last executing test programs: 18.816444879s ago: executing program 4 (id=461): syz_read_part_table(0x5b5, &(0x7f0000000c00)="$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") 18.418718822s ago: executing program 4 (id=463): syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0) 18.31030961s ago: executing program 4 (id=464): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x89b6b0dea9f2f627, 0x0, &(0x7f0000000640)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180), 0x10) sendmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)='E', 0x1}], 0x1}}], 0x1, 0x4000880) r5 = syz_open_procfs(0x0, &(0x7f0000001380)) open(&(0x7f0000000040)='\x00', 0x0, 0xa8) getdents64(r5, &(0x7f0000002000)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2001}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000d000000000000000085000000200000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 17.128442957s ago: executing program 4 (id=466): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000001100), 0x1, 0x769, &(0x7f0000000340)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66fccf0e515e4c22bae6d602001b00000000000000000001"}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.053333096s ago: executing program 4 (id=468): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x8, 0x62, 0x125, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x8000, 0x0, 0xff, 0x695866635b959906, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2}, 0x24) 15.473961303s ago: executing program 4 (id=469): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 13.585584328s ago: executing program 1 (id=479): mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffffff600000, &(0x7f0000afaf0a)=""/246) 12.856338887s ago: executing program 1 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) setrlimit(0xa, &(0x7f0000000340)={0x7fff}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000001c0)='./file0\x00', 0x6000400) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x573) chown(0x0, 0x0, 0xee01) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x2000) setuid(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair(0x0, 0x0, 0x10000002, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syslog(0x4, &(0x7f0000000000)=""/112, 0x70) 11.918532484s ago: executing program 1 (id=482): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x80000000, 0x0, 0x2, 0xffffffffffffffff, 0x2c0000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x4}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fspick(r0, &(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000004000004000000000200000004000000090000000400000005000000a607c70c6a7f0901708b20ffff0a80000003000000010000000600400005000000070000000000"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x21, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x4d5337314ea54c74, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6}, 0x10, 0x0, r5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r8, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4d}, {0x4d}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 10.736871771s ago: executing program 1 (id=484): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[{@fat=@uid}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc_fail\x00'}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000080)={0x0}) r4 = socket(0x840000000002, 0x0, 0x100) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) 10.632338379s ago: executing program 3 (id=485): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 9.591764755s ago: executing program 1 (id=488): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000040)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@nodatacow}]}, 0x1, 0x55a3, &(0x7f0000005680)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000580), 0x4) copy_file_range(r2, &(0x7f0000000080), r1, 0x0, 0xfffffffffffffff8, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 9.480250814s ago: executing program 3 (id=489): io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc4c, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0xf0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "c6"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x4, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x40}, @mbim={0xc, 0x24, 0x1b, 0x8001, 0x1, 0x0, 0x37, 0x9, 0x1f}, @acm={0x4, 0x24, 0x2, 0x8}, @dmm={0x7, 0x24, 0x14, 0x1f, 0x7fff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x61}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc1, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x4c, &(0x7f00000001c0)={0x5, 0xf, 0x4c, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x8, 0x7, 0x0, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0xe}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xa7, &(0x7f0000000300)=@string={0xa7, 0x3, "da582397830a80cba3c89b977de5fee09051f100d9c51117c655ee802f8fa44e30ee334e5bf7bd98bb276b034d390cb115b6457a2648e18a418a0a2324f428a58fbe177719341c215efdf84e407e3fc092c7e2cd1cb86cbf9cd2b1cbb1f835d52b8752e1b37be11932884c869e9274c2c13e27b32611188987477ca243a596e48300439b609e371f5e010311c30165ad89d84e90c2974c58abd664e3332fddb3aa6816a1cb"}}, {0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "c67758f80b2fb2d79732fe21bea01b163b7d491bfef70e1fc5856825c294de4e6c6f6726aa627ba9550dec71de353efaa4899b1344391617b887b3cd0930d0ced79e36971f469fa8943894"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x81a}}, {0x6b, &(0x7f0000000480)=@string={0x6b, 0x3, "bec9a58fdb60d5936738d0a5f6bf3fc759a41ada184f4982ff7ff293bb6418994d3d6a049d358287dfa137fa7b1c154e3a4d5b280ebfc8e838cc3ccecc28f8e0912ba02ada0f43d9475584cd72f2938e59d395a7cf93764fb241de1accbfc00b59d917076499a94cec"}}, {0xfe, &(0x7f0000000500)=@string={0xfe, 0x3, "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"}}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 9.15651299s ago: executing program 1 (id=490): creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, 'iso8859-14'}}, {@uid}, {@gid={'gid', 0x3d, 0xee00}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {@uid}, {@dir_umask={'dir_umask', 0x3d, 0x800}}, {}]}, 0x0, 0x320, &(0x7f0000001800)="$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") 7.598578238s ago: executing program 2 (id=494): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x2}]}, @ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x42}, 0x20) 7.441748551s ago: executing program 2 (id=495): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 6.513409817s ago: executing program 3 (id=496): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x20) 6.383519718s ago: executing program 3 (id=497): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[{@fat=@uid}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc_fail\x00'}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000080)={0x0}) r4 = socket(0x840000000002, 0x0, 0x100) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) 6.305797544s ago: executing program 0 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a"], 0xd) pipe(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') pread64(r4, &(0x7f0000000040)=""/137, 0x89, 0x7fffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5ea714", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0xb3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2c000000010101040000000000000000020000001800028014000180000001"], 0x2c}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "81d90d", 0x8, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, {[@dstopts={0x2}]}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 4.503544292s ago: executing program 3 (id=498): socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socket(0x11, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="003bfa193f92d25f4b42889f58b9ed030962f330bd57af2a184d94985188abff7afbe1d5d26f993c3a665ed3ff64a6ccbd409e850d276e4762cb1b89bab181ff538bb6b13e"], 0x1, 0x1a0, &(0x7f0000000280)="$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") syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, 0x0, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x5c}}, 0x0) 4.191390547s ago: executing program 0 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c00078005001400000000c0080012400005000008000840000000000900020073797a300000000005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x0) 4.126066583s ago: executing program 2 (id=500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r1, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000040)=0x9c) 3.977415205s ago: executing program 0 (id=501): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xd073c8354de4a04d) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYRES16=r0], 0xd8) accept4(r2, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r4, 0x40045567, &(0x7f0000000000)='syz0\x00') connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x7) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) write$P9_RWALK(r6, &(0x7f0000000240)={0x23, 0x6f, 0x1, {0x2, [{0x0, 0x0, 0x8}, {0x80, 0x2, 0x5}]}}, 0x23) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x81, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x8000}], 0x10}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) 3.976741135s ago: executing program 2 (id=502): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x80000000, 0x0, 0x2, 0xffffffffffffffff, 0x2c0000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESHEX=r1], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x4}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fspick(r0, &(0x7f00000001c0)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000004000004000000000200000004000000090000000400000005000000a607c70c6a7f0901708b20ffff0a80000003000000010000000600400005000000070000000000"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x21, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x4d5337314ea54c74, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6}, 0x10, 0x0, r5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r8, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4d}, {0x4d}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 3.768334332s ago: executing program 3 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000964776ff9746c768310000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.57379102s ago: executing program 0 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x28, r1, 0x301, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x5}, 0x0) 2.561759501s ago: executing program 2 (id=506): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 2.400436934s ago: executing program 0 (id=507): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[{@fat=@uid}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc_fail\x00'}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x1, &(0x7f0000000080)={0x0}) r4 = socket(0x840000000002, 0x0, 0x100) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) 1.516637266s ago: executing program 0 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a"], 0xd) pipe(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') pread64(r4, &(0x7f0000000040)=""/137, 0x89, 0x7fffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "5ea714", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}, 0x0) r6 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0xb3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2c000000010101040000000000000000020000001800028014000180000001"], 0x2c}}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "81d90d", 0x8, 0x0, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, {[@dstopts={0x2}]}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 0s ago: executing program 2 (id=509): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r0, 0x0, 0x16) kernel console output (not intermixed with test programs): F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.445110][ T4168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 89.461714][ T4168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.501010][ T4195] loop3: detected capacity change from 0 to 256 [ 89.558308][ T26] audit: type=1804 audit(1720533168.731:3): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.173" name="/newroot/42/file2/file0" dev="loop1" ino=10 res=1 errno=0 [ 89.595083][ T4195] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x21b487da, utbl_chksum : 0xe619d30d) [ 89.670306][ T3548] syz-executor: attempt to access beyond end of device [ 89.670306][ T3548] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.406813][ T152] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.606401][ T4225] loop3: detected capacity change from 0 to 16 [ 90.623139][ T4225] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 91.406910][ T152] usb 3-1: Using ep0 maxpacket: 32 [ 91.547060][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.570927][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.591086][ T152] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 91.636923][ T152] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 91.647828][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.678981][ T152] usb 3-1: config 0 descriptor?? [ 91.966254][ T4228] loop0: detected capacity change from 0 to 40427 [ 92.001321][ T4228] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 92.038698][ T4228] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 92.098997][ T4228] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.287263][ T152] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 92.335131][ T4228] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 92.366993][ T4228] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.130846][ T26] audit: type=1804 audit(1720533172.311:4): pid=4228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.192" name="/newroot/54/file2/file0" dev="loop0" ino=10 res=1 errno=0 [ 93.273660][ T152] usb 3-1: USB disconnect, device number 3 [ 93.304280][ T3545] syz-executor: attempt to access beyond end of device [ 93.304280][ T3545] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.349663][ T4241] loop3: detected capacity change from 0 to 32768 [ 93.402867][ T4259] loop4: detected capacity change from 0 to 2048 [ 93.695438][ T4264] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.059543][ T4267] loop1: detected capacity change from 0 to 164 [ 94.165311][ T4267] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.365206][ T3561] Bluetooth: hci4: unexpected event 0x09 length: 10 > 3 [ 94.391028][ T4267] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 94.463068][ T4273] netlink: 56 bytes leftover after parsing attributes in process `syz.0.200'. [ 94.473629][ T4273] netlink: 56 bytes leftover after parsing attributes in process `syz.0.200'. [ 94.600369][ T3561] Bluetooth: hci4: unexpected event 0x42 length: 6 > 3 [ 95.041225][ T4288] loop0: detected capacity change from 0 to 4096 [ 96.371747][ T4303] loop2: detected capacity change from 0 to 2048 [ 96.463314][ T4304] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.468881][ T4274] loop4: detected capacity change from 0 to 32768 [ 96.683058][ T4274] XFS (loop4): Mounting V5 Filesystem [ 96.752341][ T4291] loop1: detected capacity change from 0 to 40427 [ 96.850958][ T4274] XFS (loop4): Ending clean mount [ 96.865075][ T4291] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 96.874639][ T4274] XFS (loop4): Quotacheck needed: Please wait. [ 96.890523][ T4291] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 96.935814][ T4274] XFS (loop4): Quotacheck: Done. [ 96.946868][ T4291] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.082696][ T4291] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.084386][ T3547] XFS (loop4): Unmounting Filesystem [ 97.111363][ T4291] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 97.256980][ T26] audit: type=1804 audit(1720533176.431:5): pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.211" name="/newroot/49/file2/file0" dev="loop1" ino=10 res=1 errno=0 [ 97.387069][ T3548] syz-executor: attempt to access beyond end of device [ 97.387069][ T3548] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.534340][ T4324] dccp_close: ABORT with 190 bytes unread [ 97.790070][ T4312] loop2: detected capacity change from 0 to 32768 [ 97.808031][ T4335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.225'. [ 97.827022][ T4335] netlink: 56 bytes leftover after parsing attributes in process `syz.0.225'. [ 97.868428][ T3819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.268499][ T3819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.366820][ T3819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.613186][ T3819] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 98.626720][ T3819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.660005][ T3819] usb 4-1: config 0 descriptor?? [ 98.826349][ T4342] loop0: detected capacity change from 0 to 512 [ 99.236134][ T4342] EXT4-fs (loop0): 1 orphan inode deleted [ 99.270299][ T4342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.335903][ T4342] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038 (0x7fffffff) [ 99.433924][ T3819] wacom 0003:056A:00E5.0004: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.3-1/input0 [ 99.637238][ T14] usb 4-1: USB disconnect, device number 2 [ 100.324995][ T3545] EXT4-fs (loop0): unmounting filesystem. [ 100.378322][ T4363] device syz_tun entered promiscuous mode [ 100.462969][ T4364] dccp_close: ABORT with 190 bytes unread [ 100.650397][ T4372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.236'. [ 100.676878][ T4372] netlink: 35 bytes leftover after parsing attributes in process `syz.0.236'. [ 100.706484][ T4372] netlink: 'syz.0.236': attribute type 6 has an invalid length. [ 100.985538][ T4362] device syz_tun left promiscuous mode [ 101.090932][ T4372] netlink: 'syz.0.236': attribute type 5 has an invalid length. [ 101.232423][ T4372] netlink: 35 bytes leftover after parsing attributes in process `syz.0.236'. [ 101.929088][ T26] audit: type=1804 audit(1720533181.101:6): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.242" name="/newroot/66/bus/bus" dev="overlay" ino=369 res=1 errno=0 [ 101.938767][ T4385] Invalid ELF header len 18 [ 102.058197][ T4356] loop1: detected capacity change from 0 to 40427 [ 102.143098][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 102.160781][ T4356] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 102.193974][ T4356] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.507217][ T4356] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 103.588332][ T4387] loop3: detected capacity change from 0 to 32768 [ 103.601217][ T4387] XFS: ikeep mount option is deprecated. [ 103.607448][ T4387] XFS: noikeep mount option is deprecated. [ 104.143521][ T4387] XFS (loop3): Mounting V5 Filesystem [ 104.192466][ T4387] XFS (loop3): Ending clean mount [ 104.199080][ T936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.221391][ T4416] netlink: 44 bytes leftover after parsing attributes in process `syz.1.252'. [ 104.237024][ T4387] XFS (loop3): Quotacheck needed: Please wait. [ 104.257735][ T4416] netlink: 35 bytes leftover after parsing attributes in process `syz.1.252'. [ 104.285299][ T4387] XFS (loop3): Quotacheck: Done. [ 104.285338][ T4416] netlink: 'syz.1.252': attribute type 6 has an invalid length. [ 104.296909][ T3819] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.306864][ T4416] netlink: 'syz.1.252': attribute type 5 has an invalid length. [ 104.327184][ T4416] netlink: 35 bytes leftover after parsing attributes in process `syz.1.252'. [ 104.395119][ T3546] XFS (loop3): Unmounting Filesystem [ 104.536888][ T3819] usb 3-1: Using ep0 maxpacket: 16 [ 104.587004][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.609758][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.637016][ T936] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 104.657002][ T3819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.673358][ T26] audit: type=1804 audit(1720533183.861:7): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.257" name="/newroot/56/bus/bus" dev="overlay" ino=324 res=1 errno=0 [ 104.674829][ T4430] Invalid ELF header len 18 [ 104.713314][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.730782][ T3819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.756817][ T3819] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 104.766000][ T3819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.786013][ T4426] loop0: detected capacity change from 0 to 32768 [ 104.788314][ T936] usb 5-1: config 0 descriptor?? [ 104.799151][ T3819] usb 3-1: config 0 descriptor?? [ 104.880692][ T4426] XFS (loop0): Mounting V5 Filesystem [ 104.924542][ T4443] netlink: 60 bytes leftover after parsing attributes in process `syz.1.258'. [ 104.940429][ T4443] netlink: 172 bytes leftover after parsing attributes in process `syz.1.258'. [ 104.965990][ T4426] XFS (loop0): Ending clean mount [ 105.018422][ T4426] XFS (loop0): Quotacheck needed: Please wait. [ 105.072871][ T4426] XFS (loop0): Quotacheck: Done. [ 105.205941][ T3545] XFS (loop0): Unmounting Filesystem [ 105.282766][ T936] wacom 0003:056A:00E5.0005: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.4-1/input0 [ 105.482614][ T3819] usbhid 3-1:0.0: can't add hid device: -71 [ 105.500299][ T4451] dccp_close: ABORT with 190 bytes unread [ 105.511379][ T3819] usbhid: probe of 3-1:0.0 failed with error -71 [ 105.550424][ T3819] usb 3-1: USB disconnect, device number 4 [ 105.587801][ T3818] usb 5-1: USB disconnect, device number 4 [ 105.654942][ T4457] loop3: detected capacity change from 0 to 512 [ 105.725694][ T4457] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.765117][ T4445] loop1: detected capacity change from 0 to 40427 [ 105.795260][ T4445] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 105.802153][ T4445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.833247][ T4445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.834079][ T4457] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.263: iget: bad i_size value: -6917529027641081756 [ 105.854970][ T4457] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.263: couldn't read orphan inode 17 (err -117) [ 105.892835][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.306582][ T4445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.578686][ T4445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.742828][ T26] audit: type=1804 audit(1720533185.921:8): pid=4445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.259" name="/newroot/58/file2/file0" dev="loop1" ino=10 res=1 errno=0 [ 106.837188][ T3548] syz-executor: attempt to access beyond end of device [ 106.837188][ T3548] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.871023][ T4457] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.263: bg 0: block 65: padding at end of block bitmap is not set [ 106.907156][ T4457] Quota error (device loop3): write_blk: dquota write failed [ 106.914994][ T4457] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 106.925482][ T4457] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.263: Failed to acquire dquot type 0 [ 106.949767][ T4472] Quota error (device loop3): write_blk: dquota write failed [ 106.964786][ T4472] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 107.000158][ T4472] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.263: Failed to acquire dquot type 0 [ 107.097187][ T3549] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 107.144185][ T4477] loop4: detected capacity change from 0 to 4096 [ 107.153705][ T3546] EXT4-fs (loop3): unmounting filesystem. [ 107.265744][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 107.355116][ T4483] loop3: detected capacity change from 0 to 16 [ 107.379592][ T4483] erofs: (device loop3): mounted with root inode @ nid 36. [ 107.411193][ T26] audit: type=1800 audit(1720533186.591:9): pid=4483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.271" name="file0" dev="loop3" ino=49 res=0 errno=0 [ 107.507092][ T3549] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 107.544182][ T3549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.578382][ T4488] misc userio: No port type given on /dev/userio [ 107.625657][ T3549] usb 3-1: config 0 descriptor?? [ 108.756968][ T3819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.950280][ T4510] loop0: detected capacity change from 0 to 512 [ 108.972713][ T4510] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.998101][ T4510] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.281: iget: bad i_size value: -6917529027641081756 [ 109.041194][ T4510] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.281: couldn't read orphan inode 17 (err -117) [ 109.044900][ T4514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 109.055931][ T4510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.077117][ T152] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.167012][ T3819] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 109.176238][ T3819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.186486][ T3819] usb 4-1: config 0 descriptor?? [ 109.242050][ T4510] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.281: bg 0: block 65: padding at end of block bitmap is not set [ 109.260244][ T4510] Quota error (device loop0): write_blk: dquota write failed [ 109.267951][ T4510] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 109.284393][ T4510] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.281: Failed to acquire dquot type 0 [ 109.296666][ T4517] Quota error (device loop0): write_blk: dquota write failed [ 109.305528][ T4517] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 109.316588][ T4517] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.281: Failed to acquire dquot type 0 [ 109.341323][ T3549] pegasus 3-1:0.0: can't reset MAC [ 109.347084][ T3549] pegasus: probe of 3-1:0.0 failed with error -5 [ 109.357724][ T3549] usb 3-1: USB disconnect, device number 5 [ 109.401208][ T3545] EXT4-fs (loop0): unmounting filesystem. [ 109.486994][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.498843][ T152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.503098][ T4521] loop0: detected capacity change from 0 to 16 [ 109.510218][ T152] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 109.527457][ T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.538249][ T4521] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.545862][ T152] usb 2-1: config 0 descriptor?? [ 109.568155][ T26] audit: type=1800 audit(1720533188.751:10): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.285" name="file0" dev="loop0" ino=49 res=0 errno=0 [ 109.622820][ T4523] misc userio: No port type given on /dev/userio [ 109.672703][ T4525] loop4: detected capacity change from 0 to 8 [ 109.809061][ T3819] usb 4-1: Cannot read MAC address [ 109.814861][ T3819] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 109.992166][ T3819] usb 4-1: USB disconnect, device number 3 [ 110.076180][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.545123][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 110.774861][ T4539] loop2: detected capacity change from 0 to 4096 [ 110.855570][ T152] wacom 0003:056A:00E5.0006: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 110.877397][ T152] usb 2-1: USB disconnect, device number 2 [ 110.897681][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 110.939575][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 111.008623][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 111.020501][ T4545] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.049305][ T4545] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 111.074562][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 111.134593][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 111.140735][ T4547] loop3: detected capacity change from 0 to 512 [ 111.210899][ T4547] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.310496][ T4547] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.295: iget: bad i_size value: -6917529027641081756 [ 111.318413][ T4558] loop4: detected capacity change from 0 to 8 [ 111.354281][ T4547] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.295: couldn't read orphan inode 17 (err -117) [ 111.381329][ T4547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.659359][ T4547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.295: bg 0: block 65: padding at end of block bitmap is not set [ 111.679947][ T4547] Quota error (device loop3): write_blk: dquota write failed [ 111.691957][ T4547] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 111.705505][ T4547] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.295: Failed to acquire dquot type 0 [ 111.756258][ T4568] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.295: Failed to acquire dquot type 0 [ 111.892473][ T3546] EXT4-fs (loop3): unmounting filesystem. [ 112.196843][ T3819] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.288802][ T4582] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 112.304348][ T4582] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 112.461558][ T3818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.587008][ T3819] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 112.607290][ T3819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.628824][ T3819] usb 1-1: config 0 descriptor?? [ 112.696909][ T936] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.725024][ T4580] loop3: detected capacity change from 0 to 40427 [ 112.775944][ T4580] F2FS-fs (loop3): invalid crc value [ 112.803018][ T4580] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.846979][ T3818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.869705][ T3818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.894423][ T3818] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 112.896005][ T4588] loop2: detected capacity change from 0 to 32768 [ 112.910594][ T3818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.922064][ T4580] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 112.945020][ T3818] usb 2-1: config 0 descriptor?? [ 112.955951][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 112.955965][ T26] audit: type=1800 audit(1720533192.141:11): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 112.984664][ T936] usb 5-1: Using ep0 maxpacket: 16 [ 113.007829][ T3546] syz-executor: attempt to access beyond end of device [ 113.007829][ T3546] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.007882][ T4588] XFS (loop2): Mounting V5 Filesystem [ 113.080391][ T4588] XFS (loop2): Ending clean mount [ 113.093876][ T4588] XFS (loop2): Quotacheck needed: Please wait. [ 113.106964][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.123937][ T936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.133989][ T936] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 113.143360][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.153512][ T936] usb 5-1: config 0 descriptor?? [ 113.184718][ T4588] XFS (loop2): Quotacheck: Done. [ 113.254014][ T3544] XFS (loop2): Unmounting Filesystem [ 113.443665][ T3818] wacom 0003:056A:00E5.0007: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0 [ 113.649326][ T7] usb 2-1: USB disconnect, device number 3 [ 113.736969][ T936] usbhid 5-1:0.0: can't add hid device: -71 [ 113.743021][ T936] usbhid: probe of 5-1:0.0 failed with error -71 [ 113.754210][ T936] usb 5-1: USB disconnect, device number 5 [ 113.835513][ T4614] loop2: detected capacity change from 0 to 512 [ 113.845360][ T4614] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.871326][ T4614] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.315: iget: bad i_size value: -6917529027641081756 [ 113.886133][ T4614] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.315: couldn't read orphan inode 17 (err -117) [ 113.902413][ T4614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.996855][ T3819] pegasus 1-1:0.0: can't reset MAC [ 114.002183][ T3819] pegasus: probe of 1-1:0.0 failed with error -5 [ 114.045898][ T3819] usb 1-1: USB disconnect, device number 2 [ 114.099948][ T4614] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.315: bg 0: block 65: padding at end of block bitmap is not set [ 114.131400][ T4614] Quota error (device loop2): write_blk: dquota write failed [ 114.144421][ T4614] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 114.156043][ T4614] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.315: Failed to acquire dquot type 0 [ 114.169158][ T4619] Quota error (device loop2): write_blk: dquota write failed [ 114.180982][ T4619] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 114.192918][ T4619] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.315: Failed to acquire dquot type 0 [ 114.332256][ T4621] loop4: detected capacity change from 0 to 512 [ 114.362887][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 114.428721][ T4621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 114.462781][ T4621] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038 (0x7fffffff) [ 114.727450][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 115.030289][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 115.146167][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 115.280209][ T4648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 115.289187][ T4648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 115.747129][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 115.775367][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 115.797333][ T4628] loop2: detected capacity change from 0 to 40427 [ 115.828719][ T4628] F2FS-fs (loop2): invalid crc value [ 115.854514][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 115.889281][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 115.896614][ T4628] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.920762][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 115.972010][ T4628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 116.013910][ T4628] syz.2.319: attempt to access beyond end of device [ 116.013910][ T4628] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 116.090926][ T4628] syz.2.319: attempt to access beyond end of device [ 116.090926][ T4628] loop2: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 116.165219][ T4663] syz.2.319: attempt to access beyond end of device [ 116.165219][ T4663] loop2: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 116.216777][ T26] audit: type=1804 audit(1720533195.391:12): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.319" name="/newroot/44/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 116.252531][ T4628] syz.2.319: attempt to access beyond end of device [ 116.252531][ T4628] loop2: rw=2049, sector=53400, nr_sectors = 112 limit=40427 [ 116.342810][ T3544] syz-executor: attempt to access beyond end of device [ 116.342810][ T3544] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.438976][ T4636] loop3: detected capacity change from 0 to 40427 [ 116.448147][ T152] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 116.466959][ T936] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 116.468719][ T4636] F2FS-fs (loop3): invalid crc value [ 116.519192][ T4636] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.625207][ T4636] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.678598][ T26] audit: type=1800 audit(1720533195.861:13): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.322" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 116.723794][ T3546] syz-executor: attempt to access beyond end of device [ 116.723794][ T3546] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.848998][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 116.868396][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.893606][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.914895][ T152] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 116.927126][ T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.951819][ T152] usb 5-1: config 0 descriptor?? [ 117.016947][ T936] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.049808][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.058362][ T936] usb 1-1: Product: syz [ 117.062980][ T936] usb 1-1: Manufacturer: syz [ 117.067710][ T936] usb 1-1: SerialNumber: syz [ 117.092895][ T936] usb 1-1: config 0 descriptor?? [ 117.138984][ T936] em28xx 1-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 117.151067][ T936] em28xx 1-1:0.0: Device initialization failed. [ 117.167319][ T936] em28xx 1-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 117.288408][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 117.315008][ T4689] Bluetooth: MGMT ver 1.22 [ 117.605844][ T152] wacom 0003:056A:00E5.0008: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.4-1/input0 [ 117.782730][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 117.791701][ T4704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 117.929279][ T7] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 117.995475][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.177662][ T3556] usb 5-1: USB disconnect, device number 6 [ 118.363354][ T7] usb 4-1: config 0 descriptor?? [ 118.622804][ T4664] loop0: detected capacity change from 0 to 512 [ 118.693927][ T4700] loop1: detected capacity change from 0 to 40427 [ 118.697981][ T4664] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 118.741929][ T4700] F2FS-fs (loop1): invalid crc value [ 118.796918][ T4700] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.801907][ T4664] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.329: attempt to clear invalid blocks 1024 len 1 [ 118.840870][ T4664] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.329: invalid indirect mapped block 1819239214 (level 0) [ 118.858805][ T3561] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 118.868798][ T3561] Bluetooth: hci2: Injecting HCI hardware error event [ 118.884765][ T3563] Bluetooth: hci2: hardware error 0x00 [ 118.933897][ T4664] EXT4-fs (loop0): 1 truncate cleaned up [ 118.941907][ T4700] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 118.950531][ T4664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.980682][ T4700] syz.1.344: attempt to access beyond end of device [ 118.980682][ T4700] loop1: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 118.999761][ T4700] syz.1.344: attempt to access beyond end of device [ 118.999761][ T4700] loop1: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 119.047608][ T4700] syz.1.344: attempt to access beyond end of device [ 119.047608][ T4700] loop1: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 119.073615][ T26] audit: type=1804 audit(1720533198.251:14): pid=4700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.344" name="/newroot/78/bus/file1" dev="loop1" ino=10 res=1 errno=0 [ 119.115021][ T4700] syz.1.344: attempt to access beyond end of device [ 119.115021][ T4700] loop1: rw=2049, sector=53400, nr_sectors = 112 limit=40427 [ 119.164522][ T3548] syz-executor: attempt to access beyond end of device [ 119.164522][ T3548] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.200383][ T4730] loop2: detected capacity change from 0 to 512 [ 119.202886][ T4728] loop4: detected capacity change from 0 to 512 [ 119.224848][ T4728] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 119.291556][ T4728] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.353: iget: bad i_size value: -67835469387268086 [ 119.305158][ T4730] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.309237][ T4728] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 119.324457][ T4730] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 119.383039][ T4728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.402103][ T4728] ext2 filesystem being mounted at /69/file0 supports timestamps until 2038 (0x7fffffff) [ 119.545416][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 119.792558][ T7] pegasus 4-1:0.0: can't reset MAC [ 119.810115][ T7] pegasus: probe of 4-1:0.0 failed with error -5 [ 119.838840][ T7] usb 4-1: USB disconnect, device number 4 [ 119.876628][ T152] usb 1-1: USB disconnect, device number 3 [ 119.888853][ T3545] EXT4-fs (loop0): unmounting filesystem. [ 119.977651][ T3535] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.001555][ T4750] loop0: detected capacity change from 0 to 128 [ 120.134230][ T3545] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 120.153357][ T3545] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 120.227803][ T3535] usb 3-1: Using ep0 maxpacket: 16 [ 120.366900][ T3535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.399379][ T3535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.426808][ T3535] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 120.435892][ T3535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.499172][ T3535] usb 3-1: config 0 descriptor?? [ 120.586760][ T3930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.662407][ T4752] loop1: detected capacity change from 0 to 32768 [ 120.717055][ T4752] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.362 (4752) [ 120.755526][ T3930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.783645][ T4752] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.807126][ T4752] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.825248][ T4752] BTRFS info (device loop1): enabling auto defrag [ 120.839725][ T4752] BTRFS info (device loop1): doing ref verification [ 120.855972][ T4752] BTRFS info (device loop1): max_inline at 0 [ 120.887761][ T4752] BTRFS info (device loop1): force clearing of disk cache [ 120.895627][ T4752] BTRFS info (device loop1): turning on sync discard [ 120.905014][ T3930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.936893][ T3563] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 120.938454][ T4752] BTRFS info (device loop1): setting nodatacow, compression disabled [ 120.962490][ T4752] BTRFS info (device loop1): using free space tree [ 121.108306][ T3930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.187003][ T3535] usbhid 3-1:0.0: can't add hid device: -71 [ 121.193037][ T3535] usbhid: probe of 3-1:0.0 failed with error -71 [ 121.229214][ T3535] usb 3-1: USB disconnect, device number 6 [ 121.295076][ T4752] BTRFS info (device loop1): enabling ssd optimizations [ 121.316116][ T4752] BTRFS info (device loop1): rebuilding free space tree [ 121.406397][ T3561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.416836][ T3561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.425215][ T3561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.435847][ T3561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.444777][ T3561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.452280][ T3561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.497175][ T3561] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 121.506439][ T3561] Bluetooth: hci4: Injecting HCI hardware error event [ 121.517857][ T3561] Bluetooth: hci4: hardware error 0x00 [ 121.600446][ T3547] EXT4-fs (loop4): unmounting filesystem. [ 121.716240][ T26] audit: type=1804 audit(1720533200.891:15): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.362" name="/newroot/84/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 121.817063][ T3549] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 121.834477][ T26] audit: type=1804 audit(1720533200.971:16): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.362" name="/newroot/84/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 121.985793][ T3548] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 122.126938][ T152] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 122.236981][ T3549] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 122.262185][ T3549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.291202][ T3549] usb 4-1: config 0 descriptor?? [ 122.517235][ T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 122.648423][ T4782] chnl_net:caif_netlink_parms(): no params data found [ 122.706385][ T4801] loop4: detected capacity change from 0 to 40427 [ 122.717243][ T152] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 122.746820][ T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.780459][ T152] usb 3-1: Product: syz [ 122.784754][ T152] usb 3-1: Manufacturer: syz [ 122.790319][ T4801] F2FS-fs (loop4): invalid crc value [ 122.820857][ T152] usb 3-1: SerialNumber: syz [ 122.834551][ T152] usb 3-1: config 0 descriptor?? [ 122.842416][ T4801] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.930367][ T152] em28xx 3-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 122.940494][ T152] em28xx 3-1:0.0: Device initialization failed. [ 122.953613][ T152] em28xx 3-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 122.980578][ T4835] loop1: detected capacity change from 0 to 512 [ 122.997153][ T3549] usb 4-1: Cannot read MAC address [ 123.007639][ T3549] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 123.026825][ T4801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 123.035197][ T3549] usb 4-1: USB disconnect, device number 5 [ 123.078013][ T26] audit: type=1800 audit(1720533202.261:17): pid=4801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.373" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 123.125595][ T3547] syz-executor: attempt to access beyond end of device [ 123.125595][ T3547] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.154596][ T4835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.203047][ T4835] ext4 filesystem being mounted at /89/bus supports timestamps until 2038 (0x7fffffff) [ 123.226557][ T4782] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.244382][ T4782] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.262978][ T4782] device bridge_slave_0 entered promiscuous mode [ 123.320427][ T4782] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.329656][ T4782] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.382360][ T4782] device bridge_slave_1 entered promiscuous mode [ 123.466991][ T4782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.496895][ T3563] Bluetooth: hci1: command tx timeout [ 123.577070][ T3561] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 123.768499][ T4782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.803243][ T3548] EXT4-fs (loop1): unmounting filesystem. [ 123.804257][ T4852] loop4: detected capacity change from 0 to 128 [ 124.002610][ T4792] loop2: detected capacity change from 0 to 512 [ 124.017563][ T3547] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 124.020649][ T4782] team0: Port device team_slave_0 added [ 124.026001][ T3547] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 124.129408][ T4792] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 124.278364][ T4782] team0: Port device team_slave_1 added [ 124.282592][ T4792] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.371: attempt to clear invalid blocks 1024 len 1 [ 124.374975][ T4792] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.371: invalid indirect mapped block 1819239214 (level 0) [ 124.395158][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.399904][ T4792] EXT4-fs (loop2): 1 truncate cleaned up [ 124.422181][ T4792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.426924][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.460561][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.586290][ T4782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.656231][ T4868] netlink: 830 bytes leftover after parsing attributes in process `syz.1.385'. [ 124.700267][ T4782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.719347][ T4782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.745250][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.786505][ T4854] loop3: detected capacity change from 0 to 32768 [ 124.789142][ T4782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.870244][ T4854] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.382 (4854) [ 124.920945][ T4854] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.982816][ T4854] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 124.992982][ T4854] BTRFS info (device loop3): enabling auto defrag [ 125.002060][ T4854] BTRFS info (device loop3): doing ref verification [ 125.009572][ T4854] BTRFS info (device loop3): max_inline at 0 [ 125.026891][ T4854] BTRFS info (device loop3): force clearing of disk cache [ 125.034304][ T4854] BTRFS info (device loop3): turning on sync discard [ 125.043348][ T4854] BTRFS info (device loop3): setting nodatacow, compression disabled [ 125.052113][ T4854] BTRFS info (device loop3): using free space tree [ 125.062731][ T3930] device hsr_slave_0 left promiscuous mode [ 125.089799][ T3930] device hsr_slave_1 left promiscuous mode [ 125.122290][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.145978][ T936] usb 3-1: USB disconnect, device number 7 [ 125.152967][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.172290][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.185892][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.200040][ T3563] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.210475][ T3563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.218728][ T3563] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.229494][ T3563] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.238123][ T3563] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.246126][ T3563] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 125.254837][ T3930] device bridge_slave_1 left promiscuous mode [ 125.270798][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 125.295154][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.344507][ T3930] device bridge_slave_0 left promiscuous mode [ 125.353944][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.429194][ T4854] BTRFS info (device loop3): enabling ssd optimizations [ 125.464110][ T4854] BTRFS info (device loop3): rebuilding free space tree [ 125.503061][ T3930] device veth1_macvtap left promiscuous mode [ 125.552346][ T3930] device veth0_macvtap left promiscuous mode [ 125.576912][ T3563] Bluetooth: hci1: command tx timeout [ 125.608586][ T3930] device veth1_vlan left promiscuous mode [ 125.614678][ T3930] device veth0_vlan left promiscuous mode [ 125.701479][ T26] audit: type=1804 audit(1720533204.881:18): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.382" name="/newroot/60/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 125.808026][ T4902] loop2: detected capacity change from 0 to 512 [ 125.821427][ T26] audit: type=1804 audit(1720533204.961:19): pid=4854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.382" name="/newroot/60/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 125.934128][ T3546] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.961404][ T4902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.069969][ T4902] ext4 filesystem being mounted at /65/bus supports timestamps until 2038 (0x7fffffff) [ 126.161693][ T3930] bond1 (unregistering): Released all slaves [ 126.461361][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 127.339817][ T3563] Bluetooth: hci2: command tx timeout [ 127.657259][ T3563] Bluetooth: hci1: command tx timeout [ 127.894626][ T4931] loop3: detected capacity change from 0 to 256 [ 128.712240][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 128.749601][ T4937] loop2: detected capacity change from 0 to 4096 [ 128.770528][ T4937] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.808245][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 128.837832][ T4937] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 128.905975][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.959537][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.417972][ T3561] Bluetooth: hci2: command tx timeout [ 129.736764][ T3563] Bluetooth: hci1: command tx timeout [ 130.545594][ T3930] bond0 (unregistering): Released all slaves [ 130.896997][ T4967] loop1: detected capacity change from 0 to 256 [ 131.471719][ T4782] device hsr_slave_0 entered promiscuous mode [ 131.497120][ T3563] Bluetooth: hci2: command tx timeout [ 131.522019][ T4782] device hsr_slave_1 entered promiscuous mode [ 131.536350][ T4782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.545532][ T4782] Cannot create hsr debugfs directory [ 132.142115][ T4882] chnl_net:caif_netlink_parms(): no params data found [ 132.692359][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.747164][ T4882] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.775714][ T4882] device bridge_slave_0 entered promiscuous mode [ 132.784561][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.808679][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.815869][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.839856][ T4882] device bridge_slave_1 entered promiscuous mode [ 132.877586][ T3561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.888021][ T3561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.903148][ T3561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.912407][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.920702][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.930332][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.002747][ T5003] loop2: detected capacity change from 0 to 256 [ 133.013709][ T3563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.050850][ T3563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.073398][ T3563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.084986][ T3563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.099271][ T3557] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.100678][ T4882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.116065][ T3563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.123553][ T4612] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.211858][ T4882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.328596][ T4882] team0: Port device team_slave_0 added [ 133.390017][ T4882] team0: Port device team_slave_1 added [ 133.391525][ T5003] loop2: detected capacity change from 0 to 512 [ 133.410725][ T5003] ext3: Unknown parameter 'obj_type' [ 133.454732][ T5003] kvm: emulating exchange as write [ 133.527614][ T4882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.557497][ T4882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.577393][ T3563] Bluetooth: hci2: command tx timeout [ 133.635847][ T4882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.695968][ T4882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.724086][ T4882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.787570][ T4882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.007124][ T4882] device hsr_slave_0 entered promiscuous mode [ 134.031895][ T4882] device hsr_slave_1 entered promiscuous mode [ 134.040641][ T4882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.051124][ T4882] Cannot create hsr debugfs directory [ 134.061142][ T4782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.159480][ T4782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.175634][ T4782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.194217][ T4782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.451894][ T4997] chnl_net:caif_netlink_parms(): no params data found [ 134.568964][ T5002] chnl_net:caif_netlink_parms(): no params data found [ 134.652757][ T4782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.763116][ T4782] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.813499][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.824708][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.922858][ T4882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.980605][ T4997] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.992989][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.012635][ T4997] device bridge_slave_0 entered promiscuous mode [ 135.027187][ T3563] Bluetooth: hci0: command tx timeout [ 135.028173][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.042672][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.059287][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.066430][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.177539][ T3563] Bluetooth: hci3: command tx timeout [ 135.187009][ T4882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.235225][ T4997] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.252590][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.272593][ T4997] device bridge_slave_1 entered promiscuous mode [ 135.314762][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.335560][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.363192][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.394982][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.402151][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.454698][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.473942][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.490873][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.511164][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.520132][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.546192][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.609299][ T4882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.701043][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.720772][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.742621][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.764061][ T4782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.792398][ T4782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.859789][ T4882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.887869][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.896410][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.915430][ T5002] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.923278][ T5002] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.949299][ T5002] device bridge_slave_0 entered promiscuous mode [ 135.981853][ T4997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.023927][ T4997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.084859][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.116961][ T5002] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.125168][ T5002] device bridge_slave_1 entered promiscuous mode [ 136.230228][ T4997] team0: Port device team_slave_0 added [ 136.247799][ T5002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.274774][ T4997] team0: Port device team_slave_1 added [ 136.300665][ T5002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.411300][ T3930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.562567][ T3930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.630509][ T4997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.640545][ T4997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.764242][ T4997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.811619][ T5002] team0: Port device team_slave_0 added [ 136.849782][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.877128][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.889835][ T4782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.903063][ T4997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.916351][ T4997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.945484][ T4997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.961533][ T5002] team0: Port device team_slave_1 added [ 137.009841][ T3930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.097187][ T3563] Bluetooth: hci0: command tx timeout [ 137.111364][ T3930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.218888][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.236384][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.257288][ T3563] Bluetooth: hci3: command tx timeout [ 137.279380][ T4882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.355861][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.374248][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.420398][ T5002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.444090][ T4882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.476361][ T4882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.501401][ T4997] device hsr_slave_0 entered promiscuous mode [ 137.509674][ T4997] device hsr_slave_1 entered promiscuous mode [ 137.528762][ T4997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.546236][ T4997] Cannot create hsr debugfs directory [ 137.565953][ T5002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.575804][ T5002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.603538][ T5002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.617130][ T4882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.632591][ T4782] device veth0_vlan entered promiscuous mode [ 137.714017][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.726785][ T936] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.735264][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.751132][ T4782] device veth1_vlan entered promiscuous mode [ 137.802085][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.810450][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.819193][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.887930][ T5002] device hsr_slave_0 entered promiscuous mode [ 137.900036][ T5002] device hsr_slave_1 entered promiscuous mode [ 137.923043][ T5002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.936901][ T5002] Cannot create hsr debugfs directory [ 137.966945][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 138.030448][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 138.048510][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 138.063404][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.091234][ T4782] device veth0_macvtap entered promiscuous mode [ 138.098318][ T936] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.125640][ T936] usb 3-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 138.143347][ T936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.241368][ T3930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.300641][ T4782] device veth1_macvtap entered promiscuous mode [ 138.319095][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 138.342031][ T936] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 138.369325][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 138.387958][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.419753][ T936] usb 3-1: Product: syz [ 138.427531][ T936] usb 3-1: Manufacturer: syz [ 138.432333][ T936] usb 3-1: SerialNumber: syz [ 138.450099][ T936] usb 3-1: config 0 descriptor?? [ 138.493703][ T3930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.514656][ T936] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 138.604619][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.630750][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.656409][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.668803][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.679833][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.690530][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.700725][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.726744][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.750120][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.816177][ T3930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.857429][ T4882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.866282][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.880311][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.956237][ T3930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.017175][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.040750][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.056046][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.075364][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.085912][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.106872][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.119124][ T4782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.140668][ T4782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.177132][ T3563] Bluetooth: hci0: command tx timeout [ 139.192277][ T4782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.224893][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.252314][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.315135][ T4882] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.335067][ T4782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.347166][ T3563] Bluetooth: hci3: command tx timeout [ 139.357352][ T4782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.366064][ T4782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.374979][ T4782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.401463][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.423572][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.470801][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.487676][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.501763][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.510031][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.523488][ T3556] usb 3-1: USB disconnect, device number 8 [ 139.588166][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.601541][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.615543][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.626153][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.633329][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.653478][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.667305][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.753597][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.764237][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.786136][ T4882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.803889][ T4882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.827637][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.836167][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.848649][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.858702][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.867674][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.875954][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.884551][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.900966][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.024499][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.045365][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.047146][ T3556] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 140.087774][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.153462][ T3647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.189959][ T3647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.393385][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.517061][ T3556] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 140.553421][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.566598][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.581017][ T4882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.697303][ T3556] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.726744][ T3556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.745499][ T3556] usb 3-1: Product: ␁ [ 140.770949][ T3556] usb 3-1: Manufacturer: 〉 [ 140.788750][ T3556] usb 3-1: SerialNumber: 壚霣ઃ쮀좣鞛冐ñ엙ᜑ嗆胮輯交丳颽➻ͫ㥍넌똕穅䠦諡詁⌊ꔨ뺏眗㐙ℜﵞ仸繀쀿잒췢렜뽬튜쮱픵蜫箳᧡蠲虌銞쉴㻁댧ᄦ褘䞇ꉼꕃƒ魃鹠ἷŞᄃǃ굥過韂塌횫⼳돝梪ꄖ [ 140.933397][ T5148] loop0: detected capacity change from 0 to 2048 [ 141.063487][ T5148] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.077138][ T5148] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff) [ 141.254060][ T5162] fs-verity: sha512 using implementation "sha512-avx2" [ 141.267506][ T3563] Bluetooth: hci0: command tx timeout [ 141.278793][ T3556] cdc_ncm 3-1:1.0: bind() failure [ 141.297554][ T5148] loop0: detected capacity change from 2048 to 2047 [ 141.309915][ T3556] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 141.343674][ T3556] cdc_ncm 3-1:1.1: bind() failure [ 141.355621][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.359499][ T5162] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.432: bg 0: block 32714: padding at end of block bitmap is not set [ 141.374794][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.409820][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.411333][ T3556] usb 3-1: USB disconnect, device number 9 [ 141.419754][ T3563] Bluetooth: hci3: command tx timeout [ 141.444758][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.453795][ T5162] EXT4-fs error (device loop0): ext4_mb_discard_group_preallocations:4951: comm syz.0.432: Error -117 reading block bitmap for 0 [ 141.454233][ T5162] EXT4-fs error (device loop0): ext4_mb_discard_group_preallocations:4951: comm syz.0.432: Error -117 reading block bitmap for 0 [ 141.472268][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.502629][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.565157][ T5162] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -28 [ 141.592248][ T4882] device veth0_vlan entered promiscuous mode [ 141.629456][ T4782] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /2/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=33554432, rec_len=0, size=4096 fake=0 [ 141.639972][ T5002] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.710286][ T4782] EXT4-fs (loop0): unmounting filesystem. [ 141.783650][ T4882] device veth1_vlan entered promiscuous mode [ 141.803222][ T5002] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 141.815547][ T5002] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 141.870236][ T5002] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 141.960355][ T4997] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.001650][ T4997] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.031864][ T4997] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.041004][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.058282][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.241030][ T4882] device veth0_macvtap entered promiscuous mode [ 142.258172][ T4997] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.395522][ T4882] device veth1_macvtap entered promiscuous mode [ 142.589727][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.650501][ T3561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 142.657681][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.672035][ T3557] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 142.685729][ T3557] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 142.691418][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.714774][ T3557] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 142.725921][ T3557] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 142.736123][ T3557] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.766865][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.801233][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.824116][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.834773][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.847586][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.861891][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.886110][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.898725][ T4882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.933680][ T5002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.994840][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.009429][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.028036][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.039598][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.054534][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.085266][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.115175][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.126801][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.141188][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.162887][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.182435][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.197547][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.210952][ T4882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.224844][ T4882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.237664][ T4882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.343089][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.352145][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.364467][ T4882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.373783][ T4882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.384690][ T4882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.395336][ T4882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.422320][ T5002] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.442440][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.456036][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.545853][ T4997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.561347][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.574582][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.585795][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.595933][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.610295][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.653774][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.664516][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.680375][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.691137][ T936] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.698238][ T936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.763613][ T4997] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.793302][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.801827][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.810596][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.820796][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.839439][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.848344][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.856899][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.857025][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 143.863964][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.898005][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.907087][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.915867][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.924916][ T936] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.932051][ T936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.984917][ T3647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.005794][ T14] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.018810][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.027547][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.029757][ T3647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.046274][ T14] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.046596][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.063604][ T14] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.070566][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.086225][ T14] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.088446][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.095923][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.111847][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.124008][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.133000][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.142713][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.152801][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.163923][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.196188][ T5002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.210620][ T5002] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.232087][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.240901][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.250085][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.258510][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.267205][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.275559][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.284260][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.292569][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.301706][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.310127][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.318653][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.335964][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.367051][ T14] usb 3-1: GET_CAPABILITIES returned 0 [ 144.373539][ T14] usbtmc 3-1:16.0: can't read capabilities [ 144.472973][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.482103][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.527056][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.590402][ T14] usb 3-1: USB disconnect, device number 10 [ 144.629001][ T3930] device hsr_slave_0 left promiscuous mode [ 144.677584][ T3930] device hsr_slave_1 left promiscuous mode [ 144.692514][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.704361][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.737565][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.745517][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.756234][ T3930] device bridge_slave_1 left promiscuous mode [ 144.767815][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.776645][ T3930] device bridge_slave_0 left promiscuous mode [ 144.786613][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.789449][ T3557] Bluetooth: hci1: command tx timeout [ 144.832070][ T3930] device hsr_slave_0 left promiscuous mode [ 144.847964][ T3930] device hsr_slave_1 left promiscuous mode [ 144.854694][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.877565][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.888582][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.896113][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.910819][ T3930] device bridge_slave_1 left promiscuous mode [ 144.926883][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.940850][ T3930] device bridge_slave_0 left promiscuous mode [ 144.956869][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.972823][ T3930] device hsr_slave_0 left promiscuous mode [ 144.988474][ T3930] device hsr_slave_1 left promiscuous mode [ 144.995153][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.012776][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.024789][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.037025][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.045774][ T3930] device bridge_slave_1 left promiscuous mode [ 145.052798][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.063242][ T3930] device bridge_slave_0 left promiscuous mode [ 145.071091][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.208472][ T5217] loop4: detected capacity change from 0 to 40427 [ 145.223086][ T3930] device veth1_macvtap left promiscuous mode [ 145.232515][ T3930] device veth0_macvtap left promiscuous mode [ 145.248311][ T5217] F2FS-fs (loop4): invalid crc value [ 145.256284][ T3930] device veth1_vlan left promiscuous mode [ 145.288007][ T3930] device veth0_vlan left promiscuous mode [ 145.290310][ T5217] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.308538][ T3930] device veth1_macvtap left promiscuous mode [ 145.315684][ T3930] device veth0_macvtap left promiscuous mode [ 145.335735][ T3930] device veth1_vlan left promiscuous mode [ 145.354039][ T3930] device veth0_vlan left promiscuous mode [ 145.379106][ T5217] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 145.379175][ T3930] device veth1_macvtap left promiscuous mode [ 145.417514][ T3930] device veth0_macvtap left promiscuous mode [ 145.434984][ T5217] syz.4.387: attempt to access beyond end of device [ 145.434984][ T5217] loop4: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 145.436868][ T3930] device veth1_vlan left promiscuous mode [ 145.452451][ T5217] syz.4.387: attempt to access beyond end of device [ 145.452451][ T5217] loop4: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 145.462477][ T3930] device veth0_vlan left promiscuous mode [ 145.481827][ T5217] syz.4.387: attempt to access beyond end of device [ 145.481827][ T5217] loop4: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 145.505612][ T26] audit: type=1804 audit(1720533224.681:20): pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.387" name="/newroot/0/bus/file1" dev="loop4" ino=10 res=1 errno=0 [ 145.541496][ T5217] syz.4.387: attempt to access beyond end of device [ 145.541496][ T5217] loop4: rw=2049, sector=53400, nr_sectors = 112 limit=40427 [ 145.614581][ T4882] syz-executor: attempt to access beyond end of device [ 145.614581][ T4882] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.094988][ T3930] bond1 (unregistering): Released all slaves [ 146.425715][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 146.465594][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 146.502243][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.539200][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.861174][ T3930] bond0 (unregistering): Released all slaves [ 146.867258][ T3557] Bluetooth: hci1: command tx timeout [ 147.195591][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 147.232214][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 147.264340][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.297953][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.640428][ T3930] bond0 (unregistering): Released all slaves [ 148.001897][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 148.039880][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 148.082346][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.120866][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.450527][ T3930] bond0 (unregistering): Released all slaves [ 148.540288][ T5181] chnl_net:caif_netlink_parms(): no params data found [ 148.558357][ T5234] netlink: 'syz.2.451': attribute type 27 has an invalid length. [ 148.574579][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.607454][ T5234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.626475][ T5234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.831473][ T5002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.845791][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.865151][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.947037][ T3563] Bluetooth: hci1: command tx timeout [ 148.961854][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.969985][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.000986][ T4997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.069530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.106473][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.155292][ T5259] loop4: detected capacity change from 0 to 256 [ 149.296497][ T4997] device veth0_vlan entered promiscuous mode [ 149.354455][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.373733][ T5181] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.395049][ T5181] device bridge_slave_0 entered promiscuous mode [ 149.517260][ T26] audit: type=1326 audit(1720533228.671:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5258 comm="syz.4.458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe99a175bd9 code=0x0 [ 149.690983][ T5181] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.769608][ T5181] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.920764][ T5181] device bridge_slave_1 entered promiscuous mode [ 150.021223][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.031003][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.040004][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.067653][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.097920][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.117983][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.151626][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.167721][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.182255][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.194562][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.215133][ T4997] device veth1_vlan entered promiscuous mode [ 150.262790][ T5002] device veth0_vlan entered promiscuous mode [ 150.331209][ T5002] device veth1_vlan entered promiscuous mode [ 150.352559][ T5181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.370915][ T5181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.464361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.482815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.497470][ T4997] device veth0_macvtap entered promiscuous mode [ 150.517494][ T4997] device veth1_macvtap entered promiscuous mode [ 150.543843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.552799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.567428][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.572651][ T5260] loop2: detected capacity change from 0 to 40427 [ 150.576150][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.600333][ T5260] F2FS-fs (loop2): invalid crc value [ 150.605771][ T5268] netlink: 'syz.4.460': attribute type 27 has an invalid length. [ 150.629635][ T5260] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.645152][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.667238][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.679583][ T5268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.741122][ T5181] team0: Port device team_slave_0 added [ 150.748336][ T5260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 150.774477][ T5002] device veth0_macvtap entered promiscuous mode [ 150.813799][ T5181] team0: Port device team_slave_1 added [ 150.830032][ T5260] syz.2.457: attempt to access beyond end of device [ 150.830032][ T5260] loop2: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 150.853026][ T5002] device veth1_macvtap entered promiscuous mode [ 150.862233][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.886333][ T5274] loop4: detected capacity change from 0 to 2048 [ 150.886793][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.894939][ T5260] syz.2.457: attempt to access beyond end of device [ 150.894939][ T5260] loop2: rw=2049, sector=53384, nr_sectors = 8 limit=40427 [ 150.910492][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.925982][ T5260] syz.2.457: attempt to access beyond end of device [ 150.925982][ T5260] loop2: rw=2049, sector=53392, nr_sectors = 8 limit=40427 [ 150.937049][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.950779][ T5260] syz.2.457: attempt to access beyond end of device [ 150.950779][ T5260] loop2: rw=2049, sector=53400, nr_sectors = 112 limit=40427 [ 150.955862][ T26] audit: type=1804 audit(1720533230.131:22): pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.457" name="/newroot/106/bus/file1" dev="loop2" ino=10 res=1 errno=0 [ 150.977341][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.012215][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.027087][ T3563] Bluetooth: hci1: command tx timeout [ 151.040747][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.055176][ T3544] syz-executor: attempt to access beyond end of device [ 151.055176][ T3544] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.150850][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 151.166764][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.195666][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.224055][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.250270][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.264985][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.303738][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.318199][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.338771][ T4997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.364841][ T4997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.383757][ T5278] loop4: detected capacity change from 0 to 2048 [ 151.388180][ T4997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.403361][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.426914][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.442136][ T5278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.468467][ T5181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.506641][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.515385][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.544418][ T4997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.553473][ T4997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.563826][ T4997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.575535][ T4997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.699013][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.753035][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.763569][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.774325][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.784265][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.799430][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.833181][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.984005][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.122714][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.308192][ T5181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.321632][ T5181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.404986][ T5181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.459028][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.486351][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.508902][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.531583][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.550202][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.564358][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.578981][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.594088][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.607703][ T5002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.622461][ T5286] loop2: detected capacity change from 0 to 32768 [ 152.626987][ T5002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.632430][ T5286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.465 (5286) [ 152.670132][ T5002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.693717][ T5286] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.710249][ T5286] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 152.722187][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.730474][ T5286] BTRFS info (device loop2): disabling tree log [ 152.741708][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.750291][ T4882] EXT4-fs (loop4): unmounting filesystem. [ 152.774978][ T5002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.778605][ T5286] BTRFS info (device loop2): using free space tree [ 152.786659][ T5002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.836987][ T5002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.862258][ T5002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.863464][ T5291] loop4: detected capacity change from 0 to 2048 [ 152.910155][ T5291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.921577][ T5286] BTRFS info (device loop2): enabling ssd optimizations [ 152.946909][ T5291] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff) [ 152.991494][ T26] audit: type=1800 audit(1720533232.171:23): pid=5286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.465" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 153.116551][ T5181] device hsr_slave_0 entered promiscuous mode [ 153.134295][ T5181] device hsr_slave_1 entered promiscuous mode [ 153.147111][ T5291] loop4: detected capacity change from 2048 to 2047 [ 153.245886][ T5313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.466: bg 0: block 32714: padding at end of block bitmap is not set [ 153.300577][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.324091][ T5313] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:4951: comm syz.4.466: Error -117 reading block bitmap for 0 [ 153.338197][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.377317][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.384724][ T5313] EXT4-fs error (device loop4): ext4_mb_discard_group_preallocations:4951: comm syz.4.466: Error -117 reading block bitmap for 0 [ 153.401971][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.406140][ T3544] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.429915][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.438004][ T5313] fs-verity (loop4, inode 13): ext4_end_enable_verity() failed with err -28 [ 153.461668][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.524636][ T4882] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /10/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=33554432, rec_len=0, size=4096 fake=0 [ 153.555363][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.591506][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.655969][ T4882] EXT4-fs (loop4): unmounting filesystem. [ 153.722580][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.762373][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.786806][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.885133][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.050714][ T5181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.329150][ T5181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.492568][ T5181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.701253][ T5181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.758424][ T5329] loop3: detected capacity change from 0 to 1024 [ 154.874654][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 154.929240][ T5316] loop1: detected capacity change from 0 to 32768 [ 154.957171][ T5316] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.418 (5316) [ 154.963895][ T3557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.993371][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.004685][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.019365][ T3557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.031196][ T5002] EXT4-fs (loop3): unmounting filesystem. [ 155.037642][ T5316] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.037694][ T3557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.058649][ T3557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.116834][ T5316] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 155.125500][ T5316] BTRFS info (device loop1): enabling auto defrag [ 155.151510][ T5316] BTRFS info (device loop1): doing ref verification [ 155.158418][ T5316] BTRFS info (device loop1): max_inline at 0 [ 155.165022][ T5316] BTRFS info (device loop1): force clearing of disk cache [ 155.172570][ T5316] BTRFS info (device loop1): turning on sync discard [ 155.206472][ T5181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.228858][ T5181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.246844][ T5316] BTRFS info (device loop1): setting nodatacow, compression disabled [ 155.255050][ T5316] BTRFS info (device loop1): using free space tree [ 155.285860][ T5181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.318994][ T5181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.610414][ T5316] BTRFS info (device loop1): enabling ssd optimizations [ 155.681441][ T5316] BTRFS info (device loop1): rebuilding free space tree [ 155.717382][ T5181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.773551][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 155.823672][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.833675][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.846625][ T5181] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.888946][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.904350][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.930598][ T26] audit: type=1804 audit(1720533235.111:24): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.418" name="/newroot/0/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 155.972822][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.980055][ T3819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.994072][ T26] audit: type=1804 audit(1720533235.121:25): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.418" name="/newroot/0/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 156.080196][ T4997] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 156.101606][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.117598][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.139142][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.167366][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.174725][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.197147][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.206204][ T5336] loop3: detected capacity change from 0 to 32768 [ 156.214590][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.224324][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.259650][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.289274][ T5336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.475 (5336) [ 156.317247][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.325442][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.335478][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.345932][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.356616][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.374988][ T5181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.395912][ T5336] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 156.401198][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.426894][ T5336] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 156.435737][ T5336] BTRFS info (device loop3): disabling tree log [ 156.442529][ T5336] BTRFS info (device loop3): using free space tree [ 156.480144][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.497737][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.510408][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.535732][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.636810][ T3596] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.638014][ T5333] device bridge_slave_0 entered promiscuous mode [ 156.680361][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.689009][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.699977][ T5333] device bridge_slave_1 entered promiscuous mode [ 156.770879][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.804353][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.158479][ T3557] Bluetooth: hci2: command tx timeout [ 157.265158][ T5336] BTRFS info (device loop3): enabling ssd optimizations [ 157.595695][ T3596] usb 3-1: Using ep0 maxpacket: 16 [ 157.714988][ T5333] team0: Port device team_slave_0 added [ 157.723190][ T26] audit: type=1800 audit(1720533236.891:26): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.475" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 157.761624][ T5399] loop1: detected capacity change from 0 to 256 [ 157.766988][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.802279][ T5333] team0: Port device team_slave_1 added [ 157.822023][ T3596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.862841][ T3596] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.879632][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.897613][ T3596] usb 3-1: config 0 descriptor?? [ 157.984788][ T5002] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.179437][ T26] audit: type=1326 audit(1720533237.361:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5398 comm="syz.1.482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5922575bd9 code=0x0 [ 158.787419][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.806867][ T3596] usbhid 3-1:0.0: can't add hid device: -71 [ 158.825703][ T3596] usbhid: probe of 3-1:0.0 failed with error -71 [ 158.846964][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.906945][ T3596] usb 3-1: USB disconnect, device number 11 [ 158.928720][ T5409] loop3: detected capacity change from 0 to 512 [ 158.968593][ T5409] EXT4-fs: Ignoring removed i_version option [ 158.974624][ T5409] EXT4-fs: Ignoring removed nobh option [ 158.994968][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.084846][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.188628][ T5409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 159.226483][ T5409] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.240340][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.258076][ T3557] Bluetooth: hci2: command tx timeout [ 159.283977][ T5409] EXT4-fs (loop3): 1 truncate cleaned up [ 159.290706][ T5409] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 159.348752][ T5417] loop1: detected capacity change from 0 to 256 [ 159.724059][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.954936][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.987446][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.023481][ T5181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.037571][ T5409] UBIFS error (pid: 5409): cannot open "./file1", error -22 [ 160.119254][ T5002] EXT4-fs (loop3): unmounting filesystem. [ 160.231939][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.250865][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.286348][ T5333] device hsr_slave_0 entered promiscuous mode [ 160.300391][ T5333] device hsr_slave_1 entered promiscuous mode [ 160.313092][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.321604][ T5333] Cannot create hsr debugfs directory [ 160.384070][ T5181] device veth0_vlan entered promiscuous mode [ 160.437421][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.456344][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.486096][ T5181] device veth1_vlan entered promiscuous mode [ 160.493848][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.502674][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.510967][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.546850][ T4817] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.690468][ T3930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.702821][ T3563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.712803][ T3563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.722290][ T3563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.731463][ T3563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.743008][ T3563] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.751806][ T3563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.789527][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.798401][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.807930][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.821441][ T5181] device veth0_macvtap entered promiscuous mode [ 160.930922][ T3930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.956580][ T5433] loop2: detected capacity change from 0 to 256 [ 160.987336][ T4817] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 160.988259][ T5181] device veth1_macvtap entered promiscuous mode [ 161.157181][ T4817] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.166258][ T4817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.179059][ T4817] usb 4-1: Product: ␁ [ 161.183272][ T4817] usb 4-1: Manufacturer: 〉 [ 161.188392][ T4817] usb 4-1: SerialNumber: 壚霣ઃ쮀좣鞛冐ñ엙ᜑ嗆胮輯交丳颽➻ͫ㥍넌똕穅䠦諡詁⌊ꔨ뺏眗㐙ℜﵞ仸繀쀿잒췢렜뽬튜쮱픵蜫箳᧡蠲虌銞쉴㻁댧ᄦ褘䞇ꉼꕃƒ魃鹠ἷŞᄃǃ굥過韂塌횫⼳돝梪ꄖ [ 161.337401][ T3563] Bluetooth: hci2: command tx timeout [ 161.345807][ T26] audit: type=1326 audit(1720533240.471:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5432 comm="syz.2.493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7f75bd9 code=0x0 [ 161.923132][ T3930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.944899][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.958457][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.970526][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.981941][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.992729][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.004297][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.015854][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.027985][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.038774][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.051386][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.068970][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.110299][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.135736][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.148232][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.161067][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.187524][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.202773][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.213900][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.227971][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.241137][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.252151][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.262712][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.273338][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.283844][ T5181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.294402][ T5181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.305562][ T5181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.326238][ T3930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.354337][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 162.369997][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 162.391215][ T4817] cdc_ncm 4-1:1.0: bind() failure [ 162.400151][ T4817] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 162.409847][ T5181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.418913][ T5181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.427943][ T4817] cdc_ncm 4-1:1.1: bind() failure [ 162.429887][ T5181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.446136][ T4817] usb 4-1: USB disconnect, device number 6 [ 162.446994][ T5181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.546139][ T5333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.636998][ T5333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.711853][ T5333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.746755][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 162.777470][ T3557] Bluetooth: hci0: command tx timeout [ 162.795210][ T5333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.812972][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.821190][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.853423][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.990591][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 162.999566][ T5428] chnl_net:caif_netlink_parms(): no params data found [ 163.049215][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.065001][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.129229][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.142821][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.158198][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 163.208970][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 163.227041][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.229246][ T5333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.236584][ T14] usb 3-1: config 0 descriptor?? [ 163.274701][ T5333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.289221][ T5333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.300647][ T5333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.424919][ T3557] Bluetooth: hci2: command tx timeout [ 163.631967][ T5457] loop3: detected capacity change from 0 to 256 [ 164.589664][ T5466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'. [ 164.600891][ T5466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'. [ 164.867131][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 164.884891][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 164.907984][ T3563] Bluetooth: hci0: command tx timeout [ 165.107909][ T14] usb 3-1: USB disconnect, device number 12 [ 165.714343][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.727656][ T5484] loop2: detected capacity change from 0 to 256 [ 165.734212][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.817824][ T3563] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 165.847431][ T5428] device bridge_slave_0 entered promiscuous mode [ 165.892422][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.934865][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.957872][ T5428] device bridge_slave_1 entered promiscuous mode [ 166.097572][ T26] audit: type=1326 audit(1720533245.271:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.2.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4e7f75bd9 code=0x0 [ 166.729427][ T5481] sctp: failed to load transform for md5: -2 [ 166.891608][ T5428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.945564][ T3563] Bluetooth: hci0: command tx timeout [ 166.971457][ T5428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.075793][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.244619][ T3557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.265187][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.276374][ T3561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.286056][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.299144][ T3561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.309607][ T3561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.328963][ T4806] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 167.485980][ T5507] loop0: detected capacity change from 0 to 256 [ 167.621400][ T3561] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 167.633164][ T3561] Bluetooth: hci1: Injecting HCI hardware error event [ 167.647211][ T3561] Bluetooth: hci1: hardware error 0x00 [ 168.135827][ T4806] usb 3-1: Using ep0 maxpacket: 8 [ 168.155965][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.168492][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.181990][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.209292][ T5428] team0: Port device team_slave_0 added [ 168.256937][ T4806] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.270538][ T4806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.291719][ T4806] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.308121][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.314340][ T4806] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.329516][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.329975][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.344798][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.353144][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.361998][ T5403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.372300][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.374146][ T4806] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.379418][ T5403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.389807][ T5428] team0: Port device team_slave_1 added [ 168.407217][ T4806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.528950][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.539794][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.554328][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.686980][ T4806] usb 3-1: GET_CAPABILITIES returned 0 [ 168.692953][ T4806] usbtmc 3-1:16.0: can't read capabilities [ 168.699812][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.707752][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.747934][ T5428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.778446][ T5428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.786869][ T5428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.814736][ T5428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.835776][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.848259][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.858072][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.868022][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.947267][ T14] usb 3-1: USB disconnect, device number 13 [ 168.980773][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.988817][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.997628][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.017377][ T3563] Bluetooth: hci0: command tx timeout [ 169.074395][ T5333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.093246][ T5333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.102146][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.125265][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.189405][ T5428] device hsr_slave_0 entered promiscuous mode [ 169.196534][ T5428] device hsr_slave_1 entered promiscuous mode [ 169.203726][ T5428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.212553][ T5428] Cannot create hsr debugfs directory [ 169.382119][ T5504] chnl_net:caif_netlink_parms(): no params data found [ 169.417374][ T3557] Bluetooth: hci3: command tx timeout [ 169.638007][ T5537] random: crng reseeded on system resumption [ 169.818383][ T3561] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 169.841896][ T3561] [ 169.844264][ T3561] ============================================ [ 169.850415][ T3561] WARNING: possible recursive locking detected [ 169.856569][ T3561] 6.1.97-syzkaller #0 Not tainted [ 169.861592][ T3561] -------------------------------------------- [ 169.868003][ T3561] kworker/u5:6/3561 is trying to acquire lock: [ 169.874146][ T3561] ffff88801466f138 ((wq_completion)hci1){+.+.}-{0:0}, at: __flush_workqueue+0x157/0x1610 [ 169.883987][ T3561] [ 169.883987][ T3561] but task is already holding lock: [ 169.891345][ T3561] ffff88801466f138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 169.901197][ T3561] [ 169.901197][ T3561] other info that might help us debug this: [ 169.909449][ T3561] Possible unsafe locking scenario: [ 169.909449][ T3561] [ 169.917956][ T3561] CPU0 [ 169.922732][ T3561] ---- [ 169.928943][ T3561] lock((wq_completion)hci1); [ 169.935908][ T3561] lock((wq_completion)hci1); [ 169.941216][ T3561] [ 169.941216][ T3561] *** DEADLOCK *** [ 169.941216][ T3561] [ 169.946507][ T5537] PM: hibernation: Basic memory bitmaps created [ 169.950936][ T3561] May be due to missing lock nesting notation [ 169.950936][ T3561] [ 169.950947][ T3561] 2 locks held by kworker/u5:6/3561: [ 169.950960][ T3561] #0: ffff88801466f138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 169.951010][ T3561] #1: ffffc90003fbfd20 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 169.951050][ T3561] [ 169.951050][ T3561] stack backtrace: [ 169.951068][ T3561] CPU: 1 PID: 3561 Comm: kworker/u5:6 Not tainted 6.1.97-syzkaller #0 [ 169.951084][ T3561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.951095][ T3561] Workqueue: hci1 hci_error_reset [ 169.951117][ T3561] Call Trace: [ 169.951123][ T3561] [ 169.951129][ T3561] dump_stack_lvl+0x1e3/0x2cb [ 170.024085][ T5535] PM: hibernation: Basic memory bitmaps freed [ 170.028803][ T3561] ? nf_tcp_handle_invalid+0x642/0x642 [ 170.028832][ T3561] ? panic+0x764/0x764 [ 170.028851][ T3561] validate_chain+0x4711/0x5950 [ 170.028881][ T3561] ? reacquire_held_locks+0x660/0x660 [ 170.028902][ T3561] ? rcu_read_lock_sched_held+0x89/0x130 [ 170.071410][ T3561] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 170.077944][ T3561] ? reacquire_held_locks+0x660/0x660 [ 170.083580][ T3561] ? rcu_is_watching+0x11/0xb0 [ 170.088605][ T3561] ? __update_load_avg_cfs_rq+0x6cc/0xbe0 [ 170.094319][ T3561] ? cpufreq_update_util+0x94/0x250 [ 170.099598][ T3561] ? update_load_avg+0xf61/0x1540 [ 170.104839][ T3561] ? mark_lock+0x9a/0x340 [ 170.109628][ T3561] __lock_acquire+0x125b/0x1f80 [ 170.115704][ T3561] lock_acquire+0x1f8/0x5a0 [ 170.120825][ T3561] ? __flush_workqueue+0x157/0x1610 [ 170.127763][ T3561] ? read_lock_is_recursive+0x10/0x10 [ 170.133141][ T3561] ? lockdep_softirqs_off+0x420/0x420 [ 170.138519][ T3561] ? __init_swait_queue_head+0xaa/0x140 [ 170.144166][ T3561] ? __flush_workqueue+0x157/0x1610 [ 170.149369][ T3561] __flush_workqueue+0x170/0x1610 [ 170.154483][ T3561] ? __flush_workqueue+0x157/0x1610 [ 170.159863][ T3561] ? trace_contention_end+0x61/0x170 [ 170.165236][ T3561] ? rcu_work_rcufn+0x140/0x140 [ 170.170236][ T3561] ? mark_lock+0x9a/0x340 [ 170.174595][ T3561] drain_workqueue+0xc5/0x390 [ 170.179985][ T3561] destroy_workqueue+0x7b/0xae0 [ 170.187230][ T3561] ? _raw_spin_unlock_irq+0x1f/0x40 [ 170.193853][ T3561] ? lockdep_hardirqs_on+0x94/0x130 [ 170.199047][ T3561] hci_release_dev+0x165/0x16b0 [ 170.203881][ T3561] ? devres_release_all+0x1e1/0x240 [ 170.209067][ T3561] ? _raw_spin_unlock+0x40/0x40 [ 170.213900][ T3561] ? hci_unregister_suspend_notifier+0x90/0x90 [ 170.220041][ T3561] ? devres_release+0x90/0x90 [ 170.224700][ T3561] ? hci_sock_dev_event+0x2ee/0x5e0 [ 170.229882][ T3561] bt_host_release+0x7f/0x90 [ 170.234452][ T3561] ? bt_link_release+0x20/0x20 [ 170.239202][ T3561] device_release+0x91/0x1c0 [ 170.243783][ T3561] kobject_put+0x224/0x460 [ 170.248189][ T3561] ? process_one_work+0x7a9/0x11d0 [ 170.253279][ T3561] process_one_work+0x8a9/0x11d0 [ 170.258203][ T3561] ? worker_detach_from_pool+0x260/0x260 [ 170.263830][ T3561] ? _raw_spin_lock_irqsave+0x120/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.269617][ T3561] ? kthread_data+0x4e/0xc0 [ 170.275101][ T3561] ? wq_worker_running+0x97/0x190 [ 170.280840][ T3561] worker_thread+0xa47/0x1200 [ 170.288015][ T3561] ? __sched_text_start+0x8/0x8 [ 170.295470][ T3561] kthread+0x28d/0x320 [ 170.300417][ T3561] ? worker_clr_flags+0x190/0x190 [ 170.306058][ T3561] ? kthread_blkcg+0xd0/0xd0 [ 170.311248][ T3561] ret_from_fork+0x1f/0x30 [ 170.315661][ T3561] [ 170.334279][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.363328][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.748168][ T3930] device hsr_slave_0 left promiscuous mode [ 170.763254][ T3930] device hsr_slave_1 left promiscuous mode [ 170.769794][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.786755][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.795697][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.809940][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.820633][ T3930] device bridge_slave_1 left promiscuous mode [ 170.831315][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.850734][ T3930] device bridge_slave_0 left promiscuous mode [ 170.859198][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.877930][ T3930] device hsr_slave_0 left promiscuous mode [ 170.884461][ T3930] device hsr_slave_1 left promiscuous mode [ 170.896359][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.904961][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.917717][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.926155][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.934199][ T3930] device bridge_slave_1 left promiscuous mode [ 170.941476][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.949871][ T3930] device bridge_slave_0 left promiscuous mode [ 170.956044][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.967304][ T3930] device hsr_slave_0 left promiscuous mode [ 170.973553][ T3930] device hsr_slave_1 left promiscuous mode [ 170.980230][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.987949][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.995647][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.003484][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.012208][ T3930] device bridge_slave_1 left promiscuous mode [ 171.018698][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.027289][ T3930] device bridge_slave_0 left promiscuous mode [ 171.033478][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.047266][ T3930] device veth1_macvtap left promiscuous mode [ 171.053372][ T3930] device veth0_macvtap left promiscuous mode [ 171.059873][ T3930] device veth1_vlan left promiscuous mode [ 171.066181][ T3930] device veth0_vlan left promiscuous mode [ 171.076375][ T3930] device veth1_macvtap left promiscuous mode [ 171.082687][ T3930] device veth0_macvtap left promiscuous mode [ 171.089332][ T3930] device veth1_vlan left promiscuous mode [ 171.095072][ T3930] device veth0_vlan left promiscuous mode [ 171.102054][ T3930] device veth1_macvtap left promiscuous mode [ 171.108241][ T3930] device veth0_macvtap left promiscuous mode [ 171.114266][ T3930] device veth1_vlan left promiscuous mode [ 171.120122][ T3930] device veth0_vlan left promiscuous mode [ 171.330700][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 171.354369][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 171.375978][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.400830][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.469499][ T3930] bond0 (unregistering): Released all slaves [ 171.586974][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 171.608186][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 171.633238][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.658754][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.717446][ T3930] bond0 (unregistering): Released all slaves [ 171.813683][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 171.836575][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 171.861126][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.891027][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.952333][ T3930] bond0 (unregistering): Released all slaves [ 173.251859][ T3930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.313143][ T3930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.370836][ T3930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.410543][ T3930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.496369][ T3930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.570911][ T3930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.611409][ T3930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.671730][ T3930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.778260][ T3930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.820409][ T3930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.860449][ T3930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.911349][ T3930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.132903][ T3930] device hsr_slave_0 left promiscuous mode [ 175.141528][ T3930] device hsr_slave_1 left promiscuous mode [ 175.148134][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.155642][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.163703][ T3930] device bridge_slave_1 left promiscuous mode [ 175.169888][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.178021][ T3930] device bridge_slave_0 left promiscuous mode [ 175.184156][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.193872][ T3930] device hsr_slave_0 left promiscuous mode [ 175.200755][ T3930] device hsr_slave_1 left promiscuous mode [ 175.207850][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.216372][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.224104][ T3930] device bridge_slave_1 left promiscuous mode [ 175.232459][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.240589][ T3930] device bridge_slave_0 left promiscuous mode [ 175.246995][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.257144][ T3930] device hsr_slave_0 left promiscuous mode [ 175.263989][ T3930] device hsr_slave_1 left promiscuous mode [ 175.270672][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.284336][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.294964][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.310453][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.318287][ T3930] device bridge_slave_1 left promiscuous mode [ 175.324438][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.332293][ T3930] device bridge_slave_0 left promiscuous mode [ 175.339079][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.349900][ T3930] device hsr_slave_0 left promiscuous mode [ 175.356609][ T3930] device hsr_slave_1 left promiscuous mode [ 175.363343][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.370854][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.378535][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.385916][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.393579][ T3930] device bridge_slave_1 left promiscuous mode [ 175.400413][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.412418][ T3930] device bridge_slave_0 left promiscuous mode [ 175.421913][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.433054][ T3930] device hsr_slave_0 left promiscuous mode [ 175.439216][ T3930] device hsr_slave_1 left promiscuous mode [ 175.445283][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.452724][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.460181][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.467625][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.475228][ T3930] device bridge_slave_1 left promiscuous mode [ 175.481517][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.489422][ T3930] device bridge_slave_0 left promiscuous mode [ 175.495536][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.506895][ T3930] device veth1_macvtap left promiscuous mode [ 175.512889][ T3930] device veth0_macvtap left promiscuous mode [ 175.519064][ T3930] device veth1_vlan left promiscuous mode [ 175.524810][ T3930] device veth0_vlan left promiscuous mode [ 175.531414][ T3930] device veth1_macvtap left promiscuous mode [ 175.537712][ T3930] device veth0_macvtap left promiscuous mode [ 175.543728][ T3930] device veth1_vlan left promiscuous mode [ 175.549611][ T3930] device veth0_vlan left promiscuous mode [ 175.555870][ T3930] device veth1_macvtap left promiscuous mode [ 175.562058][ T3930] device veth0_macvtap left promiscuous mode [ 175.568357][ T3930] device veth1_vlan left promiscuous mode [ 175.574077][ T3930] device veth0_vlan left promiscuous mode [ 175.784118][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 175.804924][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 175.828019][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.850019][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.891775][ T3930] bond0 (unregistering): Released all slaves [ 175.974695][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 175.984339][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 175.995731][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.016726][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.049634][ T3930] bond0 (unregistering): Released all slaves [ 176.152796][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 176.171580][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 176.191206][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.210536][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.251820][ T3930] bond0 (unregistering): Released all slaves [ 176.335658][ T3930] bond0 (unregistering): Released all slaves [ 176.451471][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 176.472351][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 176.492096][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.513070][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.555319][ T3930] bond0 (unregistering): Released all slaves [ 176.670033][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 176.689913][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 176.712547][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.735677][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.774763][ T3930] bond0 (unregistering): Released all slaves