last executing test programs: 37.846010987s ago: executing program 4 (id=2687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @remote}}}]}]}, 0x60}}, 0x0) 37.57112448s ago: executing program 4 (id=2693): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,nodiscard,iocharset=koi8-r,errors=continue,errors=continue,nointegrity\x00uid=', @ANYRESHEX=0x0, @ANYBLOB="2c71756f74612c646973636172643d3078303030303030303030303030313530332c75737271756f74612c6572726f72733d72656d6f756e742d726f2c646973636172642c6e6f7175559f571b8a06926f74612c726573697a652c61707072616973655f747970653d696d617369672c726f6f74636f6e746578743d73797361646d5f752c00"], 0x1, 0x60cc, &(0x7f000000c4c0)="$eJzs3buPXFcdB/DfPPdh4qxSRMFCaOOERwjxMxhDgCQFFDQpkFtka7OJLBxAtkFOZOFF21BQ8ReAkCgRokQU/AEpaOmoqLBkI4FScdHdPcd7ZzzjWbPeueM9n4+0vvd3z52dc/c7T9/HCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgvvud753tRMTln6YFaxGfil5EN2KlrtcjYmV9La/fj4gXYqc5no+IwVJEffudf56NeD0iPj4ece/+7Y168bl99uPbf/jbb79/7J2//n5w+j9/vNl7Y9p6t2798t9/unOwbQYAAIDSVFVVddLX/BPp+3237U4BAHOR3/+rJC8/8vWv/vHOnxepP2q1Wq1Wz6Fuqia70ywiYqt5m/ozg93xAPCU2YpP2u4CLZJ/0foRcaztTgALrdN2BzgU9+7f3uikfDvN94P13fZ8LMhI/ludB+d3TJvOMn6MybweX9vRi+em9GdlTn1YJDn/7nj+l3fbh2m9w85/XqblP9w99ak4Of/eeP5jjk7+3Yn5lyrn33+s/HvyBwAAAACABZb//3+t5f2/SwfflH151P7f9Tn1AQAAAAAAAACetIOO//eA8f8AAABgYdXf1Wu/Pr63bNq12OrllzoRz4ytDxQmnSyz2nY/AAAAAAAAAAAAAKAk/d1jeC91IgYR8czqalVV9U/TeP24Dnr7p13p2w8la/tFHgAAdn18fOxc/k7EckRcStf6G6yurlbV8spqtVqtLOXPs8Ol5Wql8b02T+tlS8N9fCDuD6v6ly03btc06/vyrPbx31ff17Dq7aNjT8gg/TWnNLcUNgAku+9G97wjHTFV9ey0Dx8wwvP/6PH8Zz/afpwCAAAAh6+qqqqTLud9Iu3z77bdKQBgLvL7//h+gUOpIw7396vVarVarX5k3VRNdqdZRMRW8zb1ZwbD8QPAU2YrPmm7C7RI/kXrR8QLbXcCWGidtjvAobh3//ZGJ+Xbab4fpPHd87EgI/lvdXZul28/aTrL+DEm83p8bUcvnpvSn+fn1IdFkvPvjud/ebd9mNY77PznZVr+9XautdCftuX8e+P5jzk6+Xcn5l+qnH//sfLvyR8AAAAAABZY/v//Nft/8yYDAAAAAAAAwFPn3v3bG/m817z//zMT1nP+59GU8+/Iv0g5/+5Y/l8cW6/XmL/79l7+/7p/e+N3N//56Tzdb/5LeaaTHlmd9IjopHvq9NP0IFv3sO1Bb1jf06DT7fXTMT/V4L24GtdiM86MrNtNf4+99rMj7XVPByPt50ba+w+1nx9pH6TrDlQruf1UbMSP4lq8u9Nety3N2P7lGe3VjPacf8/zv0g5/37jp85/NbV3xqa1uz/vPvS8b04n3c9bVz/7izOHvzkzbUfvwbY11dt3soX+7PxNjg3jJzc2r5+6deXmzetnI01Glp6LNHnCcv6DnZ+lvdf/l3bb8+t+fr72d/IfPnb+i2I7+lPzf6kxX2/vK3PuWxty/sP0k/N/N7VPfv4/zflPf/6/2kJ/AAAAAAAAAAAAAAAA4FGqqto5RfStiLiQzv9p69xMAGC+8vt/leTlarVarVarj17dVE32ZrOIiL80b1N/ZvjZpF8GACyy/0bE39vuBK2Rf8Hy9f7q6cttdwaYqxsffvSDK9eubV6/0XZPAAAAAAAAAID/Vx7/c70x/vPLEbE2tl7zmgB33471g47/2c8zDwYYfcIDfU+x3R32uo3hxl+MnfG5T00b//tkPHr87/6M+xvMaB/OaF+a0b48celeWhNP9GjI+b/YGO+8zv/E2PDrJYz/Oj7mfQly/icbj+c6/y+MrdfMv/rNwuW/td8Vt6M7kv/pmx/8+PSNDz967eoHV97ffH/zh+fPnj1z/sKFixcvnn7v6rXNM7v/Hk6vF0DOP4997TjQsuT8c+byL0vO/3Opln9Zcv6fT7X8y5Lzz5/35F+WnH/+7iP/suT8X0m1/MuS8/9SquVflpz/q6mWf1ly/l9OtfzLkvN/LdXyL0vO/1Sq5V+WnP/pVO8jf5eHP0Jy/nkPl+d/WXL++cgG+Zcl538u1fIvS87/fKrlX5ac/+upln9Zcv5fSbX8y5Lzv5Bq+Zcl5//VVMu/LDn/i6mWf1ly/l9LtfzLkvP/eqrlX5ac/xupln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT830y1/Muyd/1/M2bMmMkzbb8yAQAAAAAAAAAAAADj5nE4cdvbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvoM4Gf2w147hBgIwUkNbBJjQrJk13biD1oXEz4boBRIKPQD2/WuzYK/8NolpEg2DZRIGBVVtE0v2gJCbaSqwqq4oBWluaj6cVXaC3pTUVVCalQFFJCQ2oqy1cx539czs7Nz1t7xeva8v58U/707Z+acOfPO7D7rPDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7s43zn2mURRF87/WH1uK4gXNv2+a3NL63Otu9BECAAAAq/V/rT+fvyV94uAKrtS2zd+/4p++tri4uFi8f/R3x7+wuJgumCyK8Y1F0bosuvwfH2i0bxM8UUw0Rto+HqnY/WjF5WMVl49XXL6h4vKNFZdPVFy+5AQssan8eUzrxra3/rqlPKXFrcV467LtPa71RGPjyEj8WU5Lo3WdxfFjxXxxopgrZjq2L7dttLb/xp3Nfb2tiPsaadvXtuYK+cEnjsZjaIRzvL1jX1duM/reG4rJH/7gE0f/5Nxzt/ealaeh4/bK47znruZxfip8pjzWRrExnZN4nCNtx7mtx2My2nGcjdb1mn/vPs7nV3ico1cOc011P+YTxUjr799qnaex9h/rpfO0LXzuv+8uiuLilcPu3mbJvoqRYnPHZ0auPD4T5Yps3kZzKb24GLuqdXrnCtZpc85u71yn3c+J+PjfGa43tswxtD9M3/vkhiWP+9Wu06h5r5d7rnSvwUE/V4ZlDcZ18a3WnX6y5xrcHu7/J3YsvwZ7rp0eazDd77Y1eFfVGhzZMNo65vQgNFrXubIGd3ZsP9raU6M1n93Rfw1Onzt5Znrh44+/dv7kkeNzx+dO7d65c2b3nj379u2bPjZ/Ym6m/PMaz/bw21yMpOfAXeHcxefAq7u2bV+qi18a3PNwos/zcEvXtoN+Ho5137nG2jwhl67p8rnxSPOkT1waKZZ5jrUen3tX/zxM97vteTjW9jzs+TWlx/NwbAXPw+Y2Z+5d2fcsY23/9TqG6/W1YEvbGuz+fqR7DQ76+5FhWYMTYV38273Lfy3YFo73yamr/X5kdMkaTHc3vPY0P5O+35/Y1xq91uUdzQtu2lCcX5g7e/9jR86dO7uzCGNNvKRtrXSv181t96lYsl5Hrnq9Hpx/xZN39Pj8lnCuJl7b/GNi2cequc0D9/d/rFpf3Xqfz47P7irCGLC1Pp+9vpo3z2fKkn3OZ3ObT02v/nvxlEvbXn/Hl3n9jbn/J+X+0k09MTo+Vj5/R9PZGe94Pe58qMZar12N1r6fn17Z6/F4+G+tX49v7fN6vLVr20G/Ho9337n4etyo+mnH6nQ/nhNhnZyY6f963Nxm666rXZNjfV+P7w6zEc7/a0JSSLmobe0st27TvsbGxsP9Got76Fynuzu2Hw/ZrLmvp3dd2zq95+7ytkbTvbtirdbpZNe2g16n6fVquXXaqPrp27Xpfjwnwrq4dXf/ddrc5pkHVv/auSn+te21c0PVGhwf3dA85vG0CMvX+8VNcQ3eXxwtThcnitnWpRta66nR2tfUgytbgxvCf2v9Wrm1zxq8p2vbQa/B9HVsubXXGFt65weg+/GcCOviqQf7r8HmNm/aO9jvXe8Jn0nbtH3v2v3zteV+5nVH12m6nj/zah7n3+7t/7PZ5jYn9l1tzux/nu4Ln7mpx3nqfv4u95yaLdbmPG0Nx/ncvuXPU/N4mtt8Yf8K19PBoigufPSh1s97w7+v/MX5b3+t499dFi8sPZgLH33o+zcf+7urOX4A1r+flGNz+bWu7V+mVvLv/wAAAMC6EHP/SJiJ/A8AAAC1EXN//L/CE/kfAAAAaiPm/rEwk0zy/9Y3PTf/k1YtrmzmLwbx8nQaHi63ix3XmfDx5OIVzc8/9JW5H/1Vj5pdLyNFUfz44d/ouf3Wh+NxlSbDcV5+c+fnl17xwor2f/jRK9u199e/GG4/3p+VLoNeFdyZoii+ccvnWvuZ/MCl1nzm4cOt+Z6LTz7R3Ob5/eXH8frPvqTc/g9D+ffgsSMd1382nIfvhjnz9t7nI17vq5des23v+67sL16vcdcLW3f7qQ+Wtxt/T87nnyi3j+d5ueP/688+/dXm9o+9qvfxXxjpffxPh9v9Spj/8/Jy+/bHoPlxvN6nw/HH/cXr3f/lb/Y8/sufKbc/85Zyu8Nhxv3fEz7e/pbn5tvP12ONIx33q3hruV3c/8y3f7t1eby9ePvdxz9x6FLH+eheH8/8S3k7013bx8/H/UR/2bX/5u20r8+4/6d/63DHea7a/+X3PPvy5u127/++ru1Gu67f/Rub/ujTn+u5v3g8B//8TMf9Ofju8DwO+3/qg2E9hsv/9/LnOvYbHX535+tP3P6LWy503J/obT8s93/59cdb8z8nf/QHN73g5hdefGXz3BXFt95b3l7V/o//8emO4//Sbfe2Ho94eezod+9/OXH/Zz82der0wvn52baz2vrdOe8oj2fjxKbNzeO9Jby2dn986PS5D82dnZyZnCmKyfr+Cr1r9uUwv1+Oi1d7/XsfDY/nHb//jc07/vmz8fP/+kj5+UtvL79uvTps9/nw+S3l47fYWOX+n7rzttbzu/FM+XFHj30Atm3/r30r2jDc/+7vC+J6P/PSD7XOQ/Oy1teN+Lxe5fF/Z7a8na+H87oYfjPzXbdd2V/79vF3I1x6b/l8X/X5Cy9z8XH90/B4v/O75e3H44r39zvh+5hvbu18vYvr4+sXRrpvv/VbPC6G15PiYnl53Cqe70vP39bz8OLvISku3t76+HfS7dx+VXdzOQsfX5g+MX/q/GPT5+YWzk0vfPzxQydPnz917lDrd3ke+nDV9a+8Pm1uvT7Nzu15oJjZVBTF6WJmDV6wrs/xN/+2suM/8+jR2b0zO2bnjh05f+zco2fmzh4/urBwdG52YceRY8fmPlZ1/fnZAzt37d+9d9fU8fnZA/v279+9f2r+1OnmYZQHVWHPzEemTp091LrKwoEH9u988MEHZqZOnp6dO7B3ZmbqfNX1W1+bpprX/vWps3MnjpybPzk3tTD/+NyBnfv37NlV+dsAT545tjA5ffb8qenzC3Nnp8v7Mnmu9enm176q61NPC/9efj/brVH+Ir7iXfftSb+ftekrn1z2pspNun6B6HPhd9H844vO7FvJxzH3j4eZZJL/AQAAIAcx928IM5H/AQAAoDZi7t8YZiL/AwAAQG3E3D8RZpJJ/tf/1/9fWf+/vFz/P6/+/5mPlr3S9d7/j/15/f883OD+/6r3r/+v/1+//v/K+/Pr/fj1//X/WWrY+v8x928qiizzPwAAAOQg5v7NYSbyPwAAANRGzP03hZnI/wAAAFAbMfe/IMwkk/yv/7+i/v+uqsJV/fv/3v9f/79Yn/3/+ODo/2fjqvv373uk40P9/0D/X/9f/1//X/+fVRtf9pIb1f+Puf/mMJNM8j8AAADkIOb+F4aZyP8AAABQGzH33xJmIv8DAABAbcTcvyXMJJP8r//v/f/1//X/a93/X+37/7cdjP7/+uD9//vT/69wzf3/Cf3/9dj/Hx/s8Q93/7/y8PX/uS6G7f3/Y+5/UZhJJvkfAAAAchBz/4vDTOR/AAAAqI2Y+18SZiL/AwAAQG3E3H9rmEkm+V//X/9f/1//X/+/9/6r3/+//Jv+/3DR/+9P/7+C9//Pq/8/4OMf7v7/oN//f/zN3dfX/6eXYev/x9z/0jCTTPI/AAAA5CDm/tvCTOR/AAAAqI2Y+18WZiL/AwAAQG3E3L81zCST/K//r/+v/6//r//fe//V/f+S/v9w0f/vT/+/gv6//r/+/8r6/z2++dX/p5dh6//H3H97mEkm+R8AAAByEHP/HWEm8j8AAADURsz9PxVmIv8DAABAbcTcvy3MJJP8r/+v/6//n1f//74N+v/6//Wm/9+f/n8F/X/9f/3/Fb7//1JX0//fWHVj1Maw9f9j7n95mEkm+R8AAAByEHP/K8JM5H8AAACojZj7XxlmIv8DAABAbcTcPxlmkkn+1/+vV///z/7mqVcW+v/6/xX7r2n/Py4D/f/M6f/3p/9fQf9f/1//f036/+Rj2Pr/MfffGWaSSf4HAACAenm81z/Rptx/V5iJ/A8AAAC1EXP/3WEm8j8AAADURsz928NMMsn/+v/16v9H+v/6//32X9P+f6L/nzf9/x7anqT6/xX0//X/s+//x+9+9f8ZjGHr/8fc/6owk0zyPwAAAOQg5v4dYSbyPwAAANRGzP2vDjOR/wEAAKA2Yu6/J8wkk/yv/6//r/+v/6//33v/+v/rk/5/f/r/FfT/9f+z7/97/38Ga9j6/zH3vybMJJP8DwAAADmIuf/eMBP5HwAAAGoj/v+b5f/3Kv8DAABAHcXcPxVmkkn+1//X/8+p/9/Q/9f/1/+vPf3//vT/K+j/6//r/+v/M1DD1v+Puf+1YSaZ5H8AAADIQcz994eZyP8AAABQGzH3T4eZyP8AAABQGzH3z4SZZJL/9f/1/3Pq/3v/f/1//f/60//vT/+/gv6//n/d+v9Fof/PDTVs/f+Y+3eGmWSS/wEAACAHMffvCjOR/wEAAKA2Yu7fHWYi/wMAAEBtxNz/QJhJJvlf/1//X/9f/1//v/f+9f/XJ/3//vT/K+j/6//Xrf/v/f+5wYat/x9z/4NhJpnkfwAAAMhBzP17wkzkfwAAAKiNmPv3hpnI/wAAAFAbMffvCzPJJP/r/9ek//+b/9Cxb/1//f9++x9M/3+T/n+Y+v/Dpab9/+6nxTXT/6+g/6//r/+v/89ADVv/P+b+/WEmmeR/AAAAyEHM/a8LM5H/AQAAoDZi7v/pMBP5HwAAAGoj5v6fCTPJJP/r/9ek/99F/1//v9/+vf+//n+d1bT/PzD6/xX0//X/9f/1/xmo69//j39bWf8/5v4DYSaZ5H8AAADIQcz9PxtmIv8DAABAbcTc//owE/kfAAAAaiPm/oNhJpnkf/1//X/9f/3/69P/f33RbRj7/83Fo/9fL/r//en/V9D/1//X/9f/Z6CG7f3/Y+5/Q5hJJvkfAAAAchBz/0NhJvI/AAAA1EbM/W8MM5H/AQAAoDZi7n9TmEkm+V//X/9f/1//3/v/996//v/6pP/fn/5/Bf3/jPv/v7ejnPr/+v8M0rD1/2Puf3OYSSb5HwAAAHIQc/9bwkzkfwAAAKiNmPvfGmYi/wMAAEBtxNz/tjCTTPK//r/+v/6//r/+f+/96/+vT/r//en/V9D/z7j/7/3/9f+5Hoat/x9z/8+FmWSS/wEAACAHMfc/HGYi/wMAAEBtxNz/9jAT+R8AAABqI+b+d4SZZJL/9f/1//X/9f/1/3vvX/9/fdL/70//v4L+v/6//r/+PwM1bP3/mPvfGWaSSf4HAACAHMTc//NhJvI/AAAA1EbM/e8KM5H/AQAAoDZi7v+FMJNM8r/+v/6//r/+fxb9/+aV9P+zoP/fn/5/hR79/436//r/+v/6/1yzYev/x9z/7jCTTPI/AAAA5CDm/veEmcj/AAAAUBsx9783zET+BwAAgNqIuf+RMJNM8r/+f5b9/3SX9f9L+v8Z9P+9/382hrX/3+vrRC/6/8PX//f+//r/+v/6/1y7Yev/x9z/aJhJJvkfAAAAchBz//vCTOR/AAAAqI2Y+38xzET+BwAAgNqIuf/9YSaZ5H/9/yz7/97/f836/2Md6yOn/v9E2+OZ1qX+v/7/GhjW/v9K6f/r/+v/r9/jv+79/7CaNy1zff1/htGw9f9j7v9AmEkm+R8AAAByEHP/L4WZyP8AAABQGzH3/3KYifwPAAAAtRFz/6+EmWSS//X/9f/1/73/v/f/771//f/1Sf+/P/3/Cvr/+v/D3P+voP/PMBq2/n/M/b8aZpJJ/gcAAIAcxNz/wTAT+R8AAABqI+b+Q2Em8j8AAADURsz9h8NMMsn/+v/d/f/4jqr6//r/+v/6//r/69Hg+v8vu7ko9P/1//X/9f/1//X/WY1h6//H3H8kzCST/A8AAAA5iLn/18JM5H8AAACojZj7j4aZyP8AAABQGzH3z4aZZJL/9f+9//+g+v8/1v/X/w/0/3vT/18b3v+/P/3/Cvr/+v/6//r/DNSw9f9j7p8LM8kk/wMAAECNpR8Hx9x/LMxE/gcAAIDaiLn/eJiJ/A8AAAC1EXP/h8JMMsn/+v/6/97//0b0/8c6ttf/L+n/6/8Pgv5/f/r/FfT/9f/1//X/Gahh6//H3D8fZpJJ/gcAAIAcxNz/4TAT+R8AAABqI+b+j4SZyP8AAABQGzH3nwgzyST/6//r/+fe/28UxUXv/6//32v/+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3H8yzCST/A8AAAA5iLn/VJiJ/A8AAAC1EXP/6TAT+R8AAABqI+b+M2EmmeR//X/9/9z7/8UNef//zu31//+fvftosuss4jh8ccmWtIKPwJoVS1jxFdiyo4o1C8DkYJtsssk5mJxzTibnnLPJORoTDFWiGHW3NZqrcyTP9cw5bz/PppEKcUf2YOqP6lfvWfp//f8uHOjvT1zar79g/3/Xu115b/2//l//P0n/r//X/3O+pfX/ufvvF7c02f8AAADQQe7++8ct9j8AAAAMI3f/A+IW+x8AAACGkbv/yrilyf7X/+v/9f+77P9PT35/rKL/v0H/r/9fN+//T9P/z9D/6//1//p/dmpp/X/u/gfGLU32PwAAAHSQu/9BcYv9DwAAAMPI3f/guMX+BwAAgGHk7n9I3NJk/+v/9f/6f+//e/9/++fr/9dJ/z9N/z9D/6//1//r/9mppfX/ufsfGrc02f8AAADQQe7+h8Ut9j8AAAAMI3f/w+MW+x8AAACGkbv/EXFLk/2v/9f/6//1//r/7Z+v/1+n6ze3/jNB/3+Q/n/GTP+/2ej/p1x0P7/9t7eer/8C9P/6fw5aWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvdfFbfY/wAAADCM3P1Xxy1N9r/+X/+v/9f/6/+3f77+f528/z/t8P3/Xe503/v07f+9/z/N+//6f/0/51ta/5+7/5q4pcn+BwAAgA5y9z86brH/AQAAYBi5+x8Tt9j/AAAAMIzc/Y+NW5rsf/1/m/5/r3bR/+v/9f/6/9Hp/6d5/3/G3j/mTtcP9f/6f/2//p/DWVr/n7v/cXFLk/0PAAAAHeTuf3zcYv8DAADAMHL3PyFusf8BAABgGLn7nxi3NNn/+v82/b/3//X/+n/9fwv6/2n6/xmjvP9/G79rjrufP6zj/vr1//p/Dlpa/5+7/9q4pcn+BwAAgA5y9z8pbrH/AQAAYBi5+58ct9j/AAAAMIzc/U+JW5rsf/2//n8d/X9+gv5f/6//1/9P0/9P0//PGKX/v42Ou59f+9ev/9f/c9DS+v/c/U+NW5rsfwAAAOggd//T4hb7HwAAAIaRu//pcYv9DwAAAMPI3f+MuKXJ/tf/6//X0f97/1//r//X/18c/f80/f8M/b/+X/+v/2enltb/5+6/Lm5psv8BAACgg9z9z4xb7H8AAAAYRu7+Z8Ut9j8AAAAMI3f/s+OWJvtf/6//1//r//X/2z9f/79O+v9p+v8Z+n/9v/5f/89OLaj/P+dXndo8J25psv8BAACgg9z9z41b7H8AAAAYRu7+58Ut9j8AAAAMI3f/8+OWJvtf/7+Y/n8v5xur/z+92Wz0/5um/f/pc/5+1vel/l//fwT0/9P0/zP0//p//b/+n51aUP+/9+Pc/S+IW5rsfwAAAOggd/8L4xb7HwAAAIaRu/9FcYv9DwAAAMPI3f/iuKXJ/tf/L6b/3zNW/+/9//O/Pzr1/97/P0j/fzT0/9P0/zP0//p//f8u+v8T+n/S0vr/3P0viZuuuPw2/xYBAACAhcnd/9K4pcmf/wMAAEAHuftfFrfY/wAAALBS1x34mdz9L49bmux//f9u+/8rzvk5/f9R9P9X6//1//p/9tH/T9P/z9D/6//1/97/Z6eW1v/n7n9F3NJk/wMAAEAHufuvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//7/3/dff/3v/X/+v/2U//P03/P0P/r/8/3v7/5K3/Uv/PGC6h/z9z5sxVt3v/n7v/1XFLk/0PAAAAHeTuf03cYv8DAADAMHL3vzZusf8BAABgGLn7Xxe3NNn/+v+m/X9+q+v/9+j/9f/bPl//v076/2n6/xn6f/2/9//1/+zU0t7/z93/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux//X/T/t/7//p//f9R9/+3bPT/R2IV/f/pC3/+0vv/a/T/+v8J7fr/e9593w/1//p/Dlpa/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WN51osv/1//p//b/+X/+//fOP+P3/Kzabjf5/B1bR/09Yev/v/X/9/5R2/f959P/6fw5aWv+fu//tcUuT/Q8AAAAd5O5/R9xi/wMAAMAwcve/M26x/wEAAGAYufvfFbc02f/6f/2//l//P3z/f80q+n/v/++I/n+a/n+G/l//r//X/3Mkjqv/z93/7rilyf4HAACADnL3vydusf8BAABgGLn73xu32P8AAAAwjNz974tbmux//b/+X/+v/z+5uP7/1L7/vCbv/+v/d0T/P03/P0P/r//X/1+n/2eXlvb+f+7+98ctTfY/AAAAdJC7/wNx6/+6tf8BAABgGLn7Pxi32P8AAAAwjNz9H4pbmux//b/+X/+v/x/+/X/9fyv6/2n6/xn6f/2//t/7/+zU0vr/3P0fjlua7H8AAADoIHf/R+IW+x8AAACGkbv/o3GL/Q8AAADDyN1/Q9zSZP/r//X/+n/9v/7/7N9D/f8Y9P/Tjqb/P63/1/9XP3+H+G+B/l//P/frGdPS+v/c/R+LW5rsfwAAAOggd//H4xb7HwAAAIaRu/8TcYv9DwAAAKt0YsvP5e7/ZNzSZP/r//X/+n/9v/5/++fr/9dJ/z/N+/8z9P+X2M/fed+P1vb+//n/+6X/1/+ze0vr/3P3fypuabL/AQAAoIPc/Z+OW+x/AAAAGEbu/s/ELfY/AAAADCN3/2fjlib7X/+v/9f/6//1/9s/X/+/Tvr/afr/Gfr/Y30/f+1fv/5f/89BS+v/c/d/Lm5psv8BAACgg9z9n49b7H8AAAAYRu7+L8Qt9j8AAAAMY2/3Z1zWcP/r//X/+n/9v/5/++fr/9dJ/z9N/z9D/6//1//r/9mppfX/X9z7Vac2X4pbmux/AAAA6CB3/5fjFvsfAAAAhpG7/ytxi/0PAAAAw8jd/9W4pcn+1//r/9fR/585c+Yq/b/+f//v59b+/0b9P0X/P03/P0P/r//X/+v/2aml9f+5+78WtzTZ/wAAANBB7v6vxy32PwAAAAwjd/834hb7HwAAAIaRu/+bcUuT/a//X0D/f0r/7/1//f/G+//6/x3R/0/T/88Ysf8/dfG//ePu5w/ruL9+/b/+n4OW1v/n7v9W3NJk/wMAAEAHufu/HbfY/wAAADCM3P3fiVvsfwAAABhG7v7vxi1N9r/+/+j6////tevy/v/pzfavX/+v/9f/6/9vb/r/afr/GSP2/5fguPv5tX/9+n/9Pwctrf/P3f+9uKXJ/gcAAIAOcvd/P26x/wEAAGAYuft/ELfY/wAAADCM3P0/jFua7H/9/wLe/x+w//f+//bvD/3/ovv/y/T/Y9D/T9P/z9D/6//1/zvq//O7Wf/f3dL6/9z9P4pbmux/AAAA6CB3/4/jFvsfAAAAhpG7/ydxi/0PAAAAw8jdf2Pccs7+39Z2j0L/r//X/+v/9f/bP1//v076/2kX2/+f3Byu/09j9P/X3rzZ6P/1//r/uV/v/X+2WVr/n7v/p3GLP/8HAACA1bn8Aj+fu/9ncYv9DwAAAMPI3f/zuMX+BwAAgGHk7v9F3HLTZcf1JR0p/b/+X/+v/9f/b/98/f866f+nef9/hvf/d9HP30P/P0b/v9no/zm8pfX/uft/Gbf4838AAAAYRu7+X8Ut9j8AAAAMI3f/r+MW+x8AAACGkbv/N3FLk/2v/9f/H7L/30sz9f9n6f/P0v9vp/8/Gvr/afr/Gfp/7//r/73/z04trf/P3f/buKXJ/gcAAIAOcvf/Lm6x/wEAAGAYuft/H7fY/wAAADCM3P1/iFua7P9j6//jL7X+f/X9v/f/9f/6f/3/ouj/p+n/Z+j/9f/6f/0/O7W0/j93/x/jlib7HwAAADrI3f+nuMX+BwAAgGHk7v9z3GL/AwAAwDBy9/8lbmmy/73/r//X/+v/9f/bP1//v076/2n6/+3qb5T+X/+v/9f/s1NL6/9z9/81bmmy/wEAAKCD3P1/i1vsfwAAABhG7v6b4hb7HwAAAIaRu//vcUuT/a//1//r//X/+v/tn6//Xyf9/7Tj7P/vdcf5j/X+/7H3//kl6P/1//p/dmJp/X/u/pvjlib7HwAAADrI3f+PuMX+BwAAgGHk7v9n3GL/AwAAwDBy9/8rbmmy/2f6/5P1b9T/T9L/7//69f/bvz/0//p//f/tT/8/zfv/M/T/3v/X/+v/2aml9f+5+/8dtzTZ/wAAANBB7v5b4hb7HwAAAIaRu/8/cYv9DwAAAMPI3f/fuKXJ/vf+v/5f/6//1/9v/3z9/zrp/6fp/2fo//X/+n/9Pzu1tP4/d///AgAA//9+bV14") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/132, 0x84) 35.558776332s ago: executing program 4 (id=2703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 34.411877976s ago: executing program 4 (id=2705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000006ad600850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 34.143184817s ago: executing program 4 (id=2708): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) 30.447500866s ago: executing program 0 (id=2730): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x65, 0x38, 0x67]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x3}) pwritev2(r0, &(0x7f00000011c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) 29.137244852s ago: executing program 0 (id=2732): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="e844d3e675d50f6f92045aabeb877f5a32bb6d98d39c5cfa39838439f7d7117a7d46ad817e7b788717263f00cb769a03a525c1d67a8563250b4215e648d9c165e460a7fd7ae90281b9856fd45f17ddc19d7bff668531870ca8ff0620d06da251038809631d3737d2624b372e802f69231fc628be3c6aab6962fa310122f885ed5d7c356c767a7d893983b64aec2982f31c5659b04be89ed834ebb77df696ed7e603aa9e831a82d3c34ca765e0ff86f0b8292c8d1e7af0169235776e693", @ANYRES16, @ANYRESHEX], 0x0, 0xa7, &(0x7f00000003c0)="$eJzszrFNw0AYBeBnWxhovAAFG3gHRkEuoaMCIXkiVmEEb0BBm+Yix0mkVCmiKFH0fdLdvdPdL73f1c9TuqSMSSmltEkes+SPz6+31/d5b7Jxl537cBPq7XpI8twt+e9lfmn3f6b/72GqMsznJbsCAACnqdMf3Kv0/dGhMUlzxlIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2QdAAD//0dpGb4=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 28.907054921s ago: executing program 0 (id=2733): r0 = socket(0x10, 0x803, 0x0) unshare(0x26020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) 28.636656953s ago: executing program 0 (id=2734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x4, 0x6, 0x0, @broadcast, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x2}, '/2+D'}}}}}}, 0x0) 28.531580491s ago: executing program 0 (id=2736): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 28.363461215s ago: executing program 0 (id=2738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellinkprop={0x34, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x37, 'syzkaller1\x00'}]}, 0x34}}, 0x0) ftruncate(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socketpair(0x1, 0x0, 0x8001, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000300)={{}, "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"}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000040), 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sync() 7.546725529s ago: executing program 4 (id=2711): syslog(0x4, &(0x7f00000002c0)=""/232, 0xe8) 3.897149864s ago: executing program 3 (id=2847): syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) 3.82977425s ago: executing program 3 (id=2848): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="23010200002a17006000000002000020"]) 3.711208099s ago: executing program 3 (id=2850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000640), 0xffffffff, r1}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) 3.539569834s ago: executing program 2 (id=2852): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noauto_da_alloc}, {@errors_remount}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000540)={[{@noauto_da_alloc}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@init_itable_val}, {@data_ordered}, {@nomblk_io_submit}, {@test_dummy_encryption}, {@nodiscard}]}, 0x1, 0x24f, &(0x7f0000000600)="$eJzs3TFoJFUcBvBvZmc9926RUxtBUEFENBDOTrBZG4UDOQ4RQYUTERvlTjjvsLtY2VhorZLKJoid0VLSBBtFsIqaIjaCBgWDhRYrs7uBNYkkusmOOL8fzO7M7nvzf8PM96aa3QCtdTbJIEknyUKSbpJiusE94+XsZHO5t34pGQ6f/LkYtRtvj+32O5NkKcnDSdbKIi9XyfXVZ7d+23j8/reude/7YPWZ3lwPcmJ7a/OJnfcvvPnx+Yeuf/n1jxeKDNL/y3Edv+KAz6oiue0kiv1HFFXTI+AoLr7+0Td17m9Pcu8o/92UGZ+8t6/etNbNg+/9Xd93fvrqznmOFTh+w2G3vgcuDYHWKZP0U5SLScbrZXd3bvi2c7p85crV1xZeunLt8ovNzlPA8eknm499euqTM3vy/0OnLBcXmx4dcJLq/D91ceW7en2n0/RogHmq87/w/I0HIv/QOvIP7dUfyD+0lfs//M8Mjt5U/qG95B/aS/6hveQf2kv+ob3kH9prOv8AQLsMTzX9BDLQlKbnHwAAAAAAAAAAAAAAAAAAYL/l3vql3WVeNT9/N9l+NElVHFC/M/o/4uTm0evpX4tUU32LutuM9Z+7e8Yd7PXLP2v+YcNPX9/yfbP1v7jrhAsc8rt2Ny4nS28kOVdV+6+/YnL9/Xu3HvJ994UZC8zokaebrf/HSoPFq+T8RvJZPf+cm57/epMGZe4YvR88//Tr8zfjEF79fcYdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDd/BgAA//+s920g") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b8, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) 2.513203537s ago: executing program 1 (id=2856): syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) 2.454754651s ago: executing program 2 (id=2857): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 2.362897709s ago: executing program 1 (id=2858): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000200)='L', 0x1}, {&(0x7f0000000540)="86f2233994742e0537a448c47027cb9732ec3bb25a4690bfd570baba56c0e9f1265a466ffcf31d04d65d560488537bdfa0065f8f762e82fde3455e0c19b6fb320513f9ffe63c2c62d5337bbbd4875031f3cfa5f8e2b860f61012cbe808032c61d3894c1a006dae90addffbf1418c39a3", 0x70}, {&(0x7f0000000380)="7cdfe2285555b9e812d1a9a3fb33b0ed", 0x10}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) open(&(0x7f0000000080)='./file2\x00', 0x10b342, 0x0) 1.958971101s ago: executing program 1 (id=2859): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="23010200002a17006000000002000020"]) 1.714021321s ago: executing program 1 (id=2860): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0) 1.553798874s ago: executing program 2 (id=2861): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000680)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c, 0x0}}], 0x2, 0x0) 1.454118483s ago: executing program 1 (id=2862): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@data_writeback}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5ef, &(0x7f0000000600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0xee01, 0xffffffffffffffff) getresuid(0x0, 0x0, 0x0) setreuid(0xee00, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$smc(0x0, r3) sendmmsg$inet(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d4ebc55551fecf8f936221e9787e744f2e1422baaa25b2f5bf59205190b7fe52f0641f149c5e00b764c493afadeaa04324783c268f48772b1c532d52d211865704db5fbafc3193385adc9855a1ad9ea0c05479329efd6c08ed22c5656eab2ea050f53bf441a9dfb4157d14b99214fa59b8b0e53200795762145a63d61c5c526edb03429e1e14072e1d7dff102fdb9801234bbbb8e0274a861dd60f3a21f129326b2f6fee61f690fa3967cdc5f6f9519282c48e28d6aa7d1b0ed07bdd72ebf1dd97b46f24ffde352095f4bffd6fdd0b9f0d60f16746f1c1ec46656cf94ae2237540c558c1863fb2ffd4619e5ee5b7aa5757e252b821e003fcef57f33cd70f19ec0b5f8098c030741147e8e4319109892fd56b22d261800b7107a393b9a7d835383e3504f5f2794f30914c4f8145ed446a06e3787eb32ab90abf595d45013c8b6d9c26cf4e60812b02427a4d2a8dcbdfaf8ace4e17f0f598676a5f26dc3615eddea77e1d68c857fbe2b39b67ccacd6afcea94b4f9592490c1a51e11f4ffc6dd4d4cdc44995b09864743b906e07a12c93045b654abf2faaf1127ee92698e09efee1d8d45ceb103973c3d1d5c98090d9af08789f867873bbeb522cb367bacaf2d94bc6fa7aab57b542af353d693230a3da636762204d96f2889f7decc9ad3992a8be2be92bdd6a7367bd64c8604ec219a92c80a7536f218926b5d18677f4bc22454a843f7ec6bfaadaec1a47896f902725cddc264226a0c7f673468459528101da2368d77d37d9ae6d52cb44efb9b5af74fdd4c8341980d7b3f4a3176c8de3c3a0144e3f327fcb30c6bda7a62ec37215367d06ef1b85fa2bc329fe99071f65b0d5a48b50139016b0753bc99c389f4aba551bf2da38b78e7b4dbb3be3ecf8749b39a022c86febf3a30070def590bd2a9cb0f95d09eac8de27c370d758e340193773a7dfbb2046e0b2e34bef073ed8368f4fbf464206fbe88c3260f6974b383bcf8a000db483d822536000df416d09dfc55c920cbc3c8b24af1757099903759e9312b576b9f04e61ae20a60d7d0ce978d193dbf9e7a20c04b4f985936402823feb4c045be085b565c283602d9f4c7efe1db4d81f126855712cb5d9cc86250c4b81f4cd823b4b3204d5e88c77f671b93f8ca0d7846a4eb429ab9aa3c8283e3aabe924b5b33d99ba5933d79856316642459e1b0806a0f7546fcf2db6159ad2f5d28c0141dc8777dbc67e3d1b02e2daa828eee0bb0fae22852012318cef6d55e0677fe28340f7c02b20ddbbeef78b6522d5c90540939b471306acadbfd", 0x4c5}], 0x1}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000700)="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", 0x131, 0x40040, 0x0, 0x0) 1.23392565s ago: executing program 2 (id=2863): r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) sendmsg$inet(r2, &(0x7f00000017c0)={&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @dev}}}], 0x20}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000640)={'tunl0\x00', r4, 0x20, 0x40, 0xbb76, 0x9, {{0x17, 0x4, 0x0, 0x32, 0x5c, 0x64, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0xa, [{@local, 0x23}, {@broadcast, 0x4}, {@multicast2, 0x8001}]}, @generic={0x83, 0x6, "4e3fbc40"}, @ssrr={0x89, 0x13, 0x8a, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @end, @ssrr={0x89, 0xf, 0xf1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty]}]}}}}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r7, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000600)=ANY=[@ANYBLOB="62870000", @ANYRES16=r7, @ANYBLOB="00c62bbd7000fddbdf257a000000080003002bb8afbd0de9", @ANYRES32=0x0, @ANYBLOB="0cf5528b08630df6940099003b92000031000000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x8000}}, './bus\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r10, 0x4243000364fd8f25}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xaa}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x3c}}, 0x20000004) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000000), &(0x7f0000000280)=@buf="b1e911a7288a14b57b38ba06297846ccf203e2c76ebb7f30c95622e14648377d5573f8167069a1a25977cbe2e5b8c0b74e93889f1d6c821b68b0c591a0df1c861d809c821ef4ef85065783ddaae206394167cc80bfe1a4e5498d7d573a", 0xe55a45c175ef7809}, 0x20) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYBLOB="13f6ae154dc57d3ae24473a2a48020b58e598c11858ce8630852de7addd38973e8574fc468234400aca55c5858d240f44143b60ad5c882e00efd5946a53ab9c1ce485cfa348de991a99334ec6b60d8ff945ef2be2ca006750c65f73c0c387751e0dd135f473660f90f021975fdbf1ca23d317eb78e7014fb941e3fb8d16bfae7e0ec7e1f0100000000c8508291bb92344ed78573265cd27e55c0f81096e7786ae5be228a9629f5dcddd22e3a7b7768bbd22076ccb1dff4ff270c3faf57aa3f60919e89b05412ac92de0e145227f881ea35f831dc69fa8cc66b9246d169d49be3f511d12937", @ANYRES64=r11], 0x98}}, 0x2) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getnetconf={0x14, 0x52, 0x0, 0x2, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000000) ioctl$sock_netdev_private(r5, 0x89f4, &(0x7f0000000180)="4a308f688a9b5833886998083aed56f80d8293239df673bdc0ed1f70b4cf01a295433617676462d9de762039167e9d0d3a5305b96f4edabe664d503b3ff993a6de2659cef11029b26bf8bd37186ce8b0ba1ec2b2dc2f6f9eaaa9fab17e469d094e4d4badcd19f75cbec6f45874ce666ea1d8d2d87752ddfeb3d2b4b56372") getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfff7}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x84}}, 0x4000080) 823.305813ms ago: executing program 3 (id=2864): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @var={0x4, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000800)=""/152, 0x3a, 0x98, 0x1}, 0x20) 484.017971ms ago: executing program 3 (id=2865): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/53, 0x328000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0}, 0x20) 263.210259ms ago: executing program 2 (id=2866): syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) 142.773438ms ago: executing program 1 (id=2867): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0xd0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgid(0x0) process_vm_readv(r4, &(0x7f00000004c0)=[{0xffffffffffffffff}], 0x1, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_flowlabel\x00') lseek(r8, 0x80, 0x0) sendto$inet(r7, 0x0, 0x2, 0x0, 0x0, 0x0) 99.903822ms ago: executing program 3 (id=2868): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x10, 0x4}, @func={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) 0s ago: executing program 2 (id=2869): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000000)=""/157}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) r2 = dup(r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r2, 0x58, &(0x7f0000000200)}, 0x10) kernel console output (not intermixed with test programs): keep mac addresses unique to avoid problems! [ 579.406469][T10696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.509849][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 579.539066][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 579.563711][T10696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.592721][T10696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.611052][T10696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.634414][T10696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.886280][T10680] device veth0_macvtap entered promiscuous mode [ 579.944570][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.953302][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.000135][T10680] device veth1_macvtap entered promiscuous mode [ 580.027126][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.046194][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.116540][T11003] loop4: detected capacity change from 0 to 512 [ 580.172323][T11003] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2033: inline data xattr refers to an external xattr inode [ 580.202916][T11003] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2033: couldn't read orphan inode 12 (err -117) [ 580.258728][T11003] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 580.267841][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.278974][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.290681][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.301462][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.311703][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.323057][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.333199][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.346238][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.357387][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.368594][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.380525][T10680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.423995][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.434149][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.453608][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.476349][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.493972][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.512425][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.522653][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.534126][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.545573][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.562558][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.573093][T10680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.584956][T10680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.598099][T10680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.598519][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 580.618475][ T4803] device hsr_slave_0 left promiscuous mode [ 580.641616][ T4803] device hsr_slave_1 left promiscuous mode [ 580.649208][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.656894][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.696010][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.727116][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.746708][ T4803] device bridge_slave_1 left promiscuous mode [ 580.753055][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.766176][ T4803] device bridge_slave_0 left promiscuous mode [ 580.772786][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.823331][ T4803] device veth1_macvtap left promiscuous mode [ 580.831198][ T4803] device veth0_macvtap left promiscuous mode [ 580.842887][ T4803] device veth1_vlan left promiscuous mode [ 580.849186][ T4803] device veth0_vlan left promiscuous mode [ 581.722802][ T4803] team0 (unregistering): Port device team_slave_1 removed [ 581.912367][ T4803] team0 (unregistering): Port device team_slave_0 removed [ 582.077370][ T4803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.203374][ T4803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.251796][ T9298] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 582.281994][ T9298] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 582.299088][ T9298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 582.308971][ T9298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 582.324421][ T9298] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 582.332146][ T9298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 582.969640][ T4803] bond0 (unregistering): Released all slaves [ 583.056451][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 583.065442][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 583.077801][T10680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.089873][T10680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.101018][T10680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.110057][T10680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.166320][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.205254][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.263072][ T3838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.286482][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.325961][ T3838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.381275][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.439000][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.459036][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.524421][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.637453][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.663351][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.723787][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.857771][T11021] chnl_net:caif_netlink_parms(): no params data found [ 583.877755][T11038] loop3: detected capacity change from 0 to 512 [ 583.975277][T11038] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.2044: inline data xattr refers to an external xattr inode [ 584.074778][T11038] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.2044: couldn't read orphan inode 12 (err -117) [ 584.148345][T11038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 584.390090][T10696] EXT4-fs (loop3): unmounting filesystem. [ 584.397052][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.404178][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.446352][ T9298] Bluetooth: hci5: command tx timeout [ 584.467274][T11021] device bridge_slave_0 entered promiscuous mode [ 584.498648][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.544180][T11021] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.548126][T11036] loop4: detected capacity change from 0 to 32768 [ 584.567242][T11036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2042 (11036) [ 584.601586][T11021] device bridge_slave_1 entered promiscuous mode [ 584.603051][T11036] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 584.694238][T11036] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 584.733066][T11021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.745507][T11036] BTRFS info (device loop4): using free space tree [ 584.807505][T11071] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2049'. [ 584.827252][T11021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.962732][T11036] BTRFS info (device loop4): enabling ssd optimizations [ 585.135619][T11021] team0: Port device team_slave_0 added [ 585.182333][T11021] team0: Port device team_slave_1 added [ 585.306008][T11021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.312993][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.365599][ T9666] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 585.417887][T11021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.503424][T11021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.555413][T11021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.704452][T11021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.856808][T11021] device hsr_slave_0 entered promiscuous mode [ 585.874204][T11021] device hsr_slave_1 entered promiscuous mode [ 585.901472][T11021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.929715][T11021] Cannot create hsr debugfs directory [ 586.034463][ T3602] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 586.333273][T11021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.351721][ T3602] usb 4-1: Using ep0 maxpacket: 16 [ 586.467973][T11124] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2068'. [ 586.522289][ T3602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 586.534514][ T9298] Bluetooth: hci5: command tx timeout [ 586.589771][T11021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.782134][ T3602] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 586.815091][ T3602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.823181][ T3602] usb 4-1: Product: syz [ 586.833918][ T3602] usb 4-1: Manufacturer: syz [ 586.839667][ T3602] usb 4-1: SerialNumber: syz [ 586.868264][ T3602] usb 4-1: config 0 descriptor?? [ 586.880563][T11021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.933078][ T3602] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 587.114024][ T3598] usb 4-1: USB disconnect, device number 13 [ 587.124630][ T4440] usb 4-1: Failed to submit usb control message: -71 [ 587.132389][ T4440] usb 4-1: unable to send the bmi data to the device: -71 [ 587.140555][ T4440] usb 4-1: unable to get target info from device [ 587.151950][ T4440] usb 4-1: could not get target info (-71) [ 587.153357][T11021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.158886][ T4440] usb 4-1: could not probe fw (-71) [ 587.565021][ T3602] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 587.589874][T11021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 587.623647][T11021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.642081][T11021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.676928][T11021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.855289][ T3602] usb 1-1: Using ep0 maxpacket: 8 [ 587.925432][T11021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.950917][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 587.965694][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.997281][T11021] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.015367][ T3602] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 588.034771][ T3602] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 588.055060][ T3602] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 588.065103][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.082365][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.102036][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.109206][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.155086][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.163228][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.172574][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.179581][ T3602] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 588.181975][ T4669] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.196809][ T3602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 588.196861][ T4669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.213949][ T3602] usb 1-1: SerialNumber: syz [ 588.229803][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.258992][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.275408][T11150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.275620][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.295529][ T3602] hub 1-1:1.0: bad descriptor, ignoring hub [ 588.302945][ T3602] hub: probe of 1-1:1.0 failed with error -5 [ 588.310418][ T4669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.350663][T11021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.415280][T11021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.543010][T11150] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 588.615331][ T9298] Bluetooth: hci5: command tx timeout [ 588.621192][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.629572][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 588.645091][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.655590][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.666012][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.677518][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.688057][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.163292][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 589.477904][ T3602] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 589.634228][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.650535][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 589.698594][T11021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.811302][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.820018][ T3998] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 589.901260][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 590.144588][ T3998] usb 5-1: Using ep0 maxpacket: 16 [ 590.275698][ T3998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 590.428612][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 590.447737][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.500166][T11021] device veth0_vlan entered promiscuous mode [ 590.530166][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.562888][ T3598] usb 1-1: USB disconnect, device number 27 [ 590.577794][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.582702][ T3598] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 590.625019][ T3998] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 590.654636][ T3998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.684294][T11021] device veth1_vlan entered promiscuous mode [ 590.689100][ T9298] Bluetooth: hci5: command tx timeout [ 590.694274][ T3998] usb 5-1: Product: syz [ 590.724967][ T3998] usb 5-1: Manufacturer: syz [ 590.729637][ T3998] usb 5-1: SerialNumber: syz [ 590.799746][T11021] device veth0_macvtap entered promiscuous mode [ 590.822926][ T3998] usb 5-1: config 0 descriptor?? [ 590.880142][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.896777][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.919878][ T3998] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 590.953587][T11021] device veth1_macvtap entered promiscuous mode [ 590.966216][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 590.978791][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 591.012622][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.038377][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.056624][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.076196][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.112078][ T6466] usb 5-1: USB disconnect, device number 16 [ 591.114522][ T4440] usb 5-1: Failed to submit usb control message: -71 [ 591.120256][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.138392][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.151240][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.154531][ T4440] usb 5-1: unable to send the bmi data to the device: -71 [ 591.169612][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.186012][ T4440] usb 5-1: unable to get target info from device [ 591.192986][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.229550][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.264165][T11021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.296326][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.312573][ T4440] usb 5-1: could not get target info (-71) [ 591.333495][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.355707][ T4440] usb 5-1: could not probe fw (-71) [ 591.391550][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.409180][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.550267][T11237] loop3: detected capacity change from 0 to 256 [ 591.565881][T11237] FAT-fs (loop3): Unrecognized mount option "shortname=l0¦-Kø" or missing value [ 592.018208][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.414438][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.489568][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.576804][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.577004][T11242] loop4: detected capacity change from 0 to 764 [ 592.602714][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.643602][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.663932][T11021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 592.676101][T11242] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 592.693686][T11021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.030066][T11021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.304025][T11021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.408279][T11021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.524669][T10449] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 593.570593][T11021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.603488][T11021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.775752][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 593.808551][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.094649][ T3570] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 594.270958][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.351996][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.354518][ T3570] usb 5-1: Using ep0 maxpacket: 32 [ 594.384926][ T4444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.423228][ T4444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.499213][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 594.514882][ T3570] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 594.525635][ T3570] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 594.542128][ T3570] usb 5-1: config 1 has no interface number 1 [ 594.602093][ T3570] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 594.654971][ T3570] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.720494][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 594.854140][T11277] loop3: detected capacity change from 0 to 128 [ 594.874716][ T3570] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.904398][ T3570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.913176][T11277] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 594.943797][ T3570] usb 5-1: Product: syz [ 594.958540][ T3570] usb 5-1: Manufacturer: syz [ 594.963276][ T3570] usb 5-1: SerialNumber: syz [ 595.137655][T11288] loop2: detected capacity change from 0 to 128 [ 595.254659][ T5659] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 595.384571][ T3570] usb 5-1: failed to enable PITCH for EP 0x82 [ 595.504450][ T5659] usb 1-1: Using ep0 maxpacket: 16 [ 595.577961][ T3570] usb 5-1: USB disconnect, device number 17 [ 596.523323][ T5659] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 596.765767][ T5659] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 596.781081][ T5659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.794513][ T5659] usb 1-1: Product: syz [ 596.803493][ T5659] usb 1-1: Manufacturer: syz [ 596.809320][ T5659] usb 1-1: SerialNumber: syz [ 596.817900][ T5659] usb 1-1: config 0 descriptor?? [ 596.885474][T10897] udevd[10897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.913051][ T5659] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 597.093047][ T3996] usb 1-1: USB disconnect, device number 28 [ 597.099298][ T4444] usb 1-1: Failed to submit usb control message: -71 [ 597.112977][ T4444] usb 1-1: unable to send the bmi data to the device: -71 [ 597.147533][ T4444] usb 1-1: unable to get target info from device [ 597.214355][ T4444] usb 1-1: could not get target info (-71) [ 597.220446][ T4444] usb 1-1: could not probe fw (-71) [ 597.721717][T11321] loop2: detected capacity change from 0 to 256 [ 597.811572][T11321] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 599.309384][T11342] loop2: detected capacity change from 0 to 512 [ 599.432074][T11342] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 599.512323][T11342] EXT4-fs (loop2): 1 truncate cleaned up [ 599.538838][T11342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 599.720045][T11336] loop4: detected capacity change from 0 to 32768 [ 599.745797][T11336] XFS: attr2 mount option is deprecated. [ 599.847031][T11021] EXT4-fs (loop2): unmounting filesystem. [ 599.897137][T11336] XFS (loop4): Mounting V5 Filesystem [ 600.069717][T11336] XFS (loop4): Ending clean mount [ 600.077209][T11336] XFS (loop4): Quotacheck needed: Please wait. [ 600.233396][T11336] XFS (loop4): Quotacheck: Done. [ 600.271002][T11364] loop2: detected capacity change from 0 to 256 [ 600.339810][ T26] audit: type=1804 audit(1721926282.470:124): pid=11336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2130" name="/newroot/104/bus/bus" dev="loop4" ino=9290 res=1 errno=0 [ 600.376312][T11364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 600.431211][ T9666] XFS (loop4): Unmounting Filesystem [ 600.847823][ T9298] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 600.857427][ T9298] Bluetooth: hci5: Injecting HCI hardware error event [ 600.866920][ T3554] Bluetooth: hci5: hardware error 0x00 [ 600.974463][ T6466] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 601.246049][ T6466] usb 3-1: Using ep0 maxpacket: 32 [ 601.376145][ T6466] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 601.393416][T11381] loop4: detected capacity change from 0 to 512 [ 601.404573][ T6466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.417045][T11381] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 601.455847][ T6466] usb 3-1: config 0 descriptor?? [ 601.463428][T11381] EXT4-fs (loop4): 1 truncate cleaned up [ 601.469367][T11381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 601.506067][ T6466] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 601.579834][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 601.886750][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 30 seconds [ 602.364757][ T6466] gspca_vc032x: reg_w err -71 [ 602.369529][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.419685][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.436061][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.439631][T11411] loop4: detected capacity change from 0 to 512 [ 602.441450][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.441465][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.441475][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.441487][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.441498][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.481695][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.487497][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.492843][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.496606][T11411] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 602.499289][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.511954][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.518320][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.528862][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.534544][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.539990][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.542632][T11411] EXT4-fs (loop4): 1 truncate cleaned up [ 602.545898][ T6466] gspca_vc032x: I2c Bus Busy Wait 00 [ 602.558249][ T6466] gspca_vc032x: Unknown sensor... [ 602.560369][T11411] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 602.563391][ T6466] vc032x: probe of 3-1:0.0 failed with error -22 [ 602.599582][ T6466] usb 3-1: USB disconnect, device number 28 [ 602.678514][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 602.886807][T11422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2161'. [ 602.924902][ T3554] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 604.298138][T11440] misc userio: Can't change port type on an already running userio instance [ 604.399915][T11446] loop4: detected capacity change from 0 to 256 [ 605.290410][T11455] loop4: detected capacity change from 0 to 512 [ 605.308129][T11455] journal_path: Lookup failure for './file1' [ 605.314284][T11455] EXT4-fs: error: could not find journal device path [ 605.559148][ T5659] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 605.619179][T11455] loop4: detected capacity change from 0 to 1024 [ 606.474743][ T5659] usb 1-1: Using ep0 maxpacket: 32 [ 606.498670][T11455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 606.532901][ T9298] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 606.543528][ T9298] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 606.554519][ T9298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 606.563705][ T9298] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 606.574120][ T9298] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 606.584403][ T9298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 606.594639][ T5659] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 606.603906][ T5659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.676405][ T5659] usb 1-1: config 0 descriptor?? [ 606.736497][T11455] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2740: inode #2: comm syz.4.2173: corrupted in-inode xattr [ 606.757704][ T5659] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 606.835326][T11455] EXT4-fs (loop4): Remounting filesystem read-only [ 606.835457][T11455] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 606.840316][T11477] EXT4-fs error (device loop4): ext4_xattr_ibody_list:748: inode #2: comm syz.4.2173: corrupted in-inode xattr [ 606.880306][ T26] audit: type=1326 audit(1721926289.010:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7340375f19 code=0x0 [ 607.060337][T11462] chnl_net:caif_netlink_parms(): no params data found [ 607.139660][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 607.269315][T11462] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.276791][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.300531][T11462] device bridge_slave_0 entered promiscuous mode [ 607.325122][T11462] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.332301][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.349247][T11462] device bridge_slave_1 entered promiscuous mode [ 607.425306][T11462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.460883][T11462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.533230][T11462] team0: Port device team_slave_0 added [ 607.546978][T11462] team0: Port device team_slave_1 added [ 607.621289][T11462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.634640][ T5659] gspca_vc032x: reg_w err -71 [ 607.639366][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.654455][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.686812][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.692144][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.703997][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.710990][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.728117][T11462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.731770][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.753382][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.759930][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.770907][T11462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.792450][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792467][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792478][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792488][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792500][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792511][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792521][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792531][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792542][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792552][ T5659] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.792562][ T5659] gspca_vc032x: Unknown sensor... [ 607.792615][ T5659] vc032x: probe of 1-1:0.0 failed with error -22 [ 607.798486][ T5659] usb 1-1: USB disconnect, device number 29 [ 607.803400][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.803431][T11462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.836514][T11506] loop2: detected capacity change from 0 to 64 [ 607.940177][T11507] loop4: detected capacity change from 0 to 128 [ 607.950752][T11507] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 607.956845][T11462] device hsr_slave_0 entered promiscuous mode [ 608.229969][T11506] overlayfs: upper fs needs to support d_type. [ 608.249226][T11506] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 608.249306][T11506] overlayfs: failed to set xattr on upper [ 608.249317][T11506] overlayfs: ...falling back to index=off,metacopy=off. [ 608.363597][T11021] Bad inode number on dev loop2: 4160749571 is out of range [ 608.379606][T11021] Bad inode number on dev loop2: 4160749571 is out of range [ 608.546290][T11462] device hsr_slave_1 entered promiscuous mode [ 608.547144][T11462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.547290][T11462] Cannot create hsr debugfs directory [ 608.684643][ T9298] Bluetooth: hci6: command tx timeout [ 608.915570][T11507] loop4: detected capacity change from 0 to 2048 [ 609.163879][ T4470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.305841][ T4470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.619335][T11462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.743593][ T4470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.948055][T11462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.068057][ T4470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.108622][ T3557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 610.120357][ T3557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 610.130077][ T3557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 610.144024][ T3557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 610.153582][ T3557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 610.161491][ T3557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 610.390265][T11462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.577434][T11462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.785216][ T3554] Bluetooth: hci6: command tx timeout [ 610.800385][ T936] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 610.928880][T11541] loop4: detected capacity change from 0 to 256 [ 611.006433][ T9298] Bluetooth: hci0: command 0x0406 tx timeout [ 611.054880][ T936] usb 2-1: Using ep0 maxpacket: 32 [ 611.478391][ T936] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 611.755039][ T936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.786746][ T936] usb 2-1: config 0 descriptor?? [ 611.836776][ T936] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 612.213435][ T3554] Bluetooth: hci5: command tx timeout [ 612.340687][T11528] chnl_net:caif_netlink_parms(): no params data found [ 612.353878][T11462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 612.373349][T11462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 612.436500][T11462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 612.458989][T11462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 612.544079][T11567] loop4: detected capacity change from 0 to 1024 [ 612.724523][ T936] gspca_vc032x: reg_w err -71 [ 612.729259][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.743408][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.765632][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.775048][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.798013][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.808930][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.828974][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.851903][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.857497][ T3554] Bluetooth: hci6: command tx timeout [ 612.874688][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.880031][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.894856][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.901237][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.907247][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.912595][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.918055][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.923363][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.929420][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.934809][ T936] gspca_vc032x: I2c Bus Busy Wait 00 [ 612.940117][ T936] gspca_vc032x: Unknown sensor... [ 612.945401][ T936] vc032x: probe of 2-1:0.0 failed with error -22 [ 612.953408][ T936] usb 2-1: USB disconnect, device number 27 [ 613.151026][T11580] loop4: detected capacity change from 0 to 128 [ 613.163434][T11580] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 613.191769][T11528] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.208944][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.229405][T11528] device bridge_slave_0 entered promiscuous mode [ 613.315139][T11528] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.335548][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.354693][T11528] device bridge_slave_1 entered promiscuous mode [ 613.388583][T11580] loop4: detected capacity change from 0 to 2048 [ 613.619616][T11462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.644180][T11528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.848641][T11528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.985963][ T4470] device hsr_slave_0 left promiscuous mode [ 613.996024][ T4470] device hsr_slave_1 left promiscuous mode [ 614.035178][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.059131][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.082767][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.127234][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.175069][ T4470] device bridge_slave_1 left promiscuous mode [ 614.202356][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.236993][ T4470] device bridge_slave_0 left promiscuous mode [ 614.243404][T11593] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 614.247874][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.286020][ T3554] Bluetooth: hci5: command tx timeout [ 614.460518][ T4470] device veth1_macvtap left promiscuous mode [ 614.478493][ T4470] device veth0_macvtap left promiscuous mode [ 614.503155][ T4470] device veth1_vlan left promiscuous mode [ 614.513838][ T4470] device veth0_vlan left promiscuous mode [ 614.924719][ T3554] Bluetooth: hci6: command tx timeout [ 615.149009][T11610] loop4: detected capacity change from 0 to 1024 [ 615.188503][T11610] EXT4-fs: Ignoring removed mblk_io_submit option [ 615.258495][T11610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 615.426216][T11610] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #12: comm syz.4.2220: corrupted xattr block 255 [ 615.510690][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 615.649665][T11614] loop4: detected capacity change from 0 to 1024 [ 615.721753][ T4470] team0 (unregistering): Port device team_slave_1 removed [ 615.862924][ T4470] team0 (unregistering): Port device team_slave_0 removed [ 616.013560][ T4470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.026587][T11622] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 616.249384][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.376272][ T9298] Bluetooth: hci5: command tx timeout [ 617.581692][ T4470] bond0 (unregistering): Released all slaves [ 617.707383][T11528] team0: Port device team_slave_0 added [ 617.840022][T11528] team0: Port device team_slave_1 added [ 617.885290][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.902292][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.925187][T11462] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.005368][T11528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.013310][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.041567][T11528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.089787][T11528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.115224][T11646] loop4: detected capacity change from 0 to 512 [ 618.117649][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.145979][T11646] journal_path: Lookup failure for './file1' [ 618.183138][T11646] EXT4-fs: error: could not find journal device path [ 618.210095][T11528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.250190][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.276569][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.305005][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.312150][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.330246][T11646] loop4: detected capacity change from 0 to 1024 [ 618.334998][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.355192][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.367894][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.375081][ T6466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.385031][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 618.397998][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.414167][T11646] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 618.442267][T11650] netlink: 'syz.1.2235': attribute type 21 has an invalid length. [ 618.445172][ T9298] Bluetooth: hci5: command tx timeout [ 618.451032][T11650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2235'. [ 618.532269][T11646] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2740: inode #2: comm syz.4.2233: corrupted in-inode xattr [ 618.556545][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.581125][T11528] device hsr_slave_0 entered promiscuous mode [ 618.597244][T11646] EXT4-fs (loop4): Remounting filesystem read-only [ 618.603844][T11656] EXT4-fs error (device loop4): ext4_xattr_ibody_list:748: inode #2: comm syz.4.2233: corrupted in-inode xattr [ 618.617591][T11528] device hsr_slave_1 entered promiscuous mode [ 618.635827][T11528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.653102][T11528] Cannot create hsr debugfs directory [ 618.661536][ T26] audit: type=1326 audit(1721926300.790:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11644 comm="syz.4.2233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7340375f19 code=0x0 [ 618.715746][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.746620][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.796789][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.815585][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 618.855148][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 618.895173][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.918275][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 618.925568][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.966392][T11462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.997313][T11462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.012478][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 619.025905][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.036520][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.472263][T11676] loop4: detected capacity change from 0 to 1024 [ 619.514122][T11676] EXT4-fs: Ignoring removed mblk_io_submit option [ 619.563766][T11676] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 619.642904][T11676] EXT4-fs error (device loop4): ext4_get_inode_usage:852: inode #12: comm syz.4.2240: corrupted xattr block 255 [ 619.806082][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.813658][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.910858][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 620.019075][T11462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.175602][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.186313][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.246491][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.275059][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.357407][T11462] device veth0_vlan entered promiscuous mode [ 620.373099][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.384235][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.413359][T11462] device veth1_vlan entered promiscuous mode [ 620.511604][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 620.525259][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 620.533466][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.603802][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 620.642128][T11694] loop4: detected capacity change from 0 to 128 [ 620.661376][T11462] device veth0_macvtap entered promiscuous mode [ 620.688439][T11528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.704637][T11694] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 620.707858][T11528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.789972][T11313] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.853212][T11462] device veth1_macvtap entered promiscuous mode [ 620.888932][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.918189][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.964571][T11528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 621.000525][T11528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 621.039050][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.071581][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.113209][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.152501][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.191104][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.236127][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.244919][ T9298] Bluetooth: hci3: command 0x0406 tx timeout [ 621.303576][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.329069][T11694] loop4: detected capacity change from 0 to 2048 [ 621.344331][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.378591][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.390127][ T26] audit: type=1326 audit(1721926303.520:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.1.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ac175f19 code=0x0 [ 621.437333][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.496821][T11462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.542677][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.558370][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.595200][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.623731][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.654129][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.708017][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.749552][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.791370][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.836269][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.869424][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.914404][T11462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.984015][T11462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.051971][T11462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.102958][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.119464][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.160609][T11462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.181354][T11462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.198340][T11462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.242506][T11462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.541721][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.568344][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.601812][T11528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.660648][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.751849][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.767553][ T4803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.770463][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.809309][ T4803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.847773][T11528] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.886047][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.913864][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.945159][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.953815][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.960970][ T6466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.104237][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.135854][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.166014][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.203686][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.210882][ T3998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.226431][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 623.263561][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.291746][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.362207][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.408763][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.425907][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.444126][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.464994][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.505790][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.551437][T11528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.600172][T11528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.647031][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.715860][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.296882][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.303821][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.577051][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.275703][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.283477][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.298203][T11783] loop4: detected capacity change from 0 to 512 [ 625.308412][T11528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.396352][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.427535][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 625.515578][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 625.530789][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.567776][T11528] device veth0_vlan entered promiscuous mode [ 625.589090][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.605190][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.630652][T11528] device veth1_vlan entered promiscuous mode [ 625.745222][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 625.770546][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 625.798564][T11528] device veth0_macvtap entered promiscuous mode [ 625.841879][T11528] device veth1_macvtap entered promiscuous mode [ 625.902466][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.954208][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.017818][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.045752][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.091550][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.125794][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.146543][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.174789][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.204573][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.240754][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.268818][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.304335][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.347488][T11528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.375897][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 626.398026][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.435288][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 626.475577][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 626.502672][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.545426][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.580206][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.623652][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.729388][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.801778][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.839886][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.926426][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.000109][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.029529][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.074069][T11528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.106555][T11827] cannot load conntrack support for proto=3 [ 627.107779][T11528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.155473][T11528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.209326][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 627.231181][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.283791][T11528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.301060][T11528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.312400][T11528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.349312][T11528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.587681][T11801] loop4: detected capacity change from 0 to 40427 [ 627.616880][T11801] F2FS-fs (loop4): Invalid segment count (0) [ 627.637779][T11801] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 627.661800][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.686920][T11801] F2FS-fs (loop4): invalid crc value [ 627.694005][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.741189][ T6466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 627.755505][T11801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 627.793471][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.843124][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.901026][ T3998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 628.010266][T11801] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 628.033695][T11801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 628.167057][ T9666] syz-executor: attempt to access beyond end of device [ 628.167057][ T9666] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 629.397977][T11880] loop2: detected capacity change from 0 to 256 [ 631.558454][T11879] loop4: detected capacity change from 0 to 32768 [ 632.478923][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 60 seconds [ 632.769923][T11301] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 633.088374][T11887] loop2: detected capacity change from 0 to 40427 [ 633.145530][T11887] F2FS-fs (loop2): Invalid segment count (0) [ 633.172067][T11887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 633.228477][T11887] F2FS-fs (loop2): invalid crc value [ 633.308978][T11887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 633.767588][T11939] loop4: detected capacity change from 0 to 40427 [ 633.802112][T11939] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 633.810652][T11939] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 633.843055][T11939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 633.887629][T11939] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 633.895264][T11939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 633.985441][T11944] cannot load conntrack support for proto=3 [ 636.253840][T11949] loop2: detected capacity change from 0 to 32768 [ 636.669649][T11949] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.2309 (11949) [ 636.854982][T11949] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 636.893965][T11949] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 636.923315][T11949] BTRFS info (device loop2): using free space tree [ 636.965910][T11978] hub 6-0:1.0: USB hub found [ 636.967413][T11975] loop4: detected capacity change from 0 to 4096 [ 636.991380][T11978] hub 6-0:1.0: 1 port detected [ 637.011817][T11975] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 637.131919][T11975] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 637.215669][T11975] ntfs3: loop4: failed to convert "c46c" to ascii [ 637.374012][T11949] BTRFS info (device loop2): enabling ssd optimizations [ 637.938783][T12011] overlayfs: bad mount option "redirect_dir=./file1" [ 638.667516][T11528] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 639.089783][T12017] hub 6-0:1.0: USB hub found [ 639.120547][T12017] hub 6-0:1.0: 1 port detected [ 639.530407][T12007] loop4: detected capacity change from 0 to 40427 [ 639.557481][T12027] sch_tbf: peakrate 8 is lower than or equals to rate 4294967294 ! [ 639.563908][T12007] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 639.613884][T12007] F2FS-fs (loop4): invalid crc value [ 639.621446][T12007] F2FS-fs (loop4): Found nat_bits in checkpoint [ 639.839543][T12007] F2FS-fs (loop4): recover fsync data on readonly fs [ 639.882086][T12007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 640.195302][T12007] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 640.204422][T12007] F2FS-fs (loop4): switch extent_cache option is not allowed [ 640.309723][T12046] overlayfs: bad mount option "redirect_dir=./file1" [ 641.426807][T12054] sch_tbf: peakrate 8 is lower than or equals to rate 4294967294 ! [ 641.493942][T12038] loop2: detected capacity change from 0 to 32768 [ 641.526694][T12038] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.2340 (12038) [ 641.604212][T12038] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 641.658011][T12038] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 641.705625][T12038] BTRFS info (device loop2): using free space tree [ 641.733350][T12062] loop4: detected capacity change from 0 to 512 [ 641.772916][T12062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 641.867279][T12062] EXT4-fs (loop4): 1 truncate cleaned up [ 641.874616][T12062] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 641.904569][T12038] BTRFS info (device loop2): enabling ssd optimizations [ 642.604578][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'. [ 642.857995][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 642.868425][T11528] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 643.220126][T12108] loop4: detected capacity change from 0 to 128 [ 643.280042][T12108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 643.296040][T12108] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038 (0x7fffffff) [ 643.492868][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 644.895621][T12145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2373'. [ 644.940107][T12145] device geneve0 entered promiscuous mode [ 644.957278][T12145] bridge0: port 3(macvlan2) entered blocking state [ 644.964023][T12145] bridge0: port 3(macvlan2) entered disabled state [ 644.980958][T12145] device macvlan2 entered promiscuous mode [ 644.992504][T12145] bridge0: port 3(macvlan2) entered blocking state [ 644.999315][T12145] bridge0: port 3(macvlan2) entered forwarding state [ 645.197692][T12148] bridge0: port 3(macvlan2) entered disabled state [ 645.258849][T12148] device macvlan2 left promiscuous mode [ 645.281242][T12148] bridge0: port 3(macvlan2) entered disabled state [ 645.678987][T12138] loop2: detected capacity change from 0 to 40427 [ 645.717321][T12138] F2FS-fs (loop2): Invalid segment count (0) [ 645.745341][T12138] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 645.772064][T12138] F2FS-fs (loop2): invalid crc value [ 645.834983][ T3999] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 645.860491][T12138] F2FS-fs (loop2): Found nat_bits in checkpoint [ 646.010144][T12138] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 646.022608][T12138] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 646.235351][ T3999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.269948][ T3999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.305171][ T3999] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 646.325788][ T3999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.345286][ T3999] usb 1-1: config 0 descriptor?? [ 646.353085][T11528] syz-executor: attempt to access beyond end of device [ 646.353085][T11528] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 646.505840][T12195] loop4: detected capacity change from 0 to 1024 [ 646.862101][T12205] netlink: 'syz.1.2399': attribute type 13 has an invalid length. [ 646.886269][T12205] netlink: 'syz.1.2399': attribute type 12 has an invalid length. [ 646.932774][T12207] loop4: detected capacity change from 0 to 512 [ 647.005814][T12207] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2400: iget: bad extended attribute block 117440512 [ 647.023850][T12207] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2400: couldn't read orphan inode 15 (err -117) [ 647.039013][T12207] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 647.069663][T12207] netlink: 'syz.4.2400': attribute type 4 has an invalid length. [ 647.078807][T12207] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2400'. [ 647.090579][T12207] syz.4.2400 (pid 12207) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 647.194994][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 647.226562][T12215] tipc: Started in network mode [ 647.231483][T12215] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 647.319895][T12215] tipc: Enabled bearer , priority 10 [ 648.054816][ T3999] uclogic 0003:256C:006D.0011: failed retrieving Huion firmware version: -71 [ 648.093206][ T3999] uclogic 0003:256C:006D.0011: failed probing parameters: -71 [ 648.121968][ T3999] uclogic: probe of 0003:256C:006D.0011 failed with error -71 [ 648.201450][ T3999] usb 1-1: USB disconnect, device number 30 [ 648.953708][ T4669] tipc: Node number set to 4269801490 [ 649.419024][T12225] loop2: detected capacity change from 0 to 32768 [ 649.562493][T12249] tipc: Started in network mode [ 649.571394][T12249] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 649.622394][T12249] tipc: Enabled bearer , priority 10 [ 649.679626][T12225] XFS (loop2): Mounting V5 Filesystem [ 649.823470][T12225] XFS (loop2): Ending clean mount [ 649.896757][T12225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 650.124794][T11528] XFS (loop2): Unmounting Filesystem [ 650.734780][ T3598] tipc: Node number set to 4269801490 [ 651.061728][T12279] loop4: detected capacity change from 0 to 512 [ 651.211019][T12279] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2425: iget: bad extended attribute block 117440512 [ 651.234832][T12279] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2425: couldn't read orphan inode 15 (err -117) [ 651.397301][T12279] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 651.546652][T12279] netlink: 'syz.4.2425': attribute type 4 has an invalid length. [ 651.616159][T12279] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2425'. [ 651.860098][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 652.515342][T12310] loop2: detected capacity change from 0 to 128 [ 653.388950][T12310] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 654.153341][T12324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2439'. [ 655.077616][T12330] loop4: detected capacity change from 0 to 512 [ 655.164760][T12330] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.2441: iget: bad extended attribute block 117440512 [ 655.261995][T12330] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2441: couldn't read orphan inode 15 (err -117) [ 655.349782][T12330] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 655.451144][T12330] netlink: 'syz.4.2441': attribute type 4 has an invalid length. [ 655.516122][T12330] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2441'. [ 655.686778][T12310] loop2: detected capacity change from 0 to 2048 [ 655.695066][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 659.578167][T12380] nbd1: detected capacity change from 0 to 6 [ 659.726927][T12382] block nbd1: shutting down sockets [ 659.826860][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.835998][ C0] buffer_io_error: 60 callbacks suppressed [ 659.836009][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 659.854156][ T1028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.863359][ T1028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 659.871990][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.881112][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 659.889169][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.898280][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 659.907072][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 659.916200][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 659.924013][T11301] ldm_validate_partition_table(): Disk read failed. [ 659.993473][ T1028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.003627][ T1028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 660.013403][ T1028] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.022595][ T1028] Buffer I/O error on dev nbd1, logical block 0, async page read [ 660.066746][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.075935][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 660.083890][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.093043][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 660.101584][T11301] Dev nbd1: unable to read RDB block 0 [ 660.108115][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 660.117240][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 660.126822][T11301] nbd1: unable to read partition table [ 660.182951][T11301] nbd1: partition table beyond EOD, truncated [ 660.214096][T12381] ldm_validate_partition_table(): Disk read failed. [ 660.231849][T12381] Dev nbd1: unable to read RDB block 0 [ 660.260230][T12381] nbd1: unable to read partition table [ 660.285590][T12381] nbd1: partition table beyond EOD, truncated [ 660.315874][T11301] ldm_validate_partition_table(): Disk read failed. [ 660.325689][T11301] Dev nbd1: unable to read RDB block 0 [ 660.344998][T11301] nbd1: unable to read partition table [ 660.361016][T11301] nbd1: partition table beyond EOD, truncated [ 660.904433][ T3999] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 661.000200][T12378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 661.179639][ T3999] usb 2-1: Using ep0 maxpacket: 8 [ 661.301134][T12410] loop4: detected capacity change from 0 to 1024 [ 661.315478][ T3999] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=b6.14 [ 661.344962][ T3999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.399320][ T3999] usb 2-1: config 0 descriptor?? [ 661.418779][T12410] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.2468: Invalid block bitmap block 0 in block_group 0 [ 661.448203][T12410] Quota error (device loop4): write_blk: dquota write failed [ 661.456640][T12410] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 661.467163][T12410] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.2468: Failed to acquire dquot type 0 [ 661.481290][T12410] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.2468: Freeing blocks not in datazone - block = 0, count = 4096 [ 661.496181][T12410] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2468: Invalid inode bitmap blk 0 in block_group 0 [ 661.499723][ T3999] usb 2-1: selecting invalid altsetting 1 [ 661.521559][T12410] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 661.531871][ T3999] comedi comedi0: could not switch to alternate setting 1 [ 661.544992][T12410] EXT4-fs (loop4): 1 orphan inode deleted [ 661.550775][T12410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 661.570162][ T3999] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 661.630215][ T3838] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 661.661455][ T3838] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 0 [ 661.723028][T12404] loop2: detected capacity change from 0 to 32768 [ 661.736144][ T4669] usb 2-1: USB disconnect, device number 28 [ 661.781196][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 661.788068][T12404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2467 (12404) [ 661.844546][T12404] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 661.877399][T12404] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 661.899659][T12404] BTRFS info (device loop2): using free space tree [ 662.206028][T12404] BTRFS info (device loop2): enabling ssd optimizations [ 662.314191][ T26] audit: type=1800 audit(1721926344.440:128): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2467" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 662.699173][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 90 seconds [ 662.987939][T11528] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 663.356037][T12479] device syz_tun entered promiscuous mode [ 663.423891][T12478] device syz_tun left promiscuous mode [ 663.635268][ T6461] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 664.046294][ T6461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.069644][T12506] device syz_tun entered promiscuous mode [ 664.080540][T12505] device syz_tun left promiscuous mode [ 664.084582][ T6461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.101216][ T6461] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.117743][T12509] loop2: detected capacity change from 0 to 128 [ 664.125727][ T6461] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.135075][ T3999] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 664.145022][ T6461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.155362][ T6461] usb 5-1: config 0 descriptor?? [ 664.199484][ T26] audit: type=1800 audit(1721926346.330:129): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2500" name="bus" dev="loop2" ino=1048754 res=0 errno=0 [ 664.536108][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'. [ 664.545400][ T3999] usb 1-1: Using ep0 maxpacket: 16 [ 664.625141][T12523] bridge0: port 3(macvlan2) entered blocking state [ 664.808189][T12523] bridge0: port 3(macvlan2) entered disabled state [ 665.182524][T12523] device macvlan2 entered promiscuous mode [ 665.198977][T12523] device veth3 entered promiscuous mode [ 665.220340][T12519] device veth3 left promiscuous mode [ 665.251502][T12519] bridge0: port 3(macvlan2) entered disabled state [ 665.305885][T12519] device macvlan2 left promiscuous mode [ 665.311828][T12519] bridge0: port 3(macvlan2) entered disabled state [ 665.366508][ T6461] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 665.374981][ T6461] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 665.385522][ T6461] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 665.405394][ T6461] usb 5-1: USB disconnect, device number 18 [ 665.484738][ T9298] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 665.493745][ T9298] Bluetooth: hci6: Injecting HCI hardware error event [ 665.506378][ T3554] Bluetooth: hci6: hardware error 0x00 [ 665.586807][ T3999] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 665.596821][ T3999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.606386][ T3999] usb 1-1: Product: syz [ 665.610591][ T3999] usb 1-1: Manufacturer: syz [ 665.615671][ T3999] usb 1-1: SerialNumber: syz [ 665.622177][ T3999] usb 1-1: config 0 descriptor?? [ 665.667228][ T3999] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 665.684243][T12534] loop2: detected capacity change from 0 to 512 [ 665.746221][T12534] EXT4-fs (loop2): Test dummy encryption mode enabled [ 665.778398][T12538] device syz_tun entered promiscuous mode [ 665.788693][T12537] device syz_tun left promiscuous mode [ 665.864196][T12534] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.2511: inline data xattr refers to an external xattr inode [ 665.961153][T12534] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.2511: couldn't read orphan inode 12 (err -117) [ 666.025593][T12534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 666.066575][T12547] input: syz0 as /devices/virtual/input/input23 [ 667.359816][T11528] EXT4-fs (loop2): unmounting filesystem. [ 667.564969][ T3554] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 667.859632][ T3554] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 667.869507][ T3554] Bluetooth: hci5: Injecting HCI hardware error event [ 667.880077][ T9298] Bluetooth: hci5: hardware error 0x00 [ 667.880171][ T3999] gp8psk: usb in 128 operation failed. [ 668.782267][ T3999] gp8psk: usb in 137 operation failed. [ 668.787803][ T3999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 668.820554][ T3999] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 668.831636][ T3999] usb 1-1: media controller created [ 668.861446][ T3999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.894242][ T3999] gp8psk_fe: Frontend revision 1 attached [ 668.900710][ T3999] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 668.914848][ T3999] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 669.015884][ T3999] gp8psk: usb in 138 operation failed. [ 669.021444][ T3999] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 669.064444][ T3999] gp8psk: found Genpix USB device pID = 201 (hex) [ 669.118515][ T3999] usb 1-1: USB disconnect, device number 31 [ 669.251994][T12586] loop4: detected capacity change from 0 to 512 [ 669.301301][T12586] EXT4-fs (loop4): Test dummy encryption mode enabled [ 669.394059][T12586] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2532: inline data xattr refers to an external xattr inode [ 669.449293][ T3999] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 669.602444][T12586] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.2532: couldn't read orphan inode 12 (err -117) [ 669.972848][T12586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 670.063619][T12588] loop2: detected capacity change from 0 to 1024 [ 671.179950][ T9298] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 671.457808][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 672.203984][T12628] loop4: detected capacity change from 0 to 512 [ 672.290089][T12628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 672.309804][T12628] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038 (0x7fffffff) [ 672.435753][ T26] audit: type=1326 audit(1721926354.570:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16ac175f19 code=0x0 [ 672.462251][ T9666] EXT4-fs (loop4): unmounting filesystem. [ 673.395944][T12645] loop4: detected capacity change from 0 to 1024 [ 673.718306][T12664] netlink: 'syz.0.2559': attribute type 11 has an invalid length. [ 673.773130][T12667] loop2: detected capacity change from 0 to 512 [ 673.857669][T12667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 673.873136][T12667] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 674.076260][T11528] EXT4-fs (loop2): unmounting filesystem. [ 674.353816][T12686] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 674.820422][T12698] netlink: 'syz.1.2573': attribute type 11 has an invalid length. [ 674.928974][T12703] netlink: 'syz.3.2575': attribute type 39 has an invalid length. [ 674.967497][T12703] netlink: 'syz.3.2575': attribute type 4 has an invalid length. [ 674.981824][T12703] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2575'. [ 675.045791][T12703] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 675.200978][T12685] loop4: detected capacity change from 0 to 32768 [ 675.298408][T12714] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 675.724178][T12685] XFS (loop4): Mounting V5 Filesystem [ 676.412389][T12685] XFS (loop4): Ending clean mount [ 676.471761][T12685] XFS (loop4): Quotacheck needed: Please wait. [ 676.602257][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'. [ 676.622192][T12685] XFS (loop4): Quotacheck: Done. [ 676.681429][T12738] device syz_tun entered promiscuous mode [ 676.720912][T12738] device macvtap1 entered promiscuous mode [ 676.738564][ T9666] XFS (loop4): Unmounting Filesystem [ 676.756936][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2586'. [ 676.859441][T12742] device syz_tun left promiscuous mode [ 676.897362][T12742] device macvtap1 left promiscuous mode [ 677.392042][T12755] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 677.424731][T12757] netlink: 'syz.0.2591': attribute type 39 has an invalid length. [ 677.446788][T12757] netlink: 'syz.0.2591': attribute type 4 has an invalid length. [ 677.479270][T12757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2591'. [ 677.542160][T12757] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 677.594937][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 678.738718][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 678.804768][ T9298] Bluetooth: hci0: unexpected event 0x06 length: 17 > 3 [ 678.806761][T12779] device syz_tun entered promiscuous mode [ 678.852832][T12779] device macvtap1 entered promiscuous mode [ 678.964197][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 679.035591][T12786] device syz_tun left promiscuous mode [ 679.041841][T12786] device macvtap1 left promiscuous mode [ 679.717496][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2608'. [ 679.760738][T12808] netlink: 'syz.0.2609': attribute type 39 has an invalid length. [ 679.800925][T12808] netlink: 'syz.0.2609': attribute type 4 has an invalid length. [ 679.834479][T12808] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2609'. [ 679.862019][T12808] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 680.058217][T12800] loop4: detected capacity change from 0 to 32768 [ 680.093991][T12800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2606 (12800) [ 680.150414][T12800] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 680.186699][T12800] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 680.223151][T12800] BTRFS info (device loop4): using free space tree [ 681.005371][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 681.314605][T12837] device syz_tun entered promiscuous mode [ 681.320595][T12837] device macvtap2 entered promiscuous mode [ 681.390197][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 681.449143][T12844] netlink: 'syz.0.2617': attribute type 2 has an invalid length. [ 681.453382][T12842] device syz_tun left promiscuous mode [ 681.463216][T12800] BTRFS info (device loop4): enabling ssd optimizations [ 681.496023][T12842] device macvtap2 left promiscuous mode [ 681.542530][T12800] BTRFS error (device loop4): balance: invalid convert metadata profile single [ 682.119983][ T9666] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 682.461216][T12849] loop2: detected capacity change from 0 to 4096 [ 682.487969][T12857] netlink: 'syz.3.2621': attribute type 39 has an invalid length. [ 682.526021][T12849] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 682.600035][T12857] netlink: 'syz.3.2621': attribute type 4 has an invalid length. [ 682.608521][T12857] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2621'. [ 682.617799][T12857] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 682.848801][ T9298] Bluetooth: hci2: command 0x0406 tx timeout [ 683.116273][T12869] loop2: detected capacity change from 0 to 128 [ 683.225899][T12869] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 683.314037][T12869] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 683.415215][ T3554] Bluetooth: hci1: command 0x0406 tx timeout [ 683.796249][T11528] EXT4-fs (loop2): unmounting filesystem. [ 684.006215][T12882] loop2: detected capacity change from 0 to 64 [ 684.145244][T12884] netlink: 'syz.4.2631': attribute type 2 has an invalid length. [ 685.775575][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.786125][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.632943][T12940] loop2: detected capacity change from 0 to 512 [ 689.014163][T12940] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 689.025232][T12940] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 689.035339][T12940] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2653: Failed to acquire dquot type 1 [ 689.080004][T12940] EXT4-fs (loop2): 1 truncate cleaned up [ 689.087211][T12940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 689.096732][T12940] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 689.375833][T11528] EXT4-fs (loop2): unmounting filesystem. [ 689.514364][ T5659] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 689.804219][T12963] loop2: detected capacity change from 0 to 16 [ 689.833295][T12963] erofs: (device loop2): mounted with root inode @ nid 36. [ 689.875681][ T5659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.917580][ T5659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.942916][ T5659] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 689.974373][ T5659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.999962][ T5659] usb 5-1: config 0 descriptor?? [ 690.235816][T12972] loop2: detected capacity change from 0 to 4096 [ 690.261243][T12972] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 690.305032][ T3595] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 690.431413][T12972] ntfs: volume version 3.1. [ 690.751374][T12946] binder: 12944:12946 ioctl c0306201 20000580 returned -14 [ 691.503658][ T3595] usb 2-1: New USB device found, idVendor=0c45, idProduct=60aa, bcdDevice=43.d9 [ 691.533922][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.584099][ T3595] usb 2-1: config 0 descriptor?? [ 691.654698][ T3595] gspca_main: sonixb-2.14.0 probing 0c45:60aa [ 692.065152][ T3595] sonixb 2-1:0.0: Error reading register 00: -71 [ 692.078627][ T3595] usb 2-1: USB disconnect, device number 29 [ 692.398940][ T5659] uclogic 0003:256C:006D.0013: failed retrieving Huion firmware version: -71 [ 692.410515][ T5659] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 692.447831][ T5659] uclogic: probe of 0003:256C:006D.0013 failed with error -71 [ 692.636548][ T5659] usb 5-1: USB disconnect, device number 19 [ 693.154546][T11301] udevd[11301]: setting owner of /dev/bus/usb/005/019 to uid=0, gid=0 failed: No such file or directory [ 693.230956][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 120 seconds [ 693.905789][T13018] loop2: detected capacity change from 0 to 512 [ 694.613380][T13018] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 694.624380][T13018] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 694.634836][T13018] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2680: Failed to acquire dquot type 1 [ 694.653991][T13018] EXT4-fs (loop2): 1 truncate cleaned up [ 694.660837][T13018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 694.669958][T13018] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 694.979489][T11528] EXT4-fs (loop2): unmounting filesystem. [ 695.254431][ T3999] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 695.962972][ T3999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.991825][ T3999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.055104][ T3999] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 696.117487][ T3999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.167466][ T3999] usb 2-1: config 0 descriptor?? [ 696.250801][T13036] loop4: detected capacity change from 0 to 32768 [ 696.685025][T13035] binder: 13033:13035 ioctl c0306201 20000580 returned -14 [ 696.844680][T13065] loop2: detected capacity change from 0 to 512 [ 697.617033][T13065] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 697.627534][T13065] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 697.637588][T13065] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.2702: Failed to acquire dquot type 1 [ 697.652882][T13065] EXT4-fs (loop2): 1 truncate cleaned up [ 697.659617][T13065] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 697.669212][T13065] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 697.899645][T11528] EXT4-fs (loop2): unmounting filesystem. [ 698.254983][ T3999] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71 [ 698.277858][ T3999] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 698.306910][ T3999] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 698.361212][ T3999] usb 2-1: USB disconnect, device number 30 [ 699.244434][ T26] audit: type=1326 audit(1721926381.250:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 699.266972][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.951312][ T26] audit: type=1326 audit(1721926381.250:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec02d74950 code=0x7ffc0000 [ 699.974740][ T26] audit: type=1326 audit(1721926381.250:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fec02d776a7 code=0x7ffc0000 [ 700.003334][ T26] audit: type=1326 audit(1721926381.250:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 700.103386][ T26] audit: type=1326 audit(1721926381.250:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fec02d776a7 code=0x7ffc0000 [ 700.333294][ T26] audit: type=1326 audit(1721926381.260:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fec02d74c4a code=0x7ffc0000 [ 700.505349][ T26] audit: type=1326 audit(1721926381.260:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 700.675853][ T26] audit: type=1326 audit(1721926381.260:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 700.698296][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.774673][ T26] audit: type=1326 audit(1721926381.260:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 700.797112][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.903178][ T26] audit: type=1326 audit(1721926381.260:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 700.937173][ T3554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 700.950203][ T3554] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 700.960481][ T3554] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 700.974512][ T3554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.984700][ T3554] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 700.994993][ T3554] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 701.073878][T13122] loop2: detected capacity change from 0 to 128 [ 701.099974][T13122] befs: (loop2): No write support. Marking filesystem read-only [ 701.134700][ T26] audit: type=1326 audit(1721926381.270:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec02d75f19 code=0x7ffc0000 [ 701.182375][ T4470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.216781][T13122] befs: (loop2): invalid magic header [ 701.343277][ T4470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.353935][T13128] loop2: detected capacity change from 0 to 128 [ 701.361272][T13128] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 701.427504][ T5662] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 701.464669][ T5659] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 701.473863][ T4470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.499564][T13128] syz.2.2725: attempt to access beyond end of device [ 701.499564][T13128] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 701.513284][T13128] buffer_io_error: 31 callbacks suppressed [ 701.513300][T13128] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 701.551268][ T4444] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 701.620593][ T4470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.704531][ T5659] usb 2-1: Using ep0 maxpacket: 32 [ 701.753595][T13134] loop2: detected capacity change from 0 to 256 [ 701.770157][T13116] chnl_net:caif_netlink_parms(): no params data found [ 701.812473][T13134] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 701.819046][ T5662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 701.835940][ T5659] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 701.854096][ T5659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.863094][ T5662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.893977][ T5659] usb 2-1: config 0 descriptor?? [ 701.912796][ T5662] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 701.947579][ T5659] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 701.954051][ T5662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.994199][ T5662] usb 4-1: config 0 descriptor?? [ 702.184006][T13116] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.224448][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.234188][T13116] device bridge_slave_0 entered promiscuous mode [ 702.271465][T13116] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.306855][T13116] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.354514][T13116] device bridge_slave_1 entered promiscuous mode [ 702.471792][T13124] binder: 13123:13124 ioctl c0306201 20000580 returned -14 [ 702.556843][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.585352][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.831342][T13116] team0: Port device team_slave_0 added [ 702.840580][T13116] team0: Port device team_slave_1 added [ 702.919801][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.927221][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.953136][ C1] vkms_vblank_simulate: vblank timer overrun [ 703.010743][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.038501][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.051250][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.094421][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.131141][ T3557] Bluetooth: hci0: command tx timeout [ 703.322889][T13116] device hsr_slave_0 entered promiscuous mode [ 703.349726][T13116] device hsr_slave_1 entered promiscuous mode [ 703.366389][T13116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.392117][T13116] Cannot create hsr debugfs directory [ 703.466162][T13166] overlayfs: failed to resolve './file0': -2 [ 703.634531][ T5662] uclogic 0003:256C:006D.0015: failed retrieving Huion firmware version: -71 [ 703.665134][ T5662] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 703.701477][ T5662] uclogic: probe of 0003:256C:006D.0015 failed with error -71 [ 703.734992][ T5662] usb 4-1: USB disconnect, device number 14 [ 703.785722][ T5659] usb 2-1: USB disconnect, device number 31 [ 705.164603][ T3557] Bluetooth: hci0: command tx timeout [ 706.392821][ T4470] device hsr_slave_0 left promiscuous mode [ 706.420550][ T4470] device hsr_slave_1 left promiscuous mode [ 706.427527][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.443307][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.475605][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.483225][ T4470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.505314][ T4470] device bridge_slave_1 left promiscuous mode [ 706.511594][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.555923][ T4470] device bridge_slave_0 left promiscuous mode [ 706.564944][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.244361][ T3557] Bluetooth: hci0: command tx timeout [ 707.250812][ T4470] device veth1_macvtap left promiscuous mode [ 707.285084][ T4470] device veth0_macvtap left promiscuous mode [ 707.335396][ T4470] device veth1_vlan left promiscuous mode [ 707.341423][ T4470] device veth0_vlan left promiscuous mode [ 707.974489][T13254] loop3: detected capacity change from 128 to 0 [ 708.179385][T13256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 708.213512][T13256] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.2762' sets config #-1 [ 709.336019][ T3557] Bluetooth: hci0: command tx timeout [ 709.976264][ T4470] team0 (unregistering): Port device team_slave_1 removed [ 710.068613][ T4470] team0 (unregistering): Port device team_slave_0 removed [ 710.152008][ T4470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.227277][ T4470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.357437][T13275] loop2: detected capacity change from 0 to 1024 [ 710.405004][T13275] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 710.595146][T11528] EXT4-fs (loop2): unmounting filesystem. [ 710.656016][T13281] loop2: detected capacity change from 0 to 256 [ 710.663355][T13281] exfat: Deprecated parameter 'utf8' [ 710.669922][T13281] exfat: Deprecated parameter 'utf8' [ 710.714121][T13281] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 711.708369][ T4470] bond0 (unregistering): Released all slaves [ 712.188773][T13116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 712.652662][T13116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 712.988586][T13116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 713.038797][T13116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 713.219981][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2775'. [ 713.448675][T13116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.521746][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 713.546603][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 713.583166][T13116] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.608750][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 713.655280][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 713.685644][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.693089][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.776621][T13316] netlink: 'syz.3.2779': attribute type 1 has an invalid length. [ 713.825083][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 713.841970][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 713.888099][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 714.816222][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.823419][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.918918][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 717.292469][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 717.303600][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 717.355342][ T3602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 717.411874][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 717.462900][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 717.545939][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 717.567544][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 717.621480][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 717.677198][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 717.717342][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 717.737734][T13116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 717.948532][T13342] loop2: detected capacity change from 0 to 2048 [ 718.173776][T13342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 718.647847][T11528] EXT4-fs (loop2): unmounting filesystem. [ 718.873973][ T9298] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 718.907858][ T9298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 718.918446][ T9298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 718.930413][ T9298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 718.937997][ T9298] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 718.947191][ T9298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 719.045006][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 719.070600][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 719.138470][T13116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.621598][T13357] chnl_net:caif_netlink_parms(): no params data found [ 721.015171][ T3557] Bluetooth: hci7: command tx timeout [ 721.107294][T13357] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.151913][T13357] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.248325][T13357] device bridge_slave_0 entered promiscuous mode [ 721.308635][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 721.331487][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 721.365542][T13357] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.382984][T13357] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.423830][T13357] device bridge_slave_1 entered promiscuous mode [ 721.605082][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 722.432251][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 722.446039][T13357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.457488][T13116] device veth0_vlan entered promiscuous mode [ 722.482540][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 722.500940][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 722.519429][T13419] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 722.541771][T13357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.563590][T13116] device veth1_vlan entered promiscuous mode [ 722.703676][T13357] team0: Port device team_slave_0 added [ 722.743670][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 722.744390][ T3597] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 722.777154][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 722.824113][T13116] device veth0_macvtap entered promiscuous mode [ 722.848703][T13357] team0: Port device team_slave_1 added [ 722.863712][T13116] device veth1_macvtap entered promiscuous mode [ 722.866873][T13431] devpts: called with bogus options [ 722.960909][T13357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.983878][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.029687][T13357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.072208][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.084614][ T3557] Bluetooth: hci7: command tx timeout [ 723.144608][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.155704][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.166254][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.176828][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.190686][ T3597] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 723.219818][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.237371][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.262421][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.274474][ T3597] usb 4-1: config 0 descriptor?? [ 723.292189][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.302981][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.313981][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.339332][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.356980][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.367285][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 723.420378][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.452581][T13116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.472955][T13357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.486197][ T1028] block nbd2: Possible stuck request ffff88801ffb8000: control (read@0,4096B). Runtime 150 seconds [ 723.491894][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.560495][T13357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.606354][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 723.618491][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 723.645186][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 723.657655][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 723.694984][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.735654][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.748575][T13425] binder: 13424:13425 ioctl c0306201 20000580 returned -14 [ 723.765905][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.801035][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.812106][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.839517][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.882549][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.902118][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.912610][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.934334][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.950303][T13116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.961863][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.997656][T13116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.053881][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.083438][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.125008][T13116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.154417][T13116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.171584][T13116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.194476][T13116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.278052][T13357] device hsr_slave_0 entered promiscuous mode [ 724.326400][T13357] device hsr_slave_1 entered promiscuous mode [ 724.365058][T13357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 724.393098][T13357] Cannot create hsr debugfs directory [ 724.707073][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.762872][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.798085][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 724.799319][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.854328][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.887137][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 724.971500][ T3597] uclogic 0003:256C:006D.0016: failed retrieving Huion firmware version: -71 [ 725.045254][ T3597] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 725.053244][ T3597] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 725.113847][ T3597] usb 4-1: USB disconnect, device number 15 [ 725.164588][ T3557] Bluetooth: hci7: command tx timeout [ 725.187893][T13357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.418449][T13357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.817450][T13357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.189283][T13357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.297514][ T9298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 726.308641][ T9298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 726.317223][ T9298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 726.327298][ T9298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.335416][ T9298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 726.342673][ T9298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 726.351602][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'. [ 726.691922][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.855223][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.033126][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 727.117775][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.228787][T13357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 727.244405][ T3557] Bluetooth: hci7: command tx timeout [ 727.341448][T13357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 727.360774][T13357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 727.496399][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.549817][T13357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 727.573928][T13503] chnl_net:caif_netlink_parms(): no params data found [ 728.364461][ T3557] Bluetooth: hci0: command tx timeout [ 728.681689][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.725932][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.744920][T13503] device bridge_slave_0 entered promiscuous mode [ 728.763578][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.783814][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.826402][T13503] device bridge_slave_1 entered promiscuous mode [ 728.924387][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.009198][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.130480][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.172537][T13503] team0: Port device team_slave_0 added [ 729.223773][T13578] loop2: detected capacity change from 0 to 4096 [ 729.227248][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 729.255041][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.270465][T13357] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.281097][T13503] team0: Port device team_slave_1 added [ 729.318413][T13578] EXT4-fs (loop2): Test dummy encryption mode enabled [ 729.391848][T13578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 729.617260][T13578] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.649300][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.668075][ T7635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.679093][T13578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.704783][T13578] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 729.725571][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.725677][T13578] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 729.732706][ T7635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.793637][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.803669][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.864366][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.996999][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 730.017171][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 730.079542][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 730.125218][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.132352][ T7510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.173711][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.189539][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.255836][T11528] EXT4-fs (loop2): unmounting filesystem. [ 730.301043][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.450937][ T3557] Bluetooth: hci0: command tx timeout [ 730.620230][T13503] device hsr_slave_0 entered promiscuous mode [ 730.665356][T13503] device hsr_slave_1 entered promiscuous mode [ 730.697472][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 730.715205][T13503] Cannot create hsr debugfs directory [ 730.735047][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 730.748991][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 730.888954][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 730.903899][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 731.128685][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 731.156153][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 731.205782][ T5657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 731.544483][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 731.565305][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 731.623697][T13357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.648857][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 731.773355][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 731.810305][ T3999] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 732.444641][ T28] INFO: task syz.2.2007:10835 blocked for more than 143 seconds. [ 732.452430][ T28] Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0 [ 732.475059][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.483792][ T28] task:syz.2.2007 state:D stack:27560 pid:10835 ppid:9863 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 732.524350][ T3557] Bluetooth: hci0: command tx timeout [ 732.553502][ T28] Call Trace: [ 732.574943][ T28] [ 732.577976][ T28] __schedule+0x143f/0x4570 [ 732.582600][ T28] ? __mutex_lock+0x6b4/0xd80 [ 732.649379][ T28] ? release_firmware_map_entry+0x186/0x186 [ 732.669653][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 732.792985][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 733.240048][ T28] schedule+0xbf/0x180 [ 733.434611][ T28] schedule_preempt_disabled+0xf/0x20 [ 733.440068][ T28] __mutex_lock+0x6b9/0xd80 [ 733.494417][ T28] ? __mutex_lock+0x53c/0xd80 [ 733.499250][ T28] ? blkdev_put+0x100/0x750 [ 733.503779][ T28] ? mutex_lock_nested+0x10/0x10 [ 733.584920][ T28] ? __fsnotify_parent+0x50b/0x730 [ 733.590273][ T28] blkdev_put+0x100/0x750 [ 733.629925][ T28] blkdev_close+0x56/0x80 [ 733.644357][ T28] ? blkdev_open+0x2e0/0x2e0 [ 733.649030][ T28] __fput+0x3f6/0x8d0 [ 733.653077][ T28] task_work_run+0x246/0x300 [ 733.672351][ T28] ? task_work_cancel+0x2b0/0x2b0 [ 733.683201][ T28] ? stack_trace_snprint+0xe0/0xe0 [ 733.693249][ T28] get_signal+0x15fc/0x17d0 [ 733.703633][ T28] ? kasan_save_stack+0x4d/0x60 [ 733.713084][ T28] ? kasan_save_stack+0x3b/0x60 [ 733.723959][ T28] ? __kasan_record_aux_stack+0xb0/0xc0 [ 733.744291][ T28] ? task_work_add+0x87/0x3a0 [ 733.749051][ T28] ? fput+0xe2/0x1b0 [ 733.752980][ T28] ? do_syscall_64+0x3b/0xb0 [ 733.764566][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.770711][ T28] ? ptrace_notify+0x370/0x370 [ 733.786412][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 733.792145][ T28] ? get_sigframe_size+0x10/0x10 [ 733.812767][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 733.831538][ T28] ? blkdev_ioctl+0x3a9/0x760 [ 733.837486][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 733.843003][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 733.858914][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 733.869589][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 733.881254][ T28] do_syscall_64+0x47/0xb0 [ 733.892600][ T28] ? clear_bhb_loop+0x45/0xa0 [ 733.903360][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.909933][ T28] RIP: 0033:0x7f50e1175f19 [ 733.920354][ T28] RSP: 002b:00007f50e1f67048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.929146][ T28] RAX: 0000000000000000 RBX: 00007f50e1305f60 RCX: 00007f50e1175f19 [ 733.939055][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 733.947397][ T28] RBP: 00007f50e11e4e68 R08: 0000000000000000 R09: 0000000000000000 [ 733.955972][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.963988][ T28] R13: 000000000000000b R14: 00007f50e1305f60 R15: 00007fffabf0f078 [ 733.972594][ T28] [ 733.979751][ T28] INFO: task syz.2.2007:10836 blocked for more than 144 seconds. [ 734.044291][ T28] Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0 [ 734.051750][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 734.104033][ T28] task:syz.2.2007 state:D stack:27448 pid:10836 ppid:9863 flags:0x00004004 [ 734.146908][ T28] Call Trace: [ 734.174098][ T28] [ 734.177451][ T28] __schedule+0x143f/0x4570 [ 734.182029][ T28] ? __mutex_lock+0x6b4/0xd80 [ 734.214291][ T28] ? release_firmware_map_entry+0x186/0x186 [ 734.220518][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 734.255752][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 734.261035][ T28] schedule+0xbf/0x180 [ 734.284379][ T28] schedule_preempt_disabled+0xf/0x20 [ 734.289819][ T28] __mutex_lock+0x6b9/0xd80 [ 734.314378][ T28] ? __mutex_lock+0x53c/0xd80 [ 734.319157][ T28] ? blkdev_get_by_dev+0x148/0xa10 [ 734.354597][ T28] ? mutex_lock_nested+0x10/0x10 [ 734.359600][ T28] ? _atomic_dec_and_lock+0x96/0x130 [ 734.415447][ T28] ? iput+0x401/0x980 [ 734.419519][ T28] ? ilookup+0x1c8/0x200 [ 734.423810][ T28] ? disk_block_events+0xa1/0x110 [ 734.449698][ T28] ? blkdev_get_by_dev+0xe7/0xa10 [ 734.455623][ T28] blkdev_get_by_dev+0x148/0xa10 [ 734.460628][ T28] blkdev_open+0x12e/0x2e0 [ 734.465522][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 734.470138][ T28] do_dentry_open+0x7f9/0x10f0 [ 734.477202][ T28] path_openat+0x2644/0x2e60 [ 734.481842][ T28] ? mark_lock+0x9a/0x340 [ 734.487704][ T28] ? do_filp_open+0x480/0x480 [ 734.492463][ T28] do_filp_open+0x230/0x480 [ 734.497434][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 734.502089][ T28] ? _raw_spin_unlock+0x24/0x40 [ 734.507047][ T28] ? alloc_fd+0x5a0/0x640 [ 734.511486][ T28] do_sys_openat2+0x13b/0x4f0 [ 734.516597][ T28] ? do_sys_open+0x220/0x220 [ 734.521242][ T28] __x64_sys_openat+0x243/0x290 [ 734.526289][ T28] ? __ia32_sys_open+0x270/0x270 [ 734.531258][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 734.537392][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 734.542660][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 734.549004][ T28] do_syscall_64+0x3b/0xb0 [ 734.553974][ T28] ? clear_bhb_loop+0x45/0xa0 [ 734.558851][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.564954][ T28] RIP: 0033:0x7f50e1174950 [ 734.569392][ T28] RSP: 002b:00007f50e1f45b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 734.578535][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f50e1174950 [ 734.587987][ T28] RDX: 0000000000000000 RSI: 00007f50e1f45c20 RDI: 00000000ffffff9c [ 734.596401][ T28] RBP: 00007f50e1f45c20 R08: 0000000000000000 R09: 002364626e2f7665 [ 734.604844][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 734.605658][ T3557] Bluetooth: hci0: command tx timeout [ 734.613034][ T28] R13: 000000000000006e R14: 00007f50e1306038 R15: 00007fffabf0f078 [ 734.634435][ T28] [ 734.664430][ T28] [ 734.664430][ T28] Showing all locks held in the system: [ 734.672230][ T28] 1 lock held by rcu_tasks_kthre/12: [ 734.696050][ T28] #0: ffffffff8d12af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 734.713659][ T28] 1 lock held by rcu_tasks_trace/13: [ 734.719060][ T28] #0: ffffffff8d12b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 734.730432][ T28] 1 lock held by khungtaskd/28: [ 734.735968][ T28] #0: ffffffff8d12ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 734.746319][ T28] 4 locks held by kworker/u4:4/56: [ 734.751443][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.762937][ T28] #1: ffffc90001577d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.776867][ T28] #2: ffffffff8e28ead0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 734.787579][ T28] #3: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 734.799255][ T28] 1 lock held by dhcpcd/3217: [ 734.803969][ T28] #0: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2a5/0x1b20 [ 734.815330][ T28] 2 locks held by getty/3309: [ 734.820123][ T28] #0: ffff88814b08a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 734.830559][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 734.841142][ T28] 3 locks held by kworker/0:3/3595: [ 734.847498][ T28] #0: ffff888028613138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.860351][ T28] #1: ffffc90003fdfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.872760][ T28] #2: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 734.882542][ T28] 3 locks held by kworker/1:6/3597: [ 734.888097][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.898617][ T28] #1: ffffc90003fffd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.909106][ T28] #2: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 734.918493][ T28] 3 locks held by kworker/1:15/5657: [ 734.923802][ T28] #0: ffff888028613138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.936390][ T28] #1: ffffc9000354fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.948990][ T28] #2: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 734.958514][ T28] 2 locks held by kworker/1:19/5662: [ 734.964390][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.975257][ T28] #1: ffffc90003f1fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 734.987261][ T28] 1 lock held by udevd/10591: [ 734.991972][ T28] #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 735.002319][ T28] 1 lock held by syz.2.2007/10835: [ 735.008094][ T28] #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 735.017657][ T28] 1 lock held by syz.2.2007/10836: [ 735.022800][ T28] #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10 [ 735.033018][ T28] 1 lock held by syz.3.2114/11277: [ 735.038454][ T28] #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x320 [ 735.049304][ T28] 1 lock held by syz.3.2114/11283: [ 735.054516][ T28] #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x320 [ 735.064562][ T28] 1 lock held by syz-executor/11462: [ 735.069878][ T28] #0: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 735.079293][ T28] 3 locks held by syz.1.2257/11751: [ 735.084648][ T28] #0: ffff8880583190b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 735.095306][ T28] #1: ffff888058318078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 735.105372][ T28] #2: ffffffff8d130338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 735.116411][ T28] 2 locks held by kworker/u4:7/13019: [ 735.121821][ T28] #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 735.131832][ T28] #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a3/0x770 [ 735.143614][ T28] 1 lock held by syz.0.2738/13181: [ 735.148822][ T28] #0: ffff8881433c04c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1a5/0x320 [ 735.160007][ T28] 3 locks held by syz-executor/13357: [ 735.166510][ T28] #0: ffff88805329d0b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 735.176618][ T28] #1: ffff88805329c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 735.186443][ T28] #2: ffffffff8e3f1f88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xb8/0x2a0 [ 735.197225][ T28] 7 locks held by syz-executor/13503: [ 735.202632][ T28] #0: ffff88807e98c460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 735.211600][ T28] #1: ffff888059564888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 735.221448][ T28] #2: ffff8881437293a8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 735.231821][ T28] #3: ffffffff8dc0e168 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 735.242228][ T28] #4: ffff8880771ed0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 735.252922][ T28] #5: ffff8880771ee2f8 (&devlink->lock_key#33){+.+.}-{3:3}, at: nsim_drv_remove+0x54/0x160 [ 735.263393][ T28] #6: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3a/0x140 [ 735.274395][ T28] 1 lock held by syz.2.2869/13643: [ 735.279538][ T28] #0: ffffffff8e29ae28 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 735.289061][ T28] [ 735.294172][ T28] ============================================= [ 735.294172][ T28] [ 735.306229][ T28] NMI backtrace for cpu 0 [ 735.310601][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0 [ 735.320346][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 735.330431][ T28] Call Trace: [ 735.333735][ T28] [ 735.336687][ T28] dump_stack_lvl+0x1e3/0x2cb [ 735.341405][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 735.346928][ T28] ? panic+0x764/0x764 [ 735.351028][ T28] ? vprintk_emit+0x622/0x740 [ 735.355761][ T28] ? printk_sprint+0x490/0x490 [ 735.360565][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 735.365734][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 735.370738][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 735.376928][ T28] ? _printk+0xd1/0x111 [ 735.381199][ T28] ? panic+0x764/0x764 [ 735.385278][ T28] ? __wake_up_klogd+0xcc/0x100 [ 735.390132][ T28] ? panic+0x764/0x764 [ 735.394220][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 735.400322][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 735.406403][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 735.412402][ T28] watchdog+0xf88/0xfd0 [ 735.416605][ T28] ? watchdog+0x1f8/0xfd0 [ 735.420951][ T28] kthread+0x28d/0x320 [ 735.425092][ T28] ? hungtask_pm_notify+0x50/0x50 [ 735.430123][ T28] ? kthread_blkcg+0xd0/0xd0 [ 735.434749][ T28] ret_from_fork+0x1f/0x30 [ 735.439193][ T28] [ 735.444001][ T28] Sending NMI from CPU 0 to CPUs 1: [ 735.449993][ C1] NMI backtrace for cpu 1 [ 735.450005][ C1] CPU: 1 PID: 11882 Comm: kworker/u4:0 Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0 [ 735.450043][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 735.450055][ C1] Workqueue: bat_events batadv_nc_worker [ 735.450085][ C1] RIP: 0010:validate_chain+0x189/0x5950 [ 735.450115][ C1] Code: c1 e8 03 48 89 44 24 58 42 80 3c 20 00 74 08 48 89 df e8 ea fc 76 00 48 89 5c 24 28 48 8b 1b 48 85 db 74 48 48 83 c3 f8 74 42 <4c> 8d 7b 18 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 [ 735.450131][ C1] RSP: 0018:ffffc90005237640 EFLAGS: 00000097 [ 735.450145][ C1] RAX: 1ffffffff2088f68 RBX: ffffffff9051cf60 RCX: ffffffff816b2632 [ 735.450160][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9049d2f0 [ 735.450172][ C1] RBP: ffffc900052378f0 R08: dffffc0000000000 R09: fffffbfff2093a5f [ 735.450186][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 735.450199][ C1] R13: ffff888051118b50 R14: c909e5e2ecd0dc9e R15: 1ffff1100a22316a [ 735.450213][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 735.450229][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.450242][ C1] CR2: 00007ffe05028448 CR3: 00000000297a9000 CR4: 00000000003506e0 [ 735.450258][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 735.450268][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 735.450280][ C1] Call Trace: [ 735.450286][ C1] [ 735.450292][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 735.450320][ C1] ? read_lock_is_recursive+0x10/0x10 [ 735.450349][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 735.450386][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 735.450414][ C1] ? nmi_handle+0x12e/0x440 [ 735.450441][ C1] ? nmi_handle+0x25/0x440 [ 735.450468][ C1] ? validate_chain+0x189/0x5950 [ 735.450495][ C1] ? default_do_nmi+0x62/0x150 [ 735.450513][ C1] ? exc_nmi+0xa8/0x100 [ 735.450530][ C1] ? end_repeat_nmi+0x16/0x31 [ 735.450560][ C1] ? validate_chain+0x112/0x5950 [ 735.450588][ C1] ? validate_chain+0x189/0x5950 [ 735.450615][ C1] ? validate_chain+0x189/0x5950 [ 735.450643][ C1] ? validate_chain+0x189/0x5950 [ 735.450671][ C1] [ 735.450676][ C1] [ 735.450683][ C1] ? validate_chain+0x112/0x5950 [ 735.450709][ C1] ? deref_stack_reg+0x17c/0x210 [ 735.450734][ C1] ? __lock_acquire+0x125b/0x1f80 [ 735.450768][ C1] ? reacquire_held_locks+0x660/0x660 [ 735.450797][ C1] ? reacquire_held_locks+0x660/0x660 [ 735.450828][ C1] ? reacquire_held_locks+0x660/0x660 [ 735.450856][ C1] ? reacquire_held_locks+0x660/0x660 [ 735.450889][ C1] ? reacquire_held_locks+0x660/0x660 [ 735.450919][ C1] ? mark_lock+0x9a/0x340 [ 735.450946][ C1] __lock_acquire+0x125b/0x1f80 [ 735.450980][ C1] lock_acquire+0x1f8/0x5a0 [ 735.451005][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 735.451035][ C1] ? read_lock_is_recursive+0x10/0x10 [ 735.451062][ C1] ? __local_bh_disable_ip+0x183/0x210 [ 735.451090][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 735.451109][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 735.451135][ C1] ? __bpf_trace_softirq+0x10/0x10 [ 735.451160][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 735.451187][ C1] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 735.451213][ C1] ? _local_bh_enable+0xa0/0xa0 [ 735.451241][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 735.451268][ C1] _raw_spin_lock_bh+0x31/0x40 [ 735.451290][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 735.451314][ C1] ? batadv_nc_purge_paths+0x3b0/0x3b0 [ 735.451340][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 735.451372][ C1] batadv_nc_worker+0x324/0x610 [ 735.451396][ C1] ? batadv_nc_worker+0xc7/0x610 [ 735.451422][ C1] ? process_one_work+0x7a9/0x11d0 [ 735.451443][ C1] process_one_work+0x8a9/0x11d0 [ 735.451470][ C1] ? worker_detach_from_pool+0x260/0x260 [ 735.451493][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 735.451515][ C1] ? kthread_data+0x4e/0xc0 [ 735.451543][ C1] ? wq_worker_running+0x97/0x190 [ 735.451572][ C1] worker_thread+0xa47/0x1200 [ 735.451598][ C1] ? _raw_spin_unlock+0x40/0x40 [ 735.451625][ C1] kthread+0x28d/0x320 [ 735.451640][ C1] ? worker_clr_flags+0x190/0x190 [ 735.451660][ C1] ? kthread_blkcg+0xd0/0xd0 [ 735.451677][ C1] ret_from_fork+0x1f/0x30 [ 735.451708][ C1] [ 735.509692][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 735.509711][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0 [ 735.509737][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 735.509756][ T28] Call Trace: [ 735.509763][ T28] [ 735.509774][ T28] dump_stack_lvl+0x1e3/0x2cb [ 735.509836][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 735.509873][ T28] ? panic+0x764/0x764 [ 735.509907][ T28] ? vscnprintf+0x59/0x80 [ 735.509937][ T28] panic+0x318/0x764 [ 735.509964][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 735.510003][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 735.510035][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 735.510071][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 735.510110][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 735.510150][ T28] watchdog+0xfc7/0xfd0 [ 735.510187][ T28] ? watchdog+0x1f8/0xfd0 [ 735.510234][ T28] kthread+0x28d/0x320 [ 735.510254][ T28] ? hungtask_pm_notify+0x50/0x50 [ 735.510281][ T28] ? kthread_blkcg+0xd0/0xd0 [ 735.510303][ T28] ret_from_fork+0x1f/0x30 [ 735.510349][ T28] [ 735.516173][ T28] Kernel Offset: disabled [ 735.998695][ T28] Rebooting in 86400 seconds..