last executing test programs: 8.089454097s ago: executing program 1 (id=945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_getscheduler(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) capset(0x0, 0x0) fchdir(0xffffffffffffffff) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) faccessat2(r6, 0x0, 0x20, 0x200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresgid(0xee00, 0x0, 0xee00) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @link_id}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r7, 0x0, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000001b1401000000000000000000080010"], 0x18}}, 0x0) 8.047989102s ago: executing program 3 (id=946): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000180)={[{@nobarrier}, {@grpjquota}]}, 0x1, 0x765, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)={'#! ', '', [{0x20, '(]-,'}, {}, {0x20, ')+\\^:}#'}, {0x20, '\x03({[*'}, {0x20, '@!'}, {0x20, '@})\xb2'}, {0x20, '+/'}], 0xa, "47fda5028adfa2726f071ddbd1cc2a8c2503000000000000008a97777e8d271cc7f6518ac9b1acfd28cc011c87dafd02a7185c3f10635c058defa0273456feba43b516c3616359a18fe720a4f1d5e9131f63"}, 0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000002ec0)={{0x0, 0x0, 0x80}}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x2000000, 0x1, 0x0, 0x3}, {{@in=@local, 0x4d2, 0x2b}, 0x0, @in6=@loopback, 0x3501, 0x0, 0x2, 0x0, 0x0, 0x8}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000010c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x80104592, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCGBITSND(r5, 0x80084502, &(0x7f00000001c0)=""/252) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001140)={0x2, 0x0, [{0x1000, 0x1000, &(0x7f0000001ec0)=""/4096}, {0x4000, 0xd6, &(0x7f0000001200)=""/214}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) 5.515493611s ago: executing program 1 (id=949): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) 5.445474436s ago: executing program 4 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) 5.378851704s ago: executing program 0 (id=952): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.18470835s ago: executing program 4 (id=954): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000004100)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001740)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @local}, 0x200000d0) 5.16399399s ago: executing program 1 (id=955): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x4}) 5.05323162s ago: executing program 0 (id=957): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}}}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000a02000/0x4000)=nil) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000680)=ANY=[@ANYBLOB='dmask=00000000000000000000004,iocharset=cp855,errors=remount-ro,dmask=00000000000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c646973636175262c646973636172642c757466382c0062bc319e0379b74ff9657c57640d0ca7099874598c7f29a189e95283ccb912355af1931ffb4e072d9658f9ec6d7dafd6104e46c733e41a4118e307ad64df16856439a4704185408a3afbcf3d0cb0b706ae3293e9d9a81af50967848bbf25ee98a71e17d5eb53e037cf24c4101bfe3748fee9"], 0x5, 0x1518, &(0x7f0000002280)="$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") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_create1(0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0x101, 0xffff}}}}, 0x11) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c080) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0x9e51, [{{0x0, 0x2, 0x4}, 0xb, 0x8, 0x7, './file0'}]}}, 0x2a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4.969581738s ago: executing program 1 (id=958): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904000003ff016900052406"], 0x0) 4.941875164s ago: executing program 4 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x8000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, 0x0) fallocate(r3, 0x20, 0x0, 0x140000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0108000000000000000003000000a0b79975c4096ba4e1e264aebca328990900010073797a300000000014000000020a010400000000000000000000000014000000000a010800000006000000000a00000034000000140a030000000000000000000300000008000340000000000900010073797a30000000000900020073797a3000000000140000001100010000000000000000000000000a01f4d793629ab11be3f077d03334503705cd84d53d3b725230d072d0f8372d7af4c8dafbf06a168ff1d1dbc894ca2720"], 0xa4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x10010) 3.839499698s ago: executing program 2 (id=961): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1000000}}, 0x40) 3.795577218s ago: executing program 3 (id=962): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000980)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='befs\x00', 0x0, 0x0) 3.576254796s ago: executing program 2 (id=963): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 3.315133876s ago: executing program 2 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 3.168593156s ago: executing program 0 (id=965): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x82, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortad}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uid}, {@gid}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fchown(r0, 0x0, 0xee01) 2.985465111s ago: executing program 4 (id=966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.950792393s ago: executing program 3 (id=967): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000011c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) keyctl$join(0x1, &(0x7f0000000600)={'syz', 0x0}) 2.897356997s ago: executing program 2 (id=968): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 2.731270512s ago: executing program 0 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x6}, 0x2, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.719097043s ago: executing program 3 (id=970): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000002000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.564767954s ago: executing program 3 (id=971): syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b0001000000000904ca00017a8bb500090502217b"], 0x0) 2.425696898s ago: executing program 0 (id=972): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.244885167s ago: executing program 1 (id=973): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000002000040000000ec"]) bind$pptp(r5, &(0x7f0000000180)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="04010000100001000000000000000000ffffffff000000000000000000000000fc0000000000000000000000000000001700000000000000000000f1ffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000002b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000002dbd7000000000000a000400420000000000000014000e00fc00"/188], 0x104}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00060000000000120000f1850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 1.586375498s ago: executing program 2 (id=974): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f0000000840)={@multicast, @random="5bfd2e8cf5a3", @void, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x0, 0x9, 0x3d, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x4a, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0xfbc3, 0x0, 0x0, 0xf, 0x4, 0x0, 0xd51c, 0x7, 0x2, 0x4f22, 0x4e22}}, [0x0]}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket(0x10, 0x80002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x16a67fe12d5b9e8, 0x0, 0x90, 0x1f, r0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x7, 0x1, 0x6, 0x0, 0x1, 0xff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, 0x0) r3 = creat(&(0x7f0000001040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500000000000000", @ANYRES64=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket(0xb, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="db900a068365f073cddefd61f066300e182b21d980012030df55b82c41033d5aaeda00cd85256fe24f52fcc1b7cefebee3aa77e24111dde46fe516cf43c603b5455140f2aef1a0269c6f191cb878a404498b54320bc04f3c9a18d1f827bc397dbe4059f61c69ef2334edad3ae0bc294a964d95c5169b3fcb4288ec0bb261f18fb7597c305f3ba8d77f5e4920e72a756bba470489654caedea75245f4834f5a3e47300be5e56620c51637593a6fa4fbcef79b38517fdde8a498"], 0x24}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 962.128877ms ago: executing program 0 (id=975): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "d934a18c"}, @main=@item_4={0x3, 0x0, 0x0, "eee09957"}]}}, 0x0}, 0x0) 938.078687ms ago: executing program 1 (id=976): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f00000001c0)={[{@nodiscard}, {}, {@alloc_mode_def}, {@six_active_logs}, {@noflush_merge}, {@disable_roll_forward}, {@inline_data}, {@fsync_mode_posix}, {@heap}, {@noinline_data}, {@noextent_cache}, {@adaptive_mode}, {@jqfmt_vfsold}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwrite64(r1, &(0x7f00000014c0)="9c", 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 934.473435ms ago: executing program 4 (id=977): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@noauto_da_alloc}, {@errors_remount}, {@noblock_validity}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@block_validity}, {@auto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@init_itable}, {@nobarrier}, {@noinit_itable}, {@journal_path={'journal_path', 0x3d, './file2'}}]}, 0x1, 0xbbc, &(0x7f00000017c0)="$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") 614.966234ms ago: executing program 4 (id=978): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}}) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 37.903764ms ago: executing program 2 (id=979): syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@nolargeio}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb862, &(0x7f0000017140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0105872, &(0x7f0000000380)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) 0s ago: executing program 3 (id=980): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) syz_open_dev$midi(&(0x7f0000000400), 0xb6, 0x48801) r0 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)='%', 0x1}], 0x1}, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): lesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.805201][ T7880] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 256.814011][ T7880] BTRFS info (device loop3): using free-space-tree [ 257.103531][ T29] audit: type=1326 audit(1723629199.371:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.224972][ T29] audit: type=1326 audit(1723629199.371:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.247248][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.518751][ T29] audit: type=1326 audit(1723629199.391:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.589557][ T29] audit: type=1326 audit(1723629199.391:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.684586][ T29] audit: type=1326 audit(1723629199.391:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.742370][ T29] audit: type=1326 audit(1723629199.401:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.786219][ T29] audit: type=1326 audit(1723629199.401:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.823515][ T6631] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.845701][ T29] audit: type=1326 audit(1723629199.401:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.922467][ T29] audit: type=1326 audit(1723629199.401:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 257.950938][ T29] audit: type=1326 audit(1723629199.401:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7879 comm="syz.3.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 258.192841][ T5283] usbhid 5-1:0.0: can't add hid device: -71 [ 258.198921][ T5283] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 258.239914][ T5283] usb 5-1: USB disconnect, device number 13 [ 258.344789][ T7931] loop4: detected capacity change from 0 to 1024 [ 258.798265][ T64] hfsplus: b-tree write err: -5, ino 4 [ 259.847187][ T7935] loop2: detected capacity change from 0 to 1024 [ 259.897334][ T7935] hfsplus: unable to parse mount options [ 260.567133][ T7972] tipc: Started in network mode [ 260.572085][ T7972] tipc: Node identity 7f000001, cluster identity 4711 [ 260.582338][ T7972] tipc: Enabled bearer , priority 10 [ 260.742724][ T5236] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 261.695795][ T46] tipc: Node number set to 2130706433 [ 261.724678][ T5236] usb 4-1: config index 0 descriptor too short (expected 106, got 36) [ 261.756996][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 261.808087][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024 [ 261.825296][ T5236] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 261.838169][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.854182][ T5236] usb 4-1: config 0 descriptor?? [ 261.873755][ T7986] hsr_slave_0: left promiscuous mode [ 261.900945][ T7986] hsr_slave_1: left promiscuous mode [ 262.142399][ T7991] veth0_vlan: entered allmulticast mode [ 262.254285][ T7995] : renamed from veth0_vlan [ 262.338093][ T8001] netlink: 'syz.4.544': attribute type 3 has an invalid length. [ 262.350014][ T5236] corsair 0003:1B1C:1B3E.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.3-1/input0 [ 262.371917][ T8001] netlink: 'syz.4.544': attribute type 1 has an invalid length. [ 262.400400][ T8001] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.544'. [ 262.488281][ T7959] loop2: detected capacity change from 0 to 32768 [ 262.562084][ T7959] (syz.2.534,7959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf4927ff0, computed 0x8f9f6e3c. Applying ECC. [ 262.570285][ T5236] usb 4-1: USB disconnect, device number 9 [ 262.649485][ T7959] (syz.2.534,7959,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xf4927ff0, computed 0xef15bdf [ 262.682442][ T7959] (syz.2.534,7959,0):ocfs2_verify_volume:2380 ERROR: status = -5 [ 262.736678][ T7959] (syz.2.534,7959,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 262.772605][ T7959] (syz.2.534,7959,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 263.965012][ T8023] loop0: detected capacity change from 0 to 16384 [ 264.054916][ T8023] I/O error, dev loop0, sector 64 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 264.082599][ T8023] I/O error, dev loop0, sector 64 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0 [ 264.250285][ T8014] loop4: detected capacity change from 0 to 32768 [ 264.414930][ T8038] bond_slave_0: entered promiscuous mode [ 264.421334][ T8038] bond_slave_1: entered promiscuous mode [ 264.492178][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 264.492210][ T29] audit: type=1326 audit(1723629206.751:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 265.806904][ T8049] Bluetooth: MGMT ver 1.23 [ 265.817137][ T29] audit: type=1326 audit(1723629206.791:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 265.915180][ T8038] bond_slave_0: left promiscuous mode [ 265.920661][ T8038] bond_slave_1: left promiscuous mode [ 267.846636][ T29] audit: type=1326 audit(1723629206.791:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.216390][ T29] audit: type=1326 audit(1723629206.791:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.328629][ T29] audit: type=1326 audit(1723629206.791:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.441944][ T29] audit: type=1326 audit(1723629206.791:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.595968][ T29] audit: type=1326 audit(1723629206.791:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.652620][ T5347] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 268.680599][ T29] audit: type=1326 audit(1723629206.801:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.727556][ T29] audit: type=1326 audit(1723629206.801:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.780525][ T29] audit: type=1326 audit(1723629206.801:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.3.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb05799f9 code=0x7ffc0000 [ 268.852800][ T5347] usb 4-1: Using ep0 maxpacket: 16 [ 268.873208][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.902167][ T5347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.924757][ T5347] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 268.941321][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.982654][ T5236] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 268.993961][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 269.014545][ T5347] usb 4-1: config 0 descriptor?? [ 269.214817][ T5236] usb 5-1: Using ep0 maxpacket: 16 [ 269.227989][ T8087] loop0: detected capacity change from 0 to 256 [ 269.250719][ T5236] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 269.263884][ T8087] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.271651][ T5236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 269.331354][ T5236] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 269.376695][ T5236] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 269.380013][ T8087] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 269.387747][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.444875][ T5347] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 269.462836][ T5236] usb 5-1: Product: syz [ 269.468763][ T5236] usb 5-1: Manufacturer: syz [ 269.482591][ T5236] usb 5-1: SerialNumber: syz [ 269.493678][ T5236] usb 5-1: config 0 descriptor?? [ 269.510705][ T5236] hub 5-1:0.0: bad descriptor, ignoring hub [ 269.527348][ T5236] hub 5-1:0.0: probe with driver hub failed with error -5 [ 269.557905][ T5236] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.571114][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 269.571136][ T29] audit: type=1804 audit(1723629211.841:119): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.565" name="/newroot/44/file0/bus" dev="loop0" ino=1048668 res=1 errno=0 [ 269.640280][ T5347] playstation 0003:054C:05C4.0008: Invalid reportID received, expected 18 got 197 [ 269.651220][ T8091] loop2: detected capacity change from 0 to 4096 [ 269.667735][ T5347] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -22 [ 269.686073][ T5236] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 269.699645][ T5347] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4 [ 269.730052][ T5347] playstation 0003:054C:05C4.0008: Failed to create dualshock4. [ 269.753884][ T5236] usb 5-1: USB disconnect, device number 14 [ 269.775028][ T5347] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -22 [ 269.868047][ T8096] loop0: detected capacity change from 0 to 1024 [ 269.921772][ T8091] ntfs3: loop2: ino=21, The size of extended attributes must not exceed 64KiB [ 269.943834][ T8101] udevd[8101]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.023060][ T5338] usb 4-1: USB disconnect, device number 10 [ 270.142683][ T5283] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.320674][ T8108] loop0: detected capacity change from 0 to 512 [ 270.350159][ T8108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.374984][ T5283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.387348][ T5283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 270.388226][ T8108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.398301][ T5283] usb 2-1: config 1 has no interface number 0 [ 270.409926][ T8108] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.448834][ T5283] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.503829][ T5283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.519526][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.531406][ T5283] usb 2-1: Product: syz [ 270.557770][ T8115] loop4: detected capacity change from 0 to 4096 [ 270.565845][ T6974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.575843][ T8115] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 270.582877][ T5283] usb 2-1: Manufacturer: syz [ 270.594829][ T5283] usb 2-1: SerialNumber: syz [ 270.619542][ T5283] usb 2-1: selecting invalid altsetting 1 [ 270.876067][ T8120] loop0: detected capacity change from 0 to 2048 [ 270.926081][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 270.962319][ T8126] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.005840][ T5245] Bluetooth: Unexpected continuation frame (len 18) [ 271.035784][ T5283] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 271.047959][ T5283] cdc_ncm 2-1:1.1: bind() failure [ 271.062642][ T29] audit: type=1800 audit(1723629213.321:120): pid=8120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.576" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 271.064089][ T5283] usb 2-1: USB disconnect, device number 7 [ 271.250756][ T8131] loop2: detected capacity change from 0 to 256 [ 271.365514][ T8131] FAT-fs (loop2): Directory bread(block 64) failed [ 271.372389][ T8131] FAT-fs (loop2): Directory bread(block 65) failed [ 271.389531][ T8131] FAT-fs (loop2): Directory bread(block 66) failed [ 271.434186][ T8131] FAT-fs (loop2): Directory bread(block 67) failed [ 271.483525][ T8131] FAT-fs (loop2): Directory bread(block 68) failed [ 271.496523][ T8131] FAT-fs (loop2): Directory bread(block 69) failed [ 271.511814][ T8139] loop3: detected capacity change from 0 to 512 [ 271.515267][ T8131] FAT-fs (loop2): Directory bread(block 70) failed [ 271.674942][ T8131] FAT-fs (loop2): Directory bread(block 71) failed [ 271.681701][ T8131] FAT-fs (loop2): Directory bread(block 72) failed [ 271.697612][ T8139] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.585: invalid block [ 271.751217][ T8131] FAT-fs (loop2): Directory bread(block 73) failed [ 271.757259][ T8139] EXT4-fs (loop3): Remounting filesystem read-only [ 271.765619][ T8139] EXT4-fs (loop3): 2 truncates cleaned up [ 271.772620][ T8139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.655449][ T8131] syz.2.580: attempt to access beyond end of device [ 272.655449][ T8131] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 272.769133][ T8125] loop4: detected capacity change from 0 to 40427 [ 272.786894][ T8125] F2FS-fs (loop4): invalid crc value [ 272.864847][ T8125] F2FS-fs (loop4): Found nat_bits in checkpoint [ 272.885045][ T5283] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 273.035371][ T8125] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 273.114701][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 273.132171][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 273.172552][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 273.206980][ T5283] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.242567][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.285724][ T5283] usb 4-1: config 0 descriptor?? [ 273.431475][ T8139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 273.492553][ T5283] hub 4-1:0.0: USB hub found [ 273.615639][ T8166] loop2: detected capacity change from 0 to 2048 [ 274.166555][ T7339] syz-executor: attempt to access beyond end of device [ 274.166555][ T7339] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 274.187761][ T7339] syz-executor: attempt to access beyond end of device [ 274.187761][ T7339] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 274.296909][ T8168] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.372750][ T5283] hub 4-1:0.0: 1 port detected [ 274.459622][ T7339] syz-executor: attempt to access beyond end of device [ 274.459622][ T7339] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.550880][ T7339] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 274.577114][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 274.608430][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 274.629290][ T5338] libceph: connect (1)[c::]:6789 error -101 [ 274.644078][ T5338] libceph: mon0 (1)[c::]:6789 connect error [ 274.656308][ T1128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.886696][ T1128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.925926][ T5283] libceph: connect (1)[c::]:6789 error -101 [ 274.936695][ T5283] libceph: mon0 (1)[c::]:6789 connect error [ 275.059590][ T5283] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 275.059595][ T5236] usb 4-1: USB disconnect, device number 11 [ 275.075211][ T1128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.209524][ T1128] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.336917][ T8172] ceph: No mds server is up or the cluster is laggy [ 275.731397][ T1128] bridge_slave_1: left allmulticast mode [ 275.743258][ T6631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.772625][ T1128] bridge_slave_1: left promiscuous mode [ 275.778463][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.826555][ T1128] bridge_slave_0: left allmulticast mode [ 275.863464][ T1128] bridge_slave_0: left promiscuous mode [ 275.896395][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.205034][ T4620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.243807][ T4620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.258169][ T4620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.279542][ T4620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.289555][ T4620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.297361][ T4620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.557257][ T8197] netlink: 'syz.0.604': attribute type 1 has an invalid length. [ 276.637901][ T8170] loop2: detected capacity change from 0 to 65536 [ 276.686834][ T8170] XFS (loop2): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 276.947684][ T8170] XFS (loop2): Ending clean mount [ 277.202986][ T6291] XFS (loop2): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 277.743528][ T8225] loop1: detected capacity change from 0 to 2048 [ 277.849715][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.867069][ T8225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.912892][ T8225] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.947566][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.980177][ T1128] bond0 (unregistering): Released all slaves [ 278.151432][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 278.205790][ T6467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.353439][ T5245] Bluetooth: hci4: command tx timeout [ 278.727521][ T8252] [U]  [ 278.764701][ T8253] loop2: detected capacity change from 0 to 512 [ 278.904196][ T8253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.935785][ T8253] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.130731][ T8253] EXT4-fs error (device loop2): ext4_xattr_block_find:1877: inode #15: comm syz.2.618: corrupted xattr block 33: invalid header [ 279.368858][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.538649][ T8265] loop3: detected capacity change from 0 to 65536 [ 279.650535][ T8265] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 279.727322][ T1128] hsr_slave_0: left promiscuous mode [ 279.753460][ T8282] loop2: detected capacity change from 0 to 512 [ 279.770938][ T8265] XFS (loop3): Ending clean mount [ 279.780417][ T8265] XFS (loop3): Quotacheck needed: Please wait. [ 279.792187][ T8282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.805129][ T8282] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.001436][ T1128] hsr_slave_1: left promiscuous mode [ 280.074874][ T8265] XFS (loop3): Quotacheck: Done. [ 280.263318][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.345134][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.561516][ T5245] Bluetooth: hci4: command tx timeout [ 281.520141][ T1128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.528036][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.691850][ T1128] veth1_macvtap: left promiscuous mode [ 281.746821][ T1128] veth0_macvtap: left promiscuous mode [ 281.770752][ T1128] veth1_vlan: left promiscuous mode [ 281.797244][ T1128] veth0_vlan: left promiscuous mode [ 282.015688][ T6631] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 282.592756][ T5245] Bluetooth: hci4: command tx timeout [ 283.126124][ T8303] loop1: detected capacity change from 0 to 1024 [ 283.147980][ T8303] EXT4-fs: Ignoring removed i_version option [ 283.179090][ T8303] EXT4-fs: Mount option(s) incompatible with ext3 [ 283.269539][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 283.343391][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 283.854948][ T8285] bridge0: port 3(syz_tun) entered blocking state [ 283.861846][ T8285] bridge0: port 3(syz_tun) entered disabled state [ 283.870507][ T8285] syz_tun: entered allmulticast mode [ 283.878694][ T8285] syz_tun: entered promiscuous mode [ 283.885742][ T8285] bridge0: port 3(syz_tun) entered blocking state [ 283.892617][ T8285] bridge0: port 3(syz_tun) entered forwarding state [ 283.976098][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 284.005081][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.314266][ T8316] loop1: detected capacity change from 0 to 1024 [ 284.343683][ T8316] hfsplus: unable to parse mount options [ 284.403298][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 284.605995][ T8326] team1: Failed to send options change via netlink (err -105) [ 284.608409][ T8330] binder: BINDER_SET_CONTEXT_MGR already set [ 284.627985][ T8330] binder: 8329:8330 ioctl 4018620d 20000000 returned -16 [ 284.647140][ T8326] team1: Mode changed to "activebackup" [ 284.677848][ T5245] Bluetooth: hci4: command tx timeout [ 284.684725][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.709475][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.717177][ T8186] bridge_slave_0: entered allmulticast mode [ 284.724445][ T8186] bridge_slave_0: entered promiscuous mode [ 284.735117][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.747331][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.759219][ T8186] bridge_slave_1: entered allmulticast mode [ 284.814929][ T8186] bridge_slave_1: entered promiscuous mode [ 284.912429][ T8340] loop3: detected capacity change from 0 to 256 [ 284.946117][ T8340] exfat: Deprecated parameter 'utf8' [ 284.952323][ T8340] exfat: Deprecated parameter 'utf8' [ 284.967790][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.009155][ T8340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 285.039639][ T8338] Cannot find add_set index 0 as target [ 285.088814][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.179794][ T8348] loop1: detected capacity change from 0 to 512 [ 285.229108][ T8348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.290112][ T8348] EXT4-fs (loop1): 1 truncate cleaned up [ 285.306592][ T8348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.343964][ T8186] team0: Port device team_slave_0 added [ 285.372004][ T8186] team0: Port device team_slave_1 added [ 285.454459][ T8357] loop0: detected capacity change from 0 to 128 [ 285.564539][ T6467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.596295][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.626127][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.673992][ T8364] netlink: 'syz.2.646': attribute type 11 has an invalid length. [ 285.724437][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.741752][ T8367] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 285.776300][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.883056][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.969852][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.985663][ T8376] program syz.1.650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.011588][ T8374] netlink: 72 bytes leftover after parsing attributes in process `syz.3.651'. [ 286.053083][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 286.185081][ T8186] hsr_slave_0: entered promiscuous mode [ 286.198297][ T8380] loop3: detected capacity change from 0 to 256 [ 286.218471][ T8186] hsr_slave_1: entered promiscuous mode [ 286.230020][ T8186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.250103][ T8186] Cannot create hsr debugfs directory [ 286.281946][ T46] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 286.309504][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.326185][ T46] usb 1-1: Product: syz [ 286.338327][ T46] usb 1-1: Manufacturer: syz [ 286.362768][ T46] usb 1-1: SerialNumber: syz [ 286.383799][ T46] usb 1-1: config 0 descriptor?? [ 286.566779][ T941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 286.584716][ T8387] QAT: Invalid ioctl 21531 [ 286.811175][ T941] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 286.897077][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.232665][ T941] usb 3-1: config 0 descriptor?? [ 287.350272][ T941] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 287.484297][ T46] usb 1-1: Firmware: major: 0, minor: 248, hardware type: UNKNOWN (124) [ 287.705732][ T46] usb 1-1: failed to fetch extended address, random address set [ 287.743163][ T46] usb 1-1: atusb_probe: initialization failed, error = -524 [ 287.760751][ T46] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 287.781579][ T46] usb 1-1: USB disconnect, device number 6 [ 288.179286][ T941] usb 3-1: USB disconnect, device number 5 [ 288.245702][ T8186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.280686][ T8186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.320128][ T8186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.395658][ T8186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.662221][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.726883][ T8397] loop1: detected capacity change from 0 to 32768 [ 288.749810][ T8397] XFS: attr2 mount option is deprecated. [ 288.787185][ T8186] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.818521][ T8397] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.843666][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.850789][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.875443][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.881414][ T8425] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.663'. [ 288.882705][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.951350][ T8186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.969344][ T8186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.147630][ T8430] loop0: detected capacity change from 0 to 256 [ 289.155359][ T8397] XFS (loop1): Ending clean mount [ 289.226310][ T8430] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 289.254146][ T8397] XFS (loop1): Quotacheck needed: Please wait. [ 289.403432][ T8397] XFS (loop1): Quotacheck: Done. [ 289.524461][ T6467] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 289.622134][ T8441] loop0: detected capacity change from 0 to 8192 [ 289.870321][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.277026][ T4620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.290751][ T4620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.301149][ T4620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.311527][ T4620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.319285][ T4620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.328471][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.400245][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.639536][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.643100][ T29] audit: type=1326 audit(1723629233.901:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 291.752873][ T29] audit: type=1326 audit(1723629233.901:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 291.854902][ T29] audit: type=1326 audit(1723629233.941:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 291.982591][ T29] audit: type=1326 audit(1723629233.941:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 292.026605][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.081038][ T29] audit: type=1326 audit(1723629233.941:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 292.127580][ T29] audit: type=1326 audit(1723629233.941:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 292.217978][ T29] audit: type=1326 audit(1723629233.941:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 292.254306][ T8489] loop2: detected capacity change from 0 to 1024 [ 292.291064][ T8489] EXT4-fs: Ignoring removed orlov option [ 292.307382][ T8489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.312565][ T29] audit: type=1326 audit(1723629233.941:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3d86f709a7 code=0x7ffc0000 [ 292.317737][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.362756][ T8489] EXT4-fs (loop2): Test dummy encryption mode enabled [ 292.372203][ T29] audit: type=1326 audit(1723629233.941:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d86f15369 code=0x7ffc0000 [ 292.422576][ T29] audit: type=1326 audit(1723629233.951:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 292.429351][ T8489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.744145][ T8510] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.680: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 293.392707][ T5245] Bluetooth: hci3: command tx timeout [ 293.471195][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.606408][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 293.658890][ T8186] veth0_vlan: entered promiscuous mode [ 293.679563][ T8484] loop0: detected capacity change from 0 to 32768 [ 293.718043][ T8186] veth1_vlan: entered promiscuous mode [ 293.735408][ T35] bridge_slave_1: left allmulticast mode [ 293.746189][ T35] bridge_slave_1: left promiscuous mode [ 293.760440][ T8484] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 293.770580][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.794400][ T35] bridge_slave_0: left allmulticast mode [ 293.800490][ T35] bridge_slave_0: left promiscuous mode [ 293.833526][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.844251][ T8520] loop1: detected capacity change from 0 to 4096 [ 293.868316][ T8520] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 293.955791][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 293.963261][ T5347] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 293.982042][ T8520] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 293.998744][ T8484] XFS (loop0): Ending clean mount [ 294.153716][ T5347] usb 3-1: Using ep0 maxpacket: 8 [ 294.160668][ T5347] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 294.179867][ T5347] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.202719][ T5347] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.223205][ T5347] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.246815][ T5347] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.273737][ T5347] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.309528][ T5347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.427534][ T6974] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 294.593690][ T5347] usb 3-1: usb_control_msg returned -32 [ 294.608695][ T5347] usbtmc 3-1:16.0: can't read capabilities [ 294.712914][ T5338] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 294.942281][ T5338] usb 2-1: config 0 has too many interfaces: 243, using maximum allowed: 32 [ 294.970111][ T5338] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 243 [ 295.005859][ T8560] loop2: detected capacity change from 0 to 64 [ 295.015264][ T5338] usb 2-1: string descriptor 0 read error: -22 [ 295.031932][ T5338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.067460][ T5338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.103550][ T5338] usb 2-1: config 0 descriptor?? [ 295.131887][ T8560] overlayfs: failed to resolve './file0': -2 [ 295.168958][ T8560] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 295.252858][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.273018][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.313338][ T35] bond0 (unregistering): Released all slaves [ 295.352526][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 295.362258][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 295.370712][ T8] usb 3-1: USB disconnect, device number 6 [ 295.420291][ T5347] usb 2-1: USB disconnect, device number 8 [ 295.474112][ T4620] Bluetooth: hci3: command tx timeout [ 295.655434][ T8575] loop0: detected capacity change from 0 to 1024 [ 295.691973][ T8575] EXT4-fs: test_dummy_encryption requires encrypt feature [ 295.720628][ T8186] veth0_macvtap: entered promiscuous mode [ 295.833460][ T8186] veth1_macvtap: entered promiscuous mode [ 295.852807][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.867701][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.896565][ T8460] bridge_slave_0: entered allmulticast mode [ 295.913353][ T8460] bridge_slave_0: entered promiscuous mode [ 295.936260][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.948774][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.957566][ T8460] bridge_slave_1: entered allmulticast mode [ 295.973403][ T8460] bridge_slave_1: entered promiscuous mode [ 296.053463][ T8577] loop0: detected capacity change from 0 to 4096 [ 296.087317][ T8577] NILFS (loop0): invalid segment: Checksum error in segment payload [ 296.268582][ T8577] NILFS (loop0): trying rollback from an earlier position [ 296.285124][ T35] hsr_slave_0: left promiscuous mode [ 296.409119][ T8583] loop2: detected capacity change from 0 to 256 [ 297.293025][ T35] hsr_slave_1: left promiscuous mode [ 297.305260][ T8583] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.392119][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.408643][ T8577] NILFS (loop0): recovery complete [ 297.422185][ T8584] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.453559][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.483716][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.491198][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.553216][ T4620] Bluetooth: hci3: command tx timeout [ 297.591182][ T35] veth1_macvtap: left promiscuous mode [ 297.599655][ T35] veth0_macvtap: left promiscuous mode [ 297.606428][ T35] veth1_vlan: left promiscuous mode [ 297.612162][ T35] veth0_vlan: left promiscuous mode [ 297.618735][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 299.318983][ T35] team0 (unregistering): Port device team_slave_1 removed [ 299.642842][ T4620] Bluetooth: hci3: command tx timeout [ 300.114088][ T35] team0 (unregistering): Port device team_slave_0 removed [ 300.339981][ T8607] loop0: detected capacity change from 0 to 2048 [ 300.372201][ T8607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.645508][ T8609] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 300.662782][ T8609] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.703'. [ 300.671943][ T8609] netlink: 'syz.0.703': attribute type 2 has an invalid length. [ 300.680678][ T8609] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 300.854620][ T8611] loop0: detected capacity change from 0 to 4096 [ 301.248338][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.334851][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.540915][ T8460] team0: Port device team_slave_0 added [ 301.591766][ T8460] team0: Port device team_slave_1 added [ 301.738135][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.784381][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.830288][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.852524][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.882548][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.912556][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.976821][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.006958][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.035642][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.053083][ T8638] loop0: detected capacity change from 0 to 1024 [ 302.091162][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.204889][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.232668][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.252531][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.276439][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.519582][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 302.587329][ T8186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.604854][ T29] audit: type=1326 audit(1723629244.601:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 302.709368][ T8186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.916579][ T64] hfsplus: b-tree write err: -5, ino 4 [ 302.963523][ T29] audit: type=1326 audit(1723629244.601:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.026831][ T8186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.066690][ T29] audit: type=1326 audit(1723629244.601:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.152786][ T29] audit: type=1326 audit(1723629244.601:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.183832][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.199917][ T29] audit: type=1326 audit(1723629244.611:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.229887][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.267497][ T29] audit: type=1326 audit(1723629244.611:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.315906][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.357629][ T29] audit: type=1326 audit(1723629244.611:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.385091][ T8186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.419646][ T8186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.439159][ T29] audit: type=1326 audit(1723629244.611:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.469043][ T8186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.512734][ T8186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.524802][ T29] audit: type=1326 audit(1723629244.611:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.584865][ T29] audit: type=1326 audit(1723629244.611:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8644 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fdea8f799f9 code=0x7ffc0000 [ 303.833564][ T8460] hsr_slave_0: entered promiscuous mode [ 303.854046][ T8460] hsr_slave_1: entered promiscuous mode [ 303.863418][ T8460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.881783][ T8460] Cannot create hsr debugfs directory [ 303.888536][ T8675] ptrace attach of "./syz-executor exec"[6467] was attempted by "./syz-executor exec"[8675] [ 303.966868][ T8675] loop1: detected capacity change from 0 to 1024 [ 304.218011][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.263245][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.979587][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.990299][ T8675] hfsplus: xattr searching failed [ 305.014589][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.059285][ T8675] hfsplus: xattr searching failed [ 305.293640][ T1128] hfsplus: b-tree write err: -5, ino 3 [ 305.329947][ T6467] hfsplus: node 4:3 still has 3 user(s)! [ 305.452755][ T8698] input: syz1 as /devices/virtual/input/input10 [ 305.745602][ T8701] sp0: Synchronizing with TNC [ 305.787555][ T8709] netlink: 'syz.4.598': attribute type 4 has an invalid length. [ 306.052689][ T4620] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 306.176759][ T8460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.273481][ T8460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.307107][ T8460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.330657][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 306.375582][ T8460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.782789][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 306.790391][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.803955][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.814931][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 306.824911][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.839134][ T8] usb 1-1: config 0 descriptor?? [ 306.945014][ T8730] loop4: detected capacity change from 0 to 8 [ 306.988870][ T8730] SQUASHFS error: lzo decompression failed, data probably corrupt [ 306.997361][ T8730] SQUASHFS error: Failed to read block 0x91: -5 [ 307.004077][ T8730] SQUASHFS error: Unable to read metadata cache entry [8f] [ 307.011367][ T8730] SQUASHFS error: Unable to read inode 0x11f [ 307.048405][ T8730] loop4: detected capacity change from 0 to 8 [ 307.598339][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.667779][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.700353][ T46] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 307.745853][ T46] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 307.775569][ T8] hid-led 0003:04D8:F372.000A: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 307.792052][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.799265][ T7874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.825928][ T46] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz1 [ 307.862088][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.869277][ T7874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.877072][ T8742] loop1: detected capacity change from 0 to 256 [ 307.995657][ T8] hid-led 0003:04D8:F372.000A: Greynut Luxafor initialized [ 308.045883][ T8] usb 1-1: USB disconnect, device number 7 [ 308.082228][ T5283] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 308.098593][ T8460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.118296][ T5283] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 308.192364][ T5283] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 308.227710][ T5283] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 308.245641][ T5283] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 308.343756][ T5283] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 308.383310][ T5283] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 308.429237][ T5283] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 308.435380][ T5245] Bluetooth: hci3: command 0x0405 tx timeout [ 308.457474][ T8759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.503500][ T5283] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 308.588686][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 308.588710][ T29] audit: type=1326 audit(1723629250.851:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 308.676009][ T941] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 308.696985][ T8767] loop0: detected capacity change from 0 to 2048 [ 308.712621][ T29] audit: type=1326 audit(1723629250.851:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 308.729490][ T941] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 308.784372][ T8767] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 308.819692][ T29] audit: type=1326 audit(1723629250.891:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 308.859519][ T8767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.872815][ T941] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 308.929654][ T941] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 309.119567][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.135922][ T29] audit: type=1326 audit(1723629250.891:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 309.960970][ T29] audit: type=1326 audit(1723629250.891:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8763 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d86f799f9 code=0x7ffc0000 [ 310.023053][ T5283] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 310.062296][ T8460] veth0_vlan: entered promiscuous mode [ 310.113032][ T8460] veth1_vlan: entered promiscuous mode [ 310.143278][ T941] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 310.174495][ T941] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 310.208306][ T941] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 310.226889][ T8460] veth0_macvtap: entered promiscuous mode [ 310.246625][ T941] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 310.266070][ T8460] veth1_macvtap: entered promiscuous mode [ 310.385065][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.402307][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.417987][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.454366][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.469010][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.481993][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.525318][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.544890][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.574912][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.585752][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.598475][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.632584][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.657416][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.679007][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.690872][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.706634][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.717784][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.730320][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.760573][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 310.778393][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.789328][ T8460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.822577][ T8460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.840967][ T8460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.876621][ T8460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.928743][ T8771] loop1: detected capacity change from 0 to 32768 [ 310.963425][ T8771] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 311.003447][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.052781][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 311.144396][ T46] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.181730][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.221069][ T46] usb 1-1: config 0 descriptor?? [ 311.321590][ T8771] XFS (loop1): Ending clean mount [ 311.333035][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.341429][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.359867][ T8771] XFS (loop1): Quotacheck needed: Please wait. [ 311.506084][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.526438][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.589690][ T8771] XFS (loop1): Quotacheck: Done. [ 311.705932][ T46] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x2 [ 311.740292][ T46] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 311.759317][ T46] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 311.774495][ T941] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.805686][ T5347] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 311.818485][ T8819] xfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 311.855770][ T46] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 311.985145][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 312.004228][ T941] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 312.038015][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.042693][ T5347] usb 5-1: Using ep0 maxpacket: 16 [ 312.059078][ T5283] usb 1-1: USB disconnect, device number 8 [ 312.064226][ T5347] usb 5-1: New USB device found, idVendor=0e21, idProduct=0520, bcdDevice= 1.00 [ 312.067871][ T941] usb 3-1: Product: syz [ 312.075061][ T8821] loop3: detected capacity change from 0 to 8192 [ 312.085831][ T941] usb 3-1: Manufacturer: syz [ 312.090647][ T941] usb 3-1: SerialNumber: syz [ 312.093178][ T5347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.109669][ T941] usb 3-1: config 0 descriptor?? [ 312.127989][ T8821] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.137838][ T941] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 312.138879][ T5347] usb 5-1: Product: syz [ 312.169978][ T5347] usb 5-1: Manufacturer: syz [ 312.186753][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.201186][ T5347] usb 5-1: SerialNumber: syz [ 312.223526][ T6467] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 312.224208][ T5347] usb 5-1: config 0 descriptor?? [ 312.246511][ T8821] FAT-fs (loop3): Filesystem has been set read-only [ 312.262890][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.292343][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.312402][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.323900][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.342734][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.381635][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.398612][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.409918][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.430027][ T8821] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 312.457084][ T29] audit: type=1800 audit(1723629254.721:159): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.755" name="file2" dev="loop3" ino=1048690 res=0 errno=0 [ 312.482368][ T5347] usb-storage 5-1:0.0: USB Mass Storage device detected [ 312.514549][ T5347] usb-storage 5-1:0.0: Quirks match for vid 0e21 pid 0520: 2 [ 312.582205][ T941] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 312.602006][ T941] visor 3-1:0.0: probe with driver visor failed with error -71 [ 312.623915][ T941] usb 3-1: USB disconnect, device number 7 [ 313.025230][ T5347] usb 5-1: USB disconnect, device number 15 [ 313.025959][ T8830] loop0: detected capacity change from 0 to 512 [ 313.068280][ T8830] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.758: casefold flag without casefold feature [ 313.092724][ T8830] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.758: couldn't read orphan inode 15 (err -117) [ 313.106877][ T8830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.503439][ T8836] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.758: Directory hole found for htree leaf block 0 [ 313.593901][ T8837] netlink: 'syz.0.758': attribute type 4 has an invalid length. [ 313.784184][ T8838] tun0: tun_chr_ioctl cmd 1074025675 [ 313.789594][ T8838] tun0: persist disabled [ 313.860421][ T8837] EXT4-fs error (device loop0): ext4_add_entry:2435: inode #2: comm syz.0.758: Directory hole found for htree leaf block 0 [ 314.219735][ T6974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.303682][ T8840] loop4: detected capacity change from 0 to 128 [ 314.404605][ T8843] loop0: detected capacity change from 0 to 1024 [ 314.461532][ T8843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.722878][ T46] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 314.808816][ T5236] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 315.084566][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 315.095998][ T5236] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.106888][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 315.138113][ T5236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.173286][ T5236] usb 5-1: config 0 has no interface number 0 [ 315.182749][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.224046][ T5236] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 315.250964][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.275846][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.290632][ T46] usb 3-1: Product: syz [ 315.301744][ T46] usb 3-1: Manufacturer: syz [ 315.311581][ T5236] usb 5-1: Product: syz [ 315.321893][ T8850] loop1: detected capacity change from 0 to 1024 [ 315.328642][ T46] usb 3-1: SerialNumber: syz [ 315.334191][ T5236] usb 5-1: Manufacturer: syz [ 315.344888][ T5236] usb 5-1: SerialNumber: syz [ 315.352397][ T46] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 315.362198][ T8850] hfsplus: unable to parse mount options [ 315.375174][ T5236] usb 5-1: config 0 descriptor?? [ 315.548253][ T6974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.666277][ T8] usb 3-1: USB disconnect, device number 8 [ 315.737077][ T5236] usb 5-1: USB disconnect, device number 16 [ 316.006140][ T8870] can0: slcan on ptm0. [ 316.297304][ T8864] loop0: detected capacity change from 0 to 32768 [ 316.943483][ T8869] can0 (unregistered): slcan off ptm0. [ 316.959857][ T8898] syzkaller0: entered promiscuous mode [ 316.974001][ T8898] syzkaller0: entered allmulticast mode [ 317.004876][ T8898] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 317.089391][ T8900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.770'. [ 317.103910][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 317.121654][ T8900] vlan2: entered promiscuous mode [ 317.204498][ T8903] loop1: detected capacity change from 0 to 764 [ 317.249600][ T8903] iso9660: Unknown parameter '00000000000000000000000' [ 317.377062][ T8903] loop1: detected capacity change from 0 to 512 [ 317.408278][ T8903] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.480303][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.486830][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.594669][ T8903] EXT4-fs (loop1): 1 orphan inode deleted [ 317.601463][ T8903] EXT4-fs (loop1): 1 truncate cleaned up [ 317.610924][ T8913] loop3: detected capacity change from 0 to 128 [ 317.619133][ T8903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.797738][ T29] audit: type=1800 audit(1723629260.051:160): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.772" name="bus" dev="loop3" ino=1048693 res=0 errno=0 [ 318.794571][ T8924] loop4: detected capacity change from 0 to 1024 [ 318.873701][ T6467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.946668][ T8924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.340799][ T8936] loop0: detected capacity change from 0 to 2048 [ 319.980575][ T8936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 320.092652][ T8936] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 320.112621][ T5283] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 320.227559][ T8936] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 320.251541][ T8936] System zones: 0-19 [ 320.264992][ T8937] loop1: detected capacity change from 0 to 64 [ 320.545425][ T8936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.666573][ T8937] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 320.774006][ T8937] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop1:00000002 [ 320.818141][ T5283] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=3a.45 [ 320.832693][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.840700][ T5283] usb 4-1: Product: syz [ 320.856340][ T5283] usb 4-1: Manufacturer: syz [ 320.860991][ T5283] usb 4-1: SerialNumber: syz [ 320.896541][ T6974] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.902858][ T5283] usb 4-1: config 0 descriptor?? [ 320.948040][ T5283] usb 4-1: Found UVC 0.00 device syz (8086:0b03) [ 321.002667][ T5283] usb 4-1: No valid video chain found. [ 321.150940][ T8186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.172603][ T5283] usb 4-1: USB disconnect, device number 12 [ 321.334806][ T8952] loop4: detected capacity change from 0 to 256 [ 321.372969][ T8952] vfat: Unknown parameter 'nOnumtail' [ 321.474053][ T8952] loop4: detected capacity change from 0 to 1024 [ 321.487725][ T8952] EXT4-fs: Ignoring removed orlov option [ 321.514328][ T8952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.573279][ T8942] loop2: detected capacity change from 0 to 32768 [ 321.588615][ T8952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.716056][ T8186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.728847][ T8974] loop2: detected capacity change from 0 to 2048 [ 323.851343][ T8974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.907440][ T8986] xt_hashlimit: max too large, truncated to 1048576 [ 323.990917][ T5245] Bluetooth: hci0: unexpected event for opcode 0x043d [ 324.675295][ T29] audit: type=1800 audit(1723629266.941:161): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.785" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 324.787944][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.803637][ T8993] Bluetooth: MGMT ver 1.23 [ 324.912313][ T9000] loop1: detected capacity change from 0 to 1024 [ 324.924014][ T8998] mkiss: ax0: crc mode is auto. [ 324.994110][ T4620] Bluetooth: hci2: command 0x0406 tx timeout [ 325.051306][ T9007] loop3: detected capacity change from 0 to 256 [ 325.060693][ T9003] netlink: 116 bytes leftover after parsing attributes in process `syz.2.798'. [ 325.138769][ T9007] FAT-fs (loop3): Directory bread(block 1285) failed [ 325.895362][ T9013] input: syz1 as /devices/virtual/input/input11 [ 326.118455][ T7874] hfsplus: b-tree write err: -5, ino 4 [ 326.252620][ T941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 326.464107][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.495271][ T941] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 326.513497][ T9024] loop1: detected capacity change from 0 to 4096 [ 326.520055][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.529006][ T9024] ntfs3: Unknown parameter 'prealB:3T&loc' [ 326.557869][ T941] usb 1-1: config 0 descriptor?? [ 326.907680][ T9017] loop2: detected capacity change from 0 to 32768 [ 326.946888][ T9017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.804 (9017) [ 327.012776][ T941] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 327.015641][ T9017] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.059796][ T941] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000C/input/input12 [ 327.073768][ T9017] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 327.114470][ T9017] BTRFS info (device loop2): using free-space-tree [ 327.120363][ T9038] loop1: detected capacity change from 0 to 256 [ 327.187070][ T4682] udevd[4682]: worker [8062] terminated by signal 33 (Unknown signal 33) [ 327.248250][ T4682] udevd[4682]: worker [8062] failed while handling '/devices/virtual/block/loop2' [ 327.266961][ T9038] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 327.310492][ T941] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 327.363781][ T941] usb 1-1: USB disconnect, device number 9 [ 327.402662][ T9050] loop4: detected capacity change from 0 to 1024 [ 327.989651][ T9058] /dev/loop4: Can't open blockdev [ 328.682118][ T9020] loop3: detected capacity change from 0 to 32768 [ 328.738446][ T9020] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 328.749675][ T9020] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 328.793816][ T29] audit: type=1800 audit(1723629271.051:162): pid=9017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.804" name="bus" dev="loop2" ino=264 res=0 errno=0 [ 328.875264][ T9062] loop0: detected capacity change from 0 to 2048 [ 328.883176][ T9062] nilfs2: Unknown parameter 'xMW' [ 329.364440][ T9074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.524710][ T9078] loop0: detected capacity change from 0 to 16 [ 330.967688][ T9020] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 5ms [ 330.978926][ T9078] erofs: (device loop0): mounted with root inode @ nid 36. [ 331.190114][ T5347] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 331.190816][ T5245] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 331.224873][ T9075] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 331.239427][ T29] audit: type=1800 audit(1723629273.501:163): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.816" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 331.384304][ T9075] syz.0.816 (9075) used greatest stack depth: 17936 bytes left [ 331.474990][ T5347] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 331.604369][ T6291] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 331.666773][ T5347] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 191ms [ 331.706093][ T5347] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.727316][ T9020] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 332.102130][ T9088] loop4: detected capacity change from 0 to 128 [ 332.151949][ T9088] vfat: Unknown parameter '/dev/sg#' [ 332.537169][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 332.593118][ T9099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 332.718661][ T9100] loop2: detected capacity change from 0 to 1024 [ 332.883858][ T9100] EXT4-fs: Ignoring removed orlov option [ 332.975524][ T9100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.392886][ T9100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.686856][ T9099] No such timeout policy "syz0" [ 334.114233][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.237258][ T941] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 334.351398][ T9126] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 334.353089][ T9127] tipc: Can't bind to reserved service type 1 [ 334.418927][ T9127] loop1: detected capacity change from 0 to 512 [ 334.434749][ T941] usb 1-1: Using ep0 maxpacket: 16 [ 334.445742][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.477396][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.494998][ T941] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 334.521281][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.539485][ T941] usb 1-1: config 0 descriptor?? [ 334.565067][ T9133] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 334.573629][ T9127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.602677][ T9127] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.733400][ T9127] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 334.837434][ T4620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.851280][ T4620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.860380][ T4620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.882333][ T4620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.899695][ T4620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.909042][ T4620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.999402][ T941] aquacomputer_d5next 0003:0C70:F0B6.000D: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 335.003921][ T6467] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.092261][ T9146] loop3: detected capacity change from 0 to 2048 [ 335.166807][ T9146] udf: Unknown parameter '0xffffffffffffffffĭkp;/uH6Rϛ"U\:Jtz Z'Ӡ! mkTNnYd;'Xwmj*eN [ 335.166807][ T9146] s' [ 335.206833][ T941] usb 1-1: USB disconnect, device number 10 [ 335.271624][ T9146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.841'. [ 335.277897][ T9153] loop1: detected capacity change from 0 to 128 [ 336.527446][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 336.827771][ T5997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.977006][ T9167] loop0: detected capacity change from 0 to 8192 [ 336.992719][ T4620] Bluetooth: hci4: command tx timeout [ 337.161495][ T9167] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 337.181039][ T9167] FAT-fs (loop0): Filesystem has been set read-only [ 337.203950][ T5997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.222873][ T9167] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 337.232094][ T9180] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 337.341401][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.356802][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.372816][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.387369][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.460063][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 337.482906][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.578805][ T5997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.604545][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.627521][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.636226][ T9138] bridge_slave_0: entered allmulticast mode [ 337.645663][ T9138] bridge_slave_0: entered promiscuous mode [ 337.664171][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.673479][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.680771][ T9138] bridge_slave_1: entered allmulticast mode [ 337.705807][ T9138] bridge_slave_1: entered promiscuous mode [ 337.860503][ T5997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.970930][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.019259][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.128112][ T9138] team0: Port device team_slave_0 added [ 338.969296][ T9138] team0: Port device team_slave_1 added [ 339.017296][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 339.072656][ T4620] Bluetooth: hci4: command tx timeout [ 339.129383][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.136645][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.173360][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.229257][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 339.230367][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.261926][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.295472][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.319815][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 339.484929][ T9198] infiniband syz2: set active [ 339.490070][ T9198] infiniband syz2: added ip6gretap0 [ 339.498263][ T9198] syz2: rxe_create_cq: returned err = -12 [ 339.504895][ T9198] infiniband syz2: Couldn't create ib_mad CQ [ 339.511106][ T9198] infiniband syz2: Couldn't open port 1 [ 339.546904][ T9198] RDS/IB: syz2: added [ 339.551550][ T9198] smc: adding ib device syz2 with port count 1 [ 339.558053][ T9198] smc: ib device syz2 port 1 has pnetid [ 339.564136][ T4620] Bluetooth: hci0: command tx timeout [ 339.599506][ T5997] bridge_slave_1: left allmulticast mode [ 339.606761][ T5997] bridge_slave_1: left promiscuous mode [ 339.623768][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.653686][ T5997] bridge_slave_0: left allmulticast mode [ 339.672582][ T5997] bridge_slave_0: left promiscuous mode [ 339.678399][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.219255][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.230969][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.244019][ T5997] bond0 (unregistering): Released all slaves [ 340.263155][ T5283] ip6gretap0 speed is unknown, defaulting to 1000 [ 340.293641][ T9138] hsr_slave_0: entered promiscuous mode [ 340.300627][ T9138] hsr_slave_1: entered promiscuous mode [ 340.318176][ T9138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.330732][ T9138] Cannot create hsr debugfs directory [ 340.372171][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 340.448253][ T5279] ip6gretap0 speed is unknown, defaulting to 1000 [ 340.683218][ T9220] loop3: detected capacity change from 0 to 1024 [ 340.690409][ T9220] hfsplus: unable to parse mount options [ 340.736031][ T9182] chnl_net:caif_netlink_parms(): no params data found [ 340.936266][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 341.458593][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 341.930201][ T4620] Bluetooth: hci4: command tx timeout [ 341.930521][ T5245] Bluetooth: hci0: command tx timeout [ 342.483739][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.598677][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.709491][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.951727][ T9198] ip6gretap0 speed is unknown, defaulting to 1000 [ 343.318174][ T9235] loop0: detected capacity change from 0 to 1024 [ 343.344150][ T9222] loop2: detected capacity change from 0 to 32768 [ 343.363821][ T9222] XFS: attr2 mount option is deprecated. [ 343.398911][ T9222] XFS: ikeep mount option is deprecated. [ 343.413733][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.432803][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.440563][ T9182] bridge_slave_0: entered allmulticast mode [ 343.450679][ T9222] XFS: noikeep mount option is deprecated. [ 343.503890][ T9182] bridge_slave_0: entered promiscuous mode [ 343.558792][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.579906][ T9222] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 343.579928][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.580150][ T9182] bridge_slave_1: entered allmulticast mode [ 343.643010][ T9182] bridge_slave_1: entered promiscuous mode [ 343.688315][ T9253] loop3: detected capacity change from 0 to 2048 [ 343.721538][ T5997] hsr_slave_0: left promiscuous mode [ 343.753181][ T5997] hsr_slave_1: left promiscuous mode [ 343.773534][ T9222] XFS (loop2): Ending clean mount [ 343.775171][ T9253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.800282][ T9253] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.819319][ T9222] XFS (loop2): Quotacheck needed: Please wait. [ 343.825742][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.851799][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.876334][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.907416][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.935072][ T8460] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.952066][ T5997] veth1_macvtap: left promiscuous mode [ 343.958486][ T5245] Bluetooth: hci0: command tx timeout [ 343.963591][ T4620] Bluetooth: hci4: command tx timeout [ 343.967566][ T5997] veth0_macvtap: left promiscuous mode [ 343.975086][ T5997] veth1_vlan: left promiscuous mode [ 344.003930][ T9222] XFS (loop2): Quotacheck: Done. [ 344.126407][ T6291] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 344.316806][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 344.519343][ T9270] loop3: detected capacity change from 0 to 1024 [ 344.730027][ T4620] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 344.738980][ T4620] Bluetooth: hci3: unexpected event for opcode 0x203e [ 344.874266][ T4620] Bluetooth: hci3: failed to read key size for handle 201 [ 344.882061][ T4620] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 344.933425][ T64] hfsplus: b-tree write err: -5, ino 4 [ 345.138023][ T9277] loop0: detected capacity change from 0 to 256 [ 345.174416][ T29] audit: type=1800 audit(1723629287.441:164): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.872" name="bus" dev="loop0" ino=1048705 res=0 errno=0 [ 345.247410][ T9277] loop0: detected capacity change from 256 to 11 [ 345.330831][ T9277] FAT-fs (loop0): unable to read inode block for updating (i_pos 202) [ 345.351203][ T9277] FAT-fs (loop0): unable to read inode block for updating (i_pos 202) [ 345.745071][ T9285] loop3: detected capacity change from 0 to 2048 [ 345.793971][ T9287] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 345.885766][ T6974] FAT-fs (loop0): Directory bread(block 3) failed [ 346.034551][ T4620] Bluetooth: hci0: command tx timeout [ 346.184951][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 346.296178][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 346.980930][ T9297] loop3: detected capacity change from 0 to 40427 [ 346.992890][ T9297] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 347.000728][ T9297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 347.075431][ T9297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 347.111468][ T9297] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 347.178281][ T9297] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 347.185615][ T9297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 347.655422][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.697020][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.917841][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 347.963239][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 347.970857][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 348.023771][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 348.033279][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 348.040878][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 348.076975][ T9309] loop2: detected capacity change from 0 to 1024 [ 348.092550][ T8460] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 348.186843][ T9138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.222967][ T9309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.320501][ T9182] team0: Port device team_slave_0 added [ 348.352744][ T9315] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 348.365545][ T9182] team0: Port device team_slave_1 added [ 348.399598][ T9309] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 348.440658][ T9309] EXT4-fs (loop2): This should not happen!! Data will be lost [ 348.440658][ T9309] [ 348.506374][ T9309] EXT4-fs (loop2): Total free blocks count 0 [ 348.507059][ T9322] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 348.512404][ T9309] EXT4-fs (loop2): Free/Dirty block details [ 348.548204][ T9138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.548401][ T9309] EXT4-fs (loop2): free_blocks=68451041280 [ 348.568140][ T9309] EXT4-fs (loop2): dirty_blocks=112 [ 348.573865][ T9309] EXT4-fs (loop2): Block reservation details [ 348.579892][ T9309] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 348.765214][ T9138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.798361][ T5245] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.811783][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.819329][ T5245] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.828238][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.856569][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.903822][ T5245] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.923318][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 348.930672][ T5245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.952579][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.988980][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.999570][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.026129][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.186702][ T9138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.347492][ T9182] hsr_slave_0: entered promiscuous mode [ 349.359916][ T9182] hsr_slave_1: entered promiscuous mode [ 349.528434][ T5997] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.587155][ T9326] ip6gretap0 speed is unknown, defaulting to 1000 [ 349.695085][ T9330] loop2: detected capacity change from 0 to 32768 [ 349.777681][ T5997] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.802756][ T9330] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.026934][ T5997] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.113045][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 350.130864][ T9330] XFS (loop2): Ending clean mount [ 350.176126][ T9330] XFS (loop2): Quotacheck needed: Please wait. [ 350.297264][ T5997] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.304306][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 350.335690][ T9330] XFS (loop2): Quotacheck: Done. [ 350.478055][ T6291] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 350.611785][ T9138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.645826][ T9138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.726258][ T9138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.831620][ T9138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.992810][ T5245] Bluetooth: hci2: command tx timeout [ 351.027410][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 351.037450][ T9362] nbd: socks must be embedded in a SOCK_ITEM attr [ 351.631798][ T9366] loop2: detected capacity change from 0 to 164 [ 352.599816][ T5997] bridge_slave_1: left allmulticast mode [ 352.620535][ T5997] bridge_slave_1: left promiscuous mode [ 352.644689][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.923379][ T5997] bridge_slave_0: left allmulticast mode [ 352.929289][ T5997] bridge_slave_0: left promiscuous mode [ 353.054105][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.077411][ T5245] Bluetooth: hci2: command tx timeout [ 353.521966][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 353.550799][ T46] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 353.580980][ T5997] infiniband syz2: set down [ 353.585868][ T46] usb 4-1: can't read configurations, error -71 [ 353.704509][ T7874] smc: removing ib device syz2 [ 353.822644][ T9381] loop3: detected capacity change from 0 to 256 [ 354.166386][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.182095][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.196019][ T5997] bond0 (unregistering): Released all slaves [ 354.308320][ T5279] ip6gretap0 speed is unknown, defaulting to 1000 [ 354.338059][ T5347] infiniband syz2: ib_query_port failed (-19) [ 354.599700][ T9138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.758968][ T9326] chnl_net:caif_netlink_parms(): no params data found [ 355.174461][ T5245] Bluetooth: hci2: command tx timeout [ 355.392202][ T9405] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 356.046803][ T9182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.084250][ T9182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.427724][ T9182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.656237][ T9138] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.668259][ T9182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.735122][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.742265][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.918520][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.947102][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.962221][ T9326] bridge_slave_0: entered allmulticast mode [ 356.976275][ T9326] bridge_slave_0: entered promiscuous mode [ 357.002315][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.013118][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.020610][ T9326] bridge_slave_1: entered allmulticast mode [ 357.035132][ T9326] bridge_slave_1: entered promiscuous mode [ 357.095172][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.102291][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.188939][ T5997] tipc: Disabling bearer [ 357.213025][ T5997] tipc: Left network mode [ 357.221447][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.230943][ T5236] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 357.238563][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.252521][ T5245] Bluetooth: hci2: command tx timeout [ 357.359961][ T9326] team0: Port device team_slave_0 added [ 357.369492][ T9326] team0: Port device team_slave_1 added [ 357.442668][ T5236] usb 4-1: Using ep0 maxpacket: 8 [ 357.459117][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.460601][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.478137][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 357.484164][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.492258][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 357.530148][ T5236] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 357.535350][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.559357][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.575603][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.582925][ T5236] usb 4-1: Product: syz [ 357.582953][ T5236] usb 4-1: Manufacturer: syz [ 357.582979][ T5236] usb 4-1: SerialNumber: syz [ 357.608016][ T5236] usb 4-1: config 0 descriptor?? [ 357.620836][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.652932][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.786584][ T9431] loop2: detected capacity change from 0 to 64 [ 357.898806][ T9431] binder: BINDER_SET_CONTEXT_MGR already set [ 357.905178][ T9431] binder: 9427:9431 ioctl 4018620d 20000100 returned -16 [ 358.572559][ T5236] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 358.602755][ T5236] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 358.641264][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.661577][ T5236] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 358.691997][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.702268][ T5236] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 358.724206][ T5236] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 358.738234][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.752813][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.756661][ T5236] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 358.851241][ T5997] veth1_macvtap: left promiscuous mode [ 358.867499][ T5997] veth0_macvtap: left promiscuous mode [ 358.888819][ T5997] veth1_vlan: left promiscuous mode [ 358.908461][ T5997] veth0_vlan: left promiscuous mode [ 359.581935][ T5236] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 359.604393][ T5236] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 359.623743][ T5236] usb 4-1: USB disconnect, device number 15 [ 359.922650][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 360.040456][ T5997] team0 (unregistering): Port device team_slave_1 removed [ 360.092144][ T5997] team0 (unregistering): Port device team_slave_0 removed [ 360.130585][ T46] usb 3-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 360.146427][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.159585][ T46] usb 3-1: Product: syz [ 360.167652][ T46] usb 3-1: Manufacturer: syz [ 360.172311][ T46] usb 3-1: SerialNumber: syz [ 360.199022][ T46] usb 3-1: config 0 descriptor?? [ 360.213874][ T46] go7007 3-1:0.0: probe with driver go7007 failed with error -12 [ 360.271887][ T9454] loop3: detected capacity change from 0 to 256 [ 360.279255][ T9454] exfat: Deprecated parameter 'utf8' [ 360.285285][ T9454] exfat: Deprecated parameter 'utf8' [ 360.349639][ T9454] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 360.509521][ T9456] loop3: detected capacity change from 0 to 512 [ 360.535770][ T9456] EXT4-fs: Invalid commit interval 2040116627, must be smaller than 21474836 [ 362.559906][ T9326] hsr_slave_0: entered promiscuous mode [ 362.592276][ T9326] hsr_slave_1: entered promiscuous mode [ 362.612184][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.637587][ T9326] Cannot create hsr debugfs directory [ 362.707554][ T5279] usb 3-1: USB disconnect, device number 9 [ 362.955167][ T9138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.962580][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 363.056989][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.156471][ T9182] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.166132][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 363.180498][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 363.227498][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 363.251621][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.286621][ T46] usb 4-1: Product: syz [ 363.301840][ T46] usb 4-1: Manufacturer: syz [ 363.303235][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.311938][ T46] usb 4-1: SerialNumber: syz [ 363.313605][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.330252][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.337480][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.340524][ T46] usb 4-1: config 0 descriptor?? [ 363.365672][ T46] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 363.375248][ T46] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 363.492371][ T9182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.515619][ T9182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.972341][ T46] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 364.557206][ T9326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.677095][ T9326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 364.740787][ T9326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 364.781895][ T9326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 364.819644][ T9138] veth0_vlan: entered promiscuous mode [ 364.893265][ T9138] veth1_vlan: entered promiscuous mode [ 365.100491][ T9138] veth0_macvtap: entered promiscuous mode [ 365.153183][ T9138] veth1_macvtap: entered promiscuous mode [ 365.230927][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.269301][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.301291][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.321514][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.348461][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.359850][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.371361][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.384567][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.401815][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.419534][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.444469][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.455352][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.480885][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.499098][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.511516][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.572852][ T46] em28xx 4-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 365.601911][ T46] em28xx 4-1:0.0: failed to read eeprom (err=-5) [ 365.604946][ T9138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.628636][ T46] em28xx 4-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 365.632817][ T9138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.665422][ T9138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.682533][ T9138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.719858][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.818202][ T46] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 365.826769][ T9326] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.835430][ T46] em28xx 4-1:0.0: dvb set to bulk mode. [ 365.841454][ T5282] em28xx 4-1:0.0: Binding DVB extension [ 365.870203][ T9182] veth0_vlan: entered promiscuous mode [ 365.879203][ T46] usb 4-1: USB disconnect, device number 16 [ 365.923392][ T46] em28xx 4-1:0.0: Disconnecting em28xx [ 365.942304][ T9182] veth1_vlan: entered promiscuous mode [ 365.991089][ T5282] em28xx 4-1:0.0: Registering input extension [ 366.015209][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.022374][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.030726][ T46] em28xx 4-1:0.0: Closing input extension [ 366.042260][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.049477][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.122991][ T9510] loop2: detected capacity change from 0 to 32768 [ 366.156447][ T46] em28xx 4-1:0.0: Freeing device [ 366.192212][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.247314][ T9510] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 366.253183][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.317815][ T9182] veth0_macvtap: entered promiscuous mode [ 366.365023][ T9510] XFS (loop2): Ending clean mount [ 366.414987][ T9510] UBIFS error (pid: 9510): cannot open "./file0", error -22 [ 366.465510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.493863][ T9182] veth1_macvtap: entered promiscuous mode [ 366.499467][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.513295][ T6291] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 366.598859][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.649801][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.681394][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.716500][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.737815][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.761745][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.782789][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.800067][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.825351][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.854832][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.887135][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.930625][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.948500][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.972496][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.993558][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.003577][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.014632][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.036696][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.074604][ T9544] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 367.255467][ T9182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.276217][ T9182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.285727][ T9182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.295266][ T9182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.374086][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.474542][ T9561] xt_TCPMSS: Only works on TCP SYN packets [ 367.521123][ T9565] loop2: detected capacity change from 0 to 512 [ 367.576685][ T9326] veth0_vlan: entered promiscuous mode [ 367.597532][ T9326] veth1_vlan: entered promiscuous mode [ 367.619363][ T9565] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 367.630971][ T9565] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 367.641772][ T9565] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.920: Failed to acquire dquot type 1 [ 367.656728][ T9565] EXT4-fs (loop2): 1 truncate cleaned up [ 367.663837][ T9565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.689745][ T9565] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.722110][ T9565] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 367.773556][ T9565] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 367.796462][ T9565] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.920: Failed to acquire dquot type 1 [ 368.230503][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.831023][ T9326] veth0_macvtap: entered promiscuous mode [ 368.886967][ T9326] veth1_macvtap: entered promiscuous mode [ 368.981937][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.031671][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.143835][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.185566][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.222502][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.262559][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.297275][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.342498][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.386656][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.420545][ T9599] loop3: detected capacity change from 0 to 2048 [ 369.433901][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.494876][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.563588][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.584576][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.702742][ T9599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.344286][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.357645][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.382722][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.394870][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.465830][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.490686][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.502749][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.521052][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.531476][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.548613][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.568930][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.600394][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.614062][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.625012][ T8460] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.760318][ T9326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.812580][ T9326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.821438][ T9326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.857275][ T9624] loop2: detected capacity change from 0 to 512 [ 370.883140][ T9326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.067719][ T9624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.224638][ T941] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 371.299673][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.323294][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.367314][ T6291] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.435808][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.456209][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.474336][ T941] usb 4-1: Using ep0 maxpacket: 8 [ 371.505835][ T941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.516274][ T5279] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 371.550258][ T941] usb 4-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 371.565464][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.585836][ T941] usb 4-1: config 0 descriptor?? [ 371.712782][ T5279] usb 2-1: Using ep0 maxpacket: 8 [ 371.744452][ T5279] usb 2-1: config 0 has an invalid interface number: 232 but max is 0 [ 371.776002][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.813455][ T8] usb 4-1: USB disconnect, device number 17 [ 371.832875][ T5279] usb 2-1: config 0 has no interface number 0 [ 371.896013][ T5279] usb 2-1: config 0 interface 232 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.927255][ T5279] usb 2-1: config 0 interface 232 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 371.972504][ T5279] usb 2-1: config 0 interface 232 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.188856][ T5279] usb 2-1: config 0 interface 232 has no altsetting 0 [ 372.202364][ T5279] usb 2-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 372.221983][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.230773][ T5279] usb 2-1: Product: syz [ 372.245657][ T5279] usb 2-1: Manufacturer: syz [ 372.255783][ T5279] usb 2-1: SerialNumber: syz [ 373.204590][ T5279] usb 2-1: config 0 descriptor?? [ 373.214932][ T5279] s2255 2-1:0.232: Could not find bulk-in endpoint [ 373.230429][ T5279] Sensoray 2255 driver load failed: 0xfffffff4 [ 373.246519][ T5279] s2255 2-1:0.232: probe with driver s2255 failed with error -12 [ 373.467676][ T9660] loop3: detected capacity change from 0 to 1024 [ 373.495471][ T5279] usb 2-1: USB disconnect, device number 9 [ 373.525247][ T9660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.484736][ T8460] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.049212][ T9701] loop0: detected capacity change from 0 to 1024 [ 377.057839][ T9704] loop3: detected capacity change from 0 to 2048 [ 377.115254][ T9704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.420461][ T9721] batadv_slave_1: entered promiscuous mode [ 377.459947][ T9719] batadv_slave_1: left promiscuous mode [ 377.555327][ T29] audit: type=1326 audit(1723629319.821:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 377.845596][ T29] audit: type=1326 audit(1723629319.821:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.277348][ T5245] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 378.380497][ T9727] loop0: detected capacity change from 0 to 256 [ 378.402944][ T29] audit: type=1326 audit(1723629319.821:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.452164][ T9727] exfat: Unknown parameter 'discau&' [ 378.479615][ T29] audit: type=1326 audit(1723629319.951:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.602563][ T29] audit: type=1326 audit(1723629319.951:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.720461][ T29] audit: type=1326 audit(1723629319.981:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.743253][ T5347] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 378.775263][ T8460] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.868357][ T29] audit: type=1326 audit(1723629319.981:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.953743][ T9737] loop4: detected capacity change from 0 to 40459 [ 378.956578][ T29] audit: type=1326 audit(1723629319.981:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 378.964197][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.988802][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.990494][ T5347] usb 2-1: Using ep0 maxpacket: 8 [ 379.009846][ T29] audit: type=1326 audit(1723629319.981:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6cda9784df code=0x7ffc0000 [ 379.032348][ T29] audit: type=1326 audit(1723629319.981:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9725 comm="syz.0.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cda9799f9 code=0x7ffc0000 [ 379.060790][ T5347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.094394][ T9737] F2FS-fs (loop4): Found nat_bits in checkpoint [ 379.103295][ T5347] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.148543][ T9737] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 379.192603][ T5347] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 379.232036][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.959'. [ 379.247142][ T5347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.347321][ T9752] befs: (nbd3): No write support. Marking filesystem read-only [ 379.360329][ T5347] usb 2-1: config 0 descriptor?? [ 379.398437][ T9752] syz.3.962: attempt to access beyond end of device [ 379.398437][ T9752] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 379.415302][ T5347] qmi_wwan 2-1:0.0: bogus CDC Union: master=10, slave=0 [ 379.423165][ T5347] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 379.434800][ T9752] befs: (nbd3): unable to read superblock [ 379.538081][ T9138] syz-executor: attempt to access beyond end of device [ 379.538081][ T9138] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40459 [ 379.557913][ T9138] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 379.605063][ T9755] loop0: detected capacity change from 0 to 2048 [ 379.616981][ T9755] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 379.629396][ T9755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.669048][ T5347] usb 2-1: USB disconnect, device number 10 [ 380.312782][ T5281] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 380.615659][ T9775] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.966'. [ 380.663921][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 380.722386][ T9776] hub 6-0:1.0: USB hub found [ 380.732777][ T9776] hub 6-0:1.0: 1 port detected [ 380.865367][ T5281] usb 4-1: config 0 has an invalid interface number: 202 but max is 0 [ 381.115556][ T5281] usb 4-1: config 0 has no interface number 0 [ 381.454090][ T5281] usb 4-1: config 0 interface 202 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 381.539133][ T5281] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 381.577362][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.623689][ T5281] usb 4-1: Product: syz [ 381.648932][ T5281] usb 4-1: Manufacturer: syz [ 381.668022][ T5281] usb 4-1: SerialNumber: syz [ 381.684848][ T5281] usb 4-1: config 0 descriptor?? [ 381.722488][ T5281] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 381.740430][ T9784] loop4: detected capacity change from 0 to 4096 [ 381.774945][ T9784] journal_path: not usable as path [ 381.780158][ T9784] EXT4-fs: error: could not find journal device path [ 381.921650][ T5281] usb 4-1: USB disconnect, device number 18 [ 381.927777][ T35] usb 4-1: Failed to submit usb control message: -71 [ 381.935880][ T5339] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 381.952660][ T35] usb 4-1: unable to send the bmi data to the device: -71 [ 381.971924][ T35] usb 4-1: unable to get target info from device [ 381.988660][ T35] usb 4-1: could not get target info (-71) [ 381.996479][ T35] usb 4-1: could not probe fw (-71) [ 382.164153][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.182488][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.202786][ T5339] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 382.211869][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.253561][ T5339] usb 1-1: config 0 descriptor?? [ 382.288954][ T9782] loop1: detected capacity change from 0 to 40427 [ 382.297701][ T9782] F2FS-fs (loop1): heap/no_heap options were deprecated [ 382.312824][ T9782] F2FS-fs (loop1): invalid crc value [ 382.326342][ T9782] F2FS-fs (loop1): Found nat_bits in checkpoint [ 382.352847][ T5245] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 382.364017][ T5245] Bluetooth: hci2: Injecting HCI hardware error event [ 382.374863][ T5245] Bluetooth: hci2: hardware error 0x00 [ 382.412085][ T9782] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 382.484739][ T9782] syz.1.976: attempt to access beyond end of device [ 382.484739][ T9782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.546337][ T9795] [ 382.548722][ T9795] ================================================ [ 382.555236][ T9795] WARNING: lock held when returning to user space! [ 382.561777][ T9795] 6.11.0-rc3-next-20240814-syzkaller #0 Not tainted [ 382.568398][ T9795] ------------------------------------------------ [ 382.574918][ T9795] syz.1.976/9795 is leaving the kernel with locks still held! [ 382.582414][ T9795] 1 lock held by syz.1.976/9795: [ 382.587374][ T9795] #0: ffff8880631befe8 (&fi->i_gc_rwsem[READ]){+.+.}-{3:3}, at: f2fs_ioc_start_atomic_write+0x2ed/0xac0 [ 382.598723][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.613023][ T9798] loop4: detected capacity change from 0 to 256 [ 382.659996][ T9798] FAT-fs (loop4): Directory bread(block 64) failed [ 382.674208][ T9798] FAT-fs (loop4): Directory bread(block 65) failed [ 382.689730][ T5339] hid-thrustmaster 0003:044F:B65D.000E: item fetching failed at offset 5/7 [ 382.704331][ T9798] FAT-fs (loop4): Directory bread(block 66) failed [ 382.711463][ T5339] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 382.719911][ T9182] syz-executor: attempt to access beyond end of device [ 382.719911][ T9182] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 382.719964][ T9798] FAT-fs (loop4): Directory bread(block 67) failed [ 382.741938][ T5339] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 382.756716][ T9798] FAT-fs (loop4): Directory bread(block 68) failed [ 382.768468][ T9182] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 382.785598][ T9798] FAT-fs (loop4): Directory bread(block 69) failed [ 382.797530][ T9798] FAT-fs (loop4): Directory bread(block 70) failed [ 382.806960][ T9798] FAT-fs (loop4): Directory bread(block 71) failed [ 382.816097][ T9798] FAT-fs (loop4): Directory bread(block 72) failed [ 382.825641][ T9798] FAT-fs (loop4): Directory bread(block 73) failed [ 382.915740][ T5236] usb 1-1: USB disconnect, device number 11 [ 383.181312][ T9796] loop2: detected capacity change from 0 to 65536 [ 383.195390][ T9796] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 383.219658][ T9796] XFS (loop2): Ending clean mount [ 383.225988][ T9796] XFS (loop2): Quotacheck needed: Please wait. [ 383.239004][ T9796] XFS (loop2): Quotacheck: Done. [ 383.266278][ T6291] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 384.432557][ T5245] Bluetooth: hci2: Opcode 0x0c03 failed: -110