last executing test programs: 12.980275397s ago: executing program 4 (id=591): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) setuid(0xee01) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) 12.658248857s ago: executing program 4 (id=592): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffdd3, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x0, 0x3, "41a7712dd225f53d629174821d75d353bb7b759fc7ebc947036d308797b574c5b519c2c2926741477df440f0e1acb8bbeb13ad23d0a21a5c338a0d0bb482036b49822dc0042e01fd293c9a3e37399f82908d09020c35f9f0d0bb0a95271a47c0f26aca60eae70d28d2bf6ac38a55ae780b2ba06b37c2699a505b304cb6052577b109a56b677f2bfbeb0b247a68c45110255b222a6cfed20021b22e644bdbf18f0eaaf4f892f6d921afbe8aeda38cfdba678473d703e9f13754c166f800c9b24a5fdd26ed7a628df805c4a265162136093a7d624121b500a19977db7bffd9"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 10.043657305s ago: executing program 4 (id=607): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 9.7712165s ago: executing program 4 (id=611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r0, &(0x7f0000000100)='./file1\x00', 0x0) 9.285349134s ago: executing program 4 (id=613): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r2 = dup3(r0, r1, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='#$\x00', 0x0, r0) 8.817830267s ago: executing program 4 (id=617): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000100), 0x45, 0x7ce, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000940)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f0000000080)) 7.304098355s ago: executing program 0 (id=620): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x20}}, 0x24, 0x0) 7.211832623s ago: executing program 1 (id=621): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 7.019100161s ago: executing program 0 (id=622): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xfffffffffffffffb) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) 6.606028709s ago: executing program 0 (id=623): r0 = syz_io_uring_setup(0x40d, &(0x7f0000000200), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000004d40)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004d00)=[0xffffffffffffffff], 0x1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x400}}) io_uring_enter(r0, 0x19be, 0x0, 0x0, 0x0, 0x0) 6.357518661s ago: executing program 0 (id=625): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 6.25770678s ago: executing program 1 (id=626): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 5.841337318s ago: executing program 0 (id=637): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 5.782583683s ago: executing program 1 (id=629): syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x7fff, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000600)={0x78}, 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x8000000, 0x0, 0x0) 5.441690035s ago: executing program 1 (id=630): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r1, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.441023355s ago: executing program 0 (id=640): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 4.018527574s ago: executing program 3 (id=636): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3.838500071s ago: executing program 3 (id=638): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x4f6501d9, 0x1, 0x0, 0x0, 0x0, 0x4040c405}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) 3.769259447s ago: executing program 1 (id=639): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0xff, 0x5e0a, &(0x7f000000c740)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkau+7wB+9mavDQE33IkDtrkZWNhd38AhBpOElJJeKAlp05Iax14bJ77Vu+YmVDaFtkRBKlL7QB+aJlEaRWorUBWpqUQjpEZq35qnRrxErZQHP0DloKRSqsBWZ+b//3tmdnZmfRl75vw/H2T/vDtnZv5z5szZ/S76zgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACN1n985s+GiqIo/9T+WlMUF5f/XlXsLD+c33ahVwgAAACcrfdqf//9pekTO5dxpYZt/u26//juwsLCQvGFd0+8/xcLC+mCdUUxsrIoapdF//6Lny80bhO8UIwPDTd8PNzl7ke6XD7a5fKxLpev6HL5yi6Xj3e5fNEOWGRV/ecxtRu7sfbPNfVdWlxejNUuu7HNtV4YWjk8HH+WUzNUu87C2L7iQHGwmCmmFl1nqPZfUbyxvryvB4t4X8MN97W2KIqTP31uT1zDUNjHNxZNd1bT+Ny9c3+x7t2fPrfn23NvX9Nudt0Ni1ZaFBs3lOt8sShO/biqGCpWpn0S1zncsM61bdY50rTOodr1yn+3rvPkMtcZH/d4WOcPO6xzbfjc0zcURTFfLLlNqxeK4WJ1y72m/T1ePyLK2yifyg8Wo6d1nKxfxnFSXucnNzQfJ63HZNz/68M+GV1iDY1PxztfXrFov5/pcVI+6n44Vsvbfri80/Hxxh+tNh2r5TbP3bT0MdD2uWtzDKRjueEY2NDtGBheMVI7BoZPrXlD0zEwveg6w8VQ7b5O3NT5GJicO3R0cvaZZ+84cGj3/pn9M4enp7Zt2bx1y+atWyf3HTg4M1X/+/R26QBZXQynY3BDONfEY/CWlm0bD8mFb5y718F4n7wOysf+mZvLBV08XCxxjJfbvLjx7F8H6et+w+tgtOF10Pac2uZ1MLqM10G5zcmNy/uaOdrwp90aenUuXNNwDFzIr4flfT5269LnwrVhXS/ddrpfD0cWHQPxYQ2F1175mfT93vjdYb8sPi6uLS+4aEVxfHbm2J1P756bOzZdhHFeXNbwXLUeL6sbHlOx6HgZPu3jZeff/fLma9t8fk3YV+O3d36uym22THR+rmpn9/b7s+mzm4owzrHzvT/bfTUr92fKEh32Z7nNi3ec/feCKZc0nP/Gup3/RsZG6+e/kbQ3xprOf4ufmpHayori5B3LO/+NhT/n+/x3eZ+c/8p99didnY+BcpuXJk/3GBjteP67IcyhsJ5bQ2IYb8j979cun68fpg3PZdfjZnR0LBw3o/Eem4+bzYuuU95aed8bp87suNl4Q/Nz1fR9SwWPm3Jf/eVU5+Om3ObN6bM/d6yK/2w4d6zodgyMjawo1zuWDoL6+W5hVTwG7iz2FEeKg8XedJ3yWS7va2LT8o6BFeHP+T53XN0nx0C5r17d1PkYKLf5weZz+73TxvCZtE3D906tP19YKvNfO3rq9lp327nO/OU6P7Gl88+Gym3e3nK6OaPzfro9fOaiNvup9fWz1DG9tzg/++nqsM6DWzv/bKrc5vJtyzyedhZF8db0W7Wfd4Wf7/7j8f/8btPPfdv9TPmt6bcemnzkR6ezfgAAztz7tb/nV9S/12z4P9bL+f//AAAAwECIuX84zET+BwAAgMqIuX8kzET+BwAAgMqIuX80zCST/P/E3dtfe+/5Ir0b4EIQL4+74eF769vFjvd8+Hjdwinl5z/2rbHXvvL88u57uCiKXz70obbbP3FvXFfd0bjOjzR/fpGrr1/W/T/+6KntGt8/4eT2+u3Hx7PcwyB2ld+Y3FS73XXPTNfmmw8VtfnI/Esv1G+//nHc/sTm+vZ/Hd60ZOe+oabrbwzruTHMdeE9ZR7eeWo/lDNe77W11/3rZZ89dX/xekMbLqk9zFf/qH678T2iXrmsvn183Eut/1+++p3Xyu2fvqn9+p8fbr/+E+F2fxLmL3bUt2/c519pWP+fhPXH+4vXu/Ob32+7/tevqm//ejguvh5m6/rv//MPv9fu+Yr3s/Oe+vXi/U/975ba9eLtxdtvXf/489NN+6P19t98t347O5782Ujj9vHz8X6ix+9pPr6HwvPb1CMviuI7f1o07efio/Xr/XPL+uPtHb2n/fpvb1nn0aHra9c/9XjWND2ur/3tpraPN65n5z+saXo8rzwQ9t+7kz8ob/fEI+F4DJf/3w/rt9f6XqavP9B8vonbf31N/XUbb2+yZf2vtKx//vpy33Vf/4Pv1tf/+n0rm9a/85PheHqwPrutf//fXNp0/W98u/58HHtq4vCR2eMH9jbs1cbX8crxVasvuvgDl1wazqWtH+86MvfEzLF1U+umimLdAL5lYK/X/80w/6c+5s/9PdT96Gf14+7lT9W/bt3y8/rHr4TPPx6ez/j18Wt/NdZ0vLY+7/P31efZrv+2sI7luuqr/339sjY88fk3jv/TH7/d+n1BfDxHrxivPb5X119Zu2zozfrlreerbv7riubX9Y9Hp2rze2G/LoR3Zt5wZf3+Wm8/vjfJy5+uv37jd3Lx+kXL+4msGWl+HGe7/h+H72O+f3Xz+S8eH997vuXdnNcUQ+US5sP5oZivXx63ivv75ZNXtr2/+D48xfw1p7PMJc0+Mzt58MDh409Pzs3Mzk3OPvPsrkNHjh+e21V779JdX+x2/VOv79W11/femW1bitqr/Uh99NiFXv/RR/fsvWvq5r0z+3Yf3zf36NGZY/v3zM7umdk7e/Pufftmnup2/QN7d0xv2r75rk0T+w/s3XH39u2bt08cOHykXEZ9UV1sm/rSxOFju2pXmd2xZfv01q1bpiYOHdk7s+OuqamJ492uX/vaNFFe+8mJYzMHd88dODQzMXvg2Zkd09u3bdvU9d0fDx3dN7tu8tjxw5PHZ2eOTdYfy7q52qfLr33drk8eZo+E812LofDd+edu35beH7f0rS8veVP1TZq/PS3eCe8FFb++dfs45v6xMJNM8j8AAADkIOb+8Mb/py6Q/wEAAKAyYu5fGWYi/wMAAEBlxNw/HmaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7VxVFlvkfAAAAchBz/+owE/kfAAAAKiPm/ovCTOR/AAAAqIyY+y8OM8kj/4+1/lP/X/9f/7+x/x+31f8v9P/1/8+Q/r/+fyf6//r/g7z+Puz/r9L/p9/0W/8/5v4PhJnkkf8BAAAgCzH3XxJmIv8DAABAZcTcf2mYifwPAAAAlRFz/5owk0zyv9//r/+v/+/3/+v/6//3kv6//n8n+v/6/4O8/j7s//v9//Sdfuv/x9z/K2EmmeR/AAAAyEHM/R8MM5H/AQAAoDJi7r8szET+BwAAgMqIuf/yMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/RZhJJvkfAAAAchBz/5VhJvI/AAAAVEbM/VeFmcj/AAAAUBkx918dZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPuvCTPJJP8DAABADmLuvzbMRP4HAACAyoi5/0NhJvI/AAAAVEbM/WvDTDLJ//r/+v/6//r/+v/6/700WP3/4SUv0f+v0/9vpv+v/6//r/9PZ/3W/4+5/8NhJpnkfwAAAMhBzP3XhZnI/wAAAFAZMfdfH2Yi/wMAAEBlxNy/Lswkk/yv/6//r/+v/6//r//fS4PV/1+a/n+d/n8z/X/9f/1//X8667f+f8z968NMMsn/AAAAkIOY+zeEmcj/AAAAUBkx998QZiL/AwAAQGXE3H9jmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16/8vr/+/otsNUWn91v+Puf+mMJNM8j8AAADkIOb+m8NM5H8AAACojJj7bwkzkf8BAACgMmLu3xhmkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36/37/P931W/8/5v5bw0wyyf8AAACQg5j7bwszkf8BAACgMmLuvz3MRP4HAACAyoi5fyLMJJP8r/+v/6//r/+v/6//30tV7f+n86j+v/6//r/+v/6//j9L6rf+f8z9d4SZZJL/AQAAIAcx998ZZiL/AwAAQGXE3D8ZZiL/AwAAQGXE3D8VZpJJ/tf/1//X/9f/1//X/++lqvb//f5//f9C/1//X/9f/5+u+q3/H3P/dJhJJvkfAAAAchBz/6YwE/kfAAAAKiPm/s1hJvI/AAAAVEbM/VvCTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n2bDbT7Xb/3/mPu3hplkkv8BAAAgBzH3bwszkf8BAACgMmLuvyvMRP4HAACAyoi5/+4wk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3L89zCST/A8AAAA5iLn/I2Em8j8AAABURsz994SZyP8AAAAwUNr9HsIo5v6Phplkkv/1/6ve/19Yqf+v/6//33n9+v+9pf+v/9+J/r/+/yCvX/9f/5/u+q3/H3P/jjCTTPI/AAAA5CDm/nvDTOR/AAAAqIyY++8LM5H/AQAAoDJi7t8ZZpJJ/tf/r3r/3+//1//X/++2fv3/3tL/1//vRP9/MPv/4dsW/f8+6v+Xx5D+P/2o3/r/MfffH2aSSf4HAACAHMTc/7EwE/kfAAAAKiPm/o+Hmcj/AAAAUBkx938izCST/K//r/+v/6//r/+v/99L+v/6/53o/w9m/z/S/++f/r/f/0+/6rf+f8z9D4SZZJL/AQAAIAcx938yzET+BwAAgMqIuf9Xw0zkfwAAAKiMmPsfDDPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9vxZmkkn+BwAAgBzE3P9QmIn8DwAAAJURc/+nwkzkfwAAAKiMmPt/Pcwkk/yv/39++v/D6fb1//X/9f/1//X/zyX9f/3/Qv//jF3o/vygr1//X/+f7vqt/x9z/2+EmWSS/wEAACAHMff/ZpiJ/A8AAACVEXP/b4WZyP8AAABQGTH3Pxxmkkn+1//3+//1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v7fDjPJJP8DAABADmLufyTMRP4HAACAyoi5/9NhJvI/AAAAVEbM/Z8JM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP2Phplkkv8BAAAgBzH3fzbMRP4HAACAyoi5/3fCTOR/AAAAqIyY+383zCST/K//r/+v/6//r/+v/99L+v+L+//lOexC9v9XLGdD/f9l0f/X/9f/1/+ns37r/8fc/7kwk0zyPwAAAOQg5v7fCzOR/wEAAKAyYu7//TAT+R8AAAAqI+b+x8JMMsn/+v/6//r/+v/6//r/vaT/7/f/d6L/r/8/yOvX/9f/p7t+6//H3P/5MJNM8j8AAADkIOb+Pwgzkf8BAACgMmLu3xVmIv8DAABAZcTc/3iYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7t8dZpJJ/gcAAIAcxNz/hTAT+R8AAAAqI+b+PWEm8j8AAABURsz9e8NMMsn/+v/6//r/+v/6//r/vaT/r//fif6//v8gr1//X/+f7vqt/x9z/0yYSSb5HwAAAHIQc/++MBP5HwAAACoj5v79YSbyPwAAAFRGzP1PhJlkkv/1//X/9f/1//X/9f97Sf9f/78T/X/9/0Fev/6//j/d9Vv/P+b+A2EmmeR/AAAAyEHM/V8MM5H/AQAAoDJi7v9SmIn8DwAAAJURc//BMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9x/KMwkk/wPAAAAOYi5/3CYifwPAAAAlRFz/5EwE/kfAAAAKiPm/qNhJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/6//T3f91v+Puf8Pw0wyyf8AAACQg5j7j4WZyP8AAABQGTH3z4aZyP8AAABQGTH3z4WZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/uNhJpnkfwAAAMhBzP1PhpnI/wAAAFAZMfc/FWYi/wMAAEBlxNz/dJhJJvlf/1//X/+/b/r/9Z6f/r/+v/7/adH/1/8v9P/P2IXuzw/6+vX/9f//n7273BXtLOI4fAohkBDCtXAFXALXwGXgLsXd3d3d3d3dHQrFNSkJZ2ZKaLvWqSz2u2ae58uk7U765uxP/5z8sti3Wv+fu/9eccuQ/Q8AAAAT5O6/d9xi/wMAAEAbufvvE7fY/wAAANBG7v77xi1D9r/+X/+v/1+m//f9//y96v/1/zeD/l//f0n/f4tddD9/9vfr//X/7Fut/8/df7+4Zcj+BwAAgAly998/brH/AQAAoI3c/Q+IW+x/AAAAaCN3/wPjliH7X/+v/9f/6//1//r/I+n/9f9b9P/6/zO/X/+v/2ffav1/7v4HxS1D9j8AAABMkLv/wXGL/Q8AAABt5O5/SNxi/wMAAEAbufsfGrcM2f/6f/2//l//r//X/x9J/6//36L/1/+f+f36f/0/+1br/3P3PyxuGbL/AQAAYILc/Q+PW+x/AAAAaCN3/yPiFvsfAAAA2sjd/8i4Zcj+1//r//X/+n/9v/7/SPp//f8W/b/+/8zv1//r/9l3eP9/j6v/c6+0/8/df3XcMmT/AwAAwAS5+x8Vt9j/AAAA0Ebu/kfHLfY/AAAAtJG7/zFxy5D9r//X/1/f/193lf5f/6//v/7f6/9vG/p//f8W/f+q/f+V/Uno//X/+n/2HN7/7/T+//vPufsfG7cM2f8AAAAwQe7+x8Ut9j8AAAC0kbv/8XGL/Q8AAABt5O5/QtwyZP/r//X/vv+v/9f/6/+PpP/X/2/R/6/a//v+/63t/+9+Be/X/zPBav1/7v4nxi1D9j8AAABMkLv/SXGL/Q8AAABt5O5/ctxi/wMAAEAbufufErcM2f/6f/2//l//r//X/x9J/6//36L/1/+f+f2+/6//Z99q/X/u/qfGLUP2PwAAAEyQu/9pcYv9DwAAAG3k7n963GL/AwAAQBu5+58RtwzZ//p//b/+X/9/q/r/2+v/9f/b9P/6/y36f/3/md+v/9f/s2+1/j93/zPjliH7HwAAACbI3f+suMX+BwAAgDZy9z87brH/AQAAoI3c/c+JW4bsf/2//l//r//3/X/9/5H0/+36/6v0/9fT/+v/9f/6f7at1v/n7n9u3DJk/wMAAMAEufufF7fY/wAAANBG7v7nxy32PwAAALSRu/8FccuQ/a//1//r//X/+n/9/5H0/+36f9///y/6f/2//l//z7bV+v/c/S+MW4bsfwAAAJggd/+L4hb7HwAAANrI3f/iuMX+BwAAgDZy978kbhmy//X/+n/9v/5f/6//P5L+X/+/Rf9/4/3/nW7i/6f/X+v9+n/9P/tW6/9z9780bhmy/wEAAGCC3P0vi1vsfwAAAGgjd//L4xb7HwAAANrI3f+KuGXI/r+p/v/aO1/+7/r/K6P/v/H36//1//p//b/+X/+/Rf/v+/9nfr/+X//PvtX6/9z9r4xbhux/AAAAmCB3/6viFvsfAAAA2sjd/+q4xf4HAACANnL3vyZuGbL/ff9f/6//1//r//X/R9L/6/+36P/1/2d+v/5f/8++1fr/3P2vjVuG7H8AAACYIHf/6+IW+x8AAADayN3/+rjF/gcAAIA2cve/IW4Zsv/1//r/C+//b6f/T/r/+L3q//X/N4P+X/9/Sf9/i110P3/29+v/9f/sW63/z93/xrhlyP4HAACACXL3vylusf8BAACgjdz9b45b7H8AAABoI3f/W+KWIftf/6//v/D+3/f/i/4/fq/6f/3/zaD/1/9f0v/fYhfdz5/9/fp//T/7Vuv/c/e/NW4Zsv8BAABggtz9b4tb7H8AAABoI3f/2+MW+x8AAADayN3/jrhlyP7X/+v/9f/6f/2//v9I+n/9/xb9v/7/zO/X/+v/2bda/5+7/51xy5D9DwAAABPk7n9X3GL/AwAAQBu5+98dt9j/AAAA0Ebu/vfELUP2v/7/7P3/Pa+JF+j/9f/6f/3/kvT/+v8t+n/9/5nfr//X/7Nvtf4/d/9745Yh+x8AAAAmyN3/vrjF/gcAAIA2cve/P26x/wEAAKCN3P0fiFuG7P8Z/f8dbvBjffp/3//X/+v/9f9r0//r/7fo//X/Z36//l//z77V+v/c/R+MW4bsfwAAAJggd/+H4hb7HwAAANrI3f/huMX+BwAAgDZy938kbhmy/2f0/zek/7/sNu//r7ur/l//X/T/+v9L+n/9/w79v/7/zO/X/+v/2bda/5+7/6Nxy5D9DwAAABPk7v9Y3GL/AwAAQBu5+z8et9j/AAAA0Ebu/k/EDXe7y8U96f9K/6//9/1//b/+X/9/JP2//n+L/l//f+b36//1/+xbrf/P3f/JuMXf/wMAAEAbufs/FbfY/wAAANBG7v5Pxy32PwAAALSRu/8zccuQ/a//1//r//X/+n/9/5H0//r/Lfp//f+Z36//1/+zb7X+P3f/Z+OWIfsfAAAAJsjd/7m4xf4HAACANnL3fz5usf8BAACgjdz9X4hbhux//b/+X/+v/9f/6/+PpP/X/2/R/+v/z/x+/b/+n32r9f+5+78YtwzZ/wAAADBB7v4vxS32PwAAALSRu//LcYv9DwAAAG3k7v9K3DJk/+v/9f/6f/2//l//fyT9v/5/i/5f/3/m9+v/9f/sW63/z93/1bhlyP4HAACACXL3fy1usf8BAACgjdz9X49b7H8AAABoI3f/N+KWIfu/c/+/9WP6/8v0//r/S/p//f/B9P/6/y36f/3/md+v/9f/s2+1/j93/zfjliH7HwAAACbI3f+tuMX+BwAAgDZy9387brH/AQAAoI3c/d+JW4bs/879/xb9/2X6f/3/Jf2//v9g+n/9/xb9v/7/zO/X/+v/2bda/5+7/7txy5D9DwAAABPk7v9e3GL/AwAAQBu5+78ft9j/AAAA0Ebu/h/ELUP2v/5f/6//1//r//X/R9L/6/+36P/1/2d+v/5f/8++1fr/3P0/jFuG7H8AAACYIHf/j+IW+x8AAADayN3/47jF/gcAAIA2cvf/JG4Zsv/1//p//b/+X/+v/z+S/l//v0X/r/8/8/v1//p/9q3W/+fu/2ncMmT/AwAAwAS5+38Wt9j/AAAA0Ebu/p/HLfY/AAAAtJG7/xdxy5D9r//X/+v/9f/6f/3/kfT/+v8t+n/9/5nfr//X/7Nvtf4/d/8v45Yh+x8AAAAmyN3/q7jF/gcAAIA2cvf/Om6x/wEAAKCN3P2/iVuG7H/9v/5f/6//1//r/4+k/9f/b9H/6//P/H79v/6ffav1/7n7r4lbhux/AAAAmCB3/2/jFvsfAAAA2sjd/7u4xf4HAACANnL3Xxu3DNn/+n/9f8v+/476f/2//n8V+n/9/xb9v/7/zO/X/+v/2bda/5+7//dxy5D9DwAAABPk7v9D3GL/AwAAQBu5+/8Yt9j/AAAA0Ebu/j/FLUP2v/5f/9+y//f9f/2//n8Z+n/9/xb9v/7/zO/X/+v/2bda/5+7/89xy5D9DwAAABPk7v9L3GL/AwAAQBu5+/8at9j/AAAA0Ebu/r/FLUP2v/5f/6//1//r//X/R9L/6/+36P/1/2d+v/5f/8++1fr/3P1/j1uG7H8AAACYIHf/P+IW+x8AAADayN3/z7jF/gcAAIA2cvf/K24Zsv/1//p//b/+X/+v/z+S/l//v0X/r/8/8/v1//p/9q3W/+fu/3cAAAD//1pJMZk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x5490, 0x0) getdents(r0, 0x0, 0x0) 2.929563503s ago: executing program 1 (id=642): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.63660637s ago: executing program 3 (id=643): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 1.728104213s ago: executing program 3 (id=645): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) shutdown(r0, 0x1) 1.680419037s ago: executing program 2 (id=646): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7b, &(0x7f0000000380), 0x8) 1.414385642s ago: executing program 3 (id=647): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8800, &(0x7f0000001900)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',quota,iocharset=iso8859-13,nointegrity,quota,noquota,nointegrity\x00noquota,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nointegrity,nodiscard,nointegrity,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a653d307830303030303030f6322a33dc3614d5642c00"], 0x1, 0x60e7, &(0x7f0000006500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) write$cgroup_type(r0, &(0x7f0000000000), 0x182000) 1.403421923s ago: executing program 2 (id=657): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30}, 0x30) 917.346717ms ago: executing program 3 (id=649): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2b, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}}, {0x8, 0xb, 0x20000000}, {0x6}}]}, 0x4c}}, 0x0) 710.704015ms ago: executing program 2 (id=650): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4087, 0xff7, 0x12, 0x0, 0x0) 641.356972ms ago: executing program 2 (id=651): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @rand_addr, 0x2}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x85, &(0x7f0000000000), &(0x7f0000000080)=0x4) 517.919983ms ago: executing program 2 (id=652): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 2 (id=653): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007"], 0x38}}, 0x0) sendmsg$key(r0, &(0x7f0000000240)={0x7, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) kernel console output (not intermixed with test programs): a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.662488][ T3771] syz.0.25[3771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.700064][ T3715] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 66.008753][ T3785] 9pnet: p9_errstr2errno: server reported unknown error œæ [ 66.093341][ T3787] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 66.240338][ T3715] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 66.265662][ T3715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.265751][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 66.288835][ T3715] usb 2-1: Product: syz [ 66.309999][ T3715] usb 2-1: Manufacturer: syz [ 66.314736][ T3715] usb 2-1: SerialNumber: syz [ 66.361807][ T3715] usb 2-1: config 0 descriptor?? [ 66.563109][ T3797] loop0: detected capacity change from 0 to 4096 [ 66.630441][ T3715] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -71 [ 66.643621][ T3797] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 66.658881][ T3715] usb 2-1: USB disconnect, device number 2 [ 66.726850][ T3797] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 66.802759][ T3790] loop3: detected capacity change from 0 to 32768 [ 66.820739][ T3790] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.34 (3790) [ 66.863541][ T3790] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.888566][ T3790] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 66.936861][ T3790] BTRFS info (device loop3): enabling auto defrag [ 66.966399][ T3790] BTRFS info (device loop3): doing ref verification [ 66.979709][ T3810] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.980695][ T3797] overlayfs: upper fs does not support tmpfile. [ 67.029951][ T3790] BTRFS info (device loop3): use no compression [ 67.036327][ T3790] BTRFS info (device loop3): force clearing of disk cache [ 67.060609][ T3790] BTRFS info (device loop3): disabling free space tree [ 67.078401][ T3797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.274422][ T3704] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 67.385291][ T3790] BTRFS info (device loop3): enabling ssd optimizations [ 67.418709][ T3790] BTRFS info (device loop3): rebuilding free space tree [ 67.562413][ T3790] BTRFS info (device loop3): disabling free space tree [ 67.569394][ T3790] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.610949][ T3790] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.635554][ T3643] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 67.678780][ T3704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.710124][ T3847] device hsr0 entered promiscuous mode [ 67.765971][ T3848] device hsr_slave_0 left promiscuous mode [ 67.816965][ T3848] device hsr_slave_1 left promiscuous mode [ 67.901411][ T3790] BTRFS info (device loop3): balance: start -d -m [ 67.925898][ T3790] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 68.036186][ T3704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.119637][ T3790] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 68.260698][ T3704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.411131][ T3704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.537299][ T3867] loop1: detected capacity change from 0 to 256 [ 68.587181][ T3790] BTRFS info (device loop3): found 8 extents, stage: move data extents [ 68.642156][ T3867] FAT-fs (loop1): Directory bread(block 64) failed [ 68.648950][ T3867] FAT-fs (loop1): Directory bread(block 65) failed [ 68.711932][ T3867] FAT-fs (loop1): Directory bread(block 66) failed [ 68.718540][ T3867] FAT-fs (loop1): Directory bread(block 67) failed [ 68.772300][ T3867] FAT-fs (loop1): Directory bread(block 68) failed [ 68.810212][ T3867] FAT-fs (loop1): Directory bread(block 69) failed [ 68.837890][ T3867] FAT-fs (loop1): Directory bread(block 70) failed [ 68.844518][ T3872] loop2: detected capacity change from 0 to 512 [ 68.845279][ T3872] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.875863][ T3790] BTRFS info (device loop3): found 1 extents, stage: update data pointers [ 68.919410][ T3867] FAT-fs (loop1): Directory bread(block 71) failed [ 68.945161][ T3867] FAT-fs (loop1): Directory bread(block 72) failed [ 68.952319][ T3872] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 68.966293][ T3867] FAT-fs (loop1): Directory bread(block 73) failed [ 69.009888][ T3872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 69.037168][ T3790] BTRFS info (device loop3): balance: ended with status: 0 [ 69.068554][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.097584][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.104818][ T3872] System zones: 1-12 [ 69.109507][ T3639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.120562][ T3639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.128811][ T3639] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.136395][ T3639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.165936][ T3872] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.62: corrupted in-inode xattr [ 69.177949][ T947] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.249997][ T3872] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.62: couldn't read orphan inode 15 (err -117) [ 69.297486][ T3867] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 69.342863][ T3872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.375065][ T3867] FAT-fs (loop1): Filesystem has been set read-only [ 69.460020][ T947] usb 5-1: Using ep0 maxpacket: 16 [ 69.589986][ T947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.604464][ T947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.614693][ T947] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 69.625421][ T947] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 69.635449][ T947] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 69.645462][ T947] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 69.717927][ T3635] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.773755][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 69.835646][ T947] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.848057][ T947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.872905][ T947] usb 5-1: Product: syz [ 69.881417][ T947] usb 5-1: Manufacturer: syz [ 69.886050][ T947] usb 5-1: SerialNumber: syz [ 70.031812][ T3907] loop1: detected capacity change from 0 to 736 [ 70.174908][ T3877] chnl_net:caif_netlink_parms(): no params data found [ 70.450474][ T947] cdc_ncm 5-1:1.0: bind() failure [ 70.473804][ T947] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 70.499906][ T947] cdc_ncm 5-1:1.1: bind() failure [ 70.527474][ T947] usb 5-1: USB disconnect, device number 2 [ 70.624766][ T3923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 70.670998][ T3923] Zero length message leads to an empty skb [ 70.747311][ T3911] loop2: detected capacity change from 0 to 32768 [ 70.755168][ T3911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.69 (3911) [ 70.774619][ T3911] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.803503][ T3933] loop1: detected capacity change from 0 to 256 [ 70.820533][ T3911] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 70.831449][ T3911] BTRFS info (device loop2): using free space tree [ 70.859993][ T3682] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.100173][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 71.160377][ T3639] Bluetooth: hci3: command tx timeout [ 71.167371][ T3911] BTRFS info (device loop2): enabling ssd optimizations [ 71.172257][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.214570][ T3961] loop4: detected capacity change from 0 to 8 [ 71.234219][ T3877] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.286655][ T3877] device bridge_slave_0 entered promiscuous mode [ 71.317575][ T3961] unable to read fragment index table [ 71.326911][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333410][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.380910][ T3682] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 71.443065][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.484117][ T3682] usb 4-1: Product: syz [ 71.488322][ T3682] usb 4-1: Manufacturer: syz [ 71.526495][ T3682] usb 4-1: SerialNumber: syz [ 71.535829][ T3689] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 71.564632][ T3682] usb 4-1: config 0 descriptor?? [ 71.592623][ T3704] device hsr_slave_0 left promiscuous mode [ 71.621581][ T3682] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 71.630534][ T3704] device hsr_slave_1 left promiscuous mode [ 71.647785][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.656596][ T3638] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 71.667518][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.676065][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.690638][ T3704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.731457][ T3704] device bridge_slave_1 left promiscuous mode [ 71.777528][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.033664][ T3704] device bridge_slave_0 left promiscuous mode [ 72.041165][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.161254][ T3682] ssu100: probe of 4-1:0.0 failed with error -110 [ 72.330679][ T3704] device veth1_macvtap left promiscuous mode [ 72.337010][ T3704] device veth0_macvtap left promiscuous mode [ 72.389991][ T3704] device veth1_vlan left promiscuous mode [ 72.396029][ T3704] device veth0_vlan left promiscuous mode [ 72.909988][ T3682] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 73.063791][ T3997] loop1: detected capacity change from 0 to 128 [ 73.114779][ T3997] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.140869][ T3997] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 73.241285][ T3639] Bluetooth: hci3: command tx timeout [ 73.270423][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.281904][ T3682] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.292349][ T3682] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 73.302418][ T3682] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.320663][ T3682] usb 5-1: config 0 descriptor?? [ 73.349658][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 73.532141][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.570272][ T3704] team0 (unregistering): Port device team_slave_1 removed [ 73.617682][ T3981] usb 4-1: USB disconnect, device number 2 [ 73.646112][ T3704] team0 (unregistering): Port device team_slave_0 removed [ 73.767218][ T3704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.780169][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 73.921824][ T3704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.262793][ T7] usb 3-1: device descriptor read/all, error -71 [ 75.323108][ T3639] Bluetooth: hci3: command tx timeout [ 75.370507][ T3704] bond0 (unregistering): Released all slaves [ 75.404993][ T4013] loop3: detected capacity change from 0 to 64 [ 75.452873][ T4013] hfs: request for non-existent node 1280 in B*Tree [ 75.466925][ T4013] hfs: request for non-existent node 1280 in B*Tree [ 75.474701][ T4013] hfs: request for non-existent node 1280 in B*Tree [ 75.482677][ T4013] hfs: request for non-existent node 1280 in B*Tree [ 75.497242][ T4013] hfs: request for non-existent node 1280 in B*Tree [ 75.516867][ T4013] hfs: request for non-existent node 1280 in B*Tree [ 75.526010][ T3877] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.540096][ T3877] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.549188][ T3877] device bridge_slave_1 entered promiscuous mode [ 75.689375][ T3877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.737866][ T3877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.847967][ T3877] team0: Port device team_slave_0 added [ 75.859745][ T3877] team0: Port device team_slave_1 added [ 75.952297][ T3877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.983344][ T3877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.024379][ T3877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.059890][ T4028] device vlan1 entered promiscuous mode [ 76.115455][ T4034] device vlan1 left promiscuous mode [ 76.125967][ T4031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 76.136495][ T3877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.144992][ T3877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.179306][ T3877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.227501][ T3877] device hsr_slave_0 entered promiscuous mode [ 76.234775][ T3877] device hsr_slave_1 entered promiscuous mode [ 76.242388][ T3877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.251835][ T3877] Cannot create hsr debugfs directory [ 76.369973][ T3682] usbhid 5-1:0.0: can't add hid device: -71 [ 76.375990][ T3682] usbhid: probe of 5-1:0.0 failed with error -71 [ 76.410243][ T3682] usb 5-1: USB disconnect, device number 3 [ 76.448129][ T14] cfg80211: failed to load regulatory.db [ 76.887514][ T4063] loop2: detected capacity change from 0 to 256 [ 76.922989][ T4063] exfat: Deprecated parameter 'utf8' [ 77.071310][ T4063] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 77.400065][ T3639] Bluetooth: hci3: command tx timeout [ 80.609157][ T3877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.654356][ T3877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.696296][ T3877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.727575][ T3877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.937791][ T3877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.992620][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.015567][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.041013][ T3877] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.070921][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.099652][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.133328][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.140510][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.164094][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.192796][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.241363][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.281132][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.288353][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.325583][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.342680][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.391839][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.425552][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.441350][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.451412][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.460660][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.469198][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.486237][ T3877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.501781][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.511129][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.527797][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.537116][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.636119][ T4104] input: syz1 as /devices/virtual/input/input5 [ 82.021570][ T4080] loop3: detected capacity change from 0 to 40427 [ 82.054712][ T4118] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 82.144099][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.165279][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.186811][ T4122] loop2: detected capacity change from 0 to 512 [ 82.188075][ T3877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.229503][ T4080] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.240266][ T4122] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.275434][ T4122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.371325][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.388580][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.407216][ T4122] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 82.449821][ T4122] EXT4-fs (loop2): Remounting filesystem read-only [ 82.457128][ T4122] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.119: invalid indirect mapped block 1 (level 1) [ 82.482080][ T3877] device veth0_vlan entered promiscuous mode [ 82.490484][ T4122] EXT4-fs (loop2): 1 truncate cleaned up [ 82.498256][ T4122] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.510681][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.554848][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.572162][ T4080] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.587317][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.615813][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.652613][ T3877] device veth1_vlan entered promiscuous mode [ 82.693365][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 82.769934][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.778151][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.849328][ T4142] 9pnet: p9_errstr2errno: server reported unknown error œæø: [ 82.863832][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.912565][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.958214][ T3877] device veth0_macvtap entered promiscuous mode [ 82.975226][ T3877] device veth1_macvtap entered promiscuous mode [ 83.013527][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.041878][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.063975][ T4129] loop1: detected capacity change from 0 to 32768 [ 83.106987][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.170247][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.180818][ T4129] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.120 (4129) [ 83.199897][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.255132][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.282361][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.359971][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.409931][ T4129] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.429851][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.469834][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.535572][ T3635] syz-executor: attempt to access beyond end of device [ 83.535572][ T3635] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 83.540232][ T4129] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 83.561067][ T3877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.574124][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.590861][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.620222][ T4129] BTRFS info (device loop1): using free space tree [ 83.988294][ T3626] udevd[3626]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [4151] terminated by signal 1 (Hangup) [ 84.501508][ T4129] BTRFS info (device loop1): enabling ssd optimizations [ 86.103510][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.149819][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.169952][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.190899][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.226857][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.263994][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.284426][ T3877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.325694][ T3877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.368851][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.369168][ T3877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.428437][ T4181] loop2: detected capacity change from 0 to 256 [ 86.436305][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.456204][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.486480][ T4181] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 86.503073][ T3877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.543475][ T3877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.578433][ T3877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.655089][ T3877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.056813][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.103460][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.142954][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.145524][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.168523][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.218386][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.526192][ T4217] loop3: detected capacity change from 0 to 64 [ 87.672099][ T26] audit: type=1800 audit(1727526702.428:3): pid=4217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 88.097620][ T4239] loop4: detected capacity change from 0 to 512 [ 88.223575][ T4239] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.148: invalid block [ 88.341653][ T4239] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.148: invalid indirect mapped block 10 (level 1) [ 88.429909][ T4239] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.148: invalid indirect mapped block 8 (level 1) [ 88.487629][ T4239] EXT4-fs (loop4): 1 truncate cleaned up [ 88.529274][ T4239] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.676443][ T4227] loop1: detected capacity change from 0 to 40427 [ 88.706260][ T4227] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 88.727452][ T4227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.758044][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.758044][ T33] loop3: rw=1, sector=267, nr_sectors = 416 limit=64 [ 88.778717][ T4227] F2FS-fs (loop1): invalid crc value [ 88.785114][ T3634] EXT4-fs (loop4): unmounting filesystem. [ 88.790952][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.790952][ T33] loop3: rw=1, sector=923, nr_sectors = 40 limit=64 [ 88.791117][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.791117][ T33] loop3: rw=1, sector=967, nr_sectors = 32 limit=64 [ 88.870241][ T4227] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.913923][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.913923][ T33] loop3: rw=1, sector=1019, nr_sectors = 8 limit=64 [ 88.968725][ T33] kworker/u4:2: attempt to access beyond end of device [ 88.968725][ T33] loop3: rw=1, sector=1043, nr_sectors = 16 limit=64 [ 89.012221][ T4227] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.013289][ T33] kworker/u4:2: attempt to access beyond end of device [ 89.013289][ T33] loop3: rw=1, sector=1083, nr_sectors = 32 limit=64 [ 89.039653][ T4227] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.089990][ T33] kworker/u4:2: attempt to access beyond end of device [ 89.089990][ T33] loop3: rw=1, sector=1147, nr_sectors = 24 limit=64 [ 89.137270][ T33] kworker/u4:2: attempt to access beyond end of device [ 89.137270][ T33] loop3: rw=1, sector=1199, nr_sectors = 64 limit=64 [ 89.142991][ T4234] loop2: detected capacity change from 0 to 32768 [ 89.156409][ T33] kworker/u4:2: attempt to access beyond end of device [ 89.156409][ T33] loop3: rw=1, sector=1291, nr_sectors = 32 limit=64 [ 89.238641][ T33] kworker/u4:2: attempt to access beyond end of device [ 89.238641][ T33] loop3: rw=1, sector=1355, nr_sectors = 24 limit=64 [ 89.352163][ T33] Buffer I/O error on dev loop3, logical block 2315, lost async page write [ 89.380292][ T33] Buffer I/O error on dev loop3, logical block 2316, lost async page write [ 89.388953][ T33] Buffer I/O error on dev loop3, logical block 2317, lost async page write [ 89.449851][ T33] Buffer I/O error on dev loop3, logical block 2318, lost async page write [ 89.458520][ T33] Buffer I/O error on dev loop3, logical block 2407, lost async page write [ 89.488099][ T33] Buffer I/O error on dev loop3, logical block 2408, lost async page write [ 89.505416][ T33] Buffer I/O error on dev loop3, logical block 2409, lost async page write [ 89.510199][ T3689] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 89.525303][ T33] Buffer I/O error on dev loop3, logical block 2410, lost async page write [ 89.545475][ T33] Buffer I/O error on dev loop3, logical block 2547, lost async page write [ 89.583465][ T33] Buffer I/O error on dev loop3, logical block 2548, lost async page write [ 89.603411][ T3689] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 89.974638][ T4279] loop2: detected capacity change from 0 to 128 [ 90.084715][ T4279] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.153903][ T4279] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 90.285282][ T4279] syz.2.152 (pid 4279) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 90.416322][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 90.941038][ T4305] loop2: detected capacity change from 0 to 256 [ 90.959361][ T4305] exfat: Deprecated parameter 'namecase' [ 90.980690][ T4305] exfat: Deprecated parameter 'utf8' [ 90.998276][ T4305] exfat: Deprecated parameter 'namecase' [ 91.046725][ T4305] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 91.310976][ T4274] loop0: detected capacity change from 0 to 32768 [ 91.346635][ T4274] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.154 (4274) [ 91.407176][ T4274] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.447294][ T4274] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 91.493197][ T4274] BTRFS info (device loop0): enabling ssd optimizations [ 91.517037][ T4274] BTRFS error (device loop0): unrecognized mount option 'fragment=data' [ 91.554664][ T4274] BTRFS error (device loop0): open_ctree failed [ 91.681743][ T4284] loop3: detected capacity change from 0 to 40427 [ 91.720773][ T4284] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 91.764190][ T4284] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.899015][ T4284] F2FS-fs (loop3): Found nat_bits in checkpoint [ 92.035683][ T4284] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 92.049907][ T4284] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.273583][ T4307] loop1: detected capacity change from 0 to 32768 [ 92.402882][ T4339] input: syz1 as /devices/virtual/input/input6 [ 92.464743][ T4307] XFS (loop1): Mounting V5 Filesystem [ 92.545816][ T4314] loop2: detected capacity change from 0 to 32768 [ 92.580615][ T4314] XFS: attr2 mount option is deprecated. [ 92.586434][ T4314] XFS (loop2): stripe width (220) must be a multiple of the stripe unit (155) [ 92.590563][ T4346] loop4: detected capacity change from 0 to 128 [ 92.626806][ T4346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.666120][ T4346] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038 (0x7fffffff) [ 92.704513][ T4307] XFS (loop1): Ending clean mount [ 92.743827][ T4307] XFS (loop1): Quotacheck needed: Please wait. [ 92.850060][ T4307] XFS (loop1): Quotacheck: Done. [ 92.948573][ T3634] EXT4-fs (loop4): unmounting filesystem. [ 93.027068][ T3644] XFS (loop1): Unmounting Filesystem [ 93.209573][ T4363] loop0: detected capacity change from 0 to 8 [ 93.712687][ T4378] loop0: detected capacity change from 0 to 512 [ 94.098331][ T4387] loop1: detected capacity change from 0 to 4096 [ 94.154480][ T4387] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.417719][ T4403] loop0: detected capacity change from 0 to 512 [ 94.493614][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 94.514625][ T4403] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 94.590577][ T4403] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.681365][ T4403] EXT4-fs (loop0): mount failed [ 94.868702][ T4398] loop4: detected capacity change from 0 to 32768 [ 94.942350][ T4416] loop1: detected capacity change from 0 to 512 [ 95.038612][ T4416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.061385][ T4416] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 95.063242][ T4398] XFS (loop4): Mounting V5 Filesystem [ 95.117813][ T4422] sctp: [Deprecated]: syz.0.195 (pid 4422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.117813][ T4422] Use struct sctp_sack_info instead [ 95.153403][ T26] audit: type=1800 audit(1727526709.908:4): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 95.162662][ T4398] XFS (loop4): Ending clean mount [ 95.237299][ T4398] XFS (loop4): Quotacheck needed: Please wait. [ 95.311615][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 95.353087][ T4398] XFS (loop4): Quotacheck: Done. [ 95.451966][ T4399] loop2: detected capacity change from 0 to 40427 [ 95.487445][ T4399] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 95.508134][ T4399] F2FS-fs (loop2): invalid crc value [ 95.547584][ T4399] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.692385][ T3634] XFS (loop4): Unmounting Filesystem [ 95.701088][ T4399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.740380][ T3916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.842345][ T4437] loop3: detected capacity change from 0 to 4096 [ 95.849613][ T4399] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of __write_node_page+0xe20/0x2600 [ 95.851565][ T4437] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 95.916056][ T4437] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 95.918620][ T4440] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 95.930127][ T4437] ntfs3: loop3: Failed to load $MFT. [ 95.999834][ T3916] usb 1-1: Using ep0 maxpacket: 8 [ 96.350202][ T3916] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 96.370178][ T3916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.388487][ T3916] usb 1-1: Product: syz [ 96.400974][ T3916] usb 1-1: Manufacturer: syz [ 96.415825][ T3916] usb 1-1: SerialNumber: syz [ 96.437961][ T3916] usb 1-1: config 0 descriptor?? [ 96.517131][ T3916] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 96.680736][ T4459] loop1: detected capacity change from 0 to 2048 [ 96.737885][ T4459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.763283][ T4437] loop3: detected capacity change from 0 to 32768 [ 96.784112][ T4437] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.199 (4437) [ 96.831806][ T4437] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 96.854427][ T4437] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 96.879122][ T4437] BTRFS info (device loop3): use zlib compression, level 3 [ 96.903286][ T4437] BTRFS info (device loop3): disabling tree log [ 96.931002][ T4437] BTRFS info (device loop3): enabling ssd optimizations [ 96.938791][ T4437] BTRFS info (device loop3): using spread ssd allocation scheme [ 96.939097][ T4466] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 96.963795][ T4437] BTRFS info (device loop3): using free space tree [ 97.293564][ T4496] loop1: detected capacity change from 0 to 128 [ 97.416799][ T3635] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 97.836538][ T4491] loop2: detected capacity change from 0 to 32768 [ 97.850025][ T3916] gspca_sonixj: reg_w1 err -71 [ 97.908437][ T4491] jfs_rename did not expect dtDelete to return rc = -2 [ 97.916112][ T4491] ERROR: (device loop2): jfs_rename: [ 97.916112][ T4491] [ 97.984800][ T4491] jfs_mkdir: dtSearch returned -17 [ 98.000163][ T3916] sonixj: probe of 1-1:0.0 failed with error -71 [ 98.012509][ T3916] usb 1-1: USB disconnect, device number 2 [ 98.755443][ T4515] loop4: detected capacity change from 0 to 40427 [ 98.787389][ T4515] F2FS-fs (loop4): invalid crc value [ 98.837974][ T4515] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.963438][ T4515] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 99.004046][ T4515] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 99.467257][ T4538] loop1: detected capacity change from 0 to 32768 [ 99.499222][ T4538] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.230 (4538) [ 99.514460][ T4556] input: syz1 as /devices/virtual/input/input7 [ 99.571777][ T4538] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.625426][ T4538] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 99.655693][ T4538] BTRFS info (device loop1): using free space tree [ 99.837673][ T4538] BTRFS info (device loop1): enabling ssd optimizations [ 99.937032][ T4538] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.610684][ T4612] loop1: detected capacity change from 0 to 512 [ 100.713570][ T4589] loop3: detected capacity change from 0 to 32768 [ 100.716909][ T4612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.737190][ T4589] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.245 (4589) [ 100.755033][ T4612] ext4 filesystem being mounted at /53/bus supports timestamps until 2038 (0x7fffffff) [ 100.787088][ T4589] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.807644][ T4589] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.816986][ T4589] BTRFS info (device loop3): using free space tree [ 101.047028][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 101.095558][ T4589] BTRFS info (device loop3): enabling ssd optimizations [ 101.120220][ T947] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.256863][ T4646] loop1: detected capacity change from 0 to 164 [ 101.288924][ T3635] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.318958][ T4646] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 101.389962][ T947] usb 5-1: Using ep0 maxpacket: 8 [ 101.499719][ T4646] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 101.522235][ T947] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.534938][ T947] usb 5-1: config 0 has no interface number 0 [ 101.581001][ T947] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.590462][ T4646] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 101.622004][ T4653] ptrace attach of "./syz-executor exec"[3635] was attempted by " [ 101.624084][ T947] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 101.917448][ T947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.938513][ T947] usb 5-1: config 0 descriptor?? [ 102.015902][ T4642] loop2: detected capacity change from 0 to 32768 [ 102.038080][ T947] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 102.084679][ T4642] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.255 (4642) [ 102.107740][ T4659] loop1: detected capacity change from 0 to 128 [ 102.131572][ T4661] loop0: detected capacity change from 0 to 65 [ 102.147325][ T4642] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 102.182174][ T4642] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 102.236935][ T4642] BTRFS info (device loop2): using free space tree [ 102.244056][ T4661] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 102.341308][ T4661] BFS-fs: bfs_fill_super(): Last block not available on loop0: 511 [ 102.342562][ T947] usb 5-1: USB disconnect, device number 4 [ 102.492775][ T947] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 102.635009][ T4642] BTRFS info (device loop2): enabling ssd optimizations [ 104.403794][ T4661] UBIFS error (pid: 4661): cannot open "./file0", error -22 [ 104.479083][ T3638] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 105.415262][ T4692] loop0: detected capacity change from 0 to 32768 [ 106.595363][ T4702] loop2: detected capacity change from 0 to 32768 [ 106.713676][ T4702] XFS (loop2): Mounting V5 Filesystem [ 106.788213][ T4725] input: syz1 as /devices/virtual/input/input8 [ 106.918747][ T4702] XFS (loop2): Ending clean mount [ 106.992787][ T4702] XFS (loop2): Quotacheck needed: Please wait. [ 107.056663][ T4702] XFS (loop2): Quotacheck: Done. [ 107.085019][ T4708] loop4: detected capacity change from 0 to 40427 [ 107.112687][ T4708] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 107.145245][ T4708] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.207347][ T4708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.279473][ T3638] XFS (loop2): Unmounting Filesystem [ 107.359216][ T4708] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.381909][ T4708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.440009][ T3910] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.690044][ T3910] usb 4-1: Using ep0 maxpacket: 16 [ 107.820078][ T3910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.850086][ T3910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.868369][ T3910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 107.883352][ T3910] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 107.893159][ T3910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.903365][ T4745] loop1: detected capacity change from 0 to 32768 [ 107.919992][ T4745] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.286 (4745) [ 107.927999][ T3910] usb 4-1: config 0 descriptor?? [ 107.970238][ T4745] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 107.988624][ T4745] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 108.007815][ T4745] BTRFS info (device loop1): enabling auto defrag [ 108.018009][ T4745] BTRFS info (device loop1): max_inline at 0 [ 108.030920][ T4745] BTRFS info (device loop1): enabling ssd optimizations [ 108.038028][ T4745] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 108.063742][ T4745] BTRFS info (device loop1): use lzo compression, level 0 [ 108.084022][ T4745] BTRFS info (device loop1): using free space tree [ 108.566849][ T3910] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input9 [ 108.687791][ T4791] loop0: detected capacity change from 0 to 512 [ 108.752501][ T3910] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 108.795297][ T3910] usb 4-1: USB disconnect, device number 3 [ 108.824843][ T3644] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.840666][ T4798] capability: warning: `syz.4.301' uses deprecated v2 capabilities in a way that may be insecure [ 108.854892][ T4791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.857945][ T4798] printk: syz.4.301 (4798): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 108.898845][ T4791] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 109.263400][ T3877] EXT4-fs (loop0): unmounting filesystem. [ 109.526072][ T26] audit: type=1326 audit(1727526724.278:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe4b7dff9 code=0x7ffc0000 [ 109.640996][ T26] audit: type=1326 audit(1727526724.278:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe4b7dff9 code=0x7ffc0000 [ 109.760674][ T26] audit: type=1326 audit(1727526724.278:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7effe4b7dff9 code=0x7ffc0000 [ 109.790809][ T4824] loop3: detected capacity change from 0 to 512 [ 109.917760][ T26] audit: type=1326 audit(1727526724.278:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe4b7dff9 code=0x7ffc0000 [ 110.010506][ T26] audit: type=1326 audit(1727526724.278:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4812 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe4b7dff9 code=0x7ffc0000 [ 110.990158][ T4803] loop4: detected capacity change from 0 to 32768 [ 111.886959][ T3626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (3626) [ 112.229901][ T4824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.238898][ T4824] ext4 filesystem being mounted at /53/bus supports timestamps until 2038 (0x7fffffff) [ 112.362421][ T3639] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 112.371125][ T3639] Bluetooth: hci0: Injecting HCI hardware error event [ 112.382348][ T3636] Bluetooth: hci0: hardware error 0x00 [ 112.805304][ T3626] udevd[3626]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [4831] terminated by signal 1 (Hangup) [ 113.465977][ T4803] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.477809][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 113.507924][ T4803] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 113.586178][ T4803] BTRFS info (device loop4): using free space tree [ 113.821138][ T4861] loop0: detected capacity change from 0 to 1764 [ 113.866608][ T4803] BTRFS error (device loop4): open_ctree failed [ 114.283871][ T4878] loop2: detected capacity change from 0 to 1024 [ 114.395608][ T4884] loop4: detected capacity change from 0 to 764 [ 114.422996][ T4873] loop1: detected capacity change from 0 to 4096 [ 114.440002][ T3636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 114.448298][ T4873] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 114.564444][ T11] hfsplus: b-tree write err: -5, ino 4 [ 114.862179][ T4897] loop2: detected capacity change from 0 to 4096 [ 115.139747][ T4908] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.205053][ T4913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 115.254667][ T26] audit: type=1804 audit(1727526730.008:10): pid=4897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.334" name="/newroot/75/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 115.338717][ T4916] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 115.350433][ T4916] TCP: tcp_parse_options: Illegal window scaling value 15 > 14 received [ 115.393603][ T4914] loop0: detected capacity change from 0 to 4096 [ 115.462077][ T4914] NILFS (loop0): invalid segment: Checksum error in segment payload [ 115.519229][ T4914] NILFS (loop0): trying rollback from an earlier position [ 115.608207][ T4914] NILFS (loop0): recovery complete [ 115.644941][ T4925] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.716677][ T26] audit: type=1800 audit(1727526730.468:11): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.341" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 115.747646][ T4929] loop1: detected capacity change from 0 to 64 [ 115.909929][ T3916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.320177][ T3916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.334883][ T4942] ptrace attach of "./syz-executor exec"[3877] was attempted by ""[4942] [ 116.339017][ T3916] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 116.387300][ T3916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.414278][ T4922] loop2: detected capacity change from 0 to 32768 [ 116.426557][ T3916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 116.439186][ T3916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 116.580214][ T3916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.619854][ T3916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.627922][ T3916] usb 5-1: Product: syz [ 116.639840][ T3916] usb 5-1: Manufacturer: syz [ 116.656937][ T4922] XFS (loop2): Mounting V5 Filesystem [ 116.683211][ T4924] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.710761][ T3916] cdc_wdm 5-1:1.0: skipping garbage [ 116.716011][ T3916] cdc_wdm 5-1:1.0: skipping garbage [ 116.773139][ T3916] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 116.779087][ T3916] cdc_wdm 5-1:1.0: Unknown control protocol [ 116.820843][ T4922] XFS (loop2): Ending clean mount [ 116.900972][ T3638] XFS (loop2): Unmounting Filesystem [ 116.995986][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.005645][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.029984][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.036702][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.069825][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 117.076478][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 117.100649][ T3902] usb 5-1: USB disconnect, device number 5 [ 117.445989][ T4966] loop3: detected capacity change from 0 to 4096 [ 117.460403][ T4966] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 117.751870][ T4966] ntfs3: loop3: ino=1f, "memory.events" ntfs_iget5 [ 117.758745][ T4966] ntfs3: loop3: MFT: r=1f, expect seq=1 instead of 2! [ 117.850143][ T3635] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 117.895059][ T3635] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 117.931187][ T3635] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 117.947079][ T4979] loop0: detected capacity change from 0 to 47 [ 118.310216][ T4986] device wireguard0 entered promiscuous mode [ 118.473742][ T4981] loop4: detected capacity change from 0 to 32768 [ 118.499730][ T4969] loop2: detected capacity change from 0 to 32768 [ 118.577557][ T4981] XFS (loop4): Mounting V5 Filesystem [ 118.589376][ T4996] loop0: detected capacity change from 0 to 128 [ 118.675709][ T4996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.695316][ T4996] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038 (0x7fffffff) [ 118.748798][ T4969] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 118.770049][ T4981] XFS (loop4): Ending clean mount [ 118.794961][ T4981] XFS (loop4): Quotacheck needed: Please wait. [ 118.881961][ T4981] XFS (loop4): Quotacheck: Done. [ 118.982411][ T26] audit: type=1804 audit(1727526733.738:12): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.358" name="/newroot/77/file1/bus" dev="loop2" ino=17059 res=1 errno=0 [ 119.060317][ T4996] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 119.159475][ T3634] XFS (loop4): Unmounting Filesystem [ 119.178899][ T3638] ocfs2: Unmounting device (7,2) on (node local) [ 119.265425][ T3877] EXT4-fs (loop0): unmounting filesystem. [ 119.970007][ T3975] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 120.198702][ T5051] loop2: detected capacity change from 0 to 4096 [ 120.232972][ T3975] usb 1-1: Using ep0 maxpacket: 32 [ 120.274605][ T5057] loop1: detected capacity change from 0 to 2048 [ 120.311186][ T5057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.336139][ T5057] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 120.353914][ T5057] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 120.366753][ T5057] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.366753][ T5057] [ 120.376573][ T5057] EXT4-fs (loop1): Total free blocks count 0 [ 120.382642][ T5057] EXT4-fs (loop1): Free/Dirty block details [ 120.389075][ T5057] EXT4-fs (loop1): free_blocks=2415919504 [ 120.396046][ T5057] EXT4-fs (loop1): dirty_blocks=32 [ 120.401647][ T5057] EXT4-fs (loop1): Block reservation details [ 120.407656][ T5057] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 120.419217][ T3975] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 120.428873][ T3975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.438880][ T3975] usb 1-1: config 0 descriptor?? [ 120.483862][ T3975] gspca_main: sunplus-2.14.0 probing 041e:400b [ 120.555469][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 120.679207][ T5069] loop3: detected capacity change from 0 to 256 [ 120.729477][ T5069] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 120.737498][ T5073] loop4: detected capacity change from 0 to 512 [ 120.787727][ T5073] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.395: corrupted in-inode xattr [ 120.816978][ T5076] loop1: detected capacity change from 0 to 4096 [ 120.824646][ T5076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.847022][ T26] audit: type=1800 audit(1727526735.598:13): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.394" name="file1" dev="loop3" ino=1048628 res=0 errno=0 [ 120.881781][ T5073] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.395: couldn't read orphan inode 15 (err -117) [ 120.897126][ T5076] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.937640][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 120.960475][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.018298][ T5069] exFAT-fs (loop3): hint_cluster is invalid (17) [ 121.068945][ T5073] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135 [ 121.183837][ T5084] loop2: detected capacity change from 0 to 128 [ 121.191975][ T5086] loop3: detected capacity change from 0 to 256 [ 121.201702][ T3634] EXT4-fs (loop4): unmounting filesystem. [ 121.260489][ T5084] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 121.315289][ T5084] sysv_free_block: trying to free block not in datazone [ 121.423561][ T3638] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 121.571041][ T5096] loop4: detected capacity change from 0 to 16 [ 121.606013][ T5096] erofs: (device loop4): mounted with root inode @ nid 36. [ 121.665360][ T5100] loop3: detected capacity change from 0 to 256 [ 121.733756][ T5102] input: syz0 as /devices/virtual/input/input10 [ 121.792484][ T3870] udevd[3870]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 121.800959][ T3975] gspca_sunplus: reg_w_riv err -71 [ 121.827919][ T3975] sunplus: probe of 1-1:0.0 failed with error -71 [ 121.847095][ T3975] usb 1-1: USB disconnect, device number 3 [ 121.970076][ T947] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.997249][ T26] audit: type=1326 audit(1727526736.748:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5106 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ceef7dff9 code=0x7ffc0000 [ 122.044909][ T26] audit: type=1326 audit(1727526736.778:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5106 comm="syz.2.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ceef7dff9 code=0x7ffc0000 [ 122.064853][ T5111] loop4: detected capacity change from 0 to 2048 [ 122.093507][ T5113] loop0: detected capacity change from 0 to 7 [ 122.105556][ T5113] Dev loop0: unable to read RDB block 7 [ 122.111901][ T5113] loop0: unable to read partition table [ 122.117784][ T5113] loop0: partition table beyond EOD, truncated [ 122.129490][ T5113] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 122.129490][ T5113] ) failed (rc=-5) [ 122.144875][ T5111] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.239827][ T947] usb 4-1: Using ep0 maxpacket: 32 [ 122.383996][ T947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.445896][ T947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.467856][ T947] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.493730][ T947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.548647][ T947] usb 4-1: config 0 descriptor?? [ 122.600645][ T947] hub 4-1:0.0: USB hub found [ 122.784169][ T5109] loop1: detected capacity change from 0 to 32768 [ 122.810182][ T947] hub 4-1:0.0: 1 port detected [ 123.030033][ T947] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 123.036751][ T947] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 123.124002][ T5131] loop0: detected capacity change from 0 to 2048 [ 123.180056][ T947] usbhid 4-1:0.0: can't add hid device: -71 [ 123.188069][ T947] usbhid: probe of 4-1:0.0 failed with error -71 [ 123.255114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 123.265965][ T947] usb 4-1: USB disconnect, device number 4 [ 123.319973][ T3636] Bluetooth: hci3: command tx timeout [ 123.886529][ T5141] loop0: detected capacity change from 0 to 512 [ 123.923520][ T5141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.958097][ T5141] EXT4-fs (loop0): 1 truncate cleaned up [ 123.976297][ T5141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.086506][ T5129] loop2: detected capacity change from 0 to 32768 [ 124.150531][ T5129] XFS: ikeep mount option is deprecated. [ 124.156211][ T5129] XFS: noikeep mount option is deprecated. [ 124.209730][ T5129] XFS (loop2): Mounting V5 Filesystem [ 124.308446][ T5129] XFS (loop2): Ending clean mount [ 124.332341][ T5129] XFS (loop2): Quotacheck needed: Please wait. [ 124.438142][ T5129] XFS (loop2): Quotacheck: Done. [ 124.539637][ T3638] XFS (loop2): Unmounting Filesystem [ 124.673405][ T3877] EXT4-fs (loop0): unmounting filesystem. [ 124.779443][ T5154] loop4: detected capacity change from 0 to 32768 [ 124.808520][ T3707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.998650][ T3707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.140759][ T3707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.151311][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805ad7b000: rx timeout, send abort [ 125.163248][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805ad7b000: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 125.328015][ T5166] loop1: detected capacity change from 0 to 128 [ 125.386486][ T5166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.417797][ T5166] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038 (0x7fffffff) [ 125.488934][ T5171] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 125.515238][ T3707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.622430][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 125.805538][ T3636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.816598][ T3636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.825997][ T3636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.840364][ T3636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.850569][ T3636] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.863089][ T3636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.959968][ T3636] Bluetooth: hci3: command tx timeout [ 128.099963][ T26] audit: type=1326 audit(1727526742.858:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ceef7dff9 code=0x7fc00000 [ 128.674574][ T3707] device hsr_slave_0 left promiscuous mode [ 128.735426][ T3707] device hsr_slave_1 left promiscuous mode [ 128.799946][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.807405][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.870685][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.929854][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.994916][ T3707] device bridge_slave_1 left promiscuous mode [ 129.020181][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.028939][ T3707] device bridge_slave_0 left promiscuous mode [ 129.089978][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.166216][ T26] audit: type=1326 audit(1727526743.918:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ceef19959 code=0x7fc00000 [ 129.310052][ T26] audit: type=1326 audit(1727526743.968:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0ceef19a1f code=0x7fc00000 [ 129.333351][ T3707] device veth1_macvtap left promiscuous mode [ 129.339413][ T3707] device veth0_macvtap left promiscuous mode [ 129.399912][ T3707] device veth1_vlan left promiscuous mode [ 129.405777][ T3707] device veth0_vlan left promiscuous mode [ 129.469929][ T26] audit: type=1326 audit(1727526743.968:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0ceef7dff9 code=0x7fc00000 [ 130.040312][ T3639] Bluetooth: hci3: command tx timeout [ 130.110153][ T5220] loop3: detected capacity change from 0 to 4096 [ 131.368806][ T5233] loop2: detected capacity change from 0 to 128 [ 131.483810][ T3981] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.604773][ T5242] loop3: detected capacity change from 0 to 512 [ 131.844658][ T5242] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.860224][ T3981] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 131.893749][ T3981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.928690][ T3981] usb 2-1: config 0 descriptor?? [ 131.947865][ T5242] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.461: inline data xattr refers to an external xattr inode [ 131.963091][ T5257] [U] ÿª¿uªví§KôJÈ•U~ [ 131.979498][ T5242] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.461: couldn't read orphan inode 12 (err -117) [ 131.998074][ T5242] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.008309][ T947] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.120128][ T3636] Bluetooth: hci3: command tx timeout [ 132.160754][ T3707] team0 (unregistering): Port device team_slave_1 removed [ 132.235105][ T3707] team0 (unregistering): Port device team_slave_0 removed [ 132.306808][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.322958][ T5261] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 132.339888][ T3981] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 132.348623][ T3981] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 132.425941][ T947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.431130][ T3981] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 132.450168][ T947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.451185][ T3981] [drm] Initialized udl on minor 2 [ 132.484341][ T947] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 132.494974][ T947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.509258][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 132.537336][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.538017][ T947] usb 3-1: config 0 descriptor?? [ 132.638292][ T5276] loop4: detected capacity change from 0 to 1024 [ 132.761571][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767919][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849960][ T3981] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 132.866062][ T3981] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 132.912569][ T3981] usb 2-1: USB disconnect, device number 3 [ 133.046140][ T947] hid (null): unknown global tag 0xc [ 133.057789][ T947] waltop 0003:172F:0500.0002: unknown global tag 0xc [ 133.088624][ T947] waltop 0003:172F:0500.0002: item 0 2 1 12 parsing failed [ 133.096494][ T947] waltop: probe of 0003:172F:0500.0002 failed with error -22 [ 133.165919][ T3704] hfsplus: b-tree write err: -5, ino 3 [ 133.181131][ T3634] hfsplus: node 4:3 still has 1 user(s)! [ 133.365101][ T3981] usb 3-1: USB disconnect, device number 4 [ 134.199902][ T3636] Bluetooth: hci3: command tx timeout [ 135.026338][ T5304] loop4: detected capacity change from 0 to 512 [ 135.134826][ T5304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.161332][ T5304] ext4 filesystem being mounted at /108/bus supports timestamps until 2038 (0x7fffffff) [ 135.341873][ T3634] EXT4-fs (loop4): unmounting filesystem. [ 135.349441][ T3707] bond0 (unregistering): Released all slaves [ 135.356606][ T5297] loop3: detected capacity change from 0 to 32768 [ 135.400379][ T5297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.479 (5297) [ 135.486022][ T5297] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.520778][ T5297] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 135.538404][ T5297] BTRFS info (device loop3): using free space tree [ 135.830462][ T5297] BTRFS info (device loop3): enabling ssd optimizations [ 135.832820][ T5182] chnl_net:caif_netlink_parms(): no params data found [ 135.892946][ T5294] loop1: detected capacity change from 0 to 40427 [ 136.017084][ T5294] F2FS-fs (loop1): invalid crc value [ 136.122918][ T5294] F2FS-fs (loop1): Found nat_bits in checkpoint [ 136.171719][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.178832][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.195427][ T3635] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.231854][ T5182] device bridge_slave_0 entered promiscuous mode [ 136.248239][ T5294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 136.250487][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.293840][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.332586][ T5182] device bridge_slave_1 entered promiscuous mode [ 136.523935][ T5349] loop4: detected capacity change from 0 to 2048 [ 136.614831][ T5349] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 136.640509][ T3644] bio_check_eod: 339 callbacks suppressed [ 136.640524][ T3644] syz-executor: attempt to access beyond end of device [ 136.640524][ T3644] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 136.733698][ T5357] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.735150][ T5349] syz.4.487: attempt to access beyond end of device [ 136.735150][ T5349] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 136.775964][ T5182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.836206][ T5182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.036611][ T5182] team0: Port device team_slave_0 added [ 137.082152][ T5182] team0: Port device team_slave_1 added [ 137.176567][ T5369] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 137.264208][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.300820][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.431210][ T5182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.483332][ T5182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.512057][ T5182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.570588][ T5378] loop3: detected capacity change from 0 to 256 [ 137.594314][ T5182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.784914][ T5182] device hsr_slave_0 entered promiscuous mode [ 137.832023][ T5182] device hsr_slave_1 entered promiscuous mode [ 137.851185][ T5182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.869045][ T5182] Cannot create hsr debugfs directory [ 138.028465][ T5398] loop3: detected capacity change from 0 to 1024 [ 138.375905][ T5408] loop1: detected capacity change from 0 to 256 [ 138.587969][ T5418] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 138.641117][ T5418] netlink: 'syz.4.507': attribute type 2 has an invalid length. [ 138.691637][ T5418] netlink: 'syz.4.507': attribute type 1 has an invalid length. [ 138.749518][ T5386] loop2: detected capacity change from 0 to 32768 [ 138.889696][ T5386] XFS (loop2): Mounting V5 Filesystem [ 139.009884][ T5182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.019135][ T5386] XFS (loop2): Ending clean mount [ 139.021425][ T5182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.034384][ T5182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.044843][ T5182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.121173][ T5182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.184448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.200782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.220782][ T5182] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.246053][ T3916] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 139.269401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.286201][ T3916] XFS (loop2): Unmount and run xfs_repair [ 139.294880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.309826][ T3916] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 139.320672][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.327851][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.336319][ T3916] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 139.343761][ T5445] loop4: detected capacity change from 0 to 1024 [ 139.355856][ T3916] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 139.377880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.389905][ T3916] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 139.410004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.418437][ T3916] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 139.432903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.446644][ T3916] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 139.461684][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.464988][ T5445] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 139.468843][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.491033][ T3916] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.505396][ T3916] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.509383][ T5445] EXT4-fs (loop4): orphan cleanup on readonly fs [ 139.515192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.529446][ T3916] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 139.545405][ T5386] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 139.587104][ T5445] EXT4-fs error (device loop4): ext4_free_blocks:6212: comm syz.4.511: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.615410][ T5445] EXT4-fs (loop4): 1 orphan inode deleted [ 139.629869][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.630909][ T5445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.650647][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.659022][ T5386] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 139.719430][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.730066][ T5386] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 139.757556][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.775838][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.823526][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.847385][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.861405][ T3634] EXT4-fs (loop4): unmounting filesystem. [ 139.861939][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.867997][ T3638] XFS (loop2): Unmounting Filesystem [ 139.878835][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.904855][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.954489][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.319940][ T3975] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 140.615063][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.628517][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.647767][ T5182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.690147][ T3975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.695027][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.709811][ T3975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.719247][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.741142][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.748150][ T3975] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 140.751070][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.769111][ T5182] device veth0_vlan entered promiscuous mode [ 140.777759][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.783029][ T3975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.797081][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.808192][ T3975] usb 2-1: config 0 descriptor?? [ 140.813419][ T3981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.816179][ T5182] device veth1_vlan entered promiscuous mode [ 140.861427][ T5182] device veth0_macvtap entered promiscuous mode [ 140.875510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.884711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.900341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.909133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.926200][ T5182] device veth1_macvtap entered promiscuous mode [ 140.948692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.958755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.980024][ T3681] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.987362][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.001828][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.017384][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.029285][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.043819][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.058996][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.059838][ T3981] usb 5-1: Using ep0 maxpacket: 8 [ 141.078587][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.092569][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.108753][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.122984][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.138676][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.151266][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.171969][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.186448][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.199463][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.210016][ T3981] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 141.212979][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.231302][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.250013][ T3981] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.253230][ T5182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.260028][ T3981] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.279559][ T5182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.297525][ T5182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.300823][ T3981] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.311473][ T5182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.329456][ T5182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.330275][ T3975] hid-led 0003:1D34:000A.0003: ignoring exceeding usage max [ 141.339550][ T5182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.355800][ T3981] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.369130][ T3681] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 141.380374][ T5182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.384091][ T3681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.400267][ T3981] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.409309][ T3981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.423510][ T3681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.423870][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.448792][ T5493] loop2: detected capacity change from 0 to 32768 [ 141.449065][ T3681] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 141.456470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.502252][ T3681] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 141.514239][ T5493] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.526 (5493) [ 141.521839][ T3681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.552884][ T3975] hid-led 0003:1D34:000A.0003: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 141.623031][ T3681] usb 4-1: config 0 descriptor?? [ 141.634267][ T3975] hid-led 0003:1D34:000A.0003: Dream Cheeky Webmail Notifier initialized [ 141.688500][ T5493] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.699952][ T3981] usb 5-1: usb_control_msg returned -32 [ 141.705734][ T3981] usbtmc 5-1:16.0: can't read capabilities [ 141.711032][ T5493] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 141.746751][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.778096][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.795195][ T5493] BTRFS info (device loop2): using free space tree [ 141.817534][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.854872][ T3689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.867959][ T3981] usb 2-1: USB disconnect, device number 4 [ 141.871018][ T3689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.913987][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.032774][ T5493] BTRFS info (device loop2): enabling ssd optimizations [ 142.135380][ T3681] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 142.164175][ T3681] nintendo 0003:057E:2009.0004: unknown main item tag 0x0 [ 142.197245][ T3681] nintendo 0003:057E:2009.0004: item fetching failed at offset 2/5 [ 142.227777][ T3681] nintendo 0003:057E:2009.0004: HID parse failed [ 142.279859][ T3975] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.304355][ T3638] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.314875][ T3681] nintendo 0003:057E:2009.0004: probe - fail = -22 [ 142.330250][ T3681] nintendo: probe of 0003:057E:2009.0004 failed with error -22 [ 142.388004][ T3681] usb 4-1: USB disconnect, device number 5 [ 142.650078][ T3975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.668004][ T3975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.730243][ T3975] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 142.749384][ T3975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.757877][ T5537] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 142.802119][ T3975] usb 1-1: config 0 descriptor?? [ 142.936307][ T3681] usb 5-1: USB disconnect, device number 6 [ 143.023954][ T5555] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 143.057070][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.066775][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.109600][ T5555] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.116821][ T5555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.125887][ T5555] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.133153][ T5555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.153835][ T5555] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.281648][ T3975] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 143.322029][ T3975] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 143.502057][ T3975] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 143.591449][ T5578] Process accounting resumed [ 143.973920][ T5603] loop1: detected capacity change from 0 to 8 [ 144.151765][ T3975] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 144.197665][ T3975] usb 1-1: USB disconnect, device number 4 [ 144.546638][ T5625] loop1: detected capacity change from 0 to 64 [ 144.650309][ T5625] hfs: request for non-existent node 237 in B*Tree [ 144.676658][ T5625] hfs: request for non-existent node 237 in B*Tree [ 144.753050][ T5631] loop4: detected capacity change from 0 to 256 [ 144.793716][ T5629] hfs: request for non-existent node 237 in B*Tree [ 144.831782][ T5629] hfs: request for non-existent node 237 in B*Tree [ 144.842160][ T5631] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 144.893119][ T5629] hfs: request for non-existent node 237 in B*Tree [ 144.933376][ T5629] hfs: request for non-existent node 237 in B*Tree [ 144.940238][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.559'. [ 145.121234][ T3707] hfs: request for non-existent node 237 in B*Tree [ 145.128102][ T3707] hfs: request for non-existent node 237 in B*Tree [ 145.353388][ T26] audit: type=1326 audit(1727526760.098:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.419480][ T26] audit: type=1326 audit(1727526760.098:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.530419][ T26] audit: type=1326 audit(1727526760.138:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.597573][ T26] audit: type=1326 audit(1727526760.138:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.676199][ T26] audit: type=1326 audit(1727526760.138:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.701431][ T26] audit: type=1326 audit(1727526760.138:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f113cf7cadf code=0x7ffc0000 [ 145.759889][ T26] audit: type=1326 audit(1727526760.138:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.821029][ T26] audit: type=1326 audit(1727526760.138:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.909202][ T26] audit: type=1326 audit(1727526760.138:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.933046][ T26] audit: type=1326 audit(1727526760.138:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 145.982781][ T5678] loop0: detected capacity change from 0 to 2048 [ 146.036916][ T5678] loop0: p1 < > p4 [ 146.052971][ T5678] loop0: p4 size 8388608 extends beyond EOD, truncated [ 146.060182][ T3975] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.419912][ T3975] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.432240][ T3975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.458925][ T3975] usb 3-1: config 0 descriptor?? [ 146.500416][ T3914] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.515252][ T3975] cp210x 3-1:0.0: cp210x converter detected [ 146.569372][ T5687] loop0: detected capacity change from 0 to 40427 [ 146.595841][ T5687] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 146.628817][ T5687] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 146.643273][ T5687] F2FS-fs (loop0): invalid crc value [ 146.659653][ T5687] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.727561][ T5687] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.749987][ T3914] usb 5-1: Using ep0 maxpacket: 32 [ 146.811649][ T3092] udevd[3092]: worker [5103] terminated by signal 33 (Unknown signal 33) [ 146.822469][ T5687] syz.0.577: attempt to access beyond end of device [ 146.822469][ T5687] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.839604][ T3092] udevd[3092]: worker [5103] failed while handling '/devices/virtual/block/loop3' [ 146.870321][ T3914] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.888197][ T3914] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.913755][ T5182] syz-executor: attempt to access beyond end of device [ 146.913755][ T5182] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 146.921351][ T5697] loop1: detected capacity change from 0 to 1024 [ 146.940180][ T3975] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 146.982922][ T5697] EXT4-fs: Ignoring removed bh option [ 147.001034][ T3975] usb 3-1: cp210x converter now attached to ttyUSB0 [ 147.067323][ T5697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.081898][ T3914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 147.105589][ T3914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.117884][ T3914] usb 5-1: Product: syz [ 147.122221][ T3914] usb 5-1: Manufacturer: syz [ 147.126834][ T3914] usb 5-1: SerialNumber: syz [ 147.198862][ T3681] usb 3-1: USB disconnect, device number 5 [ 147.248690][ T3681] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.293423][ T3681] cp210x 3-1:0.0: device disconnected [ 147.315359][ T3644] EXT4-fs (loop1): unmounting filesystem. [ 147.404386][ T3914] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 147.473167][ T5695] loop3: detected capacity change from 0 to 32768 [ 147.516463][ T5695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.3.581 (5695) [ 147.545759][ T5695] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.561837][ T5695] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 147.574366][ T5695] BTRFS error (device loop3): superblock checksum mismatch [ 147.585636][ T5695] BTRFS error (device loop3): open_ctree failed [ 147.618141][ T3975] usb 5-1: USB disconnect, device number 7 [ 147.658404][ T3975] usblp0: removed [ 148.034966][ T5703] loop0: detected capacity change from 0 to 32768 [ 148.058987][ T5703] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.583 (5703) [ 148.094259][ T5711] loop3: detected capacity change from 0 to 8192 [ 148.310471][ T5711] REISERFS warning (device loop3): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 148.310471][ T5711] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 148.310471][ T5711] get newer reiserfsprogs package [ 148.359184][ T5717] loop1: detected capacity change from 0 to 32768 [ 148.391108][ T5717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.590 (5717) [ 148.403381][ T5703] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 148.420383][ T5717] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.430621][ T5717] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 148.439303][ T5717] BTRFS info (device loop1): using free space tree [ 148.444584][ T5703] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 148.549167][ T5703] BTRFS info (device loop0): using free space tree [ 148.720173][ T5717] BTRFS info (device loop1): enabling ssd optimizations [ 148.767834][ T5703] BTRFS info (device loop0): enabling ssd optimizations [ 148.839532][ T3644] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.939938][ T3981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.234770][ T5182] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 149.310084][ T3981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.349910][ T3981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.398931][ T3981] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.429284][ T3981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.460685][ T3981] usb 5-1: config 0 descriptor?? [ 149.756330][ T5777] loop0: detected capacity change from 0 to 1024 [ 149.781741][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 149.800972][ T5777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.824568][ T5777] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 149.896874][ T5182] EXT4-fs (loop0): unmounting filesystem. [ 149.940556][ T3981] hid (null): bogus close delimiter [ 150.152365][ T3981] usb 5-1: string descriptor 0 read error: -22 [ 150.217684][ T5786] loop2: detected capacity change from 0 to 512 [ 150.296008][ T5786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.335147][ T5786] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038 (0x7fffffff) [ 150.495399][ T5791] capability: warning: `syz.0.602' uses 32-bit capabilities (legacy support in use) [ 150.522875][ T5775] loop1: detected capacity change from 0 to 40427 [ 150.558594][ T5775] F2FS-fs (loop1): invalid crc value [ 150.579927][ T3981] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 150.590860][ T5775] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.609875][ T3981] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 150.638417][ T3981] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 150.658707][ T3981] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 150.676585][ T5794] loop0: detected capacity change from 0 to 2048 [ 150.678928][ T3981] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 150.699279][ T5781] loop3: detected capacity change from 0 to 32768 [ 150.713376][ T3981] usb 5-1: USB disconnect, device number 8 [ 150.726903][ T5775] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.759533][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 150.788787][ T5781] XFS (loop3): Mounting V5 Filesystem [ 150.795524][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 150.825858][ T3644] syz-executor: attempt to access beyond end of device [ 150.825858][ T3644] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.894204][ T5794] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.603: bg 0: block 234: padding at end of block bitmap is not set [ 150.941777][ T5794] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 150.980999][ T5781] XFS (loop3): Ending clean mount [ 150.984184][ T5794] EXT4-fs (loop0): This should not happen!! Data will be lost [ 150.984184][ T5794] [ 150.994346][ T5781] XFS (loop3): Quotacheck needed: Please wait. [ 151.080755][ T5182] EXT4-fs (loop0): unmounting filesystem. [ 151.120166][ T5781] XFS (loop3): Quotacheck: Done. [ 151.295064][ T5808] loop2: detected capacity change from 0 to 8192 [ 151.385900][ T3635] XFS (loop3): Unmounting Filesystem [ 151.526410][ T5816] loop4: detected capacity change from 0 to 512 [ 151.594064][ T5816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.686376][ T5821] loop1: detected capacity change from 0 to 256 [ 151.703222][ T5816] EXT4-fs (loop4): 1 truncate cleaned up [ 151.708910][ T5816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.865382][ T5821] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 152.094495][ T5818] loop2: detected capacity change from 0 to 32768 [ 152.153333][ T11] bond0: (slave bond_slave_0): interface is now down [ 152.154309][ T5827] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 152.163106][ T11] bond0: (slave bond_slave_1): interface is now down [ 152.211477][ T5827] bond0: (slave netdevsim0): no link monitoring support [ 152.230108][ T9] bond0: (slave bond_slave_0): interface is now down [ 152.237462][ T9] bond0: (slave bond_slave_1): interface is now down [ 152.246885][ T5827] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 152.256031][ T9] bond0: (slave netdevsim0): interface is now down [ 152.280633][ T9] bond0: (slave bond_slave_0): interface is now down [ 152.287372][ T9] bond0: (slave bond_slave_1): interface is now down [ 152.306830][ T9] bond0: (slave netdevsim0): interface is now down [ 152.324409][ T3634] EXT4-fs (loop4): unmounting filesystem. [ 152.327211][ T9] bond0: now running without any active interface! [ 152.523379][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.732180][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.877256][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.002212][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888028a6f800: rx timeout, send abort [ 153.017152][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028a6f800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 153.033327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 153.047256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 153.057996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 153.067468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 153.072722][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.076082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 153.094560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 153.102899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 153.111531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 153.120110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 153.274600][ T5829] loop1: detected capacity change from 0 to 32768 [ 153.307648][ T5829] XFS: ikeep mount option is deprecated. [ 153.344701][ T5829] XFS: noikeep mount option is deprecated. [ 153.462833][ T5829] XFS (loop1): Mounting V5 Filesystem [ 153.561525][ T5831] loop3: detected capacity change from 0 to 32768 [ 153.604548][ T3636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.634812][ T3636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.643591][ T3636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.660475][ T3636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.674351][ T3636] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.682338][ T5829] XFS (loop1): Ending clean mount [ 153.683820][ T3636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.703755][ T5829] XFS (loop1): Quotacheck needed: Please wait. [ 153.763970][ T5829] XFS (loop1): Quotacheck: Done. [ 153.985995][ T5851] loop0: detected capacity change from 0 to 16 [ 154.022101][ T5851] erofs: (device loop0): mounted with root inode @ nid 36. [ 154.044484][ T3644] XFS (loop1): Unmounting Filesystem [ 154.513517][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 154.558309][ T5860] sctp: [Deprecated]: syz.3.619 (pid 5860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.558309][ T5860] Use struct sctp_sack_info instead [ 155.159498][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 155.159513][ T26] audit: type=1326 audit(1727526769.908:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 155.209473][ T5879] loop1: detected capacity change from 0 to 2048 [ 155.253269][ T26] audit: type=1326 audit(1727526769.948:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.0.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113cf7dff9 code=0x7ffc0000 [ 155.296650][ T5879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.530413][ T5886] loop3: detected capacity change from 0 to 128 [ 155.550269][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.557436][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.603046][ T5845] device bridge_slave_0 entered promiscuous mode [ 155.621905][ T11] bond0: (slave bond_slave_0): interface is now down [ 155.624219][ T5889] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 155.629173][ T11] bond0: (slave bond_slave_1): interface is now down [ 155.658621][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.665522][ T5892] loop1: detected capacity change from 0 to 47 [ 155.699675][ T5889] bond0: (slave netdevsim0): no link monitoring support [ 155.706962][ T5886] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038 (0x7fffffff) [ 155.709900][ T11] bond0: (slave bond_slave_0): interface is now down [ 155.720127][ T3639] Bluetooth: hci0: command tx timeout [ 155.724009][ T11] bond0: (slave bond_slave_1): interface is now down [ 155.763344][ T5889] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 155.769517][ T102] bond0: (slave bond_slave_0): interface is now down [ 155.782115][ T102] bond0: (slave bond_slave_1): interface is now down [ 155.788844][ T102] bond0: (slave netdevsim0): interface is now down [ 155.831193][ T102] bond0: (slave bond_slave_0): interface is now down [ 155.843119][ T102] bond0: (slave bond_slave_1): interface is now down [ 155.851201][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.858330][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.889908][ T102] bond0: (slave netdevsim0): interface is now down [ 155.938890][ T3635] EXT4-fs (loop3): unmounting filesystem. [ 155.940660][ T5845] device bridge_slave_1 entered promiscuous mode [ 155.953897][ T3707] bond0: (slave bond_slave_0): interface is now down [ 155.971318][ T3707] bond0: (slave bond_slave_1): interface is now down [ 155.986206][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.020859][ T3707] bond0: (slave bond_slave_0): interface is now down [ 156.038122][ T3707] bond0: (slave bond_slave_1): interface is now down [ 156.072527][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.103563][ T5903] loop3: detected capacity change from 0 to 128 [ 156.112198][ T3707] bond0: (slave bond_slave_0): interface is now down [ 156.129422][ T3707] bond0: (slave bond_slave_1): interface is now down [ 156.160174][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.177393][ T5903] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 156.201088][ T3707] bond0: (slave bond_slave_0): interface is now down [ 156.207858][ T3707] bond0: (slave bond_slave_1): interface is now down [ 156.218834][ T5903] sysv_free_block: trying to free block not in datazone [ 156.233322][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.270091][ T11] bond0: (slave bond_slave_0): interface is now down [ 156.297231][ T11] bond0: (slave bond_slave_1): interface is now down [ 156.311883][ T11] bond0: (slave netdevsim0): interface is now down [ 156.352146][ T11] bond0: (slave bond_slave_0): interface is now down [ 156.369114][ T11] bond0: (slave bond_slave_1): interface is now down [ 156.413200][ T11] bond0: (slave netdevsim0): interface is now down [ 156.434043][ T3635] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 156.450997][ T3707] bond0: (slave bond_slave_0): interface is now down [ 156.480227][ T3707] bond0: (slave bond_slave_1): interface is now down [ 156.497364][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.540357][ T3707] bond0: (slave bond_slave_0): interface is now down [ 156.547106][ T3707] bond0: (slave bond_slave_1): interface is now down [ 156.598039][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.652018][ T3707] bond0: (slave bond_slave_0): interface is now down [ 156.658762][ T3707] bond0: (slave bond_slave_1): interface is now down [ 156.707121][ T3707] bond0: (slave netdevsim0): interface is now down [ 156.771833][ T102] bond0: (slave bond_slave_0): interface is now down [ 156.778567][ T102] bond0: (slave bond_slave_1): interface is now down [ 156.839980][ T102] bond0: (slave netdevsim0): interface is now down [ 156.909935][ T102] bond0: (slave bond_slave_0): interface is now down [ 156.916669][ T102] bond0: (slave bond_slave_1): interface is now down [ 157.007907][ T102] bond0: (slave netdevsim0): interface is now down [ 157.070337][ T51] device hsr_slave_0 left promiscuous mode [ 157.081189][ T102] bond0: (slave bond_slave_0): interface is now down [ 157.087912][ T102] bond0: (slave bond_slave_1): interface is now down [ 157.129805][ T102] bond0: (slave netdevsim0): interface is now down [ 157.146931][ T51] device hsr_slave_1 left promiscuous mode [ 157.160581][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.168035][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.176334][ T102] bond0: (slave bond_slave_0): interface is now down [ 157.206594][ T102] bond0: (slave bond_slave_1): interface is now down [ 157.218805][ T102] bond0: (slave netdevsim0): interface is now down [ 157.251200][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.259008][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.269852][ T11] bond0: (slave bond_slave_0): interface is now down [ 157.277831][ T11] bond0: (slave bond_slave_1): interface is now down [ 157.302914][ T11] bond0: (slave netdevsim0): interface is now down [ 157.325181][ T51] device bridge_slave_1 left promiscuous mode [ 157.340411][ T11] bond0: (slave bond_slave_0): interface is now down [ 157.347175][ T11] bond0: (slave bond_slave_1): interface is now down [ 157.354163][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.355744][ T11] bond0: (slave netdevsim0): interface is now down [ 157.377208][ T26] audit: type=1326 audit(1727526772.128:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f857dff9 code=0x7ffc0000 [ 157.429893][ T3707] bond0: (slave bond_slave_0): interface is now down [ 157.437321][ T51] device bridge_slave_0 left promiscuous mode [ 157.439832][ T26] audit: type=1326 audit(1727526772.128:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5913 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f857dff9 code=0x7ffc0000 [ 157.454988][ T3707] bond0: (slave bond_slave_1): interface is now down [ 157.473422][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.496490][ T3707] bond0: (slave netdevsim0): interface is now down [ 157.529960][ T11] bond0: (slave bond_slave_0): interface is now down [ 157.536711][ T11] bond0: (slave bond_slave_1): interface is now down [ 157.559689][ T11] bond0: (slave netdevsim0): interface is now down [ 157.574795][ T51] device veth1_macvtap left promiscuous mode [ 157.588005][ T51] device veth0_macvtap left promiscuous mode [ 157.595557][ T3707] bond0: (slave bond_slave_0): interface is now down [ 157.605805][ T51] device veth1_vlan left promiscuous mode [ 157.615811][ T3707] bond0: (slave bond_slave_1): interface is now down [ 157.622861][ T51] device veth0_vlan left promiscuous mode [ 157.638944][ T3707] bond0: (slave netdevsim0): interface is now down [ 157.670760][ T3707] bond0: (slave bond_slave_0): interface is now down [ 157.677486][ T3707] bond0: (slave bond_slave_1): interface is now down [ 157.729793][ T3707] bond0: (slave netdevsim0): interface is now down [ 157.759962][ T5288] bond0: (slave bond_slave_0): interface is now down [ 157.777196][ T5288] bond0: (slave bond_slave_1): interface is now down [ 157.797425][ T5288] bond0: (slave netdevsim0): interface is now down [ 157.804242][ T3636] Bluetooth: hci0: command tx timeout [ 157.859854][ T33] bond0: (slave bond_slave_0): interface is now down [ 157.878629][ T33] bond0: (slave bond_slave_1): interface is now down [ 157.905579][ T33] bond0: (slave netdevsim0): interface is now down [ 157.939967][ T5288] bond0: (slave bond_slave_0): interface is now down [ 157.946701][ T5288] bond0: (slave bond_slave_1): interface is now down [ 157.954465][ T3679] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.965249][ T5288] bond0: (slave netdevsim0): interface is now down [ 158.010369][ T5288] bond0: (slave bond_slave_0): interface is now down [ 158.032000][ T5288] bond0: (slave bond_slave_1): interface is now down [ 158.038729][ T5288] bond0: (slave netdevsim0): interface is now down [ 158.084072][ T5288] bond0: (slave bond_slave_0): interface is now down [ 158.099673][ T5288] bond0: (slave bond_slave_1): interface is now down [ 158.106155][ T5918] loop3: detected capacity change from 0 to 32768 [ 158.106862][ T5288] bond0: (slave netdevsim0): interface is now down [ 158.179178][ T5920] loop1: detected capacity change from 0 to 32768 [ 158.180582][ T33] bond0: (slave bond_slave_0): interface is now down [ 158.191572][ T5918] XFS (loop3): Mounting V5 Filesystem [ 158.195758][ T33] bond0: (slave bond_slave_1): interface is now down [ 158.206559][ T33] bond0: (slave netdevsim0): interface is now down [ 158.219852][ T3679] usb 3-1: Using ep0 maxpacket: 8 [ 158.241135][ T11] bond0: (slave bond_slave_0): interface is now down [ 158.247864][ T11] bond0: (slave bond_slave_1): interface is now down [ 158.255841][ T11] bond0: (slave netdevsim0): interface is now down [ 158.289986][ T11] bond0: (slave bond_slave_0): interface is now down [ 158.303341][ T11] bond0: (slave bond_slave_1): interface is now down [ 158.313092][ T11] bond0: (slave netdevsim0): interface is now down [ 158.344149][ T5918] XFS (loop3): Ending clean mount [ 158.362232][ T5918] XFS (loop3): Quotacheck needed: Please wait. [ 158.370065][ T9] bond0: (slave bond_slave_0): interface is now down [ 158.370286][ T3679] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.376760][ T9] bond0: (slave bond_slave_1): interface is now down [ 158.399821][ T3679] usb 3-1: config 0 has no interface number 0 [ 158.405968][ T3679] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.440176][ T3679] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.449290][ T3679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.449564][ T5918] XFS (loop3): Quotacheck: Done. [ 158.457372][ T9] bond0: (slave netdevsim0): interface is now down [ 158.490691][ T3679] usb 3-1: config 0 descriptor?? [ 158.510218][ T9] bond0: (slave bond_slave_0): interface is now down [ 158.516969][ T9] bond0: (slave bond_slave_1): interface is now down [ 158.537081][ T3679] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 158.555379][ T9] bond0: (slave netdevsim0): interface is now down [ 158.618526][ T3635] XFS (loop3): Unmounting Filesystem [ 158.619945][ T9] bond0: (slave bond_slave_0): interface is now down [ 158.631037][ T9] bond0: (slave bond_slave_1): interface is now down [ 158.637754][ T9] bond0: (slave netdevsim0): interface is now down [ 158.665368][ T5288] bond0: (slave bond_slave_0): interface is now down [ 158.678377][ T5288] bond0: (slave bond_slave_1): interface is now down [ 158.687078][ T5288] bond0: (slave netdevsim0): interface is now down [ 158.718403][ T9] bond0: (slave bond_slave_0): interface is now down [ 158.738306][ T9] bond0: (slave bond_slave_1): interface is now down [ 158.745205][ T9] bond0: (slave netdevsim0): interface is now down [ 158.771409][ T3684] usb 3-1: USB disconnect, device number 6 [ 158.776425][ T9] bond0: (slave bond_slave_0): interface is now down [ 158.809835][ T9] bond0: (slave bond_slave_1): interface is now down [ 158.816569][ T9] bond0: (slave netdevsim0): interface is now down [ 158.818292][ T3684] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 158.849950][ T5288] bond0: (slave bond_slave_0): interface is now down [ 158.856805][ T5288] bond0: (slave bond_slave_1): interface is now down [ 158.864332][ T5288] bond0: (slave netdevsim0): interface is now down [ 158.893773][ T3689] bond0: (slave bond_slave_0): interface is now down [ 158.907247][ T3689] bond0: (slave bond_slave_1): interface is now down [ 158.914045][ T3689] bond0: (slave netdevsim0): interface is now down [ 158.947134][ T5288] bond0: (slave bond_slave_0): interface is now down [ 158.954079][ T5288] bond0: (slave bond_slave_1): interface is now down [ 158.961761][ T5288] bond0: (slave netdevsim0): interface is now down [ 158.980392][ T5288] bond0: (slave bond_slave_0): interface is now down [ 158.987207][ T5288] bond0: (slave bond_slave_1): interface is now down [ 158.994928][ T5288] bond0: (slave netdevsim0): interface is now down [ 159.030082][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.039117][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.057158][ T9] bond0: (slave netdevsim0): interface is now down [ 159.089878][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.096992][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.119797][ T9] bond0: (slave netdevsim0): interface is now down [ 159.145947][ T11] bond0: (slave bond_slave_0): interface is now down [ 159.159974][ T11] bond0: (slave bond_slave_1): interface is now down [ 159.166713][ T11] bond0: (slave netdevsim0): interface is now down [ 159.190238][ T11] bond0: (slave bond_slave_0): interface is now down [ 159.197003][ T11] bond0: (slave bond_slave_1): interface is now down [ 159.206734][ T11] bond0: (slave netdevsim0): interface is now down [ 159.229908][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.238989][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.252354][ T9] bond0: (slave netdevsim0): interface is now down [ 159.269875][ T5288] bond0: (slave bond_slave_0): interface is now down [ 159.276629][ T5288] bond0: (slave bond_slave_1): interface is now down [ 159.283877][ T5288] bond0: (slave netdevsim0): interface is now down [ 159.315845][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.322664][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.329590][ T9] bond0: (slave netdevsim0): interface is now down [ 159.363489][ T5288] bond0: (slave bond_slave_0): interface is now down [ 159.379866][ T5288] bond0: (slave bond_slave_1): interface is now down [ 159.386600][ T5288] bond0: (slave netdevsim0): interface is now down [ 159.420177][ T5288] bond0: (slave bond_slave_0): interface is now down [ 159.428111][ T5288] bond0: (slave bond_slave_1): interface is now down [ 159.448993][ T5288] bond0: (slave netdevsim0): interface is now down [ 159.488387][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.495560][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.502329][ T9] bond0: (slave netdevsim0): interface is now down [ 159.539937][ T3689] bond0: (slave bond_slave_0): interface is now down [ 159.546667][ T3689] bond0: (slave bond_slave_1): interface is now down [ 159.559673][ T3689] bond0: (slave netdevsim0): interface is now down [ 159.583741][ T51] team0 (unregistering): Port device team_slave_1 removed [ 159.625332][ T5288] bond0: (slave bond_slave_0): interface is now down [ 159.649696][ T5288] bond0: (slave bond_slave_1): interface is now down [ 159.664095][ T5288] bond0: (slave netdevsim0): interface is now down [ 159.693432][ T102] bond0: (slave bond_slave_0): interface is now down [ 159.700565][ T102] bond0: (slave bond_slave_1): interface is now down [ 159.716381][ T102] bond0: (slave netdevsim0): interface is now down [ 159.741021][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.747769][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.757686][ T9] bond0: (slave netdevsim0): interface is now down [ 159.767932][ T51] team0 (unregistering): Port device team_slave_0 removed [ 159.796085][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.803502][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.810600][ T9] bond0: (slave netdevsim0): interface is now down [ 159.854571][ T9] bond0: (slave bond_slave_0): interface is now down [ 159.862029][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.871183][ T9] bond0: (slave bond_slave_1): interface is now down [ 159.877883][ T9] bond0: (slave netdevsim0): interface is now down [ 159.898410][ T3639] Bluetooth: hci0: command tx timeout [ 159.932261][ T5288] bond0: (slave bond_slave_0): interface is now down [ 159.938981][ T5288] bond0: (slave bond_slave_1): interface is now down [ 159.952504][ T5288] bond0: (slave netdevsim0): interface is now down [ 159.995956][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.027175][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.043435][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.050691][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.082951][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.089679][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.100384][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.144357][ T9] bond0: (slave bond_slave_0): interface is now down [ 160.151194][ T9] bond0: (slave bond_slave_1): interface is now down [ 160.157886][ T9] bond0: (slave netdevsim0): interface is now down [ 160.180173][ T9] bond0: (slave bond_slave_0): interface is now down [ 160.186912][ T9] bond0: (slave bond_slave_1): interface is now down [ 160.198896][ T9] bond0: (slave netdevsim0): interface is now down [ 160.224797][ T5947] loop3: detected capacity change from 0 to 32768 [ 160.231389][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.238090][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.259502][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.290569][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.297296][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.325017][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.355069][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.382216][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.389025][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.448261][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.465918][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.478557][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.500592][ T9] bond0: (slave bond_slave_0): interface is now down [ 160.507335][ T9] bond0: (slave bond_slave_1): interface is now down [ 160.519636][ T9] bond0: (slave netdevsim0): interface is now down [ 160.559947][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.566688][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.593778][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.629929][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.637115][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.669949][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.689910][ T5288] bond0: (slave bond_slave_0): interface is now down [ 160.696662][ T5288] bond0: (slave bond_slave_1): interface is now down [ 160.726380][ T5288] bond0: (slave netdevsim0): interface is now down [ 160.789915][ T11] bond0: (slave bond_slave_0): interface is now down [ 160.796651][ T11] bond0: (slave bond_slave_1): interface is now down [ 160.816025][ T11] bond0: (slave netdevsim0): interface is now down [ 160.845157][ T5958] loop2: detected capacity change from 0 to 2048 [ 160.851685][ T11] bond0: (slave bond_slave_0): interface is now down [ 160.858401][ T11] bond0: (slave bond_slave_1): interface is now down [ 160.877749][ T11] bond0: (slave netdevsim0): interface is now down [ 160.887593][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 160.916973][ T5958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.926461][ T9] bond0: (slave bond_slave_0): interface is now down [ 160.933535][ T9] bond0: (slave bond_slave_1): interface is now down [ 160.941200][ T9] bond0: (slave netdevsim0): interface is now down [ 160.973571][ T9] bond0: (slave bond_slave_0): interface is now down [ 160.995101][ T9] bond0: (slave bond_slave_1): interface is now down [ 161.008936][ T9] bond0: (slave netdevsim0): interface is now down [ 161.045522][ T3689] bond0: (slave bond_slave_0): interface is now down [ 161.054091][ T3689] bond0: (slave bond_slave_1): interface is now down [ 161.064250][ T3689] bond0: (slave netdevsim0): interface is now down [ 161.092898][ T3689] bond0: (slave bond_slave_0): interface is now down [ 161.099724][ T3689] bond0: (slave bond_slave_1): interface is now down [ 161.107313][ T3689] bond0: (slave netdevsim0): interface is now down [ 161.135407][ T3689] bond0: (slave bond_slave_0): interface is now down [ 161.142315][ T3689] bond0: (slave bond_slave_1): interface is now down [ 161.150792][ T3689] bond0: (slave netdevsim0): interface is now down [ 161.197337][ T5288] bond0: (slave bond_slave_0): interface is now down [ 161.220309][ T5288] bond0: (slave bond_slave_1): interface is now down [ 161.227028][ T5288] bond0: (slave netdevsim0): interface is now down [ 161.244544][ T3638] ================================================================== [ 161.252640][ T3638] BUG: KASAN: slab-out-of-bounds in udf_readdir+0xc5f/0x2240 [ 161.260032][ T3638] Write of size 149 at addr ffff888075b3226a by task syz-executor/3638 [ 161.268277][ T3638] [ 161.268945][ T9] bond0: (slave bond_slave_0): interface is now down [ 161.270605][ T3638] CPU: 0 PID: 3638 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 161.270626][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.270639][ T3638] Call Trace: [ 161.270646][ T3638] [ 161.270653][ T3638] dump_stack_lvl+0x1e3/0x2cb [ 161.270687][ T3638] ? nf_tcp_handle_invalid+0x642/0x642 [ 161.270711][ T3638] ? panic+0x764/0x764 [ 161.270728][ T3638] ? _printk+0xd1/0x111 [ 161.270746][ T3638] ? __virt_addr_valid+0x17f/0x530 [ 161.270766][ T3638] ? __virt_addr_valid+0x17f/0x530 [ 161.270786][ T3638] print_report+0x15f/0x4f0 [ 161.277444][ T9] bond0: (slave bond_slave_1): interface is now down [ 161.285647][ T3638] ? __virt_addr_valid+0x17f/0x530 [ 161.285669][ T3638] ? __virt_addr_valid+0x17f/0x530 [ 161.285690][ T3638] ? __virt_addr_valid+0x45b/0x530 [ 161.285707][ T3638] ? __phys_addr+0xb6/0x170 [ 161.285725][ T3638] ? udf_readdir+0xc5f/0x2240 [ 161.285745][ T3638] kasan_report+0x136/0x160 [ 161.370314][ T3638] ? udf_readdir+0xc5f/0x2240 [ 161.374989][ T3638] kasan_check_range+0x27f/0x290 [ 161.379909][ T3638] ? udf_readdir+0xc5f/0x2240 [ 161.384576][ T3638] memcpy+0x3c/0x60 [ 161.388369][ T3638] udf_readdir+0xc5f/0x2240 [ 161.392866][ T3638] ? load_block_bitmap+0x520/0x520 [ 161.397962][ T3638] ? __might_sleep+0xb0/0xb0 [ 161.402539][ T3638] ? aa_file_perm+0x3e3/0xf60 [ 161.407205][ T3638] ? trace_raw_output_contention_end+0xd0/0xd0 [ 161.413347][ T3638] ? load_block_bitmap+0x520/0x520 [ 161.418452][ T3638] ? __fdget_pos+0x2ba/0x360 [ 161.423029][ T3638] ? end_current_label_crit_section+0x147/0x170 [ 161.429255][ T3638] ? common_file_perm+0x17d/0x1d0 [ 161.434266][ T3638] ? fsnotify_perm+0x439/0x590 [ 161.439016][ T3638] iterate_dir+0x224/0x560 [ 161.443415][ T3638] ? load_block_bitmap+0x520/0x520 [ 161.448516][ T3638] __se_sys_getdents64+0x209/0x4f0 [ 161.453611][ T3638] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 161.459582][ T3638] ? __x64_sys_getdents64+0x80/0x80 [ 161.464762][ T3638] ? filldir+0x6f0/0x6f0 [ 161.468988][ T3638] ? syscall_enter_from_user_mode+0x2e/0x230 [ 161.474954][ T3638] ? lockdep_hardirqs_on+0x94/0x130 [ 161.480138][ T3638] ? syscall_enter_from_user_mode+0x2e/0x230 [ 161.486106][ T3638] do_syscall_64+0x3b/0xb0 [ 161.490510][ T3638] ? clear_bhb_loop+0x45/0xa0 [ 161.495174][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.501053][ T3638] RIP: 0033:0x7f0ceefb0193 [ 161.505452][ T3638] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 161.525058][ T3638] RSP: 002b:00007ffe1eeb3f28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 161.533469][ T3638] RAX: ffffffffffffffda RBX: 00005555693df600 RCX: 00007f0ceefb0193 [ 161.541429][ T3638] RDX: 0000000000008000 RSI: 00005555693df600 RDI: 0000000000000005 [ 161.549390][ T3638] RBP: 00005555693df5d4 R08: 0000000000000000 R09: 0000000000000000 [ 161.557349][ T3638] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 161.565306][ T3638] R13: 0000000000000010 R14: 00005555693df5d0 R15: 00007ffe1eeb61d0 [ 161.573271][ T3638] [ 161.576277][ T3638] [ 161.578582][ T3638] Allocated by task 3638: [ 161.582889][ T3638] kasan_set_track+0x4b/0x70 [ 161.587476][ T3638] __kasan_kmalloc+0x97/0xb0 [ 161.592050][ T3638] udf_readdir+0xb78/0x2240 [ 161.596539][ T3638] iterate_dir+0x224/0x560 [ 161.600939][ T3638] __se_sys_getdents64+0x209/0x4f0 [ 161.606032][ T3638] do_syscall_64+0x3b/0xb0 [ 161.610435][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.616314][ T3638] [ 161.618618][ T3638] Last potentially related work creation: [ 161.624309][ T3638] kasan_save_stack+0x3b/0x60 [ 161.628972][ T3638] __kasan_record_aux_stack+0xb0/0xc0 [ 161.634326][ T3638] kvfree_call_rcu+0x116/0x8c0 [ 161.639070][ T3638] drop_sysctl_table+0x317/0x460 [ 161.643996][ T3638] drop_sysctl_table+0x329/0x460 [ 161.648924][ T3638] unregister_sysctl_table+0x86/0x130 [ 161.654277][ T3638] inetdev_event+0x7ba/0x1490 [ 161.658946][ T3638] raw_notifier_call_chain+0xd0/0x170 [ 161.664303][ T3638] unregister_netdevice_many+0xebf/0x17a0 [ 161.670010][ T3638] default_device_exit_batch+0x956/0x9d0 [ 161.675623][ T3638] cleanup_net+0x763/0xb60 [ 161.680023][ T3638] process_one_work+0x8a9/0x11d0 [ 161.684948][ T3638] worker_thread+0xa47/0x1200 [ 161.689607][ T3638] kthread+0x28d/0x320 [ 161.693656][ T3638] ret_from_fork+0x1f/0x30 [ 161.698059][ T3638] [ 161.700369][ T3638] Second to last potentially related work creation: [ 161.707016][ T3638] kasan_save_stack+0x3b/0x60 [ 161.711701][ T3638] __kasan_record_aux_stack+0xb0/0xc0 [ 161.717068][ T3638] call_rcu+0x163/0xa10 [ 161.721207][ T3638] fib_create_info+0x189c/0x2500 [ 161.726126][ T3638] fib_table_insert+0x1f2/0x1f20 [ 161.731048][ T3638] fib_add_ifaddr+0x47f/0x1730 [ 161.735793][ T3638] fib_netdev_event+0x620/0x730 [ 161.740626][ T3638] raw_notifier_call_chain+0xd0/0x170 [ 161.745985][ T3638] __dev_notify_flags+0x304/0x610 [ 161.750994][ T3638] dev_change_flags+0xe7/0x190 [ 161.755746][ T3638] do_setlink+0xcf4/0x3de0 [ 161.760148][ T3638] rtnl_newlink+0x172c/0x2050 [ 161.764812][ T3638] rtnetlink_rcv_msg+0x818/0xff0 [ 161.769738][ T3638] netlink_rcv_skb+0x1cd/0x410 [ 161.774494][ T3638] netlink_unicast+0x7d8/0x970 [ 161.779241][ T3638] netlink_sendmsg+0xa26/0xd60 [ 161.783994][ T3638] __sys_sendto+0x480/0x600 [ 161.788484][ T3638] __x64_sys_sendto+0xda/0xf0 [ 161.793146][ T3638] do_syscall_64+0x3b/0xb0 [ 161.797550][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.803431][ T3638] [ 161.805739][ T3638] The buggy address belongs to the object at ffff888075b32200 [ 161.805739][ T3638] which belongs to the cache kmalloc-256 of size 256 [ 161.819774][ T3638] The buggy address is located 106 bytes inside of [ 161.819774][ T3638] 256-byte region [ffff888075b32200, ffff888075b32300) [ 161.833028][ T3638] [ 161.835335][ T3638] The buggy address belongs to the physical page: [ 161.841742][ T3638] page:ffffea0001d6cc80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75b32 [ 161.851884][ T3638] head:ffffea0001d6cc80 order:1 compound_mapcount:0 compound_pincount:0 [ 161.860200][ T3638] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 161.868176][ T3638] raw: 00fff00000010200 ffffea0000b4a980 dead000000000006 ffff888017c41b40 [ 161.876742][ T3638] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 161.885302][ T3638] page dumped because: kasan: bad access detected [ 161.891755][ T3638] page_owner tracks the page as allocated [ 161.897451][ T3638] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3635, tgid 3635 (syz-executor), ts 58709529213, free_ts 58675396535 [ 161.918796][ T3638] post_alloc_hook+0x18d/0x1b0 [ 161.923552][ T3638] get_page_from_freelist+0x322e/0x33b0 [ 161.929083][ T3638] __alloc_pages+0x28d/0x770 [ 161.933659][ T3638] alloc_slab_page+0x6a/0x150 [ 161.938327][ T3638] new_slab+0x84/0x2d0 [ 161.942380][ T3638] ___slab_alloc+0xc20/0x1270 [ 161.947043][ T3638] __kmem_cache_alloc_node+0x19f/0x260 [ 161.952490][ T3638] kmalloc_trace+0x26/0xe0 [ 161.956892][ T3638] ____ip_mc_inc_group+0x319/0xbf0 [ 161.961993][ T3638] ip_mc_up+0x11b/0x2f0 [ 161.966131][ T3638] inetdev_event+0xf24/0x1490 [ 161.970799][ T3638] raw_notifier_call_chain+0xd0/0x170 [ 161.976161][ T3638] __dev_notify_flags+0x304/0x610 [ 161.981176][ T3638] dev_change_flags+0xe7/0x190 [ 161.985925][ T3638] do_setlink+0xcf4/0x3de0 [ 161.990331][ T3638] rtnl_newlink+0x172c/0x2050 [ 161.995081][ T3638] page last free stack trace: [ 161.999732][ T3638] free_unref_page_prepare+0xf63/0x1120 [ 162.005283][ T3638] free_unref_page+0x33/0x3e0 [ 162.009945][ T3638] qlist_free_all+0x76/0xe0 [ 162.014434][ T3638] kasan_quarantine_reduce+0x156/0x170 [ 162.019879][ T3638] __kasan_slab_alloc+0x1f/0x70 [ 162.024710][ T3638] slab_post_alloc_hook+0x52/0x3a0 [ 162.029806][ T3638] kmem_cache_alloc+0x10c/0x2d0 [ 162.034643][ T3638] ptlock_alloc+0x1c/0x60 [ 162.038958][ T3638] pte_alloc_one+0xd1/0x360 [ 162.043450][ T3638] handle_mm_fault+0x3318/0x5340 [ 162.048375][ T3638] exc_page_fault+0x26f/0x620 [ 162.053046][ T3638] asm_exc_page_fault+0x22/0x30 [ 162.057886][ T3638] [ 162.060192][ T3638] Memory state around the buggy address: [ 162.065806][ T3638] ffff888075b32180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.073857][ T3638] ffff888075b32200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 162.081992][ T3638] >ffff888075b32280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 [ 162.090034][ T3638] ^ [ 162.097989][ T3638] ffff888075b32300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.106033][ T3638] ffff888075b32380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 162.114077][ T3638] ================================================================== [ 162.123527][ T3639] Bluetooth: hci0: command tx timeout [ 162.126874][ T9] bond0: (slave netdevsim0): interface is now down [ 162.149358][ T3638] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 162.156592][ T3638] CPU: 1 PID: 3638 Comm: syz-executor Not tainted 6.1.111-syzkaller #0 [ 162.164841][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.174898][ T3638] Call Trace: [ 162.178173][ T3638] [ 162.181091][ T3638] dump_stack_lvl+0x1e3/0x2cb [ 162.185772][ T3638] ? nf_tcp_handle_invalid+0x642/0x642 [ 162.191250][ T3638] ? panic+0x764/0x764 [ 162.195305][ T3638] ? preempt_schedule_common+0xa6/0xd0 [ 162.200760][ T3638] ? vscnprintf+0x59/0x80 [ 162.205094][ T3638] panic+0x318/0x764 [ 162.206552][ T9] bond0: (slave bond_slave_0): interface is now down [ 162.206567][ T9] bond0: (slave bond_slave_1): interface is now down [ 162.206578][ T9] bond0: (slave netdevsim0): interface is now down [ 162.228741][ T3638] ? check_panic_on_warn+0x1d/0xa0 [ 162.233839][ T3638] ? memcpy_page_flushcache+0xfc/0xfc [ 162.239194][ T3638] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 162.245166][ T3638] ? _raw_spin_unlock+0x40/0x40 [ 162.249997][ T9] bond0: (slave bond_slave_0): interface is now down [ 162.250016][ T9] bond0: (slave bond_slave_1): interface is now down [ 162.250027][ T9] bond0: (slave netdevsim0): interface is now down [ 162.269810][ T3638] check_panic_on_warn+0x7e/0xa0 [ 162.274758][ T3638] ? udf_readdir+0xc5f/0x2240 [ 162.279424][ T3638] end_report+0x66/0x110 [ 162.283647][ T3638] kasan_report+0x143/0x160 [ 162.288132][ T3638] ? udf_readdir+0xc5f/0x2240 [ 162.292793][ T3638] kasan_check_range+0x27f/0x290 [ 162.297712][ T3638] ? udf_readdir+0xc5f/0x2240 [ 162.300023][ T3689] bond0: (slave bond_slave_0): interface is now down [ 162.300040][ T3689] bond0: (slave bond_slave_1): interface is now down [ 162.300050][ T3689] bond0: (slave netdevsim0): interface is now down [ 162.322157][ T3638] memcpy+0x3c/0x60 [ 162.325968][ T3638] udf_readdir+0xc5f/0x2240 [ 162.330461][ T3638] ? load_block_bitmap+0x520/0x520 [ 162.335558][ T3638] ? __might_sleep+0xb0/0xb0 [ 162.340129][ T3638] ? aa_file_perm+0x3e3/0xf60 [ 162.344792][ T3638] ? trace_raw_output_contention_end+0xd0/0xd0 [ 162.349916][ T3689] bond0: (slave bond_slave_0): interface is now down [ 162.349934][ T3689] bond0: (slave bond_slave_1): interface is now down [ 162.349943][ T3689] bond0: (slave netdevsim0): interface is now down [ 162.370677][ T3638] ? load_block_bitmap+0x520/0x520 [ 162.375785][ T3638] ? __fdget_pos+0x2ba/0x360 [ 162.380362][ T3638] ? end_current_label_crit_section+0x147/0x170 [ 162.386586][ T3638] ? common_file_perm+0x17d/0x1d0 [ 162.391594][ T3638] ? fsnotify_perm+0x439/0x590 [ 162.396339][ T3638] iterate_dir+0x224/0x560 [ 162.400017][ T9] bond0: (slave bond_slave_0): interface is now down [ 162.400034][ T9] bond0: (slave bond_slave_1): interface is now down [ 162.400044][ T9] bond0: (slave netdevsim0): interface is now down [ 162.420503][ T3638] ? load_block_bitmap+0x520/0x520 [ 162.425618][ T3638] __se_sys_getdents64+0x209/0x4f0 [ 162.430712][ T3638] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 162.436682][ T3638] ? __x64_sys_getdents64+0x80/0x80 [ 162.441863][ T3638] ? filldir+0x6f0/0x6f0 [ 162.446087][ T3638] ? syscall_enter_from_user_mode+0x2e/0x230 [ 162.449934][ T9] bond0: (slave bond_slave_0): interface is now down [ 162.449951][ T9] bond0: (slave bond_slave_1): interface is now down [ 162.449961][ T9] bond0: (slave netdevsim0): interface is now down [ 162.471859][ T3638] ? lockdep_hardirqs_on+0x94/0x130 [ 162.477051][ T3638] ? syscall_enter_from_user_mode+0x2e/0x230 [ 162.483025][ T3638] do_syscall_64+0x3b/0xb0 [ 162.487433][ T3638] ? clear_bhb_loop+0x45/0xa0 [ 162.492096][ T3638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.497972][ T3638] RIP: 0033:0x7f0ceefb0193 [ 162.499925][ T3689] bond0: (slave bond_slave_0): interface is now down [ 162.499941][ T3689] bond0: (slave bond_slave_1): interface is now down [ 162.499952][ T3689] bond0: (slave netdevsim0): interface is now down [ 162.522123][ T3638] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 162.541719][ T3638] RSP: 002b:00007ffe1eeb3f28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 162.550101][ T3689] bond0: (slave bond_slave_0): interface is now down [ 162.550124][ T3689] bond0: (slave bond_slave_1): interface is now down [ 162.550136][ T3689] bond0: (slave netdevsim0): interface is now down [ 162.569905][ T3638] RAX: ffffffffffffffda RBX: 00005555693df600 RCX: 00007f0ceefb0193 [ 162.577866][ T3638] RDX: 0000000000008000 RSI: 00005555693df600 RDI: 0000000000000005 [ 162.585823][ T3638] RBP: 00005555693df5d4 R08: 0000000000000000 R09: 0000000000000000 [ 162.593781][ T3638] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 162.599931][ T9] bond0: (slave bond_slave_0): interface is now down [ 162.599951][ T9] bond0: (slave bond_slave_1): interface is now down [ 162.599961][ T9] bond0: (slave netdevsim0): interface is now down [ 162.621489][ T3638] R13: 0000000000000010 R14: 00005555693df5d0 R15: 00007ffe1eeb61d0 [ 162.629453][ T3638] [ 162.632693][ T3638] Kernel Offset: disabled [ 162.637007][ T3638] Rebooting in 86400 seconds..