last executing test programs: 3m36.613637213s ago: executing program 32 (id=13): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m16.172074469s ago: executing program 33 (id=124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00bc78f72200e6b3bc31a70c81525029e4320000000000"], 0x1, 0x19d, &(0x7f0000000000)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000001010040"]) 3m7.53072953s ago: executing program 34 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x19, 0x542c, 0xd0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'bond_slave_0\x00', 'vlan1\x00'}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80000, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 2m8.825312646s ago: executing program 3 (id=485): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}], [], 0x6b}}) 2m8.578030317s ago: executing program 3 (id=488): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m8.214268328s ago: executing program 3 (id=489): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000c00)={0xb0000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) epoll_wait(r0, &(0x7f0000000180)=[{}], 0x1, 0x0) 2m7.713730601s ago: executing program 3 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m6.942996134s ago: executing program 3 (id=500): r0 = socket(0x22, 0x2, 0x21) io_uring_setup(0x705a, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) close_range(r0, 0xffffffffffffffff, 0x0) 2m5.573330681s ago: executing program 35 (id=505): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 2m5.383726562s ago: executing program 3 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x2000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfe}, {}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfc, 0x80}, {0x0, 0x0, 0x0, 0x38, 0x2}, {0x0, 0x1000, 0x4}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x6}, {0x0, 0x80a0000, 0xf, 0x0, 0x0, 0x5, 0x0, 0x5, 0x2}, {0x0, 0xfffe}, {0x10000}, 0xddf8ffdb, 0x0, 0x4000, 0x140030, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}) 2m4.858641114s ago: executing program 36 (id=508): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'syzkaller1\x00', {0x2, 0x0, @broadcast}}) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.804128754s ago: executing program 37 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x2000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x8, 0xfe}, {}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfc, 0x80}, {0x0, 0x0, 0x0, 0x38, 0x2}, {0x0, 0x1000, 0x4}, {0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x6}, {0x0, 0x80a0000, 0xf, 0x0, 0x0, 0x5, 0x0, 0x5, 0x2}, {0x0, 0xfffe}, {0x10000}, 0xddf8ffdb, 0x0, 0x4000, 0x140030, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}) 1m54.267415804s ago: executing program 4 (id=537): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x48, 0x0, 0x1}, {0x6}]}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f0000000000)=ANY=[], 0x0) 1m53.971530845s ago: executing program 4 (id=538): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, 0x0) 1m53.805430986s ago: executing program 4 (id=539): r0 = syz_io_uring_setup(0x39, &(0x7f0000001800), &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 1m53.598083737s ago: executing program 4 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x3041008, 0x0) 1m53.387889968s ago: executing program 4 (id=542): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = dup(r0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="28000000040000000000000000f6"], 0x28) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x4000000053d2) 1m52.647626271s ago: executing program 4 (id=545): r0 = userfaultfd(0x80801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000d1b000/0x4000)=nil, &(0x7f0000264000/0x4000)=nil, 0x4000, 0x2}) 1m52.127055504s ago: executing program 38 (id=545): r0 = userfaultfd(0x80801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000d1b000/0x4000)=nil, &(0x7f0000264000/0x4000)=nil, 0x4000, 0x2}) 1m44.279757371s ago: executing program 8 (id=506): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2c08, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) 1m44.102147341s ago: executing program 8 (id=555): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xcd, &(0x7f0000000080), &(0x7f0000000180)=0x4) 1m43.891772602s ago: executing program 8 (id=556): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x4810, &(0x7f0000000400)={[{@nossd_spread}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x4}}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@usebackuproot}, {@ref_verify}, {@autodefrag}, {@enospc_debug}, {@notreelog}]}, 0x3, 0x5145, &(0x7f0000005140)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) fallocate(r0, 0x0, 0x0, 0x3df1) copy_file_range(r1, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x3df1, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x2) 1m40.900062227s ago: executing program 8 (id=561): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) ftruncate(r0, 0x4) 1m39.727764592s ago: executing program 8 (id=563): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fchdir(r0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x40000582) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x58) 1m39.071628015s ago: executing program 8 (id=566): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 1m38.646118807s ago: executing program 39 (id=566): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 47.334228109s ago: executing program 2 (id=835): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r0, 0x801, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) 46.92942643s ago: executing program 2 (id=837): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0xfff, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8, 0x3e, 0x0, 0x1, 0x0, 0x1}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 46.675903051s ago: executing program 2 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x3c}}, 0x0) 46.147605594s ago: executing program 2 (id=842): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 45.444595427s ago: executing program 2 (id=843): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x792, &(0x7f0000001a40)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x49, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x8, 0x0, 0x100000000}]}) 45.060099159s ago: executing program 0 (id=845): io_uring_setup(0x48ae, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x3, 0xffffffff}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xa000032a) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) 44.74575436s ago: executing program 0 (id=848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 44.535693032s ago: executing program 0 (id=850): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x3) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000005c0)=@abs={0x1}, 0x6e) pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) 44.273990843s ago: executing program 2 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x3, 0x0, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0xf00}, 0x0) 44.245707053s ago: executing program 0 (id=852): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x30000, 0x0, 0x41, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 43.537336646s ago: executing program 40 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x3, 0x0, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0xf00}, 0x0) 43.524994546s ago: executing program 0 (id=856): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 42.955663868s ago: executing program 0 (id=860): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 42.334689261s ago: executing program 41 (id=860): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 7.768364894s ago: executing program 9 (id=945): socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4(r0, &(0x7f0000000140)=@generic, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 6.734246298s ago: executing program 6 (id=950): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000019700)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 'team_slave_1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="bbc94aa173b9", 'veth1_to_team\x00'}}, 0x1e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.705163569s ago: executing program 1 (id=951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005b00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvfrom$inet_nvme(r1, &(0x7f00000003c0)=""/242, 0xf2, 0x0, 0x0, 0x0) 6.643989519s ago: executing program 9 (id=952): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) add_key(&(0x7f00000004c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0x11, 0x0, &(0x7f0000000000)) 6.636488099s ago: executing program 1 (id=953): madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 6.4718619s ago: executing program 1 (id=954): unshare(0x22020400) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xbc) 6.291052541s ago: executing program 9 (id=956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 6.122349902s ago: executing program 1 (id=957): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$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") r0 = open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) write$tcp_congestion(r0, &(0x7f0000000040)='yeah\x00', 0x5) 5.566797984s ago: executing program 6 (id=959): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.551122284s ago: executing program 7 (id=960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001a80)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000de6000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.410096045s ago: executing program 1 (id=961): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x17, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x6c}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xfdcb, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2400000021000100000100000000000081"], 0x24}}, 0x0) 5.260949695s ago: executing program 5 (id=962): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xbe}, &(0x7f0000000180)=0x8) 5.233207035s ago: executing program 6 (id=963): syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x89, &(0x7f0000000fc0)=@string={0x89, 0x3, "b44a774707234ae6b32d33e9c39baa6d508fb4df9c59d56464eaced71ae90b759e1aa1e7f1ffc66cf326802eb09a7968f90b38417dd21692e49842ec3f5780b65c4480fb7aacc3b30eb4e68a228b1ebf1df08dac2e62a615c94eee6de0ba611a5aed8789b5cc1795e1b1dc2beb58df2dbd248cc4c2da2c4464c9ba8617b351669f8528aef42375"}}]}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.094002556s ago: executing program 7 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=@updpolicy={0x254, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x5, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x1}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in=@local, 0x4e23, 0x8, 0x4e23, 0x3ff, 0xa, 0x80, 0xa0, 0x73}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@remote, {0xfffffffffffffff8, 0xf6, 0x1, 0x3124316a, 0x0, 0xfffffffffffffffe, 0x1, 0x1}, {0x1, 0x4, 0x7, 0x4}, {0xa, 0x2dd, 0x3}, 0x70bd2b, 0x34ff, 0xa, 0x3, 0x2, 0x24}}, @policy_type={0xa, 0x10, {0x1}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0xf}, @in6=@empty, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x80, 0x20, 0x3a}, {0x1000, 0x8, 0x9, 0x6c3, 0x36db, 0x3, 0x8}, {0x8, 0x0, 0x8, 0x10000}, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1}}]}, 0x254}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 5.023213487s ago: executing program 9 (id=965): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x7, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) 4.835964707s ago: executing program 5 (id=966): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e0000001ac1414aa0000000001000000ac1414aa"], 0x14) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 4.804907018s ago: executing program 1 (id=967): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 4.804308968s ago: executing program 9 (id=968): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.34552414s ago: executing program 42 (id=967): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 4.33999457s ago: executing program 5 (id=970): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000440)=ANY=[], 0x1, 0x63a, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000180)='./file1\x00', r1, &(0x7f0000000640)='./bus\x00', 0x0) unlink(&(0x7f00000003c0)='./bus\x00') 4.33942101s ago: executing program 7 (id=971): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$eJzs3V1vHFcZB/BnX7x+KU2jClUh4iJNobSU5j2B8taUCy4ACSSUaxK5bhVIASUB0SoirnKBuODlI8BNb7joFylfAfEBiBRzVQnKoLHPScbjddZp4p1dn99PcmaePTPeM/l7PLuemT0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvvj072IuPzr9MDhiM/EIKIfsVzXx6KeuZiXH0bEkdhsjuciYrAYUa+/+c8zEeci4qNDEfc2bq3WD5/ZYz/On7p5/ZPvf+cfv/vTnSM/ffMnH7Tbf/TZsx/+/nbE4R++9uEnt5/MtgMAAEApqqqqeult/tH0/r7fdacAgKnIx/8qyY+r1Wq1+onWf+zPVn/UhdZN1Xi3m0VErDfXqV8zOB0PAHNmPT7uugt0SP5FG0bEU113Aphpva47wL64t3FrtZfy7TWPB8e22vPfKbflv967f3/HbtNJ2teYTOvn604M4tld+rM8pT7Mkpx/v53/5a32UVpuv/Oflt3yH23d+lScnP+gnX/Ltvz/HBFzm39/bP6lyvkPHyX/9cEc7//yBwAAAADg4Mt//z/c8fnfxcfflD152PnfY1PqAwAAAAAAAAA8aY87/t99xv8DAACAmVW/V6/95dCDx3b7LLb68Uu9iKdbywOFSTfLrHTdDwAAAAAAAAAAAAAoyXDrGt5LvYiFiHh6ZaWqqvqrqV0/qsddf96Vvv1Qsq5/yQMAwJaPDrXu5e9FLEXEpfRZfwsrKytVtbS8Uq1Uy4v59exocalabryvzdP6scXRHl4QD0dV/c2WGus1TXq/PKm9/f3q5xpVgz10bDo6DBwAImLraHTPEemAqapnoutXOcwH+//BY/9nL7r+OQUAAAD2X1VVVS99nPfRdM6/33WnAIBpWMrH//Z5AbVarVar1QevbqrGu90sImK9uU79msFw/AAwZ9bj4667QIfkX7RhRBzpuhPATOt13QH2xb2NW6u9lG+veTxI47vna0G25b/e21wvrz9uOkn7GpNp/XzdiUE8u0t/nptSH2ZJzr/fzv/yVvsoLbff+U/LbvnX23m4g/50Lec/aOffcnDy74/Nv1Q5/+Ej5T+QPwAAAAAAzLD89//Dzv/mTQYAAAAAAACAuXNv49Zqvu81n////Jjles05938eGDn/3p7zd//vQZLz77fzb12QM2jM333jQf7/3ri1+sHNf30uT2c+/4XBqH7uhV5/MEzX/FQLb8XVuBZrcWrH8sNt7ad3tC9saz8zof3sjvZR3b6c20/EavwirsWb99sXJ1wYtTShvZrQnvMf2P+LlPMfNr7q/FdSe681rd19v79jv29Oxz3Pxb/998Wde9f03YnB/W1rqrfveAf92fw/eWoUv7qxdv3Eb67cvHn9dKTJtkfPRJo8YTn/hfSV83/pha32/Hu/ub/efX/0yPnPijsx3DX/Fxrz9fa+POW+dSHnP0pfOf98BBq//89z/rvv/6900B8AAAAAAAAAAAAAAAB4mKqqNm8RvRgRF9L9P13dmwkATNUffpBmqiTUarVarVYf2LqpGu/1ZhFL29e5EBG/HffNAIBZ9r+I+GfXnaAz8i9Y/ry/evqFrjsDTNWNd9/72ZVr19au3+i6JwAAAAAAAADAp5XH/zzWGP958zqg1rjR28Z/fSOOze34n/3RYHOs87RBz8fDx/8+Hg8f/3s44fkWJrSPJrQvTmhfmtA+9kaPhpz/8ynjnP/RtGEljf/6Ugf96VrO/3ga6znn/6XWcs38q7/Oc/79bfmfvPnOL0/eePe9V6++c+XttbfXfn761IVzZ8+fO3v+/Mm3rl5bO7X1b4c93l85/zz2tetAy5Lzz5nLvyw5/y+mWv5lyfm/mGr5lyXnn1/vyb8sOf/83kf+Zcn5v5xq+Zcl5//lVMu/LDn/V1It/7Lk/L+SavmXJef/aqrlX5ac/4lUy78sOf+TqZZ/WXL++QyX/MuS889XNsi/LDn/M6mWf1ly/mdTLf+y5PzPpVr+Zcn5n0+1/MuS87+QavmXJef/1VTLvyw5/6+lWv5lyfm/lmr5lyXn//VUy78sOf9vpFr+Zcn5fzPV8i9Lzv9bqZZ/WXL+3061/MuS83891fIvy4PP/zcz5Zn//D1iBrphxsy4ma5/MwEAAAAAAAAAAAAAbdO4nLjrbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd3cxcpX3GcDPftlrQ4IbCCHECWtjwMDi3fUXOMRgkpBS0qaUhLRpSY1jr40Tf9W7TgChshTaEgWpSO0FvWiaRGkUqa1AUaSmEo2QGqm9K1eJuIlaiQtLhcpBSaVUga3OnPd9d2Z2dmb9sXjOOb8fwn/vzJmZd86cmd1nrWcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZhs+Nv3nA1mW5f83/liXZZfmf1+T7cm/nNt5sVcIAAAAnK+3Gn/+w2XphD3LuFDTNv/2of/4/vz8/Hz2hTdPv/2X8/PpjLEsG1qdZY3zon//5S/mm7cJnspGBwabvh7scfNDPc4f7nH+SI/zV/U4f3WP80d7nL9oByyypvh9TOPKNjX+uq7YpdkV2UjjvE0dLvXUwOrBwfi7nIaBxmXmRw5mh7Mj2XQ2uegyA43/suylDflt3ZPF2xpsuq31WZad+dnj++MaBsI+3pS13FhD82P3xl3Z2Js/e3z/d2Zff3+n2XM3LFpplm3emK/z6Sxb+HVVNpCtTvskrnOwaZ3rO6xzqGWdA43L5X9vX+eZZa4z3u/RsM5XuqxzfTjtkWuzLJvLltym3VPZYLa27VbT/h4tjoj8OvKH8j3Z8FkdJxuWcZzkl3nt2tbjpP2YjPt/Q9gnw0usofnheOPJVYv2+7keJ/m97odjNb/u+/IbHR1t/tVqy7Gab/P4dUsfAx0fuw7HQDqWm46Bjb2OgcFVQ41jYHBhzRtbjoGpRZcZzAYat3X6uu7HwMTs0RMTM48+dsvho/sOTR+aPjY1uXP7th3bt+3YMXHw8JHpyeLPs9ulJbI2G0zH4MbwWhOPwRvatm0+JOe/eeGeB6N98jzI7/tnrs8XdOlgtsQxnm/z9Obzfx6k7/tNz4PhpudBx9fUDs+D4WU8D/Jtzmxe3vfM4ab/O61hpV4L1zUdAxfz+2F+mw/euPRr4fqwrmduOtvvh0OLjoF4twbCcy8/Jf28N3pb2C+Lj4ur8zMuWZWdmpk+ueWRfbOzJ6eyMN4Rlzc9Vu3Hy9qm+5QtOl4Gz/p42fP3v7r+6g6nrwv7avTm7o9Vvs328e6PVePVvXV/rsqK/dly6tYsjAvsnd6fnb6b5fszZYku+zPf5ulbzv9nwZRLml7/Rnq9/g2NDBevf0Npb4y0vP4tfmiGGivLsjO3LO/1byT8/06//l3RJ69/+b56cEv3YyDf5pmJsz0Ghru+/l0b5kBYz40hMYw25f63G+fPFYdp02PZ87gZHh4Jx81wvMXW42bbosvk15bf9ubJcztuNl/b+li1/NxSweMm31d/Ndn9uMm3eXnq/F871sS/Nr12rOp1DIwMrcrXO5IOguL1bn5NPAa2ZPuz49mR7EC6TP4o57c1vnV5x8Cq8P87/dpxVZ8cA/m+en5r92Mg3+ZH2y7sz06bwylpm6afndp/v7BU5r96eOH62nfbhc78+To//uNPpdM6ZYh8m9e3n23O6L6fbg6nXNJhP7U/f5Y6pg9k78x+uiqs88iO7r+byre5Yucyj6c9WZa9OvVq4/dd4fe73zv14++3/N630++UX5169d6J+39yNusHAODcvd34c25V8bNm079YL+ff/wEAAIBSiLl/MMxE/gcAAIDKiLl/KMxE/gcAAIDKiLl/OMykJvn/4dt2vfDWE1l6N8D5IJ4fd8N9dxTbxY73XPh6bH5BfvpHvz3ywlefWN5tD2ZZ9qt7P9Bx+4fviOsqnIjr/HDr6Ytcdc2ybv+hBxa2a37/hDO7iuuP92e5h0HsKr80sbVxvWOPTjXmy/dmjXn/3DNPFddffB23P72t2P5vwpuW7Dk40HL5zWE9m8IcC+8pc9+ehf2Qz3i5F9Z/6F8v/+zC7cXLDWx8d+NuPv/HxfXG94h67vJi+3i/l1r/v3ztuy/k2z9yXef1PzHYef2nw/W+FuYvdxfbN+/zrzat/0/D+uPtxctt+dYPO67/xfcV278YjotvhNm+/rv+4oNvdXq84u3sub24XLz9yf/d3rhcvL54/e3rH31iqmV/tF//y28W17P7yz8fat4+nh5vJ3ro9tbjeyA8vi098izLvvtnWct+zj5SXO6f29Yfr+/E7Z3Xf3PbOk8MXNO4/ML9Wddyv77+d1s73t+4nj3/uK7l/jx3d9h/b078KL/e0/eH4zGc/3+vFNfX/l6mL97d+noTt//GuuJ5G69vom39z7Wtf+6afN/1Xv89bxbrf/HO1S3r3/OJcDzdU8xe6z/0t5e1XP6b3ykej5NfGT92fObU4QNNe7X5ebx6dM3aSy5917svC6+l7V/vPT778PTJscmxySwbK+FbBq70+r8V5v8UY+7C30LhJz8vjrtnP1l837rhF8XXz4XTHwqPZ/z++PW/Hmk5Xtsf97k7i3m+678prGO53ve1/7pmWRue/vxLp/7pT15v/7kg3p8T7x1t3L/nN1zZOG/g5eL89terXv7zva3P658OTzbmD8J+nQ/vzLzxyuL22q8/vjfJs58unr/xJ7l4+azt/UTWDbXej/Nd/0/DzzE/vKr19S8eHz94ou3dnNdlA/kS5sLrQzZXnB+3ivv72TNXdry9+D482dz7z2aZS5p5dGbiyOFjpx6ZmJ2emZ2YefSxvUePnzo2u7fx3qV7v9jr8gvP77WN5/eB6Z3bs8az/XgxVtjFXv+JB/YfuHXy+gPTB/edOjj7wInpk4f2z8zsnz4wc/2+gwenv9Lr8ocP7J7aumvbrVvHDx0+sPu2Xbu27Ro/fOx4voxiUT3snPzS+LGTexsXmdm9fdfUjh3bJ8ePHj8wvfvWycnxU70u3/jeNJ5f+svjJ6eP7Js9fHR6fObwY9O7p3bt3Lm157s/Hj1xcGZs4uSpYxOnZqZPThT3ZWy2cXL+va/X5amHmePh9a7NQPjp/HM370zvj5v79pNLXlWxSeuPp9kb4b2g4ve3Xl/H3D8SZlKT/A8AAAB1EHN/eOP/hTPkfwAAAKiMmPtXh5nI/wAAAFAZMfcXyX80ffx7XfL/her/P6n/36D/r/+f6f8n+v/6/5n+v/5/D/r/+v9lXr/+v/4/vfVb/z/k/mxNlvn3fwAAAKiomPvXhpnI/wAAAFAZMfdfEmYi/wMAAEBlxNx/aZhJTfK/z//X/9f/79b/j9vq/2f6//3Q/9/03/r/i+j/6/9n+v/n7GL358u+/j7s/6/R/6ff9Fv/P+b+d4WZ1CT/AwAAQB3E3P/uMBP5HwAAACoj5v7LwkzkfwAAAKiMmPvXhZnUJP/r/+v/6//7/H/9/9L0/33+fwf6//r/mf7/ObvY/fmyr78P+/8+/5++02/9/5j7fy3MpCb5HwAAAOog5v73hJnI/wAAAFAZMfdfHmYi/wMAAEBlxNx/RZhJTfJ/Pfv/r2VZpv+f6f/r/7etU/9f/38l6P/r/3ej/6//X+b16//r/9Nbv/X/Y+5/b5hJTfI/AAAA1EHM/VeGmcj/AAAAUBkx978vzET+BwAAgMqIuf+qMJOa5P969v99/r/+f0H/v3Wd+v/6/ytB/1//vxv9f/3/Mq9f/1//n976rf8fc//7w0xqkv8BAACgDmLuvzrMRP4HAACAyoi5/wNhJvI/AAAAVEbM/evDTGqS//X/9f/1//X/9f/1/1dSufr/g0ueo/9f0P9vdeH6/3MLC9D/L8369f/1/+mt3/r/Mfd/MMykJvkfAAAA6iDm/g+Fmcj/AAAAUBkx918TZiL/AwAAQGXE3D8WZlKT/K//r/+v/6//r/+v/7+SytX/X5r+f0H/v5XP/9f/1//X/6e7fuv/x9y/IcykJvkfAAAA6iDm/o1hJvI/AAAAVEbM/deGmcj/AAAAUBkx928KM6lJ/tf/1//X/9f/1//X/19J+v/6/93o/+v/l3n9+v/6//TWb/3/mPuvCzOpSf4HAACAOoi5//owE/kfAAAAKiPm/hvCTOR/AAAAqIyY+zeHmdQk/+v/6//r/5e4/z+k/5/p//c9/X/9/270//X/y7x+/X/9f3rrt/5/zP03hpnUJP8DAABAHcTcf1OYifwPAAAAlRFz/81hJvI/AAAAVEbM/eNhJjXJ//r/+v/6/yXu//v8/5b16//3J/1//f9u9P/1/8u8fv1//X9667f+f8z9t4SZ1CT/AwAAQB3E3L8lzET+BwAAgMqIuX8izET+BwAAgMqIuX8yzKQm+V//X/9f/1//X/9f/38l6f/r/3ej/6//X+b16//r/9Nbv/X/Y+6fCjOpSf4HAACAOoi5f2uYifwPAAAAlRFz/7YwE/kfAAAAKiPm/u1hJjXJ/yXp/29JBSj9f/1//X/9f/3/UtH/1//vRv9f/7/M69f/1/+n1WCH0/qt/x9z/44wk5rkfwAAAKiDmPt3hpnI/wAAAFAZMfffGmYi/wMAAEBlxNx/W5hJTfJ/Sfr/Pv9f/1//v4n+v/5/mej/6/93o/+v/1/m9ev/6//TW7/1/2Pu3xVmUpP8DwAAAHUQc/+Hw0zkfwAAAKiMmPtvDzOR/wEAAKBUOn0OYRRz/0fCTGqS//X/q97/n1+t/6//r//fff36/ytL/1//vxv9f/3/Mq9f/1//n976rf8fc//uMJOa5H8AAACog5j77wgzkf8BAACgMmLuvzPMRP4HAACAyoi5f0+YSU3yv/5/1fv/Pv9f/1//v9f69f9Xlv6//n83+v/l7P+HH1v0//uo/58fQ/r/9KN+6//H3H9XmElN8j8AAADUQcz9Hw0zkf8BAACgMmLu/1iYifwPAAAAlRFz/8fDTGqS//X/9f/1//X/9f/1/1eS/v+K9f8bL4X6/wX9/3NzsfvzZV9/P/X/ff4//arf+v8x998dZlKT/A8AAAB1EHP/J8JM5H8AAACojJj7fz3MRP4HAACAyoi5/54wk5rkf/1//X/9f/1//X/9/5Wk/+/z/7vR/9f/L/P69f/1/+mt3/r/Mff/RphJTfI/AAAA1EHM/feGmcj/AAAAUBkx938yzET+BwAAgJJZteQ5Mff/ZphJTfJ/+fr/Y6Xs/w+m69f/1//X/9f/1/+/kPT/9f8z/f9zdrH782Vfv/6//j+99Vv/P+b+3wozqUn+BwAAgDqIuf9TYSbyPwAAAFRGzP2/HWYi/wMAAEBlxNx/X5hJTfL/he7/t1++G5//r/+f6f/r/+v/6/+fJ/1//f9M//+cXez+fNnXr/+v/09v/db/j7n/d8JMapL/AQAAoA5i7r8/zET+BwAAgD718FlfIub+T4eZyP8AAABQGTH3fybMpCb5v3yf/6//r/+v/6//r/9fJvr/+v/d6P/r/5d5/fr/+v/01m/9/5j7HwgzqUn+BwAAgDqIuf+zYSbyPwAAAFRGzP2/G2Yi/wMAAEBlxNz/e2EmNcn/+v/6//r/+v/6//r/K0n/f3H/P38N0/8v6P/r/5d5/fr/+v/01m/9/5j7PxdmUpP8DwAAAHUQc//vh5nI/wAAAFAZMff/QZiJ/A8AAACVEXP/g2EmNcn/+v/6//r/+v/6//r/K0n/3+f/d6P/r/9f5vXr/+v/01u/9f9j7v98mElN8j8AAADUQcz9fxhmIv8DAABAZcTcvzfMRP4HAACAyoi5/6Ewk5rkf/1//X/9f/1//X/9/5Wk/6//343+v/5/mdev/6//T2/91v+PuX9fmMme1psBAAAAyivm/i+EmdTk3/8BAACgDmLu3x9mIv8DAABAZcTcfyDMpCb5X/9f/1//X/9f/1//fyXp/+v/d6P/r/9f5vXr/+v/01u/9f9j7p8OM6lJ/gcAAIA6iLn/YJiJ/A8AAACVEXP/oTAT+R8AAAAqI+b+h8NMapL/9f/1//X/a9v/f+V7bevU/9f/Xwn6//r/3ej/6/+Xef36//r/9NZv/f+Y+w+HmdQk/wMAAEAdxNz/xTAT+R8AAAAqI+b+L4WZyP8AAABQGTH3HwkzqUn+1//X/9f/r23/f3mf/79m4Xb1//X/z4X+v/5/N/r/+v9lXr/+v/4/vfVb/z/m/qNhJjXJ/wAAAFAHMfcfCzOR/wEAAKAyYu4/HmYi/wMAAEBlxNx/IsykJvlf///s+v8DS3QD9f87r1//vwL9/yb6//r/50L/X/+/G/1//f8yr1//X/+f3vqt/x9z/x+FmdQk/wMAAEAdxNx/MsxE/gcAAIDKiLl/JsxE/gcAAIDKiLl/NsykJvlf/9/n/+v/6//r/+v/ryT9f/3/bvT/9f/LvH79f/1/euu3/n/M/afCTGqS/wEAAKAO/p+9+8zV66riOPziYHCEmEOmwAgYAmNAYgz0ktBDh9B7C72ZDqH33nvvPRB6lUC5XmsFO77nXNv39d1nr+f5kAU3SNlRzIe/nJ9O7v77xy32PwAAAEwjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+B8UtTfY/AAAAdJC7/8Fxi/0PAAAA08jd/5C4xf4HAACAaeTuf2jc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/9hcUuT/Q8AAAAd5O5/eNxi/wMAAMA0cvc/Im6x/wEAAGAaufuvj1ua7H/9v/5f/7/B/v+u+n/9/3bo//X/S/T/+v8tv1//r/9n3Wj9f+7+G+KWJvsfAAAAOsjd/8i4xf4HAACAaeTuf1TcYv8DAADANHL3PzpuabL/9f/6f/3/Bvt/3//X/2+I/l//v0T/r//f8vv1//p/1o3W/+fuf0zc0mT/AwAAQAe5+x8bt9j/AAAAMI3c/Y+LW+x/AAAAmEbu/sfHLU32v/5f/6//1//r//X/+6T/1/8v0f/r/7f8fv2//p91e+//73PjwT1q/5+7/8a4pcn+BwAAgA5y9z8hbrH/AQAAYBq5+58Yt9j/AAAAMI3c/U+KW5rsf/2//v+O/v+/d9H/6//1/3f8XP9/PPT/+v8l+n/9/5bfr//X/7Nu7/3/Su9/4X/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/7f9//1//p//f8+6f+H7f8v/L/e+fT/R6L/1/8f1v/f+wjv1//TwWj9f+7+p8ctTfY/AAAAdJC7/xlxi/0PAAAA08jdf1PcYv8DAADANHL3PzNuabL/9f/6f/2//v/8/v9Uy/7/9p/p//dD/z9s/79M/38k+n/9v+//6/9ZNlr/n7v/WXFLk/0PAAAAHeTuf3bcYv8DAADANHL3Pydusf8BAABgGrn7nxu3NNn/+n/9v/5f/39F3/+/Zo7+3/f/90f/r/9fov/X/2/5/fp//T/rRuv/c/c/L25psv8BAABgeqd2tfufH7fY/wAAADCN3P0viFvsfwAAAJhG7v4Xxi1N9r/+X/+v/9f/X1H/P8n3//X/+6P/1/8vOWr/v9P/19+L/n+c9+v/9f+sG63/z93/orilyf4HAACADnL3vzhusf8BAABgGrn7XxK32P8AAAAwjdz9L41bmux//b/+X/+v/9f/6//3Sf+v/1/i+//6/y2/X/+v/2fdaP1/7v6XxS1N9j8AAAB0kLv/5XGL/Q8AAADTyN3/irjF/gcAAIBp5O5/Zdxy4f4/dTVfdfXo//X/+n/9v/5f/79P+n/9/xL9/8X7/zOH/PX0/2O9X/+v/2fdaP1/7v6b4xa//w8AAADTyN3/qrjF/gcAAIBp5O5/ddxi/wMAAMA0cve/Jm5psv8P6/9vu8e5P6//Pxr9/8Xfr//X/+v/9f/6f/3/Ev2/7/9v+f36f/0/60br/3P3vzZuabL/AQAAoIPc/a+LW+x/AAAAmEbu/tfHLfY/AAAATCN3/xvilib7//i//3+d/l//r/+Pq//X/+v/9f/6/2X6f/3/lt+v/9f/s260/j93/xvjlib7HwAAADrI3f+muMX+BwAAgGnk7n9z3GL/AwAAwDRy978lbmmy/4+///f9f/3/Jfb/p/T/Sf8f/1z1//r/S6D/1//v9P+X7aT7+a2/X/+v/2fdaP1/7v6zB1Ov3/4HAACADs4e/PHM7q1xi/0PAAAA08jd/7a4xf4HAACAaeTuf3vc0mT/6//1/yfe//v+f9H/xz9X/b/+/xLo//X/O/3/ZTvpfn7r79f/6/9ZN1r/n7v/HXFLk/0PAAAAHeTuf2fcYv8DAADANGL3n/uX3+1/AAAAmNK7Dv54ZvfuuKXJ/m/c/193pf3/tf/3n/X/F3+//v9Y+v+zF/7a0//r/7dE/6//X6L/1/9v+f3j9P/xg+v1/4xntP4/d/974pYm+x8AAAA6yN3/3rjF/gcAAIBp5O6/JW6x/wEAAGAaufvfF7c02f+N+/9Jvv9/31vjBfr/eft/3/+Pq//X/1+M/l//v9P/X7aT7ue3/v5x+n/f/2dco/X/ufvfH7c02f8AAADQQe7+D8Qt9j8AAABMI3f/B+MW+x8AAACmkbv/Q3FLk/2v/996/+/7//p//b/+f2z6f/3/Ev2//n/L79f/6/9ZN1r/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADANHL3fzRusf8BAABgGrn7Pxa3NNn/+n/9/776/9v/Ivr/Jv3/Dfr/nf7/UPp//f8S/b/+f8vv1//r/1k3Wv+fu//jcUuT/Q8AAAAd5O7/RNxi/wMAAMA0cvd/Mm6x/wEAAGAaufs/FTfc654n96TjdfqQn0dvrv/X//v+v/7f9//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7Px23+P1/AAAAmEbu/s/ELfY/AAAATCN3/2fjFvsfAAAAppG7/3NxS5P9r//X/+v/N9v/X6v/P//9+v8x6f/1/0v0//r/Lb9f/6//Z91o/X/u/s/HLU32PwAAAHSQu/8LcYv9DwAAANPI3f/FuMX+BwAAgGnk7v9S3NJk/+v/9f/6/832/77/f8H79f9j0v/r/5fo//X/W36//l//z7rR+v/c/V+OW5rsfwAAAOggd/9X4hb7HwAAAKaRu/+rcYv9DwAAANPI3f+1uKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/1+OWJvsfAAAAOsjd/424xf4HAACAaeTu/2bcYv8DAADANHL3fytuabL/Z+7/l/5n+v9z9P/6/53+X/+/Z/p//f8S/b/+f8vv1//r/1k3Wv+fu//bcUuT/Q8AAAAd5O7/Ttxi/wMAAMA0cvd/N26x/wEAAGAaufu/F7c02f8z9/9L9P/n6P/1/zv9v/5/z/T/+v8l+n/9/5bfr//X/7PuhPr/07tD+v/c/d+PW5rsfwAAAOggd/8P4hb7HwAAAKaRu/+HcYv9DwAAANPI3f+juGWe/X+/Wxb+pP7/2Pv/g19E+n/9/07/r//X/x/Q/+v/l+j/9f9bfr/+X//PutG+/5+7/8dxyzz7HwAAANrL3f+TuMX+BwAAgGnk7v9p3GL/AwAAwDRy9/8sbmmy//X/vv+v/2/V/1+z0//r/68y/b/+f4n+X/+/5ffr//X/rBut/8/d//O4pcn+BwAAgA5y9/8ibrH/AQAAYBq5+38Zt9j/AAAAMI3c/b+KW5rsf/2//l//36r/9/1//f9Vp//X/y/R/+v/t/z+7P/z153+X//PnY3W/+fu/3Xc0mT/AwAAQAe5+38Tt9j/AAAAMI3c/b+NW+x/AAAAmEbu/t/FLU32v/5f/6//1//r//X/+6T/1/8v0f/r/7f8ft//1/+zbrT+P3f/rXFLk/0PAAAAHeTu/33cYv8DAADANHL3/yFusf8BAABgGrn7b4tbmux//b/+f8r+/+76f/2//n8U+n/9/xL9v/5/y+/X/+v/WTda/5+7/49xS5P9DwAAAB3k7v9T3GL/AwAAwDRy9/85brH/AQAAYBq5+/8StzTZ//p//f+l9/+n6+972P7f9//1//r/Yczb/99N/6//v+L+/6abz/1Y/7/N9+v/9f+sG63/z93/17ilyf4HAACADnL3/y1usf8BAABgGrn7/x632P8AAAAwjdz9/4hbmux//b/+f8rv/+v/9f/6/2HM2//7/r/+3/f/9f/6f/0/a0br/3P3/zNuabL/AQAAoIPc/f+KW+x/AAAAmEbu/n/HLfY/AAAATCN3/3/ilib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P3/CwAA//8gszKL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4.2181043s ago: executing program 6 (id=972): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r1, 0x0, 0x0, 0x9000f4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x1, 0x3ff, 0x9}) 3.931664761s ago: executing program 5 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statfs(&(0x7f0000000040)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000440)={0x20, 0x0, r1, {0xcf, 0x4, 0x7fffffff, 0x2}}, 0x20) 3.498642574s ago: executing program 5 (id=974): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000007640)=[{&(0x7f00000076c0)="4944c5fa6b0a1aad063b6f98eacd0899596a57b625e69226c5980c919352b1849739084b19135698763d256a4b589fedde816fc09dff660c9732a0d6f8226b6e8144d9be3829486e75914303c1d507ceb2db30f8714143db99df7d11430ea75e4bad23cdf66218246789522e833f7fb83f485a87db04697a7e138ab2771289710e8e524afa014e2785faeb5892858cb2dbff7a4502ac9ac1d0919acfbe255e25baa22a2d6a81dc1279db3442be524e", 0xaf}, {&(0x7f0000000140)="399f0e4c52fe625e19396b741d1a009413212bed679d73e15ebc99b0d4cac20b9dc2ba35d38a3a62e35e1c", 0x2b}, {&(0x7f0000005440)="1ec8083d172824c73480a4524e3314297c4a2ed97d2f27b538a362f6e7d6989ff53ece799d7eb178bcfdf2b5dc6fe3a67d4049aca714417f8366f39ec3565e72f88edd552df30599dede9be1efad0be46a16e53921c11aa73d655763dd3555fe87f57a214f6136b873347524f885485c5b45d8916a7a59e28ed25d9ba1fba5abb2b21362396c9f4c25c32ad44a2b0e82db95d0bf8d403c2abf96d88f0f2eefa22f61113b16ea24c471ba0e060ee03587ed8d53594fe811730e456313c1ba3adc6767f4", 0xc3}, {&(0x7f0000005580)="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", 0x828}], 0x4, 0xa63c, 0x1, 0x5) copy_file_range(r1, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x10000006, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 2.371369329s ago: executing program 7 (id=975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x8000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0) 2.002991811s ago: executing program 9 (id=976): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x444c, &(0x7f000000cd00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b142, 0x1fe) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x80) r0 = open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) getdents(r0, 0x0, 0x0) 1.633947503s ago: executing program 6 (id=977): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000b00)={r2}, &(0x7f0000000340)=0x8) 651.992197ms ago: executing program 7 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 153.756539ms ago: executing program 5 (id=979): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/uts\x00') 100.395969ms ago: executing program 6 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=981): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049363, 0x0) kernel console output (not intermixed with test programs): 2] loop3: detected capacity change from 0 to 64 [ 131.045923][ T5453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.252'. [ 131.233055][ T5464] loop7: detected capacity change from 0 to 128 [ 131.301282][ T5464] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 131.357694][ T5464] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.808310][ T5488] loop6: detected capacity change from 0 to 736 [ 132.037819][ T5497] loop3: detected capacity change from 0 to 1024 [ 132.305987][ T5502] loop7: detected capacity change from 0 to 1024 [ 132.340247][ T5502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.366011][ T9] hfsplus: b-tree write err: -5, ino 4 [ 132.759539][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765928][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.796161][ T4541] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.004791][ T4541] usb 4-1: Using ep0 maxpacket: 16 [ 133.015448][ T4541] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 133.047946][ T4541] usb 4-1: config 0 has no interface number 0 [ 133.061919][ T4541] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.092415][ T4541] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 133.114876][ T4541] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 133.135844][ T4541] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 133.151949][ T4541] usb 4-1: Product: syz [ 133.159861][ T4541] usb 4-1: SerialNumber: syz [ 133.163371][ T5520] loop6: detected capacity change from 0 to 1024 [ 133.187775][ T4541] usb 4-1: config 0 descriptor?? [ 133.193169][ T5520] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.215735][ T4541] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 133.243774][ T4541] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 133.285849][ T5520] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 133.445985][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 133.466439][ T5520] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 133.503936][ T5530] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #11: comm syz.6.272: missing EA_INODE flag [ 133.607202][ T5530] EXT4-fs (loop6): Remounting filesystem read-only [ 133.636832][ T5530] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.272: error while reading EA inode 11 err=-117 [ 133.662705][ T5530] EXT4-fs (loop6): Remounting filesystem read-only [ 133.770487][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 133.770631][ T4831] usb 4-1: USB disconnect, device number 7 [ 133.777484][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 134.223464][ T5548] raw_sendmsg: syz.5.278 forgot to set AF_INET. Fix it! [ 134.386502][ T4831] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 134.408070][ T4871] EXT4-fs (loop6): unmounting filesystem. [ 134.501518][ T5552] binder: 5551:5552 ioctl 4018620d 0 returned -22 [ 134.830544][ T5565] loop6: detected capacity change from 0 to 1024 [ 134.896863][ T5569] Bluetooth: MGMT ver 1.22 [ 135.012968][ T48] hfsplus: b-tree write err: -5, ino 4 [ 135.652732][ T5587] loop5: detected capacity change from 0 to 2048 [ 135.711879][ T5587] ext4: Unknown parameter 'noacl' [ 135.998164][ T5593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.288'. [ 136.086510][ T5595] loop3: detected capacity change from 0 to 2048 [ 136.159228][ T5577] loop6: detected capacity change from 0 to 32768 [ 136.194997][ T5577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.285 (5577) [ 136.242002][ T5577] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.252629][ T5577] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 136.262426][ T5577] BTRFS info (device loop6): using free space tree [ 136.283253][ T5595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.321393][ T5595] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.565997][ T5577] BTRFS info (device loop6): enabling ssd optimizations [ 136.698405][ T5586] loop7: detected capacity change from 0 to 40427 [ 136.718883][ T5586] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 136.745572][ T5586] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 136.772663][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 136.796726][ T5586] F2FS-fs (loop7): invalid crc value [ 136.891891][ T5586] F2FS-fs (loop7): Found nat_bits in checkpoint [ 137.190809][ T5586] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 137.210684][ T5586] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 137.356858][ T4871] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.374873][ T4300] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 137.774802][ T5597] loop4: detected capacity change from 0 to 40427 [ 137.826300][ T5597] F2FS-fs (loop4): invalid crc value [ 137.844072][ T5597] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.888684][ T34] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 137.912931][ T34] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 138.031413][ T5597] F2FS-fs (loop4): Start checkpoint disabled! [ 138.132011][ T5597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 138.317579][ T26] audit: type=1800 audit(1732303512.318:15): pid=5597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.290" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 138.756911][ T4314] kworker/u4:6: attempt to access beyond end of device [ 138.756911][ T4314] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 138.857189][ T4451] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 139.087035][ T4451] usb 7-1: Using ep0 maxpacket: 8 [ 139.095915][ T4451] usb 7-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 139.146696][ T4451] usb 7-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 139.204464][ T4451] usb 7-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 139.217561][ T4451] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 139.263341][ T4451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.294543][ T4451] usb 7-1: Product: syz [ 139.298790][ T4451] usb 7-1: Manufacturer: syz [ 139.343341][ T5678] loop7: detected capacity change from 0 to 1024 [ 139.360939][ T4451] usb 7-1: SerialNumber: syz [ 139.541998][ T5686] loop3: detected capacity change from 0 to 2048 [ 139.567082][ T5686] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 139.601952][ T4451] usb 7-1: USB disconnect, device number 3 [ 139.665611][ T4828] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 139.673462][ T5686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.866820][ T4828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 139.898882][ T4828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.930764][ T4828] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33738, setting to 1024 [ 139.948150][ T4828] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 139.982464][ T4828] usb 8-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 140.011976][ T4828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.038916][ T4828] usb 8-1: config 0 descriptor?? [ 140.067925][ T5678] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 140.090029][ T4828] usb 8-1: MIDIStreaming interface descriptor not found [ 140.334052][ T4828] usb 8-1: USB disconnect, device number 3 [ 140.764703][ T4451] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.974550][ T4451] usb 5-1: Using ep0 maxpacket: 16 [ 140.981653][ T4451] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.016267][ T4451] usb 5-1: config 0 has no interface number 0 [ 141.047507][ T4451] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 141.095048][ T4451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.123622][ T4451] usb 5-1: Product: syz [ 141.133777][ T4451] usb 5-1: Manufacturer: syz [ 141.169313][ T4451] usb 5-1: SerialNumber: syz [ 141.193147][ T4451] usb 5-1: config 0 descriptor?? [ 141.217916][ T4451] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 141.332837][ T5704] loop3: detected capacity change from 0 to 32768 [ 141.379957][ T5704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.308 (5704) [ 141.461089][ T5704] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.528276][ T5704] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 141.563638][ T5704] BTRFS info (device loop3): using free space tree [ 141.614578][ T5706] loop6: detected capacity change from 0 to 32768 [ 141.781453][ T5704] BTRFS info (device loop3): enabling ssd optimizations [ 141.884611][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 141.899575][ T5706] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 142.012370][ T5717] loop5: detected capacity change from 0 to 32768 [ 142.040635][ T5717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.313 (5717) [ 142.116098][ T5717] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.167019][ T5717] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 142.216957][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.234137][ T4451] gspca_spca1528: reg_w err -71 [ 142.241563][ T5717] BTRFS info (device loop5): using free space tree [ 142.252798][ T4451] spca1528: probe of 5-1:0.1 failed with error -71 [ 142.283392][ T4451] usb 5-1: USB disconnect, device number 5 [ 142.659144][ T5717] BTRFS info (device loop5): enabling ssd optimizations [ 142.780714][ T4871] ocfs2: Unmounting device (7,6) on (node local) [ 142.814809][ T5726] loop7: detected capacity change from 0 to 32768 [ 142.885924][ T5717] fs-verity: sha512 using implementation "sha512-avx2" [ 143.090011][ T5717] BTRFS info (device loop5): setting compat-ro feature flag for VERITY (0x4) [ 143.132851][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 143.343099][ T5783] loop3: detected capacity change from 0 to 4096 [ 143.394321][ T5783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.408690][ T5787] capability: warning: `syz.4.320' uses deprecated v2 capabilities in a way that may be insecure [ 143.435040][ T4384] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.453369][ T5788] loop6: detected capacity change from 0 to 512 [ 143.487355][ T5783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.503753][ T5788] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 0 [ 143.756240][ T5783] syz.3.316 (pid 5783) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 143.883433][ T5797] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 144.026789][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 144.304850][ T4454] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 144.514708][ T4454] usb 8-1: Using ep0 maxpacket: 8 [ 144.521656][ T4454] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 144.574663][ T4454] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.632694][ T4454] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.662909][ T4454] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.714140][ T4454] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.764979][ T4454] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.774771][ T4454] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.003030][ T5826] loop6: detected capacity change from 0 to 64 [ 145.028842][ T4454] usb 8-1: usb_control_msg returned -32 [ 145.034861][ T4454] usbtmc 8-1:16.0: can't read capabilities [ 145.084663][ T4403] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 145.286671][ T4403] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 145.306671][ T4403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.336616][ T4403] usb 6-1: config 0 descriptor?? [ 145.363531][ T4403] gspca_main: spca508-2.14.0 probing 8086:0110 [ 145.568239][ T4403] gspca_spca508: reg_read err -32 [ 145.574772][ T4403] gspca_spca508: reg_read err -32 [ 145.596977][ T4403] gspca_spca508: reg_read err -32 [ 145.814395][ T4403] gspca_spca508: reg_read err -71 [ 145.829198][ T5818] loop3: detected capacity change from 0 to 32768 [ 145.829441][ T4403] gspca_spca508: reg write: error -71 [ 145.855589][ T5838] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 145.869056][ T4403] spca508: probe of 6-1:0.0 failed with error -71 [ 145.886371][ T5818] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.327 (5818) [ 145.906298][ T4403] usb 6-1: USB disconnect, device number 4 [ 145.932827][ T5822] loop4: detected capacity change from 0 to 40427 [ 145.980087][ T5818] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.013750][ T5822] F2FS-fs (loop4): Found nat_bits in checkpoint [ 146.040671][ T5818] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.069072][ T41] usb 8-1: USB disconnect, device number 4 [ 146.103511][ T5818] BTRFS info (device loop3): using free space tree [ 146.158822][ T5822] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.430154][ T5818] BTRFS info (device loop3): enabling ssd optimizations [ 146.521457][ T4259] syz-executor: attempt to access beyond end of device [ 146.521457][ T4259] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.593692][ T5835] loop6: detected capacity change from 0 to 32768 [ 146.673179][ T5835] JBD2: Ignoring recovery information on journal [ 146.851950][ T5835] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 146.855557][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.454198][ T4871] ocfs2: Unmounting device (7,6) on (node local) [ 147.799375][ T5892] loop3: detected capacity change from 0 to 1024 [ 148.200839][ T34] hfsplus: b-tree write err: -5, ino 4 [ 148.424768][ T5878] loop7: detected capacity change from 0 to 32768 [ 148.455396][ T5878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.335 (5878) [ 148.474159][ T5906] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 148.591369][ T5878] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.664659][ T5878] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 148.704133][ T5878] BTRFS info (device loop7): setting nodatacow, compression disabled [ 148.724837][ T5878] BTRFS info (device loop7): setting datacow [ 148.730932][ T5878] BTRFS info (device loop7): doing ref verification [ 148.814881][ T5878] BTRFS info (device loop7): force clearing of disk cache [ 148.842055][ T5916] loop6: detected capacity change from 0 to 512 [ 148.854621][ T5878] BTRFS info (device loop7): turning off barriers [ 148.861110][ T5878] BTRFS info (device loop7): enabling ssd optimizations [ 148.914045][ T5878] BTRFS info (device loop7): using spread ssd allocation scheme [ 148.955105][ T5878] BTRFS info (device loop7): setting datasum [ 148.961168][ T5878] BTRFS info (device loop7): using free space tree [ 148.970714][ T5916] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 148.997339][ T5921] loop3: detected capacity change from 0 to 2048 [ 148.999478][ T5916] EXT4-fs (loop6): 1 truncate cleaned up [ 149.009774][ T5916] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 149.095665][ T5921] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.104324][ T5921] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.215772][ T5941] loop5: detected capacity change from 0 to 512 [ 149.254750][ T5916] loop6: detected capacity change from 512 to 0 [ 149.269601][ T5949] netlink: 'syz.4.348': attribute type 34 has an invalid length. [ 149.307490][ T5941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 149.309067][ T4300] loop: Write error at byte offset 9223372036854776831, length 1024. [ 149.327167][ C0] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 149.336978][ C0] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 149.345345][ T5946] EXT4-fs (loop6): I/O error while writing superblock [ 149.410788][ T5878] BTRFS info (device loop7): rebuilding free space tree [ 149.493431][ T4871] EXT4-fs (loop6): unmounting filesystem. [ 149.544121][ T55] loop: Write error at byte offset 9223372036854776831, length 1024. [ 149.563362][ C1] I/O error, dev loop6, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 149.572978][ C1] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 149.581688][ T4871] EXT4-fs (loop6): I/O error while writing superblock [ 149.611324][ T4384] EXT4-fs (loop5): unmounting filesystem. [ 149.630251][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 149.973171][ T4828] kernel read not supported for file /swradio0 (pid: 4828 comm: kworker/1:14) [ 150.002082][ T5020] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.135010][ T4268] Bluetooth: hci5: sending frame failed (-49) [ 151.143088][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 151.194558][ T4402] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 151.400427][ T4402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.442069][ T4402] usb 5-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 151.472413][ T4402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.537426][ T4402] usb 5-1: config 0 descriptor?? [ 151.989032][ T4402] hid (null): unknown global tag 0xe [ 152.034776][ T4402] elecom 0003:056E:00E6.0007: unknown main item tag 0x7 [ 152.082588][ T4402] elecom 0003:056E:00E6.0007: unknown global tag 0xe [ 152.133097][ T4402] elecom 0003:056E:00E6.0007: item 0 0 1 14 parsing failed [ 152.202313][ T4402] elecom: probe of 0003:056E:00E6.0007 failed with error -22 [ 152.303713][ T4402] usb 5-1: USB disconnect, device number 6 [ 152.491656][ T26] audit: type=1326 audit(1732303526.488:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcd7e819 code=0x7ffc0000 [ 152.616275][ T26] audit: type=1326 audit(1732303526.538:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcd7e819 code=0x7ffc0000 [ 152.704429][ C1] sched: RT throttling activated [ 152.726844][ T26] audit: type=1326 audit(1732303526.538:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f40dcd7e819 code=0x7ffc0000 [ 152.800601][ T6039] loop7: detected capacity change from 0 to 1024 [ 152.871045][ T6039] EXT4-fs: Ignoring removed oldalloc option [ 152.907070][ T26] audit: type=1326 audit(1732303526.538:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcd7e819 code=0x7ffc0000 [ 152.927450][ T6025] loop6: detected capacity change from 0 to 131072 [ 152.949332][ T6025] F2FS-fs (loop6): invalid crc value [ 153.025167][ T26] audit: type=1326 audit(1732303526.538:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6035 comm="syz.3.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40dcd7e819 code=0x7ffc0000 [ 153.045682][ T6039] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 153.082837][ T6025] F2FS-fs (loop6): Found nat_bits in checkpoint [ 153.186675][ T6025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 153.356630][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 153.629698][ T6063] loop7: detected capacity change from 0 to 2048 [ 153.693840][ T6063] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 153.785058][ T6063] EXT4-fs error (device loop7): ext4_find_extent:936: inode #2: comm syz.7.378: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 153.859685][ T6046] loop3: detected capacity change from 0 to 32768 [ 153.922792][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 153.980152][ T6046] read_mapping_page failed! [ 154.003299][ T6046] ERROR: (device loop3): txCommit: [ 154.003299][ T6046] [ 154.040005][ T6046] ERROR: (device loop3): remounting filesystem as read-only [ 154.073041][ T6028] loop5: detected capacity change from 0 to 32768 [ 154.102353][ T6071] ERROR: (device loop3): diFree: numfree > numinos [ 154.102353][ T6071] [ 154.215889][ T6071] ERROR: (device loop3): remounting filesystem as read-only [ 154.236124][ T6028] XFS (loop5): Mounting V5 Filesystem [ 154.487699][ T6028] XFS (loop5): Ending clean mount [ 154.529089][ T6028] XFS (loop5): Quotacheck needed: Please wait. [ 154.666339][ T6028] XFS (loop5): Quotacheck: Done. [ 155.098248][ T4384] XFS (loop5): Unmounting Filesystem [ 155.185331][ T6106] TCP: tcp_parse_options: Illegal window scaling value 31 > 14 received [ 155.403240][ T6101] loop4: detected capacity change from 0 to 4096 [ 156.153600][ T6138] loop6: detected capacity change from 0 to 128 [ 156.706724][ T6163] loop4: detected capacity change from 0 to 64 [ 157.596957][ T6142] loop5: detected capacity change from 0 to 32768 [ 157.717502][ T6142] XFS (loop5): Mounting V5 Filesystem [ 157.840468][ T6153] loop7: detected capacity change from 0 to 32768 [ 157.951053][ T6142] XFS (loop5): Ending clean mount [ 157.951114][ T6153] XFS (loop7): Mounting V5 Filesystem [ 158.005447][ T6142] XFS (loop5): Quotacheck needed: Please wait. [ 158.195262][ T6153] XFS (loop7): Ending clean mount [ 158.200785][ T6142] XFS (loop5): Quotacheck: Done. [ 158.216236][ T6153] XFS (loop7): Quotacheck needed: Please wait. [ 158.370783][ T6153] XFS (loop7): Quotacheck: Done. [ 158.478347][ T4384] XFS (loop5): Unmounting Filesystem [ 158.520284][ T5020] XFS (loop7): Unmounting Filesystem [ 158.566704][ T6210] loop4: detected capacity change from 0 to 4096 [ 158.596244][ T6210] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 158.752350][ T6173] loop3: detected capacity change from 0 to 32768 [ 158.818139][ T6173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.404 (6173) [ 158.951951][ T6173] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.966018][ T6173] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 159.012462][ T6173] BTRFS info (device loop3): setting nodatacow, compression disabled [ 159.031041][ T6173] BTRFS info (device loop3): enabling auto defrag [ 159.040644][ T6173] BTRFS info (device loop3): max_inline at 0 [ 159.064614][ T6173] BTRFS info (device loop3): using free space tree [ 159.393817][ T26] audit: type=1800 audit(1732303533.388:21): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.404" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 159.416915][ T6238] loop7: detected capacity change from 0 to 64 [ 159.573443][ T6241] bridge0: port 3(vlan2) entered blocking state [ 159.605342][ T6241] bridge0: port 3(vlan2) entered disabled state [ 159.626289][ T6241] device vlan2 entered promiscuous mode [ 159.666192][ T6241] device bond0 entered promiscuous mode [ 159.684362][ T6241] device bond_slave_0 entered promiscuous mode [ 159.710926][ T6241] device bond_slave_1 entered promiscuous mode [ 159.739520][ T6241] bridge0: port 3(vlan2) entered blocking state [ 159.746065][ T6241] bridge0: port 3(vlan2) entered forwarding state [ 159.941160][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.171155][ T6248] loop6: detected capacity change from 0 to 4096 [ 160.423396][ T6262] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.639775][ T6264] loop7: detected capacity change from 0 to 4096 [ 160.753363][ T6264] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 161.061163][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 161.402505][ T6285] loop7: detected capacity change from 0 to 256 [ 161.574581][ T6285] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fd7c05, utbl_chksum : 0xe619d30d) [ 161.647952][ T6296] netlink: 'syz.6.427': attribute type 2 has an invalid length. [ 161.654838][ T6285] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 161.676466][ T6296] netlink: 'syz.6.427': attribute type 8 has an invalid length. [ 161.706998][ T6296] netlink: 32 bytes leftover after parsing attributes in process `syz.6.427'. [ 161.780735][ T6299] netlink: 'syz.6.427': attribute type 39 has an invalid length. [ 162.686955][ T6322] loop5: detected capacity change from 0 to 2048 [ 162.698516][ T6318] loop7: detected capacity change from 0 to 4096 [ 162.725254][ T6322] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.754695][ T6318] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 162.792284][ T6322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 162.828120][ T6318] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 162.851041][ T6322] EXT4-fs (loop5): shut down requested (2) [ 162.895552][ T6318] ntfs3: loop7: Failed to load $Extend. [ 163.047972][ T4384] EXT4-fs (loop5): unmounting filesystem. [ 163.305847][ T4300] ntfs3: loop7: ntfs3_write_inode r=5 failed, -22. [ 163.334675][ T5020] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 163.364683][ T4451] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 163.526802][ T6349] loop7: detected capacity change from 0 to 512 [ 163.571291][ T6349] EXT4-fs: Ignoring removed i_version option [ 163.584538][ T4451] usb 7-1: Using ep0 maxpacket: 32 [ 163.592011][ T4451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.610091][ T6349] EXT4-fs: Ignoring removed nobh option [ 163.643489][ T4451] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.645073][ T6349] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 163.686237][ T6349] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 163.686370][ T4451] usb 7-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 163.729702][ T4451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.748801][ T4451] usb 7-1: config 0 descriptor?? [ 163.779831][ T6349] EXT4-fs (loop7): 1 truncate cleaned up [ 163.819044][ T6349] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 164.249482][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 164.408012][ T4541] usb 7-1: USB disconnect, device number 4 [ 164.450316][ T6368] loop3: detected capacity change from 0 to 64 [ 164.532940][ T6370] loop5: detected capacity change from 0 to 1024 [ 164.560719][ T6370] EXT4-fs: Ignoring removed orlov option [ 164.606296][ T6370] EXT4-fs (loop5): Test dummy encryption mode enabled [ 164.660124][ T6370] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 164.752514][ T4300] kworker/u4:5: attempt to access beyond end of device [ 164.752514][ T4300] loop3: rw=1, sector=163, nr_sectors = 1 limit=64 [ 164.787960][ T4300] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 164.811095][ T6380] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 164.820620][ T4300] kworker/u4:5: attempt to access beyond end of device [ 164.820620][ T4300] loop3: rw=1, sector=167, nr_sectors = 1 limit=64 [ 164.842722][ T4300] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 164.849747][ T6380] netlink: 'syz.4.449': attribute type 4 has an invalid length. [ 164.856806][ T4300] kworker/u4:5: attempt to access beyond end of device [ 164.856806][ T4300] loop3: rw=1, sector=169, nr_sectors = 1 limit=64 [ 164.872480][ T6380] netlink: 14694 bytes leftover after parsing attributes in process `syz.4.449'. [ 164.896292][ T4300] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 164.910994][ T4300] kworker/u4:5: attempt to access beyond end of device [ 164.910994][ T4300] loop3: rw=1, sector=171, nr_sectors = 1 limit=64 [ 164.931140][ T4300] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 164.939956][ T4300] kworker/u4:5: attempt to access beyond end of device [ 164.939956][ T4300] loop3: rw=1, sector=172, nr_sectors = 1 limit=64 [ 164.973869][ T4300] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 164.994784][ T4402] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 165.032866][ T4300] kworker/u4:5: attempt to access beyond end of device [ 165.032866][ T4300] loop3: rw=1, sector=173, nr_sectors = 1 limit=64 [ 165.084503][ T4300] Buffer I/O error on dev loop3, logical block 173, lost async page write [ 165.118801][ T4300] kworker/u4:5: attempt to access beyond end of device [ 165.118801][ T4300] loop3: rw=1, sector=174, nr_sectors = 1 limit=64 [ 165.148132][ T4300] Buffer I/O error on dev loop3, logical block 174, lost async page write [ 165.160385][ T6391] loop7: detected capacity change from 0 to 256 [ 165.161516][ T4300] kworker/u4:5: attempt to access beyond end of device [ 165.161516][ T4300] loop3: rw=1, sector=175, nr_sectors = 1 limit=64 [ 165.208320][ T4402] usb 6-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 165.250652][ T4402] usb 6-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 165.264512][ T4300] Buffer I/O error on dev loop3, logical block 175, lost async page write [ 165.284639][ T4300] kworker/u4:5: attempt to access beyond end of device [ 165.284639][ T4300] loop3: rw=1, sector=176, nr_sectors = 1 limit=64 [ 165.298316][ T4402] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 165.319144][ T4300] Buffer I/O error on dev loop3, logical block 176, lost async page write [ 165.336467][ T4402] usb 6-1: config 255 has no interfaces? [ 165.352473][ T4300] kworker/u4:5: attempt to access beyond end of device [ 165.352473][ T4300] loop3: rw=1, sector=177, nr_sectors = 1 limit=64 [ 165.374707][ T4402] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 165.405497][ T4402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.421574][ T4300] Buffer I/O error on dev loop3, logical block 177, lost async page write [ 165.645264][ T6398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 165.663585][ T4402] usb 6-1: string descriptor 0 read error: -71 [ 165.679445][ T4402] usb 6-1: USB disconnect, device number 5 [ 166.230762][ T6417] loop7: detected capacity change from 0 to 1024 [ 166.267891][ T6417] EXT4-fs: Ignoring removed orlov option [ 166.284867][ T4384] EXT4-fs (loop5): unmounting filesystem. [ 166.384965][ T6417] EXT4-fs (loop7): Test dummy encryption mode enabled [ 166.433534][ T6417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 166.962437][ T6400] loop3: detected capacity change from 0 to 32768 [ 167.019858][ T6400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.450 (6400) [ 167.085353][ T6400] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.096152][ T6417] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 167.133179][ T6400] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 167.178793][ T6400] BTRFS info (device loop3): using free space tree [ 167.341391][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 167.414547][ T4829] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 167.554991][ T6400] BTRFS info (device loop3): enabling ssd optimizations [ 167.606868][ T4829] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 167.634283][ T4829] usb 7-1: config 0 has no interface number 0 [ 167.674606][ T4829] usb 7-1: too many endpoints for config 0 interface 6 altsetting 0: 32, using maximum allowed: 30 [ 167.751797][ T4829] usb 7-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 167.793903][ T4829] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 167.830232][ T4829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.848566][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.862742][ T4829] usb 7-1: config 0 descriptor?? [ 167.891704][ T4829] cp210x 7-1:0.6: cp210x converter detected [ 168.132655][ T6486] loop7: detected capacity change from 0 to 8192 [ 168.211106][ T6486] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.249555][ T6486] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 168.259508][ T6486] REISERFS (device loop7): using ordered data mode [ 168.267826][ T6486] reiserfs: using flush barriers [ 168.294489][ T6486] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.312520][ T4829] cp210x 7-1:0.6: failed to get vendor val 0x000e size 3: -32 [ 168.316545][ T6486] REISERFS (device loop7): checking transaction log (loop7) [ 168.529347][ T4829] cp210x 7-1:0.6: GPIO initialisation failed: -19 [ 168.546764][ T4829] usb 7-1: cp210x converter now attached to ttyUSB0 [ 168.629811][ T6486] REISERFS (device loop7): Using tea hash to sort names [ 168.662525][ T6486] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 168.738187][ T5990] usb 7-1: USB disconnect, device number 5 [ 168.755924][ T5990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 168.795669][ T5990] cp210x 7-1:0.6: device disconnected [ 169.090373][ T6512] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [2 6 0x0 SD] (nlink == 1) not found (pos 1) [ 169.536560][ T6527] loop6: detected capacity change from 0 to 1024 [ 169.669705][ T6527] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 169.702537][ T6539] loop7: detected capacity change from 0 to 128 [ 169.702575][ T6527] EXT4-fs (loop6): unmounting filesystem. [ 169.753205][ T6539] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 169.773963][ T6539] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.884630][ T6527] support for cryptoloop has been removed. Use dm-crypt instead. [ 170.088700][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 170.170402][ T6502] loop4: detected capacity change from 0 to 40427 [ 170.203166][ T6502] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 170.243521][ T6502] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 170.264144][ T6548] loop5: detected capacity change from 0 to 1024 [ 170.308790][ T6502] F2FS-fs (loop4): invalid crc value [ 170.347077][ T6502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.506033][ T6560] loop3: detected capacity change from 0 to 512 [ 170.541686][ T6560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.566419][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.6.495'. [ 170.584591][ T6502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.596145][ T6562] loop7: detected capacity change from 0 to 2048 [ 170.602727][ T6560] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 170.620191][ T6560] System zones: 1-12 [ 170.658849][ T6560] EXT4-fs (loop3): 1 truncate cleaned up [ 170.681411][ T6560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.706815][ T6562] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 170.709560][ T6502] bio_check_eod: 7 callbacks suppressed [ 170.709581][ T6502] syz.4.479: attempt to access beyond end of device [ 170.709581][ T6502] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.778209][ T6562] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.851285][ T4259] syz-executor: attempt to access beyond end of device [ 170.851285][ T4259] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 170.855189][ T6560] loop3: detected capacity change from 512 to 64 [ 170.879349][ T6570] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -12) [ 170.957600][ T6574] loop5: detected capacity change from 0 to 128 [ 171.058699][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 171.104166][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.196030][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.272408][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.281131][ T6579] loop6: detected capacity change from 0 to 512 [ 171.301767][ T4384] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000074f) [ 171.315261][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.348837][ T4384] FAT-fs (loop5): Filesystem has been set read-only [ 171.374132][ T6579] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 171.378794][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.399901][ T4384] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000074f) [ 171.505194][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.526112][ T6579] EXT4-fs (loop6): 1 truncate cleaned up [ 171.531825][ T6579] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 171.613249][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.743429][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 171.806156][ T4250] EXT4-fs warning (device loop3): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 172.109371][ T4382] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.493096][ T4871] EXT4-fs (loop6): unmounting filesystem. [ 172.536642][ T4382] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.598712][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 172.743854][ T4382] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.834836][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.963673][ T4382] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.034685][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 173.056171][ T14] usb 5-1: config 0 has no interfaces? [ 173.086752][ T14] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 173.114733][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.122783][ T14] usb 5-1: Product: syz [ 173.164483][ T14] usb 5-1: Manufacturer: syz [ 173.169187][ T14] usb 5-1: SerialNumber: syz [ 173.205298][ T14] usb 5-1: config 0 descriptor?? [ 173.387639][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.400830][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.409438][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.417897][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.420190][ T4402] usb 5-1: USB disconnect, device number 7 [ 173.434901][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.442583][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.010171][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.028501][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.044352][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.074659][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.082416][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.090062][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.142525][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.153380][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.162934][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.208511][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.220237][ T6632] loop4: detected capacity change from 0 to 128 [ 174.227131][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 174.235228][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.250739][ T6632] EXT4-fs: Ignoring removed orlov option [ 174.312492][ T6632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.346344][ T6632] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.815803][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 175.021155][ T6626] loop7: detected capacity change from 0 to 32768 [ 175.218725][ T6626] XFS (loop7): Mounting V5 Filesystem [ 175.340609][ T6626] XFS (loop7): Ending clean mount [ 175.408249][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 175.485826][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 175.672442][ T6628] chnl_net:caif_netlink_parms(): no params data found [ 175.853965][ T6672] loop4: detected capacity change from 0 to 512 [ 175.857889][ T5020] XFS (loop7): Unmounting Filesystem [ 175.969239][ T6672] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 175.992139][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.996282][ T6672] EXT4-fs (loop4): 1 truncate cleaned up [ 176.005301][ T6672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.015289][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.023630][ T6612] device bridge_slave_0 entered promiscuous mode [ 176.040976][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.094663][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.138555][ T6612] device bridge_slave_1 entered promiscuous mode [ 176.147589][ T6672] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.517: Directory hole found for htree leaf block 0 [ 176.194565][ T4268] Bluetooth: hci1: command 0x0409 tx timeout [ 176.275088][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 176.360809][ T4382] device hsr_slave_0 left promiscuous mode [ 176.382097][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 176.432298][ T4382] device hsr_slave_1 left promiscuous mode [ 176.440712][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.455519][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.472768][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.510398][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.535585][ T4382] device bridge_slave_1 left promiscuous mode [ 176.541881][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.574567][ T4382] device bridge_slave_0 left promiscuous mode [ 176.580844][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.689886][ T4382] device veth1_macvtap left promiscuous mode [ 176.699481][ T4382] device veth0_macvtap left promiscuous mode [ 176.707205][ T4382] device veth1_vlan left promiscuous mode [ 176.713167][ T4382] device veth0_vlan left promiscuous mode [ 176.894860][ T4828] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.098235][ T4828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.122665][ T4828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.132679][ T4828] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 177.142073][ T4828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.171622][ T4828] usb 5-1: config 0 descriptor?? [ 177.526989][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 177.576314][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 177.598098][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 177.608576][ T4828] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 177.616034][ T4828] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 177.632765][ T4828] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input16 [ 177.677830][ T4828] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 177.718014][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.826265][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.861687][ T14] usb 5-1: USB disconnect, device number 8 [ 178.279260][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 178.354735][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 178.646033][ T4382] bond0 (unregistering): Released all slaves [ 178.741382][ T6624] chnl_net:caif_netlink_parms(): no params data found [ 178.756909][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.792087][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.948230][ T6612] team0: Port device team_slave_0 added [ 179.016982][ T6612] team0: Port device team_slave_1 added [ 179.042385][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.055518][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.065223][ T6628] device bridge_slave_0 entered promiscuous mode [ 179.098259][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.106259][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.125096][ T6628] device bridge_slave_1 entered promiscuous mode [ 179.153539][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.167908][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.203873][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.273076][ T6715] device team_slave_0 entered promiscuous mode [ 179.279986][ T6715] device team_slave_1 entered promiscuous mode [ 179.298983][ T6715] device team_slave_0 left promiscuous mode [ 179.305057][ T6715] device team_slave_1 left promiscuous mode [ 179.427744][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.441908][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.475269][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.527578][ T6624] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.551195][ T6722] loop4: detected capacity change from 0 to 2048 [ 179.558052][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.574373][ T6624] device bridge_slave_0 entered promiscuous mode [ 179.619449][ T6624] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.627557][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.633334][ T6722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.643798][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 179.663399][ T6624] device bridge_slave_1 entered promiscuous mode [ 179.740365][ T6628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.831329][ T6628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.910092][ T6612] device hsr_slave_0 entered promiscuous mode [ 179.943914][ T6612] device hsr_slave_1 entered promiscuous mode [ 179.985944][ T6612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.000348][ T6612] Cannot create hsr debugfs directory [ 180.105357][ T6624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.130419][ T6731] loop7: detected capacity change from 0 to 2048 [ 180.152862][ T6628] team0: Port device team_slave_0 added [ 180.171859][ T6628] team0: Port device team_slave_1 added [ 180.183850][ T6624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.222611][ T6735] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.354550][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 180.414356][ T6624] team0: Port device team_slave_0 added [ 180.434554][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 180.449983][ T6624] team0: Port device team_slave_1 added [ 180.510643][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.524465][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.593415][ T6628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.655268][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 180.772636][ T6628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.780592][ T6628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.878184][ T6628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.945674][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.952772][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.981494][ T6624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.099002][ T6735] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 181.143605][ T6735] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 181.149140][ T4382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.174240][ T6735] Remounting filesystem read-only [ 181.184793][ T4314] NILFS (loop7): discard dirty page: offset=4096, ino=6 [ 181.199504][ T6624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.201203][ T4314] NILFS (loop7): discard dirty block: blocknr=39, size=1024 [ 181.216125][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.217098][ T6624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.234099][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.261360][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.271078][ T4314] NILFS (loop7): discard dirty page: offset=0, ino=3 [ 181.280652][ T6624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.290065][ T4314] NILFS (loop7): discard dirty block: blocknr=42, size=1024 [ 181.302452][ T4314] NILFS (loop7): discard dirty block: blocknr=43, size=1024 [ 181.312683][ T4314] NILFS (loop7): discard dirty block: blocknr=44, size=1024 [ 181.323265][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.332849][ T4314] NILFS (loop7): discard dirty page: offset=65536, ino=3 [ 181.340061][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.349287][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.358466][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.365968][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.376796][ T4314] NILFS (loop7): discard dirty page: offset=69632, ino=3 [ 181.384160][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.384203][ T4382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.401972][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.410748][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.422784][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.433643][ T4314] NILFS (loop7): discard dirty page: offset=73728, ino=3 [ 181.441038][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.468845][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.483366][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.522693][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.539764][ T4314] NILFS (loop7): discard dirty page: offset=77824, ino=3 [ 181.543608][ T6628] device hsr_slave_0 entered promiscuous mode [ 181.550501][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.565147][ T6628] device hsr_slave_1 entered promiscuous mode [ 181.569442][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.579464][ T6628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.587325][ T6628] Cannot create hsr debugfs directory [ 181.598551][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.614539][ T4382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.621026][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.633726][ T4314] NILFS (loop7): discard dirty page: offset=81920, ino=3 [ 181.648785][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.665371][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.674582][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.688517][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.704689][ T4314] NILFS (loop7): discard dirty page: offset=86016, ino=3 [ 181.711824][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.719505][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 181.734900][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.744241][ T4382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.763319][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.770710][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.788582][ T4314] NILFS (loop7): discard dirty page: offset=90112, ino=3 [ 181.796610][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.808413][ T6624] device hsr_slave_0 entered promiscuous mode [ 181.814688][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.821939][ T4314] NILFS (loop7): discard dirty block: blocknr=0, size=1024 [ 181.829512][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.831513][ T6624] device hsr_slave_1 entered promiscuous mode [ 181.845034][ T4314] NILFS (loop7): discard dirty page: offset=196608, ino=3 [ 181.853667][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.863364][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.872816][ T4314] NILFS (loop7): discard dirty block: blocknr=49, size=1024 [ 181.880557][ T4314] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 181.893944][ T6624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.894040][ T5020] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 181.911432][ T6624] Cannot create hsr debugfs directory [ 182.017920][ T5020] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 182.045965][ T5020] NILFS (loop7): discard dirty block: blocknr=35, size=1024 [ 182.053408][ T5020] NILFS (loop7): discard dirty block: blocknr=36, size=1024 [ 182.074650][ T5020] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 182.108212][ T5020] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 182.165491][ T5020] NILFS (loop7): discard dirty page: offset=0, ino=5 [ 182.172252][ T5020] NILFS (loop7): discard dirty block: blocknr=41, size=1024 [ 182.199755][ T5020] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.222030][ T5020] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.262569][ T5020] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.288574][ T5020] NILFS (loop7): discard dirty page: offset=0, ino=4 [ 182.331835][ T5020] NILFS (loop7): discard dirty block: blocknr=40, size=1024 [ 182.342658][ T5020] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.403292][ T5020] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.434668][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 182.434867][ T5020] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 182.480246][ T6612] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 182.514883][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 182.522438][ T6770] loop4: detected capacity change from 0 to 512 [ 182.545321][ T6770] EXT4-fs: Ignoring removed oldalloc option [ 182.648983][ T6770] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.535: Parent and EA inode have the same ino 15 [ 182.673048][ T4382] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.701171][ T6770] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.535: Parent and EA inode have the same ino 15 [ 182.721228][ T6770] EXT4-fs (loop4): 1 orphan inode deleted [ 182.727159][ T6770] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 182.735355][ T6612] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 182.800820][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 182.874512][ T5990] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 183.023641][ T6612] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 183.064518][ T5990] usb 8-1: Using ep0 maxpacket: 16 [ 183.071717][ T5990] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.104520][ T5990] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.124501][ T5990] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 183.133610][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.156670][ T5990] usb 8-1: config 0 descriptor?? [ 183.167518][ T4382] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.216306][ T6612] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 183.272001][ T6783] loop4: detected capacity change from 0 to 256 [ 183.323333][ T6783] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 183.338253][ T4382] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.513906][ T4382] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.617068][ T5990] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 183.637967][ T5990] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 183.674829][ T5990] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 183.689203][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.715440][ T5990] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 183.852671][ T5990] usb 8-1: USB disconnect, device number 5 [ 183.860912][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.880805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.897267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.948007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.971024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.995244][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.002464][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.070765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.096204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.116171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.135468][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.142703][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.195068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.227795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.300635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.314214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.323641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.351600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.361189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.370917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.380574][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.393888][ T6612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.413088][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.529832][ T6806] loop7: detected capacity change from 0 to 512 [ 184.571070][ T6806] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.646776][ T6806] EXT4-fs (loop7): 1 truncate cleaned up [ 184.664825][ T6806] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 184.721590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.726954][ T6806] EXT4-fs (loop7): shut down requested (2) [ 184.756310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.799383][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 185.071625][ T6819] loop7: detected capacity change from 0 to 1024 [ 185.115402][ T6819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.206930][ T6819] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 185.408673][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 185.595890][ T6835] loop7: detected capacity change from 0 to 1024 [ 185.717092][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.725538][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.733104][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.880242][ T11] hfsplus: b-tree write err: -5, ino 4 [ 186.626795][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.640206][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.649718][ T4257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.659159][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.669102][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 186.684714][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.262970][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.285937][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.310300][ T6612] device veth0_vlan entered promiscuous mode [ 187.330702][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.340222][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.442751][ T6612] device veth1_vlan entered promiscuous mode [ 187.457953][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.476703][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.495466][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 187.681892][ T6861] loop7: detected capacity change from 0 to 40427 [ 187.738284][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 187.751527][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.761595][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.792088][ T6861] F2FS-fs (loop7): Found nat_bits in checkpoint [ 187.836149][ T6612] device veth0_macvtap entered promiscuous mode [ 187.877253][ T6624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.911896][ T6861] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 187.916770][ T6612] device veth1_macvtap entered promiscuous mode [ 188.056072][ T5020] syz-executor: attempt to access beyond end of device [ 188.056072][ T5020] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.089573][ T6624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.123314][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.150524][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.161069][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.173013][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.183332][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.194173][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.205845][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.218798][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.231931][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.253165][ T6624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.297646][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.315661][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.328807][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.339121][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.355366][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.374819][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.393753][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.412476][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.423063][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.444768][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.456556][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.467334][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.479134][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.497473][ T6624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.754772][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 188.770236][ T6854] chnl_net:caif_netlink_parms(): no params data found [ 188.782316][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.798063][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.810678][ T6612] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.819620][ T6612] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.828699][ T6612] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.837549][ T6612] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.895614][ T6888] netlink: 'syz.7.551': attribute type 4 has an invalid length. [ 188.903442][ T6888] netlink: 17 bytes leftover after parsing attributes in process `syz.7.551'. [ 189.138651][ T6628] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 189.249439][ T6628] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 189.271214][ T6628] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 189.293678][ T6628] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 189.342608][ T4382] device hsr_slave_0 left promiscuous mode [ 189.358276][ T4382] device hsr_slave_1 left promiscuous mode [ 189.369687][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.377763][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.393251][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.404725][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.422518][ T4382] bridge0: port 3(team0) entered disabled state [ 189.432737][ T4382] device bridge_slave_1 left promiscuous mode [ 189.452315][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.466998][ T4382] device bridge_slave_0 left promiscuous mode [ 189.473338][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.490904][ T4382] device hsr_slave_0 left promiscuous mode [ 189.497641][ T4382] device hsr_slave_1 left promiscuous mode [ 189.504170][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.504689][ T4404] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 189.512615][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.532219][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.540545][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.550026][ T4382] device bridge_slave_1 left promiscuous mode [ 189.564685][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.575808][ T4382] device bridge_slave_0 left promiscuous mode [ 189.582160][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.647221][ T4382] device veth1_macvtap left promiscuous mode [ 189.653423][ T4382] device veth0_macvtap left promiscuous mode [ 189.660426][ T4382] device veth1_vlan left promiscuous mode [ 189.677548][ T4382] device veth0_vlan left promiscuous mode [ 189.692256][ T4382] device veth1_macvtap left promiscuous mode [ 189.701981][ T4382] device veth0_macvtap left promiscuous mode [ 189.712375][ T4382] device veth1_vlan left promiscuous mode [ 189.728672][ T4382] device veth0_vlan left promiscuous mode [ 189.743642][ T4404] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 189.764789][ T4404] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.784598][ T4404] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.814562][ T4404] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.823646][ T4404] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.853796][ T4404] usb 8-1: invalid MIDI out EP 0 [ 189.905652][ T4404] snd-usb-audio: probe of 8-1:27.0 failed with error -22 [ 189.951186][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.068418][ T5990] usb 8-1: USB disconnect, device number 6 [ 190.642350][ T4382] device team_slave_1 left promiscuous mode [ 190.670642][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 190.728342][ T4382] device team_slave_0 left promiscuous mode [ 190.735529][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 190.796152][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.834786][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 191.501495][ T4382] bond0 (unregistering): Released all slaves [ 192.064867][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 192.123476][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 192.166614][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.222340][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.813500][ T4382] bond0 (unregistering): Released all slaves [ 192.924507][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 192.942451][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.950661][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.969966][ T6854] device bridge_slave_0 entered promiscuous mode [ 193.023720][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.055979][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.100201][ T6854] device bridge_slave_1 entered promiscuous mode [ 193.153815][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.186829][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.246641][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.319139][ T6624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.337505][ T6854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.407423][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.416588][ T6854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.417306][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.470777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.479805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.494140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.547905][ T6624] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.622596][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.637577][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.654014][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.661407][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.681809][ T6854] team0: Port device team_slave_0 added [ 193.743640][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.802315][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.818977][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.829296][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.836895][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.850546][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 193.891608][ T6854] team0: Port device team_slave_1 added [ 193.917902][ T6628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.940798][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 193.974831][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.022851][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.053127][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.135113][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.185233][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.198435][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204887][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.225539][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.242091][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.265657][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.275536][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.299011][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.309726][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.371382][ T6854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.399500][ T6628] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.408117][ T6624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.427058][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 194.445735][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.464014][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.479800][ T6854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.495614][ T6854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.564800][ T6854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.617478][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.637006][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.669806][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.677104][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.695190][ T6944] loop7: detected capacity change from 0 to 1024 [ 194.708346][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 194.833916][ T6944] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 194.926514][ T6854] device hsr_slave_0 entered promiscuous mode [ 194.975037][ T6854] device hsr_slave_1 entered promiscuous mode [ 195.004546][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 195.014270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.044369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.090436][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.097650][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.124179][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.140452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.152729][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 195.163726][ T6934] loop8: detected capacity change from 0 to 32768 [ 195.173387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.211053][ T6934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.556 (6934) [ 195.227739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.274604][ T6934] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.295164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.304962][ T6934] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 195.334776][ T6934] BTRFS info (device loop8): metadata ratio 4 [ 195.340930][ T6934] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 195.350206][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.351061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.387741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.414867][ T6934] BTRFS info (device loop8): force lzo compression, level 0 [ 195.422515][ T6934] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 195.450346][ T6628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.481870][ T6628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.512173][ T6934] BTRFS info (device loop8): trying to use backup root at mount time [ 195.531831][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.554821][ T6934] BTRFS info (device loop8): doing ref verification [ 195.561495][ T6934] BTRFS info (device loop8): enabling auto defrag [ 195.563731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.591924][ T6934] BTRFS info (device loop8): disabling tree log [ 195.592872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.634471][ T6934] BTRFS info (device loop8): using free space tree [ 195.648241][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.675436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.764835][ T6624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.921249][ T11] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 195.966512][ T6934] BTRFS warning (device loop8): couldn't read tree root [ 195.973583][ T6934] BTRFS warning (device loop8): try to load backup roots slot 1 [ 196.000141][ T4382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.027670][ T4314] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 196.048318][ T6934] BTRFS warning (device loop8): couldn't read tree root [ 196.056430][ T6934] BTRFS warning (device loop8): try to load backup roots slot 2 [ 196.073540][ T6934] BTRFS error (device loop8): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 196.134121][ T6934] BTRFS warning (device loop8): couldn't read tree root [ 196.143433][ T4382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.149554][ T6934] BTRFS warning (device loop8): try to load backup roots slot 3 [ 196.196487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.215307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.308735][ T6934] BTRFS info (device loop8): enabling ssd optimizations [ 196.317907][ T4382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.344706][ T6934] BTRFS info (device loop8): rebuilding free space tree [ 196.384991][ T6934] BTRFS info (device loop8): checking UUID tree [ 196.500177][ T6966] loop7: detected capacity change from 0 to 32768 [ 196.542966][ T6966] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.560 (6966) [ 196.563490][ T26] audit: type=1804 audit(1732303570.558:22): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.556" name="/newroot/2/file1/bus" dev="loop8" ino=257 res=1 errno=0 [ 196.659144][ T26] audit: type=1804 audit(1732303570.638:23): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.556" name="/newroot/2/file1/bus" dev="loop8" ino=257 res=1 errno=0 [ 196.711363][ T6966] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.741150][ T6966] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 196.786936][ T6966] BTRFS info (device loop7): turning on flush-on-commit [ 196.794085][ T6966] BTRFS info (device loop7): enabling auto defrag [ 196.824543][ T6966] BTRFS info (device loop7): doing ref verification [ 196.831435][ T6966] BTRFS info (device loop7): max_inline at 0 [ 196.904658][ T6966] BTRFS info (device loop7): force clearing of disk cache [ 196.932331][ T4382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.935288][ T6966] BTRFS info (device loop7): turning on sync discard [ 196.977843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.006432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.064898][ T6966] BTRFS info (device loop7): disabling free space tree [ 197.165424][ T6612] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.378197][ T6966] BTRFS info (device loop7): enabling ssd optimizations [ 197.410626][ T6966] BTRFS info (device loop7): rebuilding free space tree [ 197.489516][ T6966] BTRFS info (device loop7): disabling free space tree [ 197.496761][ T6966] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 197.511784][ T6966] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 197.585637][ T6628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.607287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.624181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.649234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.688290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.897114][ T5020] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 197.900182][ T7025] loop8: detected capacity change from 0 to 256 [ 197.930362][ T7025] exfat: Deprecated parameter 'utf8' [ 197.944679][ T7025] exfat: Deprecated parameter 'namecase' [ 197.950425][ T7025] exfat: Deprecated parameter 'utf8' [ 197.981583][ T7025] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 198.156569][ T26] audit: type=1800 audit(1732303572.158:24): pid=7025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.561" name="bus" dev="loop8" ino=1048665 res=0 errno=0 [ 198.295739][ T6612] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000005) [ 198.315825][ T6624] device veth0_vlan entered promiscuous mode [ 198.334767][ T6612] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000005) [ 198.727063][ T6624] device veth1_vlan entered promiscuous mode [ 198.881036][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.896023][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.924216][ T6624] device veth0_macvtap entered promiscuous mode [ 198.970805][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.986877][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.008887][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.037923][ T6624] device veth1_macvtap entered promiscuous mode [ 199.090181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.106188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.135624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.186191][ T4382] tipc: Disabling bearer [ 199.215198][ T4382] tipc: Left network mode [ 199.220670][ T6628] device veth0_vlan entered promiscuous mode [ 199.230783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.247136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.302786][ T6628] device veth1_vlan entered promiscuous mode [ 199.330921][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.355215][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.377428][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.391149][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.402898][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.422052][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.441426][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.561820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.585360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.606935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.621151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.633934][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.649096][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.659689][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.670738][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.686164][ T6624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.706901][ T6624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.752750][ T6624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.785879][ T6854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.856710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.867412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.879741][ T6624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.902233][ T6624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.918477][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.929266][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.929581][ T7035] loop7: detected capacity change from 0 to 40427 [ 199.937897][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.953027][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.953578][ T6624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.981213][ T6624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.990410][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.998048][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.034152][ T6854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.066363][ T7035] F2FS-fs (loop7): Found nat_bits in checkpoint [ 200.136184][ T6854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.160308][ T6854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.174796][ T7035] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 200.229863][ T6628] device veth0_macvtap entered promiscuous mode [ 200.283670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.293230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.310117][ T6628] device veth1_macvtap entered promiscuous mode [ 200.348713][ T5020] syz-executor: attempt to access beyond end of device [ 200.348713][ T5020] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 200.376545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.394681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.513011][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.524792][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.536472][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.548431][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.558774][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.569671][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.580267][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.591396][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.603735][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.666213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.684288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.779427][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.806908][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.821842][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.851390][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.863494][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.910387][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.921359][ T6628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.932523][ T6628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.944177][ T6628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.971949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.981906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.015411][ T6628] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.024225][ T6628] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.035464][ T6628] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.044588][ T6628] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.106734][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.115781][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.164741][ T4296] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 201.225281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.295619][ T6854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.383098][ T4296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 201.395733][ T4296] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 201.406990][ T4296] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.420171][ T4296] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.429551][ T4296] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.439818][ T4296] usb 8-1: config 0 descriptor?? [ 201.450776][ T7046] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 201.488448][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.502455][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.519611][ T7037] chnl_net:caif_netlink_parms(): no params data found [ 201.561511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.647337][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.667507][ T4382] device hsr_slave_0 left promiscuous mode [ 201.702119][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.710572][ T4382] device hsr_slave_1 left promiscuous mode [ 201.728502][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.736319][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.744887][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.752785][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.761475][ T4382] device vlan2 left promiscuous mode [ 201.766937][ T4382] device bond0 left promiscuous mode [ 201.772395][ T4382] device bond_slave_0 left promiscuous mode [ 201.779240][ T4382] device bond_slave_1 left promiscuous mode [ 201.786399][ T4382] bridge0: port 3(vlan2) entered disabled state [ 201.794156][ T4382] device bridge_slave_1 left promiscuous mode [ 201.800830][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.810153][ T4382] device bridge_slave_0 left promiscuous mode [ 201.817187][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.859041][ T4382] device veth1_macvtap left promiscuous mode [ 201.867532][ T4296] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 201.876199][ T4382] device veth0_macvtap left promiscuous mode [ 201.882311][ T4382] device veth1_vlan left promiscuous mode [ 201.890152][ T4296] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 201.895894][ T4382] device veth0_vlan left promiscuous mode [ 201.901437][ T4296] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 202.046953][ T4257] Bluetooth: hci0: command 0x0409 tx timeout [ 202.164865][ T4828] usb 8-1: USB disconnect, device number 7 [ 202.629375][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 202.682792][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 202.743896][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.835979][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.040809][ T7059] loop7: detected capacity change from 0 to 64 [ 203.703979][ T4382] bond0 (unregistering): Released all slaves [ 203.791372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.804657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.812945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.848474][ T6854] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.965699][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.973008][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.981769][ T7037] device bridge_slave_0 entered promiscuous mode [ 204.014876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.030487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.045276][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.052529][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.061602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.070893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.080162][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.087427][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.096402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.107527][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.114793][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 204.149999][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.172700][ T7037] device bridge_slave_1 entered promiscuous mode [ 204.183362][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.209341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.228349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.238601][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.284522][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.313472][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.330436][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.339868][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.369765][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.379174][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.413904][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.475729][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.502508][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.520179][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.565102][ T6854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.639974][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.708088][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.926597][ T7077] loop7: detected capacity change from 0 to 128 [ 204.962266][ T7077] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 205.022735][ T7077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.072595][ T7037] team0: Port device team_slave_0 added [ 205.138224][ T7037] team0: Port device team_slave_1 added [ 205.389405][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.404866][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.518393][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.587989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 205.610032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.646162][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.671730][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.774474][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.779504][ T7090] loop7: detected capacity change from 0 to 512 [ 205.815335][ T7090] EXT4-fs: Ignoring removed orlov option [ 205.825899][ T6854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.843586][ T7092] loop9: detected capacity change from 0 to 1024 [ 205.895297][ T7090] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 205.903246][ T7092] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 205.927823][ T7090] EXT4-fs (loop7): 1 truncate cleaned up [ 205.933526][ T7090] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 205.934748][ T7092] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.081261][ T4382] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.085900][ T7090] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 206.199929][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 206.222773][ T7099] EXT4-fs (loop7): shut down requested (2) [ 206.231498][ T6628] EXT4-fs (loop9): unmounting filesystem. [ 206.304856][ T4382] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.307169][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 206.377245][ T7037] device hsr_slave_0 entered promiscuous mode [ 206.414886][ T7037] device hsr_slave_1 entered promiscuous mode [ 206.428946][ T7037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.457887][ T7037] Cannot create hsr debugfs directory [ 206.576930][ T4382] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.624751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.633528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 206.806044][ T4382] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.028213][ T6854] device veth0_vlan entered promiscuous mode [ 207.062085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.100182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.111277][ T4300] Bluetooth: (null): Invalid header checksum [ 207.118819][ T4300] Bluetooth: (null): Invalid header checksum [ 207.135701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.154290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.170431][ T7117] netlink: 'syz.0.592': attribute type 10 has an invalid length. [ 207.185411][ T7117] device syz_tun entered promiscuous mode [ 207.210725][ T11] Bluetooth: (null): Invalid header checksum [ 207.227807][ T7117] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 207.247779][ T7115] loop7: detected capacity change from 0 to 8192 [ 207.291687][ T6854] device veth1_vlan entered promiscuous mode [ 207.315555][ T11] Bluetooth: (null): Invalid header checksum [ 207.727820][ T7121] input: syz0 as /devices/virtual/input/input18 [ 207.857650][ T7109] loop9: detected capacity change from 0 to 40427 [ 207.924177][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.935160][ T7109] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 207.952615][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.016629][ T7109] F2FS-fs (loop9): invalid crc value [ 208.019327][ T6854] device veth0_macvtap entered promiscuous mode [ 208.084807][ T7109] F2FS-fs (loop9): Found nat_bits in checkpoint [ 208.086219][ T6854] device veth1_macvtap entered promiscuous mode [ 208.215089][ T7109] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 208.287105][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 208.320769][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.333571][ T7109] syz.9.588: attempt to access beyond end of device [ 208.333571][ T7109] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.349629][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.384006][ T7119] loop0: detected capacity change from 0 to 40427 [ 208.402687][ T7119] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 208.423666][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.430853][ T7119] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 208.472912][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.493620][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.506384][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.517708][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.542997][ T7119] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.569305][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.588831][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.614437][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.626870][ T6628] syz-executor: attempt to access beyond end of device [ 208.626870][ T6628] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 208.641497][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.695202][ T7119] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 208.702395][ T7119] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.767280][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.788378][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.812994][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.844530][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.869842][ T7119] Process accounting resumed [ 208.904671][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.954449][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.964315][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.004518][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.023069][ T6854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.040302][ T6854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.056964][ T6854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.095343][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.7.600'. [ 209.151566][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.174254][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.198671][ T6854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.214797][ T6854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.238888][ T7143] loop9: detected capacity change from 0 to 64 [ 209.264486][ T6854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.273367][ T7143] hfs: unable to locate alternate MDB [ 209.286187][ T7143] hfs: continuing without an alternate MDB [ 209.293652][ T6854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.999066][ T7156] capability: warning: `syz.7.607' uses 32-bit capabilities (legacy support in use) [ 210.302265][ T7164] loop7: detected capacity change from 0 to 2048 [ 210.329077][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.348543][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.372467][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.383737][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.450889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.462381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.660054][ T7037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.695382][ T7037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.802019][ T4540] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 210.825303][ T4540] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.954180][ T7176] loop9: detected capacity change from 0 to 2048 [ 210.998179][ T7037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.046417][ T7176] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 211.083515][ T7037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.094645][ T4296] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 211.300409][ T7170] hid-generic 0000:0000:0000.000C: pid 7170 passed too large report [ 211.323883][ T11] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.360009][ T4296] usb 8-1: unable to get BOS descriptor or descriptor too short [ 211.387937][ T4296] usb 8-1: no configurations [ 211.392727][ T4296] usb 8-1: can't read configurations, error -22 [ 211.401124][ T11] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 211.416845][ T11] EXT4-fs (loop9): This should not happen!! Data will be lost [ 211.416845][ T11] [ 211.429997][ T11] EXT4-fs (loop9): Total free blocks count 0 [ 211.436702][ T4382] device hsr_slave_0 left promiscuous mode [ 211.443217][ T11] EXT4-fs (loop9): Free/Dirty block details [ 211.451546][ T4382] device hsr_slave_1 left promiscuous mode [ 211.458987][ T11] EXT4-fs (loop9): free_blocks=2415919104 [ 211.465149][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.472615][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.482189][ T11] EXT4-fs (loop9): dirty_blocks=16 [ 211.487521][ T11] EXT4-fs (loop9): Block reservation details [ 211.493535][ T11] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 211.505866][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.513317][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.521253][ T6628] EXT4-fs (loop9): unmounting filesystem. [ 211.551735][ T4382] device bridge_slave_1 left promiscuous mode [ 211.560980][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.599784][ T4382] device bridge_slave_0 left promiscuous mode [ 211.608426][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.668782][ T4382] device veth1_macvtap left promiscuous mode [ 211.681903][ T4382] device veth0_macvtap left promiscuous mode [ 211.689116][ T4382] device veth1_vlan left promiscuous mode [ 211.695197][ T4382] device veth0_vlan left promiscuous mode [ 211.844505][ T4540] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 212.036666][ T4540] usb 1-1: config 0 has no interfaces? [ 212.048106][ T4540] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 212.079038][ T4540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.103741][ T4540] usb 1-1: config 0 descriptor?? [ 212.165614][ T7194] loop7: detected capacity change from 0 to 1024 [ 212.176896][ T7190] loop9: detected capacity change from 0 to 32768 [ 212.215829][ T7194] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 212.272508][ T7194] EXT4-fs (loop7): orphan cleanup on readonly fs [ 212.301950][ T7194] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.620: Freeing blocks not in datazone - block = 0, count = 4096 [ 212.329024][ T7194] EXT4-fs (loop7): 1 orphan inode deleted [ 212.336671][ T4540] usb 1-1: USB disconnect, device number 2 [ 212.363120][ T7190] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 212.366832][ T7194] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 212.431691][ T6628] ocfs2: Unmounting device (7,9) on (node local) [ 212.543497][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 212.996474][ T7205] input: syz0 as /devices/virtual/input/input19 [ 213.263617][ T7211] loop7: detected capacity change from 0 to 256 [ 213.340612][ T7211] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 213.566135][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 213.720681][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 213.842484][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.928806][ T7228] 9pnet: p9_errstr2errno: server reported unknown error @#@ [ 213.979511][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.572279][ T7242] loop0: detected capacity change from 0 to 8 [ 215.303850][ T4382] bond0 (unregistering): Released all slaves [ 215.412622][ T7192] netlink: 'syz.1.619': attribute type 13 has an invalid length. [ 215.421223][ T7192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.619'. [ 215.434804][ T7192] syz_tun: refused to change device tx_queue_len [ 215.442064][ T7192] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 215.783859][ T7261] loop0: detected capacity change from 0 to 64 [ 215.792430][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.894051][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.944224][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.954900][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.014001][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.075255][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.136205][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.143356][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.172550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.213483][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.257272][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.271680][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.278976][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.360450][ T7272] device bridge_slave_1 left promiscuous mode [ 216.395177][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.454318][ T7272] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 216.482671][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.506950][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.575123][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.613825][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.717035][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.765561][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.816957][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.874770][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.894965][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.910757][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.955874][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.993712][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.251422][ T7266] loop7: detected capacity change from 0 to 32768 [ 217.300321][ T7266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.649 (7266) [ 217.403639][ T7266] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.448438][ T7266] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 217.531176][ T7266] BTRFS info (device loop7): using free space tree [ 217.812314][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.825880][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.905530][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.004940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.021621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.037901][ T7266] BTRFS info (device loop7): enabling ssd optimizations [ 218.121708][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.147937][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.180455][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.207905][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.220587][ T7343] loop9: detected capacity change from 0 to 256 [ 218.236036][ T7037] device veth0_vlan entered promiscuous mode [ 218.246074][ T7337] UBIFS error (pid: 7337): cannot open "./file0", error -22 [ 218.289184][ T7037] device veth1_vlan entered promiscuous mode [ 218.423768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.472490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.492324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.522688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.578210][ T7037] device veth0_macvtap entered promiscuous mode [ 218.590966][ T5020] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.634230][ T7037] device veth1_macvtap entered promiscuous mode [ 218.731343][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.770637][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.795635][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.816054][ T7352] loop9: detected capacity change from 0 to 2048 [ 218.833004][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.864523][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.914612][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.945652][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.952280][ T7352] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 218.994949][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.071588][ T26] audit: type=1800 audit(1732303593.068:25): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.668" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 219.110072][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.163485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 219.185650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.207468][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.239269][ T6628] EXT4-fs (loop9): unmounting filesystem. [ 219.244855][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.273518][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.295780][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.360138][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.393978][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.437754][ T7037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.470842][ T7037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.507141][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.544287][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.569400][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.621137][ T7037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.645472][ T7037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.671077][ T7037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.685665][ T7373] loop7: detected capacity change from 0 to 2048 [ 219.699887][ T7037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.732377][ T7373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.861064][ T26] audit: type=1800 audit(1732303593.858:26): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.667" name="bus" dev="loop7" ino=1357 res=0 errno=0 [ 219.995358][ T7385] loop1: detected capacity change from 0 to 1024 [ 220.047276][ T7386] netlink: 'syz.9.675': attribute type 13 has an invalid length. [ 220.071497][ T7386] netlink: 152 bytes leftover after parsing attributes in process `syz.9.675'. [ 220.095949][ T7386] syz_tun: refused to change device tx_queue_len [ 220.102362][ T7386] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 220.139321][ T6955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.167630][ T6955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.263487][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.293230][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.315544][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.324646][ T4541] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 220.405779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.479799][ T7394] loop9: detected capacity change from 0 to 256 [ 220.536375][ T4541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 220.557576][ T4541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.580953][ T7394] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 220.589356][ T4541] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33738, setting to 1024 [ 220.610106][ T7399] loop2: detected capacity change from 0 to 128 [ 220.626907][ T4541] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 220.684491][ T4541] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 220.720695][ T4541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.748932][ T4541] usb 2-1: config 0 descriptor?? [ 220.768836][ T7385] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.798397][ T4541] usb 2-1: MIDIStreaming interface descriptor not found [ 221.076669][ T4831] usb 2-1: USB disconnect, device number 3 [ 221.552581][ T7392] loop0: detected capacity change from 0 to 32768 [ 221.595253][ T7392] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.677 (7392) [ 221.627643][ T7392] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.691381][ T7392] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 221.744779][ T7392] BTRFS info (device loop0): using free space tree [ 222.070515][ T7392] BTRFS info (device loop0): enabling ssd optimizations [ 222.205737][ T7434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.299999][ T6624] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.332694][ T7450] netlink: 'syz.7.695': attribute type 13 has an invalid length. [ 222.375166][ T7450] netlink: 152 bytes leftover after parsing attributes in process `syz.7.695'. [ 222.386311][ T7450] syz_tun: refused to change device tx_queue_len [ 222.392701][ T7450] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 222.622098][ T7414] loop2: detected capacity change from 0 to 32768 [ 222.645433][ T7414] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.681 (7414) [ 222.681061][ T7414] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 222.697566][ T7414] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 222.712451][ T7414] BTRFS info (device loop2): enabling disk space caching [ 222.771172][ T7414] BTRFS info (device loop2): force clearing of disk cache [ 222.783902][ T7414] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 222.809821][ T7414] BTRFS info (device loop2): use zstd compression, level 3 [ 222.825831][ T7414] BTRFS info (device loop2): turning on sync discard [ 222.841342][ T7414] BTRFS info (device loop2): disk space caching is enabled [ 222.926518][ T7434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.123334][ T7414] BTRFS info (device loop2): enabling ssd optimizations [ 223.170565][ T7414] BTRFS info (device loop2): rebuilding free space tree [ 223.215300][ T7414] BTRFS info (device loop2): disabling free space tree [ 223.222267][ T7414] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.278867][ T7414] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.300042][ T7434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.354838][ T7489] netlink: 'syz.7.690': attribute type 10 has an invalid length. [ 223.413436][ T7489] device syz_tun entered promiscuous mode [ 223.483685][ T7489] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 223.551760][ T4451] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 223.623458][ T4451] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.641489][ T7037] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 223.692008][ T7434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.848794][ T7500] loop9: detected capacity change from 0 to 128 [ 223.878128][ T4402] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 224.069914][ T7491] hid-generic 0000:0000:0000.000D: pid 7491 passed too large report [ 224.118449][ T4402] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.131878][ T7434] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.135287][ T4402] usb 1-1: no configurations [ 224.164627][ T4402] usb 1-1: can't read configurations, error -22 [ 224.207238][ T7434] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.263763][ T7434] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.368600][ T7434] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.852339][ T7525] loop9: detected capacity change from 0 to 512 [ 224.883612][ T7525] EXT4-fs: Ignoring removed orlov option [ 224.909437][ T7525] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 224.923309][ T7532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.711'. [ 224.936470][ T7532] netlink: 'syz.7.711': attribute type 14 has an invalid length. [ 224.960268][ T7532] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.970088][ T7532] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.978997][ T7532] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.987904][ T7532] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.000538][ T7525] EXT4-fs (loop9): 1 truncate cleaned up [ 225.006522][ T7525] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 225.013474][ T7532] device vxlan0 entered promiscuous mode [ 225.044480][ T7525] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 225.100395][ T7531] netlink: 'syz.0.700': attribute type 13 has an invalid length. [ 225.145151][ T7531] netlink: 152 bytes leftover after parsing attributes in process `syz.0.700'. [ 225.168358][ T7538] EXT4-fs (loop9): shut down requested (2) [ 225.221892][ T7531] syz_tun: refused to change device tx_queue_len [ 225.234922][ T7531] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 225.301417][ T6628] EXT4-fs (loop9): unmounting filesystem. [ 225.550847][ T26] audit: type=1326 audit(1732303599.548:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.9.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0e57e819 code=0x0 [ 225.985874][ T7511] loop2: detected capacity change from 0 to 40427 [ 226.027971][ T7511] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 226.077986][ T7511] F2FS-fs (loop2): invalid crc value [ 226.114770][ T7511] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.164914][ T11] tipc: Subscription rejected, illegal request [ 226.312130][ T7511] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.374644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 226.460844][ T7537] loop1: detected capacity change from 0 to 40427 [ 226.490066][ T7537] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 226.526835][ T7537] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 226.560422][ T7511] syz.2.703: attempt to access beyond end of device [ 226.560422][ T7511] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.609990][ T7566] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 226.679915][ T7537] F2FS-fs (loop1): Found nat_bits in checkpoint [ 226.825424][ T7037] syz-executor: attempt to access beyond end of device [ 226.825424][ T7037] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 226.970799][ T7577] loop0: detected capacity change from 0 to 128 [ 226.989361][ T7537] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 227.009923][ T7537] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 227.038492][ T7577] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.103330][ T7537] Process accounting resumed [ 227.164702][ T7577] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.578503][ T6624] EXT4-fs (loop0): unmounting filesystem. [ 228.562230][ T7602] loop2: detected capacity change from 0 to 512 [ 228.641809][ T7602] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 228.692816][ T7582] loop9: detected capacity change from 0 to 32768 [ 228.703984][ T7602] EXT4-fs (loop2): 1 truncate cleaned up [ 228.709922][ T7602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 228.723956][ T7582] XFS (loop9): Mounting V5 Filesystem [ 228.866519][ T7582] XFS (loop9): Ending clean mount [ 228.875045][ T7602] loop2: detected capacity change from 512 to 0 [ 228.923327][ T4383] loop: Write error at byte offset 9223372036854776831, length 1024. [ 229.000333][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 229.010001][ C1] buffer_io_error: 6 callbacks suppressed [ 229.010018][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 229.019260][ T7582] XFS (loop9): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 229.025180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 229.036333][ T7617] EXT4-fs (loop2): I/O error while writing superblock [ 229.044866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 229.092767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 229.169200][ T7582] XFS (loop9): Unmount and run xfs_repair [ 229.254545][ T7582] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 229.284288][ T7037] EXT4-fs (loop2): unmounting filesystem. [ 229.323850][ T7582] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 229.333728][ T4383] loop: Write error at byte offset 9223372036854776831, length 1024. [ 229.354608][ C1] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 229.364210][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 229.369191][ T7582] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 229.382074][ T7037] EXT4-fs (loop2): I/O error while writing superblock [ 229.419559][ T7582] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 229.489132][ T7630] loop7: detected capacity change from 0 to 512 [ 229.505140][ T7582] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 229.518644][ T7582] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 229.560831][ T7630] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 229.567015][ T7582] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 229.579162][ T7582] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 229.589549][ T7582] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 229.599826][ T7582] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 229.623814][ T7582] XFS (loop9): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 229.640624][ T7582] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 229.786215][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 229.908130][ T7643] loop1: detected capacity change from 0 to 64 [ 230.287645][ T7656] loop1: detected capacity change from 0 to 1024 [ 230.294786][ T6628] XFS (loop9): Unmounting Filesystem [ 230.310787][ T7656] EXT4-fs: Ignoring removed oldalloc option [ 230.457119][ T7656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.749811][ T6854] EXT4-fs (loop1): unmounting filesystem. [ 230.911631][ T7668] loop1: detected capacity change from 0 to 512 [ 230.973935][ T7649] loop7: detected capacity change from 0 to 32768 [ 230.983921][ T7668] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 231.014743][ T7649] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.729 (7649) [ 231.080517][ T7668] EXT4-fs (loop1): 1 truncate cleaned up [ 231.124557][ T7668] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 231.145543][ T7649] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 231.189133][ T7649] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 231.254484][ T7649] BTRFS info (device loop7): using free space tree [ 231.284601][ T7668] loop1: detected capacity change from 512 to 0 [ 231.336772][ T55] loop: Write error at byte offset 9223372036854776831, length 1024. [ 231.367155][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 231.376879][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 231.385408][ T7676] EXT4-fs (loop1): I/O error while writing superblock [ 231.395570][ T7660] loop0: detected capacity change from 0 to 32768 [ 231.489078][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.737'. [ 231.508496][ T7692] netlink: 'syz.9.737': attribute type 14 has an invalid length. [ 231.533383][ T7692] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.542373][ T7692] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.551891][ T7692] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.561078][ T7692] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.578066][ T7660] XFS (loop0): Mounting V5 Filesystem [ 231.594845][ T7692] device vxlan0 entered promiscuous mode [ 231.627095][ T6854] EXT4-fs (loop1): unmounting filesystem. [ 231.708051][ T7649] BTRFS info (device loop7): enabling ssd optimizations [ 231.719550][ T4314] loop: Write error at byte offset 9223372036854776831, length 1024. [ 231.743261][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 231.752897][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 231.761902][ T6854] EXT4-fs (loop1): I/O error while writing superblock [ 231.852356][ T7660] XFS (loop0): Ending clean mount [ 231.899425][ T7660] XFS (loop0): Quotacheck needed: Please wait. [ 231.955416][ T5989] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 231.996892][ T7660] XFS (loop0): Quotacheck: Done. [ 232.060023][ T5020] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.154619][ T5989] usb 3-1: Using ep0 maxpacket: 16 [ 232.163349][ T5989] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 232.189443][ T5989] usb 3-1: config 0 has no interface number 0 [ 232.206274][ T5989] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 232.221986][ T5989] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 232.251678][ T5989] usb 3-1: config 0 interface 41 has no altsetting 0 [ 232.323270][ T5989] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 232.344490][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.352672][ T5989] usb 3-1: Product: syz [ 232.369817][ T5989] usb 3-1: Manufacturer: syz [ 232.391694][ T5989] usb 3-1: SerialNumber: syz [ 232.426770][ T5989] usb 3-1: config 0 descriptor?? [ 232.437324][ T7711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.447146][ T7711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.517001][ T6624] XFS (loop0): Unmounting Filesystem [ 232.684831][ T7711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.716031][ T7711] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 233.166063][ T7748] netlink: 'syz.9.746': attribute type 4 has an invalid length. [ 233.173842][ T7748] netlink: 17 bytes leftover after parsing attributes in process `syz.9.746'. [ 233.553413][ T5989] CoreChips: probe of 3-1:0.41 failed with error -71 [ 233.559382][ T5989] usb 3-1: USB disconnect, device number 4 [ 233.988138][ T7747] loop7: detected capacity change from 0 to 32768 [ 234.106092][ T7747] XFS (loop7): Mounting V5 Filesystem [ 234.184649][ T5989] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 234.279537][ T7747] XFS (loop7): Ending clean mount [ 234.350922][ T7783] loop0: detected capacity change from 0 to 2048 [ 234.383396][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.411532][ T5989] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 234.444742][ T7747] XFS (loop7): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 234.447771][ T7783] overlayfs: upper fs needs to support d_type. [ 234.472673][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.510101][ T5989] usb 2-1: config 0 descriptor?? [ 234.511057][ T7747] XFS (loop7): Unmount and run xfs_repair [ 234.580353][ T7747] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 234.625309][ T7747] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 234.634232][ T7747] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 234.712762][ T7747] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 234.782855][ T7747] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 234.824513][ T7747] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 234.882264][ T7747] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 234.921827][ T7747] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 234.946579][ T5989] hid (null): unknown global tag 0xe [ 234.952995][ T7747] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 234.976531][ T7747] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 234.990456][ T5989] elecom 0003:056E:00E6.000E: unknown main item tag 0x7 [ 234.998912][ T5989] elecom 0003:056E:00E6.000E: unknown global tag 0xe [ 235.006273][ T5989] elecom 0003:056E:00E6.000E: item 0 0 1 14 parsing failed [ 235.014244][ T5989] elecom: probe of 0003:056E:00E6.000E failed with error -22 [ 235.029376][ T7747] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 235.075848][ T26] audit: type=1326 audit(1732303609.058:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7798 comm="syz.2.757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f009037e819 code=0x0 [ 235.081437][ T7747] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 235.116146][ T7794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.154053][ T5989] usb 2-1: USB disconnect, device number 4 [ 235.249956][ T7794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.334632][ T4453] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 235.353766][ T7794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.489867][ T7794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.556658][ T4453] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 235.574924][ T4453] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.595320][ T4453] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.624745][ T4453] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.633931][ T4453] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.677766][ T4453] usb 10-1: invalid MIDI out EP 0 [ 235.761227][ T5020] XFS (loop7): Unmounting Filesystem [ 235.889766][ T7794] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.909649][ T7794] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.927582][ T4453] snd-usb-audio: probe of 10-1:27.0 failed with error -22 [ 235.977470][ T4453] usb 10-1: USB disconnect, device number 2 [ 235.986295][ T7794] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.061443][ T7794] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.152667][ T55] tipc: Subscription rejected, illegal request [ 236.213461][ T7816] loop1: detected capacity change from 0 to 4096 [ 236.356522][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.439849][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.459834][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.478810][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.499796][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.534791][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.564546][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.583070][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.633408][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.668728][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.709475][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.729058][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.739400][ T7838] loop9: detected capacity change from 0 to 64 [ 236.765793][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.797705][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.831409][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.860068][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.880309][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.910643][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.928567][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.946418][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.966844][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 236.995068][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.015332][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.041576][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.059386][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.073840][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.096517][ T4538] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 237.103638][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.134161][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.164517][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.171983][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.212601][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.221930][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.250142][ T4453] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 237.295039][ T4453] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 237.314811][ T4538] usb 8-1: Using ep0 maxpacket: 16 [ 237.322737][ T4538] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 237.367578][ T4538] usb 8-1: config 0 has no interface number 0 [ 237.390903][ T4538] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 237.431815][ T4538] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.486755][ T4538] usb 8-1: config 0 interface 41 has no altsetting 0 [ 237.507917][ T4538] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 237.522112][ T7855] loop0: detected capacity change from 0 to 4096 [ 237.533964][ T4538] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.545354][ T4299] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 237.555497][ T4538] usb 8-1: Product: syz [ 237.559736][ T4538] usb 8-1: Manufacturer: syz [ 237.584754][ T4538] usb 8-1: SerialNumber: syz [ 237.623903][ T4538] usb 8-1: config 0 descriptor?? [ 237.643321][ T7861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.674833][ T7842] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 237.718009][ T7842] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 237.766119][ T4299] usb 3-1: config 0 has no interfaces? [ 237.790941][ T4299] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 237.831121][ T4299] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 237.855572][ T4299] usb 3-1: Product: syz [ 237.860053][ T4299] usb 3-1: Manufacturer: syz [ 237.890767][ T4299] usb 3-1: SerialNumber: syz [ 237.941674][ T4299] usb 3-1: config 0 descriptor?? [ 237.974821][ T7842] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 237.999399][ T7842] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 238.164021][ T5989] usb 3-1: USB disconnect, device number 5 [ 238.830148][ T4538] CoreChips: probe of 8-1:0.41 failed with error -71 [ 238.863758][ T4538] usb 8-1: USB disconnect, device number 10 [ 238.884164][ T7863] loop1: detected capacity change from 0 to 32768 [ 238.999829][ T7863] XFS (loop1): Mounting V5 Filesystem [ 239.105963][ T7863] XFS (loop1): Ending clean mount [ 239.249473][ T7863] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 239.317614][ T7863] XFS (loop1): Unmount and run xfs_repair [ 239.323487][ T7863] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 239.346452][ T4383] tipc: Subscription rejected, illegal request [ 239.356616][ T7863] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 239.394689][ T7863] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 239.426797][ T7863] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 239.494680][ T7863] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 239.552940][ T7863] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 239.597085][ T7863] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 239.609679][ T7913] loop9: detected capacity change from 0 to 128 [ 239.634937][ T7863] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 239.654521][ T7863] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 239.675934][ T7863] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 239.703861][ T7863] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573). Shutting down filesystem. [ 239.752807][ T7913] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 239.762282][ T7913] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.844927][ T7863] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 239.948740][ T6628] EXT4-fs (loop9): unmounting filesystem. [ 240.062029][ T7924] Bluetooth: MGMT ver 1.22 [ 240.481877][ T6854] XFS (loop1): Unmounting Filesystem [ 240.603930][ T7908] loop0: detected capacity change from 0 to 40427 [ 240.655866][ T7908] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 240.668622][ T7908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 240.791187][ T7908] F2FS-fs (loop0): Found nat_bits in checkpoint [ 240.955408][ T7908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 240.975223][ T7908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 241.113746][ T7908] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 241.150684][ T7908] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 241.537209][ T7963] F2FS-fs (loop0): Inconsistent i_blocks, ino:8, iblocks:0, sectors:8 [ 241.679950][ T7973] loop7: detected capacity change from 0 to 128 [ 241.778683][ T7973] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 241.812677][ T7945] loop9: detected capacity change from 0 to 40427 [ 241.838229][ T7973] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.917941][ T7945] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 241.972875][ T7945] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 242.074211][ T7945] F2FS-fs (loop9): Found nat_bits in checkpoint [ 242.131680][ T7966] loop1: detected capacity change from 0 to 32768 [ 242.266745][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 242.318711][ T7945] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 242.337627][ T7945] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 242.531974][ T26] audit: type=1804 audit(1732303616.528:29): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.786" name="/newroot/54/bus/bus" dev="loop9" ino=10 res=1 errno=0 [ 244.088780][ T7989] loop7: detected capacity change from 0 to 4096 [ 245.976162][ T8019] loop0: detected capacity change from 0 to 1024 [ 245.983945][ T8019] EXT4-fs: Ignoring removed i_version option [ 246.054749][ T8019] EXT4-fs: Ignoring removed bh option [ 246.155407][ T8019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.239188][ T26] audit: type=1326 audit(1732303620.238:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8036 comm="syz.7.806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f993bf7e819 code=0x0 [ 246.289349][ T8019] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 246.444479][ T6624] EXT4-fs (loop0): unmounting filesystem. [ 246.538530][ T8042] loop2: detected capacity change from 0 to 4096 [ 246.618032][ T8048] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.107634][ T4538] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 247.304495][ T4538] usb 10-1: Using ep0 maxpacket: 16 [ 247.310539][ T8068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 247.311735][ T4538] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.390346][ T4538] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.400841][ T4538] usb 10-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 247.441415][ T4538] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.508060][ T4538] usb 10-1: config 0 descriptor?? [ 247.941438][ T4538] hid (null): unknown global tag 0xb1 [ 247.992495][ T4538] macally 0003:060B:0001.0010: unexpected long global item [ 248.005163][ T4538] macally: probe of 0003:060B:0001.0010 failed with error -22 [ 248.143429][ T4453] usb 10-1: USB disconnect, device number 3 [ 248.238328][ T8088] loop1: detected capacity change from 0 to 128 [ 248.464529][ T4540] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 248.664534][ T4540] usb 8-1: Using ep0 maxpacket: 32 [ 248.680256][ T4540] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 248.720006][ T4540] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.756833][ T4540] usb 8-1: Product: syz [ 248.777307][ T4540] usb 8-1: Manufacturer: syz [ 248.794984][ T4540] usb 8-1: SerialNumber: syz [ 248.825203][ T4540] usb 8-1: config 0 descriptor?? [ 249.241036][ T4540] airspy 8-1:0.0: Board ID: 00 [ 249.246026][ T4540] airspy 8-1:0.0: Firmware version: [ 249.621374][ T8125] loop2: detected capacity change from 0 to 128 [ 249.730143][ T8109] loop9: detected capacity change from 0 to 32768 [ 249.806508][ T8109] ERROR: (device loop9): diAllocBit: iag inconsistent [ 249.806508][ T8109] [ 249.845623][ T8109] ialloc: diAlloc returned -5! [ 249.893136][ T11] kworker/u4:1: attempt to access beyond end of device [ 249.893136][ T11] loop2: rw=1, sector=145, nr_sectors = 216 limit=128 [ 250.046568][ T4540] airspy 8-1:0.0: usb_control_msg() failed -71 request 0f [ 250.076856][ T4540] airspy 8-1:0.0: Registered as swradio24 [ 250.076885][ T4540] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 250.092597][ T4540] usb 8-1: USB disconnect, device number 11 [ 250.418517][ T8140] loop2: detected capacity change from 0 to 256 [ 250.684043][ T8148] loop1: detected capacity change from 0 to 128 [ 250.745740][ T8148] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.785488][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.7.833'. [ 250.822877][ T8148] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.162348][ T4540] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 251.366488][ T4540] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 251.384506][ T4540] usb 10-1: config 0 has no interface number 0 [ 251.401464][ T8168] loop7: detected capacity change from 0 to 1024 [ 251.408534][ T4540] usb 10-1: too many endpoints for config 0 interface 6 altsetting 0: 32, using maximum allowed: 30 [ 251.440450][ T4540] usb 10-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 251.507278][ T4540] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.529105][ T4540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.540762][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 251.575957][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 251.579298][ T4540] usb 10-1: config 0 descriptor?? [ 251.647691][ T4540] cp210x 10-1:0.6: cp210x converter detected [ 252.042075][ T4540] cp210x 10-1:0.6: failed to get vendor val 0x000e size 3: -32 [ 252.080183][ T26] audit: type=1326 audit(1732303626.078:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8178 comm="syz.0.841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6da677e819 code=0x0 [ 252.127288][ T8181] loop2: detected capacity change from 0 to 512 [ 252.141834][ T8181] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 252.159822][ T8181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 252.172854][ T8181] System zones: 1-12 [ 252.215293][ T8181] EXT4-fs (loop2): 1 truncate cleaned up [ 252.229018][ T8181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 252.260283][ T4540] cp210x 10-1:0.6: GPIO initialisation failed: -19 [ 252.276307][ T4540] usb 10-1: cp210x converter now attached to ttyUSB0 [ 252.364535][ T8181] loop2: detected capacity change from 512 to 64 [ 252.401882][ T8189] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -12) [ 252.437382][ T8166] loop1: detected capacity change from 0 to 40427 [ 252.473161][ T8166] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 252.493457][ T4453] usb 10-1: USB disconnect, device number 4 [ 252.508365][ T8166] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 252.518119][ T4453] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.535576][ T4453] cp210x 10-1:0.6: device disconnected [ 252.543436][ T8166] F2FS-fs (loop1): invalid crc value [ 252.576415][ T8166] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.596097][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.636349][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.661584][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.698633][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.723327][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.742644][ T8166] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 252.751034][ T8166] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.771420][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.789857][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.817690][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.842319][ T7037] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 252.921520][ T8166] syz.1.836: attempt to access beyond end of device [ 252.921520][ T8166] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.155141][ T6854] syz-executor: attempt to access beyond end of device [ 253.155141][ T6854] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 253.221439][ T8208] gfs2: gfs2 mount does not exist [ 253.700842][ T7037] EXT4-fs (loop2): unmounting filesystem. [ 253.914258][ T8218] loop0: detected capacity change from 0 to 512 [ 253.930646][ T4383] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.020344][ T8218] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.141849][ T8218] EXT4-fs (loop0): 1 truncate cleaned up [ 254.181000][ T8218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 254.221405][ T4383] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.570424][ T4383] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.858699][ T6624] bond0: (slave syz_tun): Releasing backup interface [ 254.911138][ T8244] loop7: detected capacity change from 0 to 256 [ 254.957234][ T6624] EXT4-fs (loop0): unmounting filesystem. [ 254.984089][ T4383] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.011833][ T8244] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 255.167038][ T26] audit: type=1800 audit(1732303629.168:32): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.858" name="file0" dev="loop7" ino=1048683 res=0 errno=0 [ 255.170571][ T8212] loop9: detected capacity change from 0 to 32768 [ 255.268036][ T26] audit: type=1800 audit(1732303629.208:33): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.858" name="file0" dev="loop7" ino=1048683 res=0 errno=0 [ 255.289488][ T8244] exFAT-fs (loop7): error, invalid size(size(80) > aligned(9223372036854777344) [ 255.289488][ T8244] [ 255.317715][ T8212] XFS: attr2 mount option is deprecated. [ 255.323434][ T8212] XFS: noikeep mount option is deprecated. [ 255.383512][ T8244] exFAT-fs (loop7): Filesystem has been set read-only [ 255.575380][ T8212] XFS (loop9): Mounting V5 Filesystem [ 255.637307][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643727][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.736461][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.749851][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.764852][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.773651][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.784661][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.794740][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.900185][ T8212] XFS (loop9): Ending clean mount [ 255.915639][ T8212] XFS (loop9): Quotacheck needed: Please wait. [ 256.066547][ T8212] XFS (loop9): Quotacheck: Done. [ 256.084882][ T4454] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.167276][ T8212] XFS (loop9): Unmounting Filesystem [ 256.318188][ T4454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.332598][ T4454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.350811][ T4454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.375305][ T4454] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.394614][ T4454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.462910][ T4454] usb 2-1: config 0 descriptor?? [ 256.568614][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.595960][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.605438][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.626338][ T4257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.633985][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.642644][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.886655][ T4454] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 256.926131][ T4454] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 256.945666][ T4454] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 257.059487][ T8270] loop7: detected capacity change from 0 to 32768 [ 257.156539][ T4454] usb 2-1: USB disconnect, device number 5 [ 257.531383][ T8263] chnl_net:caif_netlink_parms(): no params data found [ 257.954619][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 258.200272][ T8321] loop9: detected capacity change from 0 to 256 [ 258.218638][ T8321] exFAT-fs (loop9): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 258.324479][ T4299] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 258.360488][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.400199][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.416561][ T8263] device bridge_slave_0 entered promiscuous mode [ 258.526290][ T4299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.555785][ T4299] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.605712][ T4299] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 258.636040][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.674702][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 258.690410][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.693752][ T4299] usb 8-1: config 0 descriptor?? [ 258.697821][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.710948][ T8263] device bridge_slave_1 entered promiscuous mode [ 258.755439][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.777470][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.910107][ T4383] device hsr_slave_0 left promiscuous mode [ 258.948230][ T4383] device hsr_slave_1 left promiscuous mode [ 258.971215][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.004572][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.030284][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.058336][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.105466][ T4383] device bridge_slave_1 left promiscuous mode [ 259.124858][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.138081][ T4299] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 259.163239][ T4299] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 259.187507][ T4299] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0012/input/input20 [ 259.208130][ T4383] device bridge_slave_0 left promiscuous mode [ 259.228423][ T4299] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 259.244827][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.381942][ T4383] device veth1_macvtap left promiscuous mode [ 259.388691][ T4538] usb 8-1: USB disconnect, device number 12 [ 259.394828][ T4383] device veth0_macvtap left promiscuous mode [ 259.394972][ T4383] device veth1_vlan left promiscuous mode [ 259.448376][ T4383] device veth0_vlan left promiscuous mode [ 259.521532][ T8345] loop9: detected capacity change from 0 to 128 [ 259.545430][ T8345] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.611355][ T8345] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.034696][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 260.760800][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 261.163187][ T8371] loop7: detected capacity change from 0 to 32768 [ 261.171454][ T8371] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.882 (8371) [ 261.195461][ T8371] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.212729][ T8371] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 261.222179][ T8371] BTRFS info (device loop7): metadata ratio 4 [ 261.229182][ T8371] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 261.239188][ T8371] BTRFS info (device loop7): force lzo compression, level 0 [ 261.260816][ T8371] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 261.272211][ T8371] BTRFS info (device loop7): trying to use backup root at mount time [ 261.287384][ T8371] BTRFS info (device loop7): doing ref verification [ 261.294159][ T8371] BTRFS info (device loop7): enabling auto defrag [ 261.308160][ T8371] BTRFS info (device loop7): disabling tree log [ 261.319016][ T8371] BTRFS info (device loop7): using free space tree [ 261.379514][ T48] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 261.407659][ T8371] BTRFS warning (device loop7): couldn't read tree root [ 261.415701][ T8371] BTRFS warning (device loop7): try to load backup roots slot 1 [ 261.435407][ T6955] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 261.459236][ T8371] BTRFS warning (device loop7): couldn't read tree root [ 261.480124][ T8371] BTRFS warning (device loop7): try to load backup roots slot 2 [ 261.502009][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 261.530753][ T8371] BTRFS error (device loop7): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 261.552911][ T8371] BTRFS warning (device loop7): couldn't read tree root [ 261.578040][ T8371] BTRFS warning (device loop7): try to load backup roots slot 3 [ 261.598554][ T8371] BTRFS info (device loop7): enabling ssd optimizations [ 261.612010][ T8371] BTRFS info (device loop7): rebuilding free space tree [ 261.653920][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 261.657201][ T8371] BTRFS info (device loop7): checking UUID tree [ 261.799968][ T4383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.818588][ T26] audit: type=1804 audit(1732303635.818:34): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.882" name="/newroot/162/file1/bus" dev="loop7" ino=257 res=1 errno=0 [ 261.914028][ T26] audit: type=1804 audit(1732303635.888:35): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.882" name="/newroot/162/file1/bus" dev="loop7" ino=257 res=1 errno=0 [ 262.005547][ T4383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.042607][ T5020] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.079378][ T8407] loop1: detected capacity change from 0 to 764 [ 262.115715][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 262.129127][ T8407] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 262.474243][ T8410] loop7: detected capacity change from 0 to 128 [ 262.491134][ T8410] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.510444][ T8410] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.525396][ T4266] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 262.540941][ T4266] Bluetooth: hci2: Injecting HCI hardware error event [ 262.552156][ T4268] Bluetooth: hci2: hardware error 0x00 [ 262.835144][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 263.070709][ T8412] loop1: detected capacity change from 0 to 32768 [ 263.086727][ T8412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.887 (8412) [ 263.204610][ T8412] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 263.221451][ T8412] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 263.241767][ T8412] BTRFS info (device loop1): turning on flush-on-commit [ 263.258470][ T8412] BTRFS info (device loop1): enabling auto defrag [ 263.274130][ T8412] BTRFS info (device loop1): doing ref verification [ 263.291913][ T8412] BTRFS info (device loop1): max_inline at 0 [ 263.308023][ T8412] BTRFS info (device loop1): force clearing of disk cache [ 263.326581][ T8412] BTRFS info (device loop1): turning on sync discard [ 263.343169][ T8412] BTRFS info (device loop1): disabling free space tree [ 263.594052][ T8412] BTRFS info (device loop1): enabling ssd optimizations [ 263.608140][ T8412] BTRFS info (device loop1): rebuilding free space tree [ 263.733561][ T8412] BTRFS info (device loop1): disabling free space tree [ 263.740694][ T8412] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 263.753429][ T8412] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 263.819516][ T4383] bond0 (unregistering): Released all slaves [ 264.013222][ T6854] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 264.057196][ T8263] team0: Port device team_slave_0 added [ 264.071145][ T8263] team0: Port device team_slave_1 added [ 264.195299][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 264.418199][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 264.531667][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.544659][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.651684][ T8263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.674523][ T4268] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 264.740561][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.758436][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.885277][ T8263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.914631][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 265.104324][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.112411][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.144014][ T8279] device bridge_slave_0 entered promiscuous mode [ 265.192764][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.226810][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.237459][ T8279] device bridge_slave_1 entered promiscuous mode [ 265.435814][ T8263] device hsr_slave_0 entered promiscuous mode [ 265.456240][ T8263] device hsr_slave_1 entered promiscuous mode [ 265.490542][ T8263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.521437][ T8263] Cannot create hsr debugfs directory [ 265.550863][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.614314][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.697500][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.895'. [ 265.870185][ T8279] team0: Port device team_slave_0 added [ 265.990047][ T8279] team0: Port device team_slave_1 added [ 266.058192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 266.170133][ T4383] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.218569][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.232355][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.284039][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.466670][ T4383] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.519018][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.537148][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.672546][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.711087][ T8477] loop7: detected capacity change from 0 to 128 [ 266.944549][ T4383] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.979805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 266.988443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 266.996771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 267.005079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 267.084738][ T7] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 267.123809][ T4382] kworker/u4:7: attempt to access beyond end of device [ 267.123809][ T4382] loop7: rw=1, sector=145, nr_sectors = 544 limit=128 [ 267.282948][ T4383] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.295214][ T7] usb 10-1: not running at top speed; connect to a high speed hub [ 267.324331][ T7] usb 10-1: config 2 has an invalid interface number: 89 but max is 0 [ 267.353130][ T7] usb 10-1: config 2 has no interface number 0 [ 267.391066][ T7] usb 10-1: config 2 interface 89 altsetting 48 has a duplicate endpoint with address 0x1, skipping [ 267.436448][ T7] usb 10-1: config 2 interface 89 altsetting 48 has an invalid endpoint with address 0x0, skipping [ 267.512810][ T7] usb 10-1: config 2 interface 89 altsetting 48 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.536812][ T7] usb 10-1: config 2 interface 89 altsetting 48 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 267.555918][ T7] usb 10-1: config 2 interface 89 altsetting 48 has an invalid endpoint with address 0x80, skipping [ 267.588254][ T7] usb 10-1: config 2 interface 89 altsetting 48 has 9 endpoint descriptors, different from the interface descriptor's value: 10 [ 267.608906][ T7] usb 10-1: config 2 interface 89 has no altsetting 0 [ 267.632376][ T7] usb 10-1: New USB device found, idVendor=0bda, idProduct=819a, bcdDevice=db.db [ 267.649006][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.668962][ T7] usb 10-1: Product: syz [ 267.681838][ T7] usb 10-1: Manufacturer: syz [ 267.689835][ T7] usb 10-1: SerialNumber: syz [ 267.702127][ T8279] device hsr_slave_0 entered promiscuous mode [ 267.713426][ T8478] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 267.725641][ T8478] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 267.767922][ T8279] device hsr_slave_1 entered promiscuous mode [ 267.781238][ T8279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.803026][ T8279] Cannot create hsr debugfs directory [ 268.506670][ T8499] loop7: detected capacity change from 0 to 64 [ 268.566120][ T8499] hfs: unable to open extent tree [ 268.571266][ T8499] hfs: can't find a HFS filesystem on dev loop7 [ 268.610570][ T8263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.865714][ T8263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.913973][ T7] usb 10-1: USB disconnect, device number 5 [ 269.069272][ T8263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.110726][ T8263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.346696][ T8492] loop1: detected capacity change from 0 to 40427 [ 269.385467][ T8492] F2FS-fs (loop1): invalid crc value [ 269.419887][ T8492] F2FS-fs (loop1): Found nat_bits in checkpoint [ 269.536751][ T8492] F2FS-fs (loop1): Start checkpoint disabled! [ 269.600321][ T8492] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 269.818816][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.941612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 269.954008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.982822][ T8263] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.173664][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.185498][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.230578][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.237908][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.302210][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.345800][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.367631][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.374864][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.407419][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 270.426978][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.446922][ T8531] loop7: detected capacity change from 0 to 512 [ 270.468350][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 270.518112][ T8531] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 270.580029][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 270.600739][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 270.636785][ T8531] EXT4-fs (loop7): 1 truncate cleaned up [ 270.642649][ T8531] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 270.680015][ T8279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.876770][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 270.970506][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 270.985613][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 271.018900][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.048412][ T8279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 271.076276][ T8279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 271.109261][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 271.142462][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.158098][ T8279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.357970][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 271.375317][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.465518][ T8263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.506418][ T4383] device hsr_slave_0 left promiscuous mode [ 271.523248][ T4383] device hsr_slave_1 left promiscuous mode [ 271.533400][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.553563][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.574022][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.581924][ T4314] kworker/u4:6: attempt to access beyond end of device [ 271.581924][ T4314] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 271.594201][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.613796][ T4383] device bridge_slave_1 left promiscuous mode [ 271.621040][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.652376][ T4383] device bridge_slave_0 left promiscuous mode [ 271.662050][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.748034][ T4383] device veth1_macvtap left promiscuous mode [ 271.770379][ T4383] device veth0_macvtap left promiscuous mode [ 271.776955][ T4383] device veth1_vlan left promiscuous mode [ 271.782796][ T4383] device veth0_vlan left promiscuous mode [ 271.989692][ T8541] loop9: detected capacity change from 0 to 32768 [ 272.040915][ T8541] XFS (loop9): Mounting V5 Filesystem [ 272.139898][ T8541] XFS (loop9): Ending clean mount [ 272.546870][ T6628] XFS (loop9): Unmounting Filesystem [ 272.841253][ T8578] loop1: detected capacity change from 0 to 512 [ 272.953713][ T8578] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 272.994891][ T8578] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 273.026632][ T8578] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.913: Failed to acquire dquot type 0 [ 273.134692][ T8578] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.913: bg 0: block 64: padding at end of block bitmap is not set [ 273.180902][ T8578] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 273.248976][ T8578] EXT4-fs (loop1): 1 truncate cleaned up [ 273.257866][ T8578] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 273.271575][ T8578] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.355973][ T8578] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 273.368766][ T8578] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 273.380341][ T8578] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.913: Failed to acquire dquot type 0 [ 273.520539][ T6854] EXT4-fs (loop1): unmounting filesystem. [ 273.999555][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 274.211789][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 274.445734][ T4383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.619407][ T8597] loop1: detected capacity change from 0 to 32768 [ 274.634231][ T4383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.656078][ T8597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.914 (8597) [ 274.719631][ T8597] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.735356][ T8597] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 274.776999][ T8597] BTRFS info (device loop1): metadata ratio 4 [ 274.783147][ T8597] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 274.817417][ T8597] BTRFS info (device loop1): force lzo compression, level 0 [ 274.825126][ T8597] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 274.853545][ T8597] BTRFS info (device loop1): trying to use backup root at mount time [ 274.924777][ T8597] BTRFS info (device loop1): doing ref verification [ 274.934783][ T8597] BTRFS info (device loop1): enabling auto defrag [ 274.944638][ T8597] BTRFS info (device loop1): disabling tree log [ 274.964500][ T8597] BTRFS info (device loop1): using free space tree [ 275.012143][ T4314] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 275.028867][ T8597] BTRFS warning (device loop1): couldn't read tree root [ 275.036787][ T8597] BTRFS warning (device loop1): try to load backup roots slot 1 [ 275.053428][ T4314] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 275.067157][ T8597] BTRFS warning (device loop1): couldn't read tree root [ 275.075045][ T8597] BTRFS warning (device loop1): try to load backup roots slot 2 [ 275.083841][ T8597] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 275.101808][ T8597] BTRFS warning (device loop1): couldn't read tree root [ 275.110088][ T8597] BTRFS warning (device loop1): try to load backup roots slot 3 [ 275.142438][ T8597] BTRFS info (device loop1): enabling ssd optimizations [ 275.159044][ T8597] BTRFS info (device loop1): rebuilding free space tree [ 275.194847][ T8597] BTRFS info (device loop1): checking UUID tree [ 275.235315][ T26] audit: type=1804 audit(1732303649.218:36): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.914" name="/newroot/68/file1/bus" dev="loop1" ino=257 res=1 errno=0 [ 275.296246][ T26] audit: type=1804 audit(1732303649.258:37): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.914" name="/newroot/68/file1/bus" dev="loop1" ino=257 res=1 errno=0 [ 275.416151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 275.491569][ T6854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 276.012323][ T8626] loop9: detected capacity change from 0 to 1024 [ 276.045079][ T8626] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 276.054627][ T8626] EXT4-fs (loop9): orphan cleanup on readonly fs [ 276.063972][ T8626] EXT4-fs error (device loop9): ext4_free_blocks:6210: comm syz.9.926: Freeing blocks not in datazone - block = 0, count = 4096 [ 276.081527][ T8626] EXT4-fs (loop9): 1 orphan inode deleted [ 276.087510][ T8626] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 276.170123][ T6628] EXT4-fs (loop9): unmounting filesystem. [ 277.089910][ T8635] loop9: detected capacity change from 0 to 32768 [ 277.225489][ T8635] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 277.271279][ T4383] bond0 (unregistering): Released all slaves [ 277.349094][ T26] audit: type=1804 audit(1732303651.348:38): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.918" name="/newroot/79/file1/bus" dev="loop9" ino=17059 res=1 errno=0 [ 277.411362][ T8636] device team_slave_0 entered promiscuous mode [ 277.419669][ T8636] device team_slave_1 entered promiscuous mode [ 277.449688][ T8636] device team_slave_0 left promiscuous mode [ 277.455742][ T8636] device team_slave_1 left promiscuous mode [ 277.603801][ T6628] ocfs2: Unmounting device (7,9) on (node local) [ 277.813753][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.870251][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.882750][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.941900][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.995656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.021332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.056210][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.063452][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.090314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.142686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.166369][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.173515][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.237389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.271316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.316263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.372453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.413489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.457139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.525692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.599951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.609080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.618528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.631499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.651541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.673671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.688543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.702162][ T8279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.717746][ T8263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.937787][ T8640] loop7: detected capacity change from 0 to 40427 [ 278.973010][ T8645] loop1: detected capacity change from 0 to 32768 [ 278.994933][ T8640] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 279.002725][ T8640] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 279.050975][ T8645] XFS (loop1): Mounting V5 Filesystem [ 279.141209][ T8645] XFS (loop1): Ending clean mount [ 279.153785][ T8640] F2FS-fs (loop7): Found nat_bits in checkpoint [ 279.345336][ T8640] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 279.363053][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.372449][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.376219][ T8640] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 279.388649][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.497636][ T8640] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 279.551475][ T8640] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 279.665892][ T6854] XFS (loop1): Unmounting Filesystem [ 279.700629][ T8696] loop9: detected capacity change from 0 to 64 [ 279.704074][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.735621][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.828038][ T8263] device veth0_vlan entered promiscuous mode [ 279.856266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.882858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.893429][ T8696] hfs: bad catalog entry type 0 [ 279.897950][ T8699] F2FS-fs (loop7): Inconsistent i_blocks, ino:8, iblocks:0, sectors:8 [ 279.902075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.971488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.005543][ T8263] device veth1_vlan entered promiscuous mode [ 280.105133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.119971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.205195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.214015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.272769][ T8263] device veth0_macvtap entered promiscuous mode [ 280.316208][ T8263] device veth1_macvtap entered promiscuous mode [ 280.387841][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.428091][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.476713][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.514709][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.544455][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.574592][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.606345][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.614232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.638827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.680323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.705382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.747639][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.779632][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.804618][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.848523][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.882437][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.903288][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.946726][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.955715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.976371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.997322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.010633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.044814][ T8263] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.060191][ T8263] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.070163][ T8263] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.104564][ T8263] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.142211][ T8279] device veth0_vlan entered promiscuous mode [ 281.156550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.179012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.204240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.224049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.270437][ T8279] device veth1_vlan entered promiscuous mode [ 281.418339][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.436320][ T8279] device veth0_macvtap entered promiscuous mode [ 281.456549][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.468700][ T8279] device veth1_macvtap entered promiscuous mode [ 281.510449][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.525793][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.553361][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.562886][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.583509][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.603536][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 281.622263][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 281.662561][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.683689][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.696451][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.707435][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.717921][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.729377][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.749723][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.770765][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.781934][ T8719] loop9: detected capacity change from 0 to 32768 [ 281.792132][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.812435][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.813651][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.826091][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.842134][ T8719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.925 (8719) [ 281.879485][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.881018][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.901948][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.915485][ T8719] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.925832][ T8719] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 281.935499][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.947130][ T8719] BTRFS info (device loop9): metadata ratio 4 [ 281.953533][ T8719] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_LZO (0x8) [ 281.964069][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.981463][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.992406][ T8719] BTRFS info (device loop9): force lzo compression, level 0 [ 282.004312][ T8719] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 282.015253][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.025722][ T8719] BTRFS info (device loop9): trying to use backup root at mount time [ 282.034884][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.050227][ T8719] BTRFS info (device loop9): doing ref verification [ 282.058858][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.069221][ T8719] BTRFS info (device loop9): enabling auto defrag [ 282.075789][ T8719] BTRFS info (device loop9): disabling tree log [ 282.084163][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.092835][ T8719] BTRFS info (device loop9): using free space tree [ 282.102310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.111553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.121813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.137750][ T8279] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.166607][ T8279] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.180864][ T48] BTRFS warning (device loop9): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 282.184461][ T8279] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.204161][ T8279] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.215230][ T8719] BTRFS warning (device loop9): couldn't read tree root [ 282.222236][ T8719] BTRFS warning (device loop9): try to load backup roots slot 1 [ 282.230374][ T6955] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 282.286264][ T8719] BTRFS warning (device loop9): couldn't read tree root [ 282.293604][ T8719] BTRFS warning (device loop9): try to load backup roots slot 2 [ 282.358190][ T8719] BTRFS error (device loop9): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 282.394692][ T8719] BTRFS warning (device loop9): couldn't read tree root [ 282.415172][ T8754] loop7: detected capacity change from 0 to 1024 [ 282.461978][ T8719] BTRFS warning (device loop9): try to load backup roots slot 3 [ 282.465728][ T8754] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 282.480972][ T8758] dccp_xmit_packet: Payload too large (65475) for featneg. [ 282.496225][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.541205][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.662665][ T8719] BTRFS info (device loop9): enabling ssd optimizations [ 282.682804][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.694031][ T6955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.706349][ T8719] BTRFS info (device loop9): rebuilding free space tree [ 282.716273][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 282.745786][ T6955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.793086][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.803306][ T8719] BTRFS info (device loop9): checking UUID tree [ 282.898923][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 282.944577][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 282.968081][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 282.986586][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 282.994049][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.018139][ T26] audit: type=1804 audit(1732303657.018:39): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.925" name="/newroot/83/file1/bus" dev="loop9" ino=257 res=1 errno=0 [ 283.059635][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.070958][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.080100][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.088126][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.110714][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.153905][ T26] audit: type=1804 audit(1732303657.108:40): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.925" name="/newroot/83/file1/bus" dev="loop9" ino=257 res=1 errno=0 [ 283.175306][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175335][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175359][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175382][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175404][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175427][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175449][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175471][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175494][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175517][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175540][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175562][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175585][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175608][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175631][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175653][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175675][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175698][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.382224][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.404151][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.441558][ T6628] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 283.454575][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.482170][ T4454] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.518901][ T4454] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 283.813078][ T4402] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 288.913515][ T4402] usb 2-1: device descriptor read/all, error -71 [ 290.243878][ T8819] netlink: 'syz.1.944': attribute type 12 has an invalid length. [ 290.781554][ T8801] loop6: detected capacity change from 0 to 32768 [ 290.869753][ T8801] XFS (loop6): Mounting V5 Filesystem [ 290.955166][ T8801] XFS (loop6): Ending clean mount [ 291.123207][ T8825] loop7: detected capacity change from 0 to 1024 [ 291.147468][ T8825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 291.156256][ T8825] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 291.209436][ T8825] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 291.293473][ T8279] XFS (loop6): Unmounting Filesystem [ 291.294489][ T8825] EXT4-fs (loop7): orphan cleanup on readonly fs [ 291.400529][ T8825] EXT4-fs warning (device loop7): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 291.487136][ T8825] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 291.540622][ T8825] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.946: bad orphan inode 8 [ 291.602013][ T8825] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 292.066752][ T5020] EXT4-fs (loop7): unmounting filesystem. [ 292.128347][ T8873] loop1: detected capacity change from 0 to 2048 [ 292.200030][ T8873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.344762][ T8873] loop1: detected capacity change from 2048 to 0 [ 292.381948][ T6955] loop: Write error at byte offset 9223372036855475711, length 512. [ 292.408898][ C1] I/O error, dev loop1, sector 1367 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 292.418696][ C1] Buffer I/O error on dev loop1, logical block 1367, lost sync page write [ 292.427294][ T8881] UDF-fs: warning (device loop1): udf_update_inode: IO error syncing udf inode [00000557] [ 292.644475][ C0] I/O error, dev loop1, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.671666][ C0] I/O error, dev loop1, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 292.806534][ T4383] loop: Write error at byte offset 9223372036854841343, length 512. [ 292.827475][ C0] I/O error, dev loop1, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 292.837305][ C0] Buffer I/O error on dev loop1, logical block 128, lost sync page write [ 292.958624][ T8894] loop4: detected capacity change from 0 to 7 [ 293.008567][ T8894] Dev loop4: unable to read RDB block 7 [ 293.034561][ T8894] loop4: unable to read partition table [ 293.103407][ T8894] loop4: partition table beyond EOD, truncated [ 293.114919][ T8897] tipc: Started in network mode [ 293.122174][ T8897] tipc: Node identity ac14140f, cluster identity 4711 [ 293.137426][ T8897] tipc: New replicast peer: 255.255.255.255 [ 293.143761][ T8894] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 293.143761][ T8894] ) failed (rc=-5) [ 293.179807][ T8897] tipc: Enabled bearer , priority 10 [ 293.334845][ T4383] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.430352][ T4383] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.491138][ T4383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.604229][ T4383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.644642][ T4831] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 293.799828][ T8916] loop5: detected capacity change from 0 to 1024 [ 293.855184][ T4831] usb 10-1: Using ep0 maxpacket: 16 [ 293.863880][ T4831] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.892969][ T4831] usb 10-1: config 0 has no interface number 0 [ 293.928936][ T4831] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 293.986349][ T4831] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 294.022808][ T4831] usb 10-1: config 0 interface 41 has no altsetting 0 [ 294.066546][ T4831] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 294.096293][ T4831] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.144396][ T4831] usb 10-1: Product: syz [ 294.148904][ T4831] usb 10-1: Manufacturer: syz [ 294.153633][ T4831] usb 10-1: SerialNumber: syz [ 294.192092][ T4831] usb 10-1: config 0 descriptor?? [ 294.219445][ T8906] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 294.254659][ T8906] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 294.274978][ T4402] tipc: Node number set to 2886997007 [ 294.492131][ T8906] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 294.524743][ T8906] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 294.792876][ T4257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.821330][ T4257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.834740][ T4257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.855716][ T4257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.875350][ T4257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.886557][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.138410][ T4831] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 295.229465][ T8922] loop6: detected capacity change from 0 to 40427 [ 295.253477][ T8919] loop7: detected capacity change from 0 to 32768 [ 295.268578][ T8922] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x3ffff [ 295.284547][ T8922] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x4 [ 295.352604][ T8922] F2FS-fs (loop6): invalid crc value [ 295.392381][ T4831] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 295.400599][ T8922] F2FS-fs (loop6): Found nat_bits in checkpoint [ 295.421718][ T4831] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 295.453816][ T4831] CoreChips: probe of 10-1:0.41 failed with error -71 [ 295.507997][ T4831] usb 10-1: USB disconnect, device number 6 [ 295.644945][ T8922] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 296.123447][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 296.230093][ T8933] loop5: detected capacity change from 0 to 32768 [ 296.279273][ T8933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.974 (8933) [ 296.364010][ T8933] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.414505][ T8933] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 296.423325][ T8933] BTRFS info (device loop5): using free space tree [ 296.430955][ T8279] syz-executor: attempt to access beyond end of device [ 296.430955][ T8279] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.756508][ T8933] BTRFS info (device loop5): enabling ssd optimizations [ 296.914557][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 296.951200][ T26] audit: type=1804 audit(1732303670.948:41): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.974" name="/newroot/8/file0/bus" dev="loop5" ino=263 res=1 errno=0 [ 297.645990][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.653163][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.745129][ T8934] device bridge_slave_0 entered promiscuous mode [ 297.860397][ T4383] device hsr_slave_0 left promiscuous mode [ 297.929213][ T8263] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.949405][ T4383] device hsr_slave_1 left promiscuous mode [ 298.001266][ T8956] loop9: detected capacity change from 0 to 32768 [ 298.060094][ T8956] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 298.098428][ T8956] OCFS2: ERROR (device loop9): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 298.221854][ T8956] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 298.255121][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.262608][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.288295][ T8956] OCFS2: File system is now read-only. [ 298.293823][ T8956] (syz.9.976,8956,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 298.629102][ T4383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.664625][ T4383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.675097][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 298.746119][ T4383] device bridge_slave_0 left promiscuous mode [ 298.752417][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.965140][ T4383] device veth1_macvtap left promiscuous mode [ 298.971766][ T4383] device veth0_macvtap left promiscuous mode [ 298.994449][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 299.064737][ T4383] device veth1_vlan left promiscuous mode [ 299.070972][ T4383] device veth0_vlan left promiscuous mode [ 299.774445][ T8956] OCFS2: ERROR (device loop9): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 300.176534][ T8956] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 300.354419][ T8956] (syz.9.976,8956,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 301.084613][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 303.154670][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 304.035889][ T4383] team0 (unregistering): Port device team_slave_1 removed [ 304.485212][ T4383] team0 (unregistering): Port device team_slave_0 removed [ 304.916790][ T4383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.326155][ T4383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.716938][ T4383] bond0 (unregistering): Released all slaves [ 311.090464][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.124470][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.133430][ T8934] device bridge_slave_1 entered promiscuous mode [ 317.086653][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.093100][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.517731][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.524205][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.594499][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 380.600612][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 421.555383][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 439.957523][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.963904][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.396974][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.403343][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.837035][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.843386][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.959181][ T4302] kworker/dying (4302) used greatest stack depth: 19552 bytes left [ 596.754429][ T4454] kworker/dying (4454) used greatest stack depth: 18176 bytes left