slab_alloc+0xdf/0x160 [ 693.984710][ T8270] ? __kmalloc_cache_noprof+0x4f0/0xb00 [ 693.990494][ T8270] ? usbtmc_write+0x3cd/0x1210 [ 693.995479][ T8270] ? vfs_write+0x487/0x1540 [ 694.000149][ T8270] ? ksys_write+0x20f/0x4c0 [ 694.004823][ T8270] ? __x64_sys_write+0x93/0xe0 [ 694.009762][ T8270] ? x64_sys_call+0x306a/0x3ba0 [ 694.014822][ T8270] ? do_syscall_64+0xcd/0x1e0 [ 694.019700][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 694.025094][ T8270] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 694.031659][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 694.037040][ T8270] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 694.043054][ T8270] kmsan_internal_check_memory+0x48c/0x560 [ 694.049092][ T8270] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 694.055172][ T8270] kmsan_handle_urb+0x2c/0x40 [ 694.060108][ T8270] usb_submit_urb+0x597/0x2350 [ 694.065057][ T8270] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 694.071077][ T8270] usbtmc_write+0xc2c/0x1210 [ 694.075881][ T8270] ? __pfx_usbtmc_write+0x10/0x10 [ 694.081087][ T8270] vfs_write+0x487/0x1540 [ 694.085595][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 694.090969][ T8270] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 694.097529][ T8270] ? kmsan_get_metadata+0x13e/0x1c0 [ 694.102948][ T8270] ksys_write+0x20f/0x4c0 [ 694.107493][ T8270] __x64_sys_write+0x93/0xe0 [ 694.112278][ T8270] x64_sys_call+0x306a/0x3ba0 [ 694.117180][ T8270] do_syscall_64+0xcd/0x1e0 [ 694.121874][ T8270] ? clear_bhb_loop+0x25/0x80 [ 694.126789][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.132928][ T8270] RIP: 0033:0x7f9edf97def9 [ 694.137516][ T8270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.157336][ T8270] RSP: 002b:00007f9ee076d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 694.165953][ T8270] RAX: ffffffffffffffda RBX: 00007f9edfb35f80 RCX: 00007f9edf97def9 [ 694.174082][ T8270] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 694.182198][ T8270] RBP: 00007f9edf9f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 694.190323][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.198440][ T8270] R13: 0000000000000000 R14: 00007f9edfb35f80 R15: 00007ffff8cfc288 [ 694.206585][ T8270] [ 694.210091][ T8270] Kernel Offset: disabled [ 694.214498][ T8270] Rebooting in 86400 seconds..