last executing test programs: 52.287104796s ago: executing program 2 (id=616): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x4}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x10, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x14) 51.337403222s ago: executing program 2 (id=624): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000280)={[{@barrier}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@session={'session', 0x3d, 0xffffffffffffff7f}}, {@barrier}, {@nobarrier}, {@part={'part', 0x3d, 0x1f}}, {@uid}, {@umask={'umask', 0x3d, 0x1}}, {@uid}, {}, {@creator={'creator', 0x3d, "65fd44c2"}}, {@nodecompose}, {@gid}, {@uid}, {@umask={'umask', 0x3d, 0x200}}, {@nls={'nls', 0x3d, 'cp737'}}, {@barrier}, {@force}, {}, {@barrier}, {@nls={'nls', 0x3d, 'iso8859-7'}}, {@barrier}, {@barrier}, {@type={'type', 0x3d, "fe453e62"}}, {@session={'session', 0x3d, 0x9}}, {@uid}]}, 0x1, 0x6e0, &(0x7f0000000880)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="6e6c733d637031ffffffffffffffff72726965722c63726561746f723dbf3c66f52c7569643d26f4a8261b6914b2ef3fd04f265b645965197bcee4ec6c904909485ee883a790af0500c6bf8cf2f783a4b1ed5e651c542debf2f0f06f6e13865a21729dadc837c5aaa431bf2b49df80b47c12d95d813700000000000000005e9f1f16dd83b8", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=00000000000000000006745,\x00'], 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000500), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 50.915136577s ago: executing program 2 (id=626): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2000084d, &(0x7f00000000c0)=ANY=[], 0xc1, 0x14f5, &(0x7f0000000640)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='*'], &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0) 50.294812662s ago: executing program 2 (id=628): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x0, 0x8000c62) 49.154911287s ago: executing program 2 (id=634): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 48.694903978s ago: executing program 2 (id=635): openat$pfkey(0xffffff9c, &(0x7f0000004500), 0x20100, 0x0) syz_open_procfs(0x0, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000002c0), &(0x7f0000001840)=@udp6=r2}, 0x20) r3 = inotify_init1(0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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") open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x0) read(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.075646236s ago: executing program 4 (id=750): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x0, 0x8000c62) 5.700901944s ago: executing program 1 (id=755): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 3.637811101s ago: executing program 1 (id=757): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000001811000000", @ANYRES32=r5, @ANYBLOB="0000000000000000009c0104000000000000598422e79c1ff65a06eda20af70167f58c19a2398375bb055188852f13a866b71954f96506521b882834d5198d85f6e9b58b8f31227d805a131eaf7d6c7911914188257e4fa0d69a03579af159649c9ba8623a6a415b99cb0281503abdacc2a3f47ca8a8b6a594a2248fe5000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100), 0x6) ioctl$sock_bt_hci(r6, 0x800448d5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 3.637562031s ago: executing program 3 (id=758): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) fcntl$setpipe(r0, 0x407, 0x974d) 3.621852803s ago: executing program 4 (id=759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x32}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 3.44704181s ago: executing program 4 (id=761): r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r2, 0x4bfa, &(0x7f0000000000)) 3.421926424s ago: executing program 0 (id=762): timer_create(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='system.posix_acl_default\x00', &(0x7f0000000380)='vfat\x00', 0x5, 0x3) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0xc, 0x0, 0xffffffff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f08c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) rt_sigqueueinfo(r5, 0x28, &(0x7f00000003c0)={0x2d, 0x0, 0x800}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448de, &(0x7f0000000240)={0x0, 0x0, "957008"}) 3.378647861s ago: executing program 3 (id=763): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0x0, 0x4}}, 0x18) 2.564631756s ago: executing program 1 (id=764): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.530515181s ago: executing program 3 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x23) 2.499341886s ago: executing program 4 (id=766): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0) 315.816501ms ago: executing program 0 (id=767): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="170900200000000000000100000005000700000000000800090000000000060002"], 0x58}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180001010000000000b1ff0700009c847f0000000000000060"], 0x0}, 0x90) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0200002000"}) 306.273573ms ago: executing program 1 (id=768): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) lseek(r0, 0x1fc, 0x0) 296.365194ms ago: executing program 3 (id=769): memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) syz_io_uring_setup(0x48bf, &(0x7f0000000280), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0x10}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x0, 0x0) 288.101676ms ago: executing program 4 (id=770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0xd, 0x2}, 0x10}}, 0x0) 256.43326ms ago: executing program 0 (id=771): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x32}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 216.070647ms ago: executing program 1 (id=772): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) fcntl$setpipe(r0, 0x407, 0x974d) 192.94406ms ago: executing program 0 (id=773): syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "04030e0000"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 175.975893ms ago: executing program 4 (id=774): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000001811000000", @ANYRES32=r5, @ANYBLOB="0000000000000000009c0104000000000000598422e79c1ff65a06eda20af70167f58c19a2398375bb055188852f13a866b71954f96506521b882834d5198d85f6e9b58b8f31227d805a131eaf7d6c7911914188257e4fa0d69a03579af159649c9ba8623a6a415b99cb0281503abdacc2a3f47ca8a8b6a594a2248fe5000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100), 0x6) ioctl$sock_bt_hci(r6, 0x800448d5, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 170.724914ms ago: executing program 3 (id=775): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x2, {0x0, 0x0, 0x4}}, 0x18) 111.223223ms ago: executing program 0 (id=776): r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r2, 0x4bfa, &(0x7f0000000000)) 78.818068ms ago: executing program 1 (id=777): timer_create(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='system.posix_acl_default\x00', &(0x7f0000000380)='vfat\x00', 0x5, 0x3) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r1, 0xc, 0x0, 0xffffffff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f08c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) rt_sigqueueinfo(r5, 0x28, &(0x7f00000003c0)={0x2d, 0x0, 0x800}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448de, &(0x7f0000000240)={0x0, 0x0, "957008"}) 30.184085ms ago: executing program 3 (id=778): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xea, &(0x7f0000000340)=""/234}, 0x23) kernel console output (not intermixed with test programs): 0 [ 94.805430][ T4501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.824730][ T3591] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 94.825780][ T27] audit: type=1800 audit(1719439462.483:185): pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.251" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 94.884338][ T3556] syz-executor: attempt to access beyond end of device [ 94.884338][ T3556] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.030819][ T3591] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 95.051479][ T3591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.075681][ T3591] usb 4-1: Product: syz [ 95.084232][ T3591] usb 4-1: Manufacturer: syz [ 95.089963][ T3591] usb 4-1: SerialNumber: syz [ 95.105628][ T3591] usb 4-1: config 0 descriptor?? [ 95.127176][ T4495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.157519][ T3591] hub 4-1:0.0: bad descriptor, ignoring hub [ 95.166984][ T3591] hub: probe of 4-1:0.0 failed with error -5 [ 95.176362][ T3591] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 95.337057][ T3561] Bluetooth: hci5: command tx timeout [ 95.424405][ T4179] usb 4-1: USB disconnect, device number 4 [ 95.453402][ T4401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.471570][ T4401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.487652][ T4401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.507531][ T4401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.616867][ T4485] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.683944][ T4401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.711037][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.718725][ T4510] loop0: detected capacity change from 0 to 40427 [ 95.733853][ T4510] F2FS-fs (loop0): invalid crc value [ 95.755826][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.764418][ T4510] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.767396][ T4401] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.793503][ T4518] loop4: detected capacity change from 0 to 4096 [ 95.814305][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.833486][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.852394][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.859650][ T4179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.874076][ T4510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.917630][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.925929][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.943646][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.963485][ T4510] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=10, npages=1 [ 95.963918][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.979000][ T4179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.988061][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.997064][ T4485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.026200][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.034259][ T4485] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.058978][ T4401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.070155][ T4485] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.083183][ T4401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.093668][ T4485] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 96.103374][ T4485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.118244][ T4485] usb 2-1: config 0 descriptor?? [ 96.147572][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.157419][ T3544] syz-executor: attempt to access beyond end of device [ 96.157419][ T3544] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.158973][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.207260][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.226347][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.275009][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.305306][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.332703][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.352934][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.393727][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.427391][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.596166][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.621826][ T4485] uclogic 0003:5543:0003.0002: No inputs registered, leaving [ 96.639845][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.673308][ T4401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.686947][ T4485] uclogic 0003:5543:0003.0002: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0 [ 96.762173][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.787658][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.829867][ T4401] device veth0_vlan entered promiscuous mode [ 96.836076][ T4485] usb 2-1: USB disconnect, device number 4 [ 96.836952][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.877753][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.891482][ T4401] device veth1_vlan entered promiscuous mode [ 96.929826][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.937870][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.945684][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.001918][ T4401] device veth0_macvtap entered promiscuous mode [ 97.041150][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.056377][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.085250][ T4401] device veth1_macvtap entered promiscuous mode [ 97.096398][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.101352][ T4548] loop4: detected capacity change from 0 to 64 [ 97.121182][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.172006][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.195985][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.219158][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.247029][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.291531][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.297779][ T27] audit: type=1800 audit(1719439464.963:186): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name="file1" dev="sda1" ino=1963 res=0 errno=0 [ 97.330319][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.379258][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.426820][ T3561] Bluetooth: hci5: command tx timeout [ 97.432549][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.455711][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.477435][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.546861][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.593038][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.626871][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.668296][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.675993][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.700398][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.739675][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.767541][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.801321][ T4401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.831319][ T4401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.861648][ T4401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.895124][ T4536] loop3: detected capacity change from 0 to 40427 [ 97.920804][ T4401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.931173][ T4536] F2FS-fs (loop3): invalid crc value [ 97.995152][ T4536] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.128060][ T3845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.136157][ T3845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.151860][ T4536] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 98.194637][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.202089][ T4536] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.241165][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.273063][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.323676][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.347491][ T3549] syz-executor: attempt to access beyond end of device [ 98.347491][ T3549] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.403209][ T4574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.277'. [ 98.520270][ T4560] loop0: detected capacity change from 0 to 40427 [ 98.554181][ T4560] F2FS-fs (loop0): invalid crc value [ 98.580702][ T4582] loop2: detected capacity change from 0 to 64 [ 98.598485][ T4560] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.708831][ T4560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.777822][ T3544] syz-executor: attempt to access beyond end of device [ 98.777822][ T3544] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.815741][ T4564] loop1: detected capacity change from 0 to 40427 [ 98.846582][ T4564] F2FS-fs (loop1): invalid crc value [ 98.895620][ T4564] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.033011][ T4564] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 99.067893][ T4564] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.161175][ T3545] syz-executor: attempt to access beyond end of device [ 99.161175][ T3545] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.379751][ T4599] loop2: detected capacity change from 0 to 4096 [ 99.393084][ T27] audit: type=1800 audit(1719439467.053:187): pid=4603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.282" name="file1" dev="sda1" ino=1974 res=0 errno=0 [ 99.468378][ T4578] loop4: detected capacity change from 0 to 32768 [ 99.506841][ T3561] Bluetooth: hci5: command tx timeout [ 99.569523][ T4578] XFS (loop4): Mounting V5 Filesystem [ 99.683706][ T4578] XFS (loop4): Starting recovery (logdev: internal) [ 99.790564][ T4578] XFS (loop4): Ending recovery (logdev: internal) [ 99.865255][ T3556] XFS (loop4): Unmounting Filesystem [ 99.890004][ T4628] loop0: detected capacity change from 0 to 64 [ 99.945818][ T4623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.284'. [ 100.089804][ T4633] loop0: detected capacity change from 0 to 512 [ 100.147109][ T4633] EXT4-fs (loop0): 1 truncate cleaned up [ 100.152801][ T4633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.499484][ T3544] EXT4-fs (loop0): unmounting filesystem. [ 100.691300][ T4634] loop2: detected capacity change from 0 to 40427 [ 100.715110][ T4634] F2FS-fs (loop2): invalid crc value [ 100.752763][ T4634] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.857277][ T4178] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.890020][ T4634] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 100.943709][ T4634] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.080407][ T4401] syz-executor: attempt to access beyond end of device [ 101.080407][ T4401] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.397298][ T4178] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 101.413896][ T4178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.476498][ T4178] usb 1-1: Product: syz [ 101.503373][ T4178] usb 1-1: Manufacturer: syz [ 101.526825][ T4178] usb 1-1: SerialNumber: syz [ 101.692785][ T4671] loop3: detected capacity change from 0 to 65536 [ 101.760776][ T4178] usb 1-1: config 0 descriptor?? [ 102.141950][ T4178] usb 1-1: USB disconnect, device number 3 [ 102.254178][ T4671] XFS (loop3): Mounting V5 Filesystem [ 102.431747][ T4671] XFS (loop3): Ending clean mount [ 102.440836][ T4671] XFS (loop3): Quotacheck needed: Please wait. [ 102.518494][ T4671] XFS (loop3): Quotacheck: Done. [ 102.860027][ T4708] sd 0:0:1:0: device reset [ 103.297851][ T3549] XFS (loop3): Unmounting Filesystem [ 103.576895][ T4485] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.577055][ T4485] usb 3-1: Using ep0 maxpacket: 32 [ 105.354187][ T4746] loop0: detected capacity change from 0 to 65536 [ 105.377203][ T4485] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 105.815798][ T4746] XFS (loop0): Mounting V5 Filesystem [ 105.882426][ T4746] XFS (loop0): Ending clean mount [ 105.889215][ T4746] XFS (loop0): Quotacheck needed: Please wait. [ 105.926966][ T4485] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 105.946257][ T4485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.955674][ T4746] XFS (loop0): Quotacheck: Done. [ 105.956361][ T4485] usb 3-1: Product: syz [ 105.982695][ T4485] usb 3-1: Manufacturer: syz [ 105.992763][ T4485] usb 3-1: SerialNumber: syz [ 106.014763][ T4485] usb 3-1: config 0 descriptor?? [ 106.058572][ T4716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.097561][ T4485] hub 3-1:0.0: bad descriptor, ignoring hub [ 106.103504][ T4485] hub: probe of 3-1:0.0 failed with error -5 [ 106.131943][ T4485] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 106.297997][ T4764] sd 0:0:1:0: device reset [ 106.795686][ T3544] XFS (loop0): Unmounting Filesystem [ 106.797429][ T4485] usb 3-1: USB disconnect, device number 2 [ 106.807092][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 107.088361][ T4769] loop4: detected capacity change from 0 to 2048 [ 107.154262][ T4769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.166993][ T4769] ext4 filesystem being mounted at /root/syzkaller.QaBf0L/70/bus supports timestamps until 2038 (0x7fffffff) [ 107.172290][ T4753] loop1: detected capacity change from 0 to 40427 [ 107.233627][ T4769] fs-verity: sha512 using implementation "sha512-avx2" [ 107.348909][ T4753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.650871][ T4769] device syzkaller0 entered promiscuous mode [ 107.661376][ T4753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.685029][ T4789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 107.888199][ T3545] syz-executor: attempt to access beyond end of device [ 107.888199][ T3545] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.245537][ T3556] EXT4-fs (loop4): unmounting filesystem. [ 108.391131][ T4803] block nbd4: shutting down sockets [ 108.415203][ T4805] loop3: detected capacity change from 0 to 4096 [ 108.477073][ T3624] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.484775][ T4805] ntfs: (device loop3): parse_options(): NLS character set maccenteuroAdma not found. Using previous one koi8-u. [ 108.519281][ T4805] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 108.527247][ T4812] loop1: detected capacity change from 0 to 128 [ 108.540041][ T4805] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 108.550225][ T4812] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 108.554860][ T4805] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 108.582803][ T4805] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 108.623559][ T4805] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 108.641021][ T4805] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 108.666475][ T4805] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 108.676073][ T4805] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 108.691803][ T4805] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 108.710978][ T4805] ntfs: volume version 3.1. [ 108.731720][ T4485] libceph: connect (1)[c::]:6789 error -101 [ 108.733895][ T4824] loop1: detected capacity change from 0 to 1024 [ 108.738649][ T4485] libceph: mon0 (1)[c::]:6789 connect error [ 108.758789][ T3624] usb 3-1: Using ep0 maxpacket: 32 [ 108.864166][ T4820] ceph: No mds server is up or the cluster is laggy [ 108.881115][ T4830] Invalid ELF header magic: != ELF [ 108.887121][ T3624] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 108.897532][ T4834] loop3: detected capacity change from 0 to 2048 [ 108.937302][ T4085] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.948628][ T4834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.967153][ T4834] ext4 filesystem being mounted at /root/syzkaller.4SowJh/80/bus supports timestamps until 2038 (0x7fffffff) [ 109.074216][ T3624] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 109.118219][ T3624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.123412][ T4834] device syzkaller0 entered promiscuous mode [ 109.133361][ T3624] usb 3-1: Product: syz [ 109.173847][ T3624] usb 3-1: Manufacturer: syz [ 109.212109][ T3624] usb 3-1: SerialNumber: syz [ 109.443534][ T3624] usb 3-1: config 0 descriptor?? [ 109.493850][ T4801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.541196][ T3624] hub 3-1:0.0: bad descriptor, ignoring hub [ 109.567257][ T3624] hub: probe of 3-1:0.0 failed with error -5 [ 109.597066][ T4085] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 109.616306][ T4085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.641527][ T4085] usb 5-1: Product: syz [ 109.652726][ T3624] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 109.663575][ T4085] usb 5-1: Manufacturer: syz [ 109.670728][ T4845] block nbd1: shutting down sockets [ 109.678060][ T4085] usb 5-1: SerialNumber: syz [ 109.684601][ T4085] usb 5-1: config 0 descriptor?? [ 109.805872][ T3549] EXT4-fs (loop3): unmounting filesystem. [ 109.920986][ T4085] usb 3-1: USB disconnect, device number 3 [ 109.926876][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 109.980068][ T4855] loop7: detected capacity change from 0 to 16384 [ 110.000187][ T3624] usb 5-1: USB disconnect, device number 4 [ 110.233540][ T4863] loop0: detected capacity change from 0 to 4096 [ 110.241072][ T4855] I/O error, dev loop7, sector 1664 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 110.247048][ T4860] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.284286][ T4860] Buffer I/O error on dev loop7, logical block 0, async page read [ 110.296691][ T4860] ldm_validate_partition_table(): Disk read failed. [ 110.318502][ T4863] ntfs: volume version 3.1. [ 110.327213][ T4860] Dev loop7: unable to read RDB block 0 [ 110.343014][ T4860] loop7: unable to read partition table [ 110.354764][ T4860] loop7: partition table beyond EOD, truncated [ 110.366660][ T4860] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 110.412450][ T4866] loop0: detected capacity change from 0 to 1024 [ 110.537475][ T4870] netlink: 'syz.3.371': attribute type 2 has an invalid length. [ 110.543087][ T4178] libceph: connect (1)[c::]:6789 error -101 [ 110.545395][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 110.560576][ T4178] libceph: mon0 (1)[c::]:6789 connect error [ 110.678550][ T4880] loop4: detected capacity change from 0 to 64 [ 110.697736][ T4872] ceph: No mds server is up or the cluster is laggy [ 110.705610][ T4878] block nbd3: shutting down sockets [ 111.914022][ T4898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 111.958293][ T4900] loop0: detected capacity change from 0 to 128 [ 112.022711][ T4900] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 112.108356][ T4902] loop2: detected capacity change from 0 to 1024 [ 112.467058][ T3591] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.479836][ T4890] loop3: detected capacity change from 0 to 40427 [ 112.501048][ T4893] loop1: detected capacity change from 0 to 32768 [ 112.515217][ T4890] F2FS-fs (loop3): invalid crc value [ 112.522133][ T4893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.378 (4893) [ 112.533428][ T4890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.581886][ T4893] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.585255][ T4890] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 112.600041][ T4893] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 112.604857][ T4890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.617477][ T4893] BTRFS info (device loop1): use zlib compression, level 3 [ 112.650279][ T4893] BTRFS info (device loop1): using free space tree [ 112.698313][ T3549] syz-executor: attempt to access beyond end of device [ 112.698313][ T3549] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.014738][ T4944] syz.2.393 uses obsolete (PF_INET,SOCK_PACKET) [ 113.177688][ T3591] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 113.201217][ T3591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.239022][ T3591] usb 1-1: Product: syz [ 113.244163][ T3591] usb 1-1: Manufacturer: syz [ 113.274765][ T3591] usb 1-1: SerialNumber: syz [ 113.334355][ T3591] usb 1-1: config 0 descriptor?? [ 113.550355][ T4893] BTRFS info (device loop1): enabling ssd optimizations [ 113.689212][ T4376] usb 1-1: USB disconnect, device number 4 [ 113.875835][ T4959] IPVS: Error joining to the multicast group [ 114.046483][ T3545] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.231422][ T4956] loop2: detected capacity change from 0 to 32768 [ 114.273690][ T4963] loop3: detected capacity change from 0 to 4096 [ 114.377600][ T4963] __ntfs_error: 35 callbacks suppressed [ 114.377616][ T4963] ntfs: (device loop3): parse_options(): NLS character set maccenteuroAdma not found. Using previous one koi8-u. [ 114.404770][ T4966] loop7: detected capacity change from 0 to 16384 [ 114.434129][ T4963] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 114.456274][ T4963] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 114.486188][ T4963] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 114.551451][ T4963] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1, max_cluster = 0x0 [ 114.577547][ T4963] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 114.600180][ T4963] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 114.609431][ T4975] Invalid ELF header magic: != ELF [ 114.625878][ T4963] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 114.650627][ T4963] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 114.665952][ T1061] I/O error, dev loop7, sector 768 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 114.676143][ T1061] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 114.686200][ T4963] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 114.689299][ T4972] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.713481][ T4972] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.722611][ T4972] ldm_validate_partition_table(): Disk read failed. [ 114.724785][ T4963] ntfs: volume version 3.1. [ 114.729392][ T4972] Dev loop7: unable to read RDB block 0 [ 114.729435][ T4972] loop7: unable to read partition table [ 114.745599][ T4972] loop7: partition table beyond EOD, truncated [ 114.762423][ T4972] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 114.851389][ T4981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 114.913622][ T4981] 9pnet_fd: Insufficient options for proto=fd [ 115.045875][ T3803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.514514][ T3803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.917157][ T3535] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.966195][ T3803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.088665][ T3803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.205923][ T5008] loop4: detected capacity change from 0 to 4096 [ 116.305454][ T5008] ntfs: volume version 3.1. [ 116.324943][ T3562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.342926][ T3562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.351557][ T3562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.364660][ T3562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.380621][ T3562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.390708][ T3562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.496943][ T3535] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 116.506030][ T3535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.514198][ T3535] usb 2-1: Product: syz [ 116.518418][ T3535] usb 2-1: Manufacturer: syz [ 116.523110][ T3535] usb 2-1: SerialNumber: syz [ 116.536344][ T5006] loop3: detected capacity change from 0 to 32768 [ 116.545148][ T3535] usb 2-1: config 0 descriptor?? [ 116.564710][ T5006] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.415 (5006) [ 116.602749][ T5006] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.635557][ T5006] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 116.658955][ T5006] BTRFS info (device loop3): enabling auto defrag [ 116.665429][ T5006] BTRFS info (device loop3): doing ref verification [ 116.679668][ T5020] netlink: 'syz.4.421': attribute type 2 has an invalid length. [ 116.691776][ T5020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 116.706331][ T5006] BTRFS info (device loop3): max_inline at 0 [ 116.717034][ T5006] BTRFS info (device loop3): force clearing of disk cache [ 116.731037][ T5006] BTRFS info (device loop3): turning on sync discard [ 116.772168][ T5006] BTRFS info (device loop3): setting nodatacow, compression disabled [ 116.831135][ T3535] usb 2-1: USB disconnect, device number 5 [ 116.837280][ T5006] BTRFS info (device loop3): using free space tree [ 116.924040][ T5013] chnl_net:caif_netlink_parms(): no params data found [ 117.053911][ T5017] loop0: detected capacity change from 0 to 32768 [ 117.091924][ T5006] BTRFS info (device loop3): enabling ssd optimizations [ 117.113047][ T5006] BTRFS info (device loop3): rebuilding free space tree [ 117.120332][ T5017] XFS (loop0): Mounting V5 Filesystem [ 117.154180][ T5013] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.201688][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.220915][ T5013] device bridge_slave_0 entered promiscuous mode [ 117.250883][ T5013] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.269268][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.279899][ T5013] device bridge_slave_1 entered promiscuous mode [ 117.313642][ T3549] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.364786][ T5017] XFS (loop0): Ending clean mount [ 117.371235][ T5013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.478651][ T5017] XFS (loop0): Quotacheck needed: Please wait. [ 117.495207][ T5013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.585987][ T5017] XFS (loop0): Quotacheck: Done. [ 117.636632][ T5013] team0: Port device team_slave_0 added [ 117.671496][ T5013] team0: Port device team_slave_1 added [ 117.804814][ T3803] device hsr_slave_0 left promiscuous mode [ 117.823094][ T5036] loop4: detected capacity change from 0 to 40427 [ 117.830389][ T3803] device hsr_slave_1 left promiscuous mode [ 117.837261][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.844680][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.864675][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.876487][ T5036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 117.878732][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.903551][ T3544] XFS (loop0): Unmounting Filesystem [ 117.914007][ T3803] device bridge_slave_1 left promiscuous mode [ 117.920892][ T3803] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.936008][ T3803] device bridge_slave_0 left promiscuous mode [ 117.942473][ T3803] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.965476][ T5036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.990527][ T3803] device veth1_macvtap left promiscuous mode [ 118.003525][ T3803] device veth0_macvtap left promiscuous mode [ 118.013076][ T3803] device veth1_vlan left promiscuous mode [ 118.021403][ T3803] device veth0_vlan left promiscuous mode [ 118.067341][ T3556] syz-executor: attempt to access beyond end of device [ 118.067341][ T3556] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.143188][ T4376] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.377652][ T3803] team0 (unregistering): Port device team_slave_1 removed [ 118.399909][ T3803] team0 (unregistering): Port device team_slave_0 removed [ 118.421968][ T3803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.444296][ T3803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.458868][ T3561] Bluetooth: hci3: command tx timeout [ 118.521813][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.541899][ T3803] bond0 (unregistering): Released all slaves [ 118.553864][ T4376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.571178][ T4376] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 118.581690][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.586661][ T5079] loop4: detected capacity change from 0 to 4096 [ 118.605969][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.613317][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.625683][ T4376] usb 2-1: config 0 descriptor?? [ 118.640986][ T5013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.676749][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.683942][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.720331][ T5013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.742578][ T5072] device syzkaller1 entered promiscuous mode [ 118.808172][ T5013] device hsr_slave_0 entered promiscuous mode [ 118.815337][ T5013] device hsr_slave_1 entered promiscuous mode [ 118.822424][ T5013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.831503][ T5013] Cannot create hsr debugfs directory [ 119.162376][ T4175] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.262028][ T4376] wacom 0003:056A:0028.0003: item fetching failed at offset 3/5 [ 119.283886][ T4376] wacom 0003:056A:0028.0003: parse failed [ 119.293559][ T4376] wacom: probe of 0003:056A:0028.0003 failed with error -22 [ 119.316391][ T5084] loop3: detected capacity change from 0 to 32768 [ 119.332730][ T5084] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.434 (5084) [ 119.351851][ T5084] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.366408][ T5084] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 119.375216][ T5084] BTRFS info (device loop3): enabling auto defrag [ 119.381773][ T5084] BTRFS info (device loop3): doing ref verification [ 119.388723][ T5084] BTRFS info (device loop3): max_inline at 0 [ 119.394792][ T5084] BTRFS info (device loop3): force clearing of disk cache [ 119.410377][ T5084] BTRFS info (device loop3): turning on sync discard [ 119.421489][ T5084] BTRFS info (device loop3): setting nodatacow, compression disabled [ 119.429698][ T5084] BTRFS info (device loop3): using free space tree [ 119.453846][ T5084] BTRFS info (device loop3): enabling ssd optimizations [ 119.467030][ T5084] BTRFS info (device loop3): rebuilding free space tree [ 119.495161][ T4376] usb 2-1: USB disconnect, device number 6 [ 119.644026][ T5013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.646915][ T3549] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.663826][ T5013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.702264][ T4175] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 119.718302][ T4175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.758459][ T4175] usb 1-1: Product: syz [ 119.771005][ T4175] usb 1-1: Manufacturer: syz [ 119.785876][ T4175] usb 1-1: SerialNumber: syz [ 119.804459][ T4175] usb 1-1: config 0 descriptor?? [ 119.903375][ T5013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.962935][ T5013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.067276][ T4175] usb 1-1: USB disconnect, device number 5 [ 120.345615][ T5110] loop4: detected capacity change from 0 to 65536 [ 120.346432][ T5113] loop1: detected capacity change from 0 to 64 [ 120.388701][ T5013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.403534][ T5110] XFS (loop4): Mounting V5 Filesystem [ 120.455161][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.470815][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.487687][ T5110] XFS (loop4): Ending clean mount [ 120.494192][ T5110] XFS (loop4): Quotacheck needed: Please wait. [ 120.495788][ T5013] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.535440][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.547436][ T3561] Bluetooth: hci3: command tx timeout [ 120.554632][ T5110] XFS (loop4): Quotacheck: Done. [ 120.598549][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.737344][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.744517][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.771992][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.782485][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.801720][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.837697][ T5128] sd 0:0:1:0: device reset [ 121.239180][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.246305][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.267033][ T5111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.283679][ T3556] XFS (loop4): Unmounting Filesystem [ 121.413746][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.429724][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.480066][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.520663][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.540476][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.551466][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.564541][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.576492][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.590438][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.601726][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.641538][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.616991][ T3561] Bluetooth: hci3: command tx timeout [ 122.853208][ T5161] loop1: detected capacity change from 0 to 65 [ 122.988771][ T5161] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 123.224403][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.324114][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.335915][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.382598][ T5161] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 123.585279][ T5180] loop4: detected capacity change from 0 to 64 [ 123.605402][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.631083][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.642537][ T5013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.668298][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.678176][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.702075][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.713429][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.724349][ T5013] device veth0_vlan entered promiscuous mode [ 123.732811][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.743362][ T3535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.760673][ T5013] device veth1_vlan entered promiscuous mode [ 123.812681][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.828113][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.847590][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.848181][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.850776][ T5013] device veth0_macvtap entered promiscuous mode [ 123.853778][ T5013] device veth1_macvtap entered promiscuous mode [ 123.876475][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.876507][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.876518][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.876536][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.897281][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.897448][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.898104][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.898731][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.899271][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.908741][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.908762][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.908772][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.908783][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.908792][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.908803][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.908813][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.908824][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.665094][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.665253][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.665958][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.697133][ T3562] Bluetooth: hci3: command tx timeout [ 124.719362][ T5013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.719406][ T5013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.719422][ T5013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.719441][ T5013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.903570][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.903612][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.906608][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.944445][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.944505][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.947803][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.086299][ T5207] loop4: detected capacity change from 0 to 65 [ 125.096556][ T5207] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 125.107048][ T5207] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 125.173284][ T5213] loop3: detected capacity change from 0 to 256 [ 125.581026][ T5238] loop4: detected capacity change from 0 to 1764 [ 125.623462][ T5240] loop3: detected capacity change from 0 to 65 [ 125.664016][ T5240] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 125.665849][ T5240] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 125.809755][ T5245] loop0: detected capacity change from 0 to 2048 [ 125.860629][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.911599][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 125.911613][ T27] audit: type=1800 audit(1719439493.573:191): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.485" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 125.948350][ T5245] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.485: bg 0: block 234: padding at end of block bitmap is not set [ 125.977003][ T27] audit: type=1800 audit(1719439493.603:192): pid=5245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.485" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 126.007422][ T5245] EXT4-fs (loop0): Remounting filesystem read-only [ 126.034699][ T3544] EXT4-fs (loop0): unmounting filesystem. [ 126.170546][ T5247] loop1: detected capacity change from 0 to 32768 [ 126.194946][ T5247] XFS (loop1): Mounting V5 Filesystem [ 126.241467][ T5247] XFS (loop1): Ending clean mount [ 126.248395][ T5247] XFS (loop1): Quotacheck needed: Please wait. [ 126.313680][ T5247] XFS (loop1): Quotacheck: Done. [ 126.352474][ T27] audit: type=1800 audit(1719439494.013:193): pid=5247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.486" name="file1" dev="loop1" ino=5766 res=0 errno=0 [ 126.442215][ T3545] XFS (loop1): Unmounting Filesystem [ 126.568718][ T5284] loop4: detected capacity change from 0 to 2048 [ 126.595016][ T5287] loop3: detected capacity change from 0 to 1764 [ 126.624245][ T5284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.642299][ T5287] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 126.668721][ T27] audit: type=1800 audit(1719439494.333:194): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 126.670963][ T5284] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.499: bg 0: block 234: padding at end of block bitmap is not set [ 126.689903][ T27] audit: type=1800 audit(1719439494.333:195): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 126.734700][ T5284] EXT4-fs (loop4): Remounting filesystem read-only [ 126.926151][ T3556] EXT4-fs (loop4): unmounting filesystem. [ 127.330709][ T5306] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 127.330709][ T5306] The task syz.0.505 (5306) triggered the difference, watch for misbehavior. [ 128.000533][ T5326] loop0: detected capacity change from 0 to 1764 [ 128.066896][ T5326] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 128.074499][ T5332] loop4: detected capacity change from 0 to 65 [ 128.093782][ T5332] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 128.136336][ T5332] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop4 [ 128.185740][ T5314] loop2: detected capacity change from 0 to 32768 [ 128.187232][ T5336] device syzkaller1 left promiscuous mode [ 128.250106][ T27] audit: type=1326 audit(1719439495.913:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2544b75ae9 code=0x7ffc0000 [ 128.286528][ T5314] XFS (loop2): Mounting V5 Filesystem [ 128.359217][ T27] audit: type=1326 audit(1719439495.943:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2544b75ae9 code=0x7ffc0000 [ 128.411711][ T5314] XFS (loop2): Ending clean mount [ 128.461115][ T5314] XFS (loop2): Quotacheck needed: Please wait. [ 128.513211][ T27] audit: type=1326 audit(1719439495.943:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2544b75ae9 code=0x7ffc0000 [ 128.559304][ T5314] XFS (loop2): Quotacheck: Done. [ 128.708022][ T27] audit: type=1326 audit(1719439495.953:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2544b75ae9 code=0x7ffc0000 [ 128.763521][ T5343] loop0: detected capacity change from 0 to 65536 [ 128.774663][ T27] audit: type=1326 audit(1719439495.953:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.4.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2544b75ae9 code=0x7ffc0000 [ 128.864236][ T5343] XFS (loop0): Mounting V5 Filesystem [ 128.866477][ T5013] XFS (loop2): Unmounting Filesystem [ 128.917130][ T4092] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.029822][ T3562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.040768][ T5343] XFS (loop0): Ending clean mount [ 129.050440][ T5343] XFS (loop0): Quotacheck needed: Please wait. [ 129.059343][ T3562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.077235][ T3562] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.089849][ T3562] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.097297][ T5343] XFS (loop0): Quotacheck: Done. [ 129.114770][ T3562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 129.123924][ T3562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.253679][ T3638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.316930][ T4092] usb 4-1: Using ep0 maxpacket: 32 [ 129.449541][ T5369] sd 0:0:1:0: device reset [ 129.497851][ T4092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.707633][ T4092] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.748297][ T4092] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.784614][ T4092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.840076][ T3638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.878048][ T4092] usb 4-1: config 0 descriptor?? [ 129.930501][ T4092] hub 4-1:0.0: USB hub found [ 129.945433][ T3544] XFS (loop0): Unmounting Filesystem [ 130.008455][ T3638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.098494][ T3638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.137273][ T4092] hub 4-1:0.0: 1 port detected [ 130.192360][ T5377] loop2: detected capacity change from 0 to 2048 [ 130.239899][ T5377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.255960][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 130.351199][ T5377] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.530: bg 0: block 234: padding at end of block bitmap is not set [ 130.377319][ T4092] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 130.386907][ T4092] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 130.420608][ T5377] EXT4-fs (loop2): Remounting filesystem read-only [ 130.503101][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.503936][ T5013] EXT4-fs (loop2): unmounting filesystem. [ 130.510381][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.516156][ T4092] usbhid 4-1:0.0: can't add hid device: -71 [ 130.524616][ T5362] device bridge_slave_0 entered promiscuous mode [ 130.546315][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.549801][ T4092] usbhid: probe of 4-1:0.0 failed with error -71 [ 130.553639][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.568145][ T5362] device bridge_slave_1 entered promiscuous mode [ 130.605741][ T5368] loop1: detected capacity change from 0 to 32768 [ 130.632676][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.643527][ T5368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.527 (5368) [ 130.647704][ T4092] usb 4-1: USB disconnect, device number 5 [ 130.658831][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.697909][ T5368] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.728478][ T5368] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 130.745924][ T5362] team0: Port device team_slave_0 added [ 130.754172][ T5368] BTRFS info (device loop1): enabling auto defrag [ 130.770122][ T5368] BTRFS info (device loop1): doing ref verification [ 130.771919][ T5362] team0: Port device team_slave_1 added [ 130.793883][ T5368] BTRFS info (device loop1): max_inline at 0 [ 130.821205][ T5368] BTRFS info (device loop1): force clearing of disk cache [ 130.844766][ T5368] BTRFS info (device loop1): turning on sync discard [ 130.854131][ T5368] BTRFS info (device loop1): setting nodatacow, compression disabled [ 130.866383][ T5368] BTRFS info (device loop1): using free space tree [ 130.867524][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.885261][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.950405][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.990128][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.004130][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.258445][ T3562] Bluetooth: hci4: command tx timeout [ 131.321679][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.813449][ T5362] device hsr_slave_0 entered promiscuous mode [ 131.820626][ T5362] device hsr_slave_1 entered promiscuous mode [ 131.834573][ T5362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.856811][ T5362] Cannot create hsr debugfs directory [ 131.980490][ T5368] BTRFS info (device loop1): enabling ssd optimizations [ 132.025360][ T5368] BTRFS info (device loop1): rebuilding free space tree [ 132.226478][ T3545] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.319788][ T3638] device hsr_slave_0 left promiscuous mode [ 132.335228][ T3638] device hsr_slave_1 left promiscuous mode [ 132.357136][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.414732][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.472957][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.517830][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.542249][ T5390] loop2: detected capacity change from 0 to 65536 [ 132.543347][ T3638] device bridge_slave_1 left promiscuous mode [ 132.562951][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.598175][ T3638] device bridge_slave_0 left promiscuous mode [ 132.604434][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.646304][ T5390] XFS (loop2): Mounting V5 Filesystem [ 132.646374][ T3638] device veth1_macvtap left promiscuous mode [ 132.708263][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.714577][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.757363][ T3638] device veth0_macvtap left promiscuous mode [ 132.763505][ T3638] device veth1_vlan left promiscuous mode [ 132.826535][ T3638] device veth0_vlan left promiscuous mode [ 132.898736][ T5390] XFS (loop2): Ending clean mount [ 133.017764][ T5390] syz.2.532 (5390) used greatest stack depth: 18872 bytes left [ 133.020803][ T5013] XFS (loop2): Unmounting Filesystem [ 133.376830][ T3562] Bluetooth: hci4: command tx timeout [ 134.078300][ T5441] loop3: detected capacity change from 0 to 32768 [ 134.139970][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 134.139985][ T27] audit: type=1326 audit(1719439501.803:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.212555][ T5441] XFS (loop3): Mounting V5 Filesystem [ 134.270846][ T27] audit: type=1326 audit(1719439501.803:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.293014][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.326853][ T27] audit: type=1326 audit(1719439501.843:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.390897][ T27] audit: type=1326 audit(1719439501.843:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.396652][ T5441] XFS (loop3): Ending clean mount [ 134.413062][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.423636][ T27] audit: type=1326 audit(1719439501.843:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.446635][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.459950][ T5441] XFS (loop3): Quotacheck needed: Please wait. [ 134.517016][ T5441] XFS (loop3): Quotacheck: Done. [ 134.523006][ T27] audit: type=1326 audit(1719439501.843:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.545151][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.583741][ T27] audit: type=1326 audit(1719439501.843:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x7ffc0000 [ 134.620995][ T27] audit: type=1326 audit(1719439501.843:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89ae76cb67 code=0x7ffc0000 [ 134.643091][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.658077][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 134.672750][ T3549] XFS (loop3): Unmounting Filesystem [ 134.686146][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 134.705150][ T27] audit: type=1326 audit(1719439501.843:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89ae711539 code=0x7ffc0000 [ 134.727416][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.735854][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.776675][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.785658][ T27] audit: type=1326 audit(1719439501.843:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5464 comm="syz.0.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89ae76cb67 code=0x7ffc0000 [ 134.807835][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.953507][ T3638] bond0 (unregistering): Released all slaves [ 135.027028][ T5465] loop1: detected capacity change from 0 to 32768 [ 135.037567][ T5465] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.551 (5465) [ 135.057204][ T5465] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.094353][ T5465] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 135.116185][ T5465] BTRFS info (device loop1): enabling auto defrag [ 135.130659][ T5465] BTRFS info (device loop1): doing ref verification [ 135.141919][ T5483] dccp_xmit_packet: Payload too large (65475) for featneg. [ 135.142668][ T5465] BTRFS info (device loop1): max_inline at 0 [ 135.156212][ T5465] BTRFS info (device loop1): force clearing of disk cache [ 135.171929][ T5465] BTRFS info (device loop1): turning on sync discard [ 135.182338][ T5465] BTRFS info (device loop1): setting nodatacow, compression disabled [ 135.196271][ T5465] BTRFS info (device loop1): using free space tree [ 135.416838][ T3562] Bluetooth: hci4: command tx timeout [ 135.443383][ T5465] BTRFS info (device loop1): enabling ssd optimizations [ 135.457872][ T5465] BTRFS info (device loop1): rebuilding free space tree [ 135.560654][ T5362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.611328][ T5362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.654269][ T5362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.699019][ T3545] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 135.725458][ T5362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.974172][ T5512] loop0: detected capacity change from 0 to 8192 [ 136.014083][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.100325][ T5512] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.377275][ T5512] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 136.482115][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.540524][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.594790][ T5512] FAT-fs (loop0): Filesystem has been set read-only [ 136.820400][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.841037][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.857723][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.876538][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.883718][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.914208][ T5512] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.959039][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.968673][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.001454][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.023339][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.030510][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.072464][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.101158][ T5535] loop3: detected capacity change from 0 to 1024 [ 137.135718][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.155021][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.183679][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.207611][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.216384][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.254812][ T5362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.291410][ T5362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.327383][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.335400][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.347076][ T3595] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.351977][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.365430][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.374484][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.444215][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.509609][ T3562] Bluetooth: hci4: command tx timeout [ 137.617578][ T3595] usb 3-1: Using ep0 maxpacket: 32 [ 137.655026][ T5557] dccp_xmit_packet: Payload too large (65475) for featneg. [ 137.747253][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.774621][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.802213][ T3595] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.862371][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.937189][ T3595] usb 3-1: config 0 descriptor?? [ 138.727694][ T3595] hub 3-1:0.0: USB hub found [ 138.794722][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.807733][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.841839][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.938403][ T3595] hub 3-1:0.0: 1 port detected [ 139.759788][ T3595] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 139.766173][ T3595] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 139.837400][ T5570] loop1: detected capacity change from 0 to 8192 [ 139.867020][ T3595] usbhid 3-1:0.0: can't add hid device: -71 [ 139.873042][ T3595] usbhid: probe of 3-1:0.0 failed with error -71 [ 139.889415][ T5570] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.917802][ T3595] usb 3-1: USB disconnect, device number 4 [ 139.959399][ T5570] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 139.993620][ T5570] FAT-fs (loop1): Filesystem has been set read-only [ 140.033270][ T5570] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.255426][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.272931][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.316463][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.343436][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.380656][ T5362] device veth0_vlan entered promiscuous mode [ 140.409016][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.423577][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.445350][ T5362] device veth1_vlan entered promiscuous mode [ 140.527178][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.543187][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.579910][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.629569][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.667080][ T5362] device veth0_macvtap entered promiscuous mode [ 140.718865][ T5362] device veth1_macvtap entered promiscuous mode [ 140.818385][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.875009][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.931452][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.940586][ T5596] loop2: detected capacity change from 0 to 65536 [ 140.991618][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.042415][ T5596] XFS (loop2): Mounting V5 Filesystem [ 141.053983][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.084283][ T5596] XFS (loop2): Ending clean mount [ 141.094912][ T5596] XFS (loop2): Quotacheck needed: Please wait. [ 141.118229][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.126394][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.140707][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.149562][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.162055][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.165314][ T5596] XFS (loop2): Quotacheck: Done. [ 141.204096][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.254946][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.296013][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.332335][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.383578][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.432373][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.460110][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.568073][ T5608] sd 0:0:1:0: device reset [ 141.589723][ T4378] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.835507][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.878308][ T5362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.926948][ T4378] usb 1-1: Using ep0 maxpacket: 8 [ 141.939326][ T5362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.969454][ T5362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.016841][ T5362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.047211][ T4378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 142.064691][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.083906][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.090981][ T5594] loop1: detected capacity change from 0 to 40427 [ 142.100609][ T4378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 142.106822][ T5594] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.126857][ T5594] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.136988][ T5013] XFS (loop2): Unmounting Filesystem [ 142.232538][ T5594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.254672][ T4690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.287091][ T4378] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=3d.e4 [ 142.300100][ T4690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.320078][ T4378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.333252][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.355356][ T4378] usb 1-1: Product: syz [ 142.374178][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.395122][ T4378] usb 1-1: Manufacturer: syz [ 142.405758][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.418229][ T4378] usb 1-1: SerialNumber: syz [ 142.427277][ T5594] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.433255][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.440318][ T4378] usb 1-1: config 0 descriptor?? [ 142.446520][ T5594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.498074][ T4378] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 142.532564][ T4378] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 142.544428][ T5594] syz.1.588: attempt to access beyond end of device [ 142.544428][ T5594] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.644801][ T3545] syz-executor: attempt to access beyond end of device [ 142.644801][ T3545] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 142.746040][ T4378] usb 1-1: USB disconnect, device number 6 [ 142.773658][ T4378] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 142.820918][ T4378] kobil_sct 1-1:0.0: device disconnected [ 143.285107][ T5632] loop1: detected capacity change from 0 to 4096 [ 143.286461][ T5631] loop4: detected capacity change from 0 to 8192 [ 143.313906][ T5631] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.335625][ T5631] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 143.344554][ T5631] FAT-fs (loop4): Filesystem has been set read-only [ 143.366645][ T5631] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.375323][ T5638] loop2: detected capacity change from 0 to 8 [ 143.440338][ T5638] SQUASHFS error: xz decompression failed, data probably corrupt [ 143.461087][ T5638] SQUASHFS error: Failed to read block 0x108: -5 [ 143.467509][ T5638] SQUASHFS error: Unable to read metadata cache entry [106] [ 143.486823][ T5638] SQUASHFS error: Unable to read inode 0x11f [ 144.074273][ T5642] loop4: detected capacity change from 0 to 65536 [ 144.123485][ T5642] XFS (loop4): Mounting V5 Filesystem [ 144.203941][ T5642] XFS (loop4): Ending clean mount [ 144.224461][ T5642] XFS (loop4): Quotacheck needed: Please wait. [ 144.266949][ T5642] XFS (loop4): Quotacheck: Done. [ 144.534200][ T3561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.627746][ T5674] sd 0:0:1:0: device reset [ 144.717331][ T3561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.728978][ T3561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.741761][ T3561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.751318][ T3561] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.896724][ T3561] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.122798][ T5362] XFS (loop4): Unmounting Filesystem [ 145.269731][ T5676] loop1: detected capacity change from 0 to 8192 [ 145.314104][ T5676] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.369757][ T5676] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 145.386523][ T5672] chnl_net:caif_netlink_parms(): no params data found [ 145.408134][ T5676] FAT-fs (loop1): Filesystem has been set read-only [ 145.439786][ T5683] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.591448][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.628302][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.650939][ T5672] device bridge_slave_0 entered promiscuous mode [ 145.680457][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.700690][ T5645] loop0: detected capacity change from 0 to 65536 [ 145.716003][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.734775][ T5672] device bridge_slave_1 entered promiscuous mode [ 145.777577][ T5645] XFS (loop0): Mounting V5 Filesystem [ 145.854082][ T5645] XFS (loop0): Ending clean mount [ 145.856049][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.907583][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.936505][ T5645] syz.0.604 (5645) used greatest stack depth: 18752 bytes left [ 145.964083][ T3544] XFS (loop0): Unmounting Filesystem [ 145.984726][ T5672] team0: Port device team_slave_0 added [ 146.019191][ T5672] team0: Port device team_slave_1 added [ 146.046304][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.053409][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.101513][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.112650][ T4487] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.131716][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.189239][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.270228][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.369193][ T4487] usb 2-1: Using ep0 maxpacket: 32 [ 146.476107][ T3638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.507258][ T4487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.520770][ T5712] loop4: detected capacity change from 0 to 65536 [ 146.540240][ T5714] loop2: detected capacity change from 0 to 1024 [ 146.544527][ T4487] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.564631][ T4487] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.574215][ T4487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.609941][ T4487] usb 2-1: config 0 descriptor?? [ 146.634601][ T5712] XFS (loop4): Mounting V5 Filesystem [ 146.652170][ T4487] hub 2-1:0.0: USB hub found [ 146.705329][ T3638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.725600][ T5712] XFS (loop4): Ending clean mount [ 146.732466][ T5712] XFS (loop4): Quotacheck needed: Please wait. [ 146.744512][ T5672] device hsr_slave_0 entered promiscuous mode [ 146.769439][ T5672] device hsr_slave_1 entered promiscuous mode [ 146.794080][ T5672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.794300][ T35] hfsplus: b-tree write err: -5, ino 4 [ 146.806900][ T5672] Cannot create hsr debugfs directory [ 146.811179][ T5712] XFS (loop4): Quotacheck: Done. [ 146.874556][ T5728] loop2: detected capacity change from 0 to 256 [ 146.887191][ T4487] hub 2-1:0.0: 1 port detected [ 146.894110][ T3638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.922091][ T5728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 146.937100][ T3561] Bluetooth: hci2: command tx timeout [ 147.019800][ T3638] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.144186][ T5731] sd 0:0:1:0: device reset [ 147.644495][ T4487] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 147.655132][ T4487] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 147.658054][ T5362] XFS (loop4): Unmounting Filesystem [ 147.757007][ T4487] usbhid 2-1:0.0: can't add hid device: -71 [ 147.776923][ T4487] usbhid: probe of 2-1:0.0 failed with error -71 [ 147.807570][ T4487] usb 2-1: USB disconnect, device number 7 [ 147.813873][ T5732] loop0: detected capacity change from 0 to 8192 [ 147.862689][ T5732] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.912279][ T5732] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 147.926994][ T5732] FAT-fs (loop0): Filesystem has been set read-only [ 147.953272][ T5732] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.263005][ T5734] loop2: detected capacity change from 0 to 40427 [ 148.284129][ T5734] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 148.301019][ T5734] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 148.316278][ T5734] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.384019][ T5734] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 148.410154][ T5734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.466446][ T5734] syz.2.628: attempt to access beyond end of device [ 148.466446][ T5734] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.558540][ T5013] syz-executor: attempt to access beyond end of device [ 148.558540][ T5013] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 148.673728][ T3638] device hsr_slave_0 left promiscuous mode [ 148.688616][ T3638] device hsr_slave_1 left promiscuous mode [ 148.702672][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.718189][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.738610][ T3638] device bridge_slave_1 left promiscuous mode [ 148.744986][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.767659][ T3638] device bridge_slave_0 left promiscuous mode [ 148.775117][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.800083][ T3638] device veth1_macvtap left promiscuous mode [ 148.811775][ T3638] device veth0_macvtap left promiscuous mode [ 148.823675][ T3638] device veth1_vlan left promiscuous mode [ 148.834119][ T3638] device veth0_vlan left promiscuous mode [ 149.016910][ T3562] Bluetooth: hci2: command tx timeout [ 149.159337][ T5756] loop2: detected capacity change from 0 to 1024 [ 149.192004][ T5759] loop1: detected capacity change from 0 to 1024 [ 149.264693][ T5741] loop0: detected capacity change from 0 to 65536 [ 149.319545][ T3803] hfsplus: b-tree write err: -5, ino 4 [ 149.326166][ T5765] loop4: detected capacity change from 0 to 1024 [ 149.335261][ T5765] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 149.336143][ T5741] XFS (loop0): Mounting V5 Filesystem [ 149.359700][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 149.373877][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 149.407324][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.454525][ T5741] XFS (loop0): Ending clean mount [ 149.471756][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.593538][ T3638] bond0 (unregistering): Released all slaves [ 149.615150][ T3544] XFS (loop0): Unmounting Filesystem [ 150.427023][ T5672] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.489058][ T5672] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.567310][ T5672] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.605840][ T5672] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 151.097384][ T3562] Bluetooth: hci2: command tx timeout [ 151.374339][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.441178][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.462251][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.489614][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.535564][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.550007][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.567568][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.574680][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.594624][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.651032][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.677640][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.697933][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.705064][ T4085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.743237][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.757767][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.802650][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.829564][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.872604][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.902009][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.935072][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.959846][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.990864][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.035646][ T5672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.069106][ T5672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.090308][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.099725][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.710091][ T5797] loop0: detected capacity change from 0 to 65536 [ 152.811154][ T5797] XFS (loop0): Mounting V5 Filesystem [ 152.813798][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.835892][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.883442][ T5797] XFS (loop0): Ending clean mount [ 152.983464][ T5797] XFS (loop0): Quotacheck needed: Please wait. [ 153.022716][ T5797] XFS (loop0): Quotacheck: Done. [ 153.049109][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.070546][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.079810][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.222861][ T3562] Bluetooth: hci2: command tx timeout [ 154.390520][ T5815] sd 0:0:1:0: device reset [ 154.450886][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 154.488232][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 154.672424][ T3544] XFS (loop0): Unmounting Filesystem [ 154.758043][ T5672] device veth0_vlan entered promiscuous mode [ 154.773724][ T5672] device veth1_vlan entered promiscuous mode [ 154.811236][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 154.827488][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.897682][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.912645][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.936708][ T5672] device veth0_macvtap entered promiscuous mode [ 154.979662][ T5672] device veth1_macvtap entered promiscuous mode [ 155.038381][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.057142][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.086886][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.126834][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.136670][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.186857][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.204752][ T5824] loop4: detected capacity change from 0 to 1024 [ 155.233730][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.263278][ T5824] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 155.269345][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.342631][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.366854][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.406879][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.438020][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.473539][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.524325][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.554048][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.579544][ T5828] loop0: detected capacity change from 0 to 1024 [ 155.593543][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.622535][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.657859][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.699123][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.726313][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.755585][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.765637][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.777944][ T5672] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.788898][ T5672] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.798090][ T5672] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.812355][ T5672] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.899475][ T3755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.912078][ T3755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.933218][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.945172][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.960417][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.973193][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.154912][ T3638] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.268027][ T3638] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.841469][ T3638] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.999425][ T3638] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.382018][ T5846] loop4: detected capacity change from 0 to 8192 [ 157.423421][ T5846] REISERFS warning (device loop4): super-6507 reiserfs_parse_options: bad value autoresize=auto for -oresize [ 157.423421][ T5846] [ 157.605963][ T5842] loop1: detected capacity change from 0 to 32768 [ 157.621991][ T5842] XFS (loop1): Mounting V5 Filesystem [ 157.653733][ T5842] XFS (loop1): Ending clean mount [ 157.665983][ T5842] XFS (loop1): Quotacheck needed: Please wait. [ 157.693162][ T5842] XFS (loop1): Quotacheck: Done. [ 157.711396][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 157.711411][ T27] audit: type=1800 audit(1719439525.373:240): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.657" name="file1" dev="loop1" ino=5766 res=0 errno=0 [ 157.760025][ T3545] XFS (loop1): Unmounting Filesystem [ 157.980774][ T3638] device hsr_slave_0 left promiscuous mode [ 157.987849][ T3638] device hsr_slave_1 left promiscuous mode [ 157.994324][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.001814][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.011110][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.019150][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.028066][ T3638] device bridge_slave_1 left promiscuous mode [ 158.034331][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.048165][ T3638] device bridge_slave_0 left promiscuous mode [ 158.054405][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.111306][ T3638] device veth1_macvtap left promiscuous mode [ 158.118661][ T27] audit: type=1326 audit(1719439525.783:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.126832][ T3638] device veth0_macvtap left promiscuous mode [ 158.150572][ T5866] loop0: detected capacity change from 0 to 512 [ 158.179635][ T27] audit: type=1326 audit(1719439525.803:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.206981][ T3638] device veth1_vlan left promiscuous mode [ 158.212828][ T3638] device veth0_vlan left promiscuous mode [ 158.247743][ T27] audit: type=1326 audit(1719439525.813:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.316608][ T5866] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 158.337890][ T5871] input: syz0 as /devices/virtual/input/input17 [ 158.382556][ T5866] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.661: invalid indirect mapped block 2683928664 (level 1) [ 158.449627][ T27] audit: type=1326 audit(1719439525.813:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.464870][ T5876] loop1: detected capacity change from 0 to 16 [ 158.472923][ T27] audit: type=1326 audit(1719439525.813:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.502665][ T27] audit: type=1326 audit(1719439525.823:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.504649][ T5866] EXT4-fs (loop0): Remounting filesystem read-only [ 158.525371][ T27] audit: type=1326 audit(1719439525.823:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816dd75ae9 code=0x7ffc0000 [ 158.525408][ T27] audit: type=1326 audit(1719439525.823:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f816dd6cb67 code=0x7ffc0000 [ 158.525439][ T27] audit: type=1326 audit(1719439525.823:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5864 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f816dd11539 code=0x7ffc0000 [ 158.528488][ T5876] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 158.828571][ T5866] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 159.016427][ T5866] EXT4-fs (loop0): 1 truncate cleaned up [ 159.038054][ T4175] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.105724][ T5866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 159.267808][ T5876] cramfs: Error -3 while decompressing! [ 159.273706][ T5876] cramfs: ffffffff91e22568(27)->ffff888056168000(4096) [ 159.283290][ T5876] cramfs: Error -3 while decompressing! [ 159.290099][ T5876] cramfs: ffffffff91e22568(27)->ffff888056168000(4096) [ 159.297000][ T4175] usb 4-1: Using ep0 maxpacket: 32 [ 159.312884][ T5876] cramfs: Error -3 while decompressing! [ 159.321084][ T5876] cramfs: ffffffff91e22568(27)->ffff888056168000(4096) [ 159.418365][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 159.439045][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 159.453811][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.471409][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.525852][ T3638] bond0 (unregistering): Released all slaves [ 159.579567][ T4175] usb 4-1: New USB device found, idVendor=257a, idProduct=260c, bcdDevice=a6.30 [ 159.588981][ T4175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.597073][ T4175] usb 4-1: Product: syz [ 159.601499][ T4175] usb 4-1: Manufacturer: syz [ 159.607070][ T4175] usb 4-1: SerialNumber: syz [ 159.614364][ T4175] usb 4-1: config 0 descriptor?? [ 159.636320][ T3544] EXT4-fs (loop0): unmounting filesystem. [ 159.661141][ T4175] option 4-1:0.0: GSM modem (1-port) converter detected [ 159.875862][ T4175] usb 4-1: USB disconnect, device number 6 [ 159.882506][ T4175] option 4-1:0.0: device disconnected [ 161.879261][ T5899] loop0: detected capacity change from 0 to 65536 [ 161.976207][ T5899] XFS (loop0): Mounting V5 Filesystem [ 162.023761][ T5912] input: syz0 as /devices/virtual/input/input18 [ 162.064362][ T5899] XFS (loop0): Ending clean mount [ 162.070808][ T5899] XFS (loop0): Quotacheck needed: Please wait. [ 162.146143][ T5899] XFS (loop0): Quotacheck: Done. [ 162.182058][ T5905] loop1: detected capacity change from 0 to 8192 [ 162.738595][ T5919] sd 0:0:1:0: device reset [ 163.152463][ T5905] REISERFS warning (device loop1): super-6507 reiserfs_parse_options: bad value autoresize=auto for -oresize [ 163.152463][ T5905] [ 163.209071][ T3544] XFS (loop0): Unmounting Filesystem [ 164.152783][ T5932] loop3: detected capacity change from 0 to 16 [ 164.193406][ T5932] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 164.266638][ T5932] cramfs: Error -3 while decompressing! [ 164.279029][ T5932] cramfs: ffffffff91e22568(27)->ffff88806097d000(4096) [ 164.292686][ T5932] cramfs: Error -3 while decompressing! [ 164.305087][ T5932] cramfs: ffffffff91e22568(27)->ffff88806097d000(4096) [ 164.322654][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 164.322668][ T27] audit: type=1800 audit(1719439531.983:298): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.682" name="file3" dev="loop3" ino=348 res=0 errno=0 [ 164.333131][ T5936] loop4: detected capacity change from 0 to 1024 [ 164.349032][ T5937] cramfs: Error -3 while decompressing! [ 164.382096][ T5937] cramfs: ffffffff91e22568(27)->ffff88806097d000(4096) [ 164.397108][ T5936] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 164.410343][ T27] audit: type=1800 audit(1719439532.063:299): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.682" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 165.384934][ T5944] input: syz0 as /devices/virtual/input/input19 [ 165.697548][ T3595] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.987244][ T3595] usb 4-1: Using ep0 maxpacket: 32 [ 166.598820][ T3561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 166.612221][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.625129][ T3552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.636390][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.644106][ T3552] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 166.652578][ T3552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.756155][ T5951] loop0: detected capacity change from 0 to 8192 [ 166.817958][ T5951] REISERFS warning (device loop0): super-6507 reiserfs_parse_options: bad value autoresize=auto for -oresize [ 166.817958][ T5951] [ 166.853986][ T5949] loop4: detected capacity change from 0 to 65536 [ 166.946980][ T3595] usb 4-1: New USB device found, idVendor=257a, idProduct=260c, bcdDevice=a6.30 [ 166.956075][ T3595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.967075][ T3595] usb 4-1: Product: syz [ 166.971277][ T3595] usb 4-1: Manufacturer: syz [ 166.976711][ T5949] XFS (loop4): Mounting V5 Filesystem [ 166.990688][ T3595] usb 4-1: SerialNumber: syz [ 167.002864][ T3595] usb 4-1: config 0 descriptor?? [ 167.029562][ T5949] XFS (loop4): Ending clean mount [ 167.035858][ T5949] XFS (loop4): Quotacheck needed: Please wait. [ 167.058242][ T3595] option 4-1:0.0: GSM modem (1-port) converter detected [ 167.082245][ T5949] XFS (loop4): Quotacheck: Done. [ 167.105556][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 167.187318][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.194600][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.208353][ T5952] device bridge_slave_0 entered promiscuous mode [ 167.222235][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.231439][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.244343][ T5952] device bridge_slave_1 entered promiscuous mode [ 167.290556][ T4372] usb 4-1: USB disconnect, device number 7 [ 167.291421][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.299025][ T4372] option 4-1:0.0: device disconnected [ 167.312838][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.421148][ T5969] sd 0:0:1:0: device reset [ 167.688983][ T5952] team0: Port device team_slave_0 added [ 167.709740][ T5952] team0: Port device team_slave_1 added [ 167.747128][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.754236][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.794637][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.808210][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.815163][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.848193][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.913520][ T5362] XFS (loop4): Unmounting Filesystem [ 167.929493][ T5952] device hsr_slave_0 entered promiscuous mode [ 167.939726][ T5952] device hsr_slave_1 entered promiscuous mode [ 167.951221][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.967136][ T5952] Cannot create hsr debugfs directory [ 168.326574][ T5952] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.697780][ T3561] Bluetooth: hci3: command tx timeout [ 168.820818][ T5952] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.210428][ T5952] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.289280][ T5952] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.375522][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.384580][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.393195][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.401772][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.451819][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.465276][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.474085][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.512042][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.544856][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.554304][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.568992][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.576092][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.578902][ T5988] loop4: detected capacity change from 0 to 1024 [ 169.596234][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.610512][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.621798][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.650764][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.657968][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.680020][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.717540][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.726331][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.740529][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.767114][ T5952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.790635][ T9] hfsplus: b-tree write err: -5, ino 4 [ 169.799100][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.839883][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.849035][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.873774][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.889880][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.905307][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.915346][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.928330][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.954338][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.549491][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.559819][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.567353][ T5993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.617192][ T3561] Bluetooth: hci0: command 0x0406 tx timeout [ 170.773000][ T5986] loop3: detected capacity change from 0 to 32768 [ 170.785648][ T3561] Bluetooth: hci3: command tx timeout [ 170.805141][ T5986] XFS (loop3): Mounting V5 Filesystem [ 170.812294][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.821265][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.840196][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.863572][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.871319][ T5986] XFS (loop3): Ending clean mount [ 170.872988][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.881519][ T5986] XFS (loop3): Quotacheck needed: Please wait. [ 170.898994][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.907618][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.918062][ T5952] device veth0_vlan entered promiscuous mode [ 170.943177][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.951539][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.958503][ T5986] XFS (loop3): Quotacheck: Done. [ 170.961704][ T5952] device veth1_vlan entered promiscuous mode [ 171.004409][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.013904][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.022671][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.032218][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.043818][ T5952] device veth0_macvtap entered promiscuous mode [ 171.068765][ T5952] device veth1_macvtap entered promiscuous mode [ 171.076923][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.085646][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.106040][ T5672] XFS (loop3): Unmounting Filesystem [ 171.108022][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.123437][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.134385][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.145540][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.155841][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.166329][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.182725][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.211723][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.222412][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.232802][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.244928][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.255207][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.265866][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.275689][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.286121][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.296202][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.307410][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.328816][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.361823][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.374061][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.388774][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.399199][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.408318][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.418703][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.499010][ T3638] device hsr_slave_0 left promiscuous mode [ 171.505375][ T3638] device hsr_slave_1 left promiscuous mode [ 171.511781][ T3638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.519396][ T3638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.528275][ T3638] device bridge_slave_1 left promiscuous mode [ 171.534748][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.543550][ T3638] device bridge_slave_0 left promiscuous mode [ 171.549941][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.563480][ T3638] device veth1_macvtap left promiscuous mode [ 171.569556][ T3638] device veth0_macvtap left promiscuous mode [ 171.575575][ T3638] device veth1_vlan left promiscuous mode [ 171.581757][ T3638] device veth0_vlan left promiscuous mode [ 171.665996][ T3638] bond1 (unregistering): Released all slaves [ 171.794237][ T27] audit: type=1326 audit(1719439539.453:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8ac575ae9 code=0x0 [ 171.886394][ T6013] loop0: detected capacity change from 0 to 256 [ 171.904986][ T3638] team0 (unregistering): Port device team_slave_1 removed [ 171.936455][ T3638] team0 (unregistering): Port device team_slave_0 removed [ 171.956539][ T3638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.985864][ T3638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.004964][ T6013] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 172.314662][ T3638] bond0 (unregistering): Released all slaves [ 172.899042][ T3561] Bluetooth: hci3: command tx timeout [ 172.954054][ T6010] netlink: 52 bytes leftover after parsing attributes in process `syz.3.701'. [ 172.967003][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.975191][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.996865][ T6010] Zero length message leads to an empty skb [ 173.053621][ T3876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.071064][ T3876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.090856][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.142658][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.308772][ T4487] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 173.547677][ T4487] usb 5-1: Using ep0 maxpacket: 8 [ 173.667000][ T4487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 173.683999][ T4487] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 173.847243][ T4487] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=3d.e4 [ 173.856507][ T4487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.869226][ T4487] usb 5-1: Product: syz [ 173.873414][ T4487] usb 5-1: Manufacturer: syz [ 173.879236][ T4487] usb 5-1: SerialNumber: syz [ 173.887479][ T4487] usb 5-1: config 0 descriptor?? [ 173.928036][ T4487] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 173.947138][ T4487] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 174.151395][ T3595] usb 5-1: USB disconnect, device number 5 [ 174.159842][ T3595] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 174.169766][ T3595] kobil_sct 5-1:0.0: device disconnected [ 174.411175][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 175.037058][ T3562] Bluetooth: hci3: command tx timeout [ 175.423125][ T6038] loop0: detected capacity change from 0 to 256 [ 175.880113][ T6036] loop3: detected capacity change from 0 to 40427 [ 175.888615][ T6036] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 175.896395][ T6036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.912263][ T6036] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.941983][ T6036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.949397][ T6036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.972207][ T6036] syz.3.709: attempt to access beyond end of device [ 175.972207][ T6036] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.001690][ T5672] syz-executor: attempt to access beyond end of device [ 176.001690][ T5672] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 177.697705][ T6054] loop1: detected capacity change from 0 to 65536 [ 177.721780][ T3562] Bluetooth: hci0: command 0x0406 tx timeout [ 178.181208][ T6054] XFS (loop1): Mounting V5 Filesystem [ 178.561307][ T6054] XFS (loop1): Ending clean mount [ 178.584995][ T6054] XFS (loop1): Quotacheck needed: Please wait. [ 178.686489][ T6054] XFS (loop1): Quotacheck: Done. [ 178.868446][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.889154][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.016161][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.154523][ T6072] sd 0:0:1:0: device reset [ 179.546990][ T4175] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.569855][ T5952] XFS (loop1): Unmounting Filesystem [ 179.705874][ T6050] loop3: detected capacity change from 0 to 32768 [ 179.719927][ T6050] XFS (loop3): Mounting V5 Filesystem [ 179.764339][ T6050] XFS (loop3): Ending clean mount [ 179.771596][ T6050] XFS (loop3): Quotacheck needed: Please wait. [ 179.815088][ T6050] XFS (loop3): Quotacheck: Done. [ 179.827220][ T4175] usb 1-1: Using ep0 maxpacket: 32 [ 179.902658][ T5672] XFS (loop3): Unmounting Filesystem [ 180.147035][ T4175] usb 1-1: New USB device found, idVendor=257a, idProduct=260c, bcdDevice=a6.30 [ 180.156151][ T4175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.164270][ T4175] usb 1-1: Product: syz [ 180.168541][ T4175] usb 1-1: Manufacturer: syz [ 180.173227][ T4175] usb 1-1: SerialNumber: syz [ 180.178960][ T4175] usb 1-1: config 0 descriptor?? [ 180.218485][ T4175] option 1-1:0.0: GSM modem (1-port) converter detected [ 180.430917][ T4085] usb 1-1: USB disconnect, device number 7 [ 180.437608][ T4085] option 1-1:0.0: device disconnected [ 181.122994][ T6086] loop1: detected capacity change from 0 to 16 [ 181.143663][ T27] audit: type=1326 audit(1719439548.803:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.0.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x0 [ 181.178002][ T6086] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 181.213863][ T6086] cramfs: Error -3 while decompressing! [ 181.223074][ T6092] input: syz0 as /devices/virtual/input/input20 [ 181.230127][ T6086] cramfs: ffffffff91e22568(27)->ffff888055afd000(4096) [ 181.316937][ T6086] cramfs: Error -3 while decompressing! [ 181.325960][ T6086] cramfs: ffffffff91e22568(27)->ffff888055afd000(4096) [ 181.361497][ T27] audit: type=1800 audit(1719439549.023:302): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.719" name="file3" dev="loop1" ino=348 res=0 errno=0 [ 181.396642][ T6094] cramfs: Error -3 while decompressing! [ 181.402340][ T6094] cramfs: ffffffff91e22568(27)->ffff888055afd000(4096) [ 181.409615][ T27] audit: type=1800 audit(1719439549.073:303): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.719" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 182.349565][ T6097] loop3: detected capacity change from 0 to 8192 [ 182.366945][ T6097] REISERFS warning (device loop3): super-6507 reiserfs_parse_options: bad value autoresize=auto for -oresize [ 182.366945][ T6097] [ 183.975258][ T6110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.726'. [ 184.028122][ T6111] loop1: detected capacity change from 0 to 1024 [ 184.251954][ T3755] hfsplus: b-tree write err: -5, ino 4 [ 184.388928][ T6115] loop1: detected capacity change from 0 to 256 [ 184.433119][ T6115] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 184.638415][ T6113] loop0: detected capacity change from 0 to 65536 [ 184.702329][ T6113] XFS (loop0): Mounting V5 Filesystem [ 184.716939][ T3595] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.738176][ T6113] XFS (loop0): Ending clean mount [ 184.745132][ T6113] XFS (loop0): Quotacheck needed: Please wait. [ 184.773303][ T6113] XFS (loop0): Quotacheck: Done. [ 185.113893][ T6125] sd 0:0:1:0: device reset [ 185.132269][ T3595] usb 5-1: Using ep0 maxpacket: 8 [ 185.366999][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 185.382976][ T3595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 185.527136][ T3544] XFS (loop0): Unmounting Filesystem [ 185.561304][ T3595] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=3d.e4 [ 185.571823][ T3595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.580015][ T3595] usb 5-1: Product: syz [ 185.584190][ T3595] usb 5-1: Manufacturer: syz [ 185.589139][ T3595] usb 5-1: SerialNumber: syz [ 185.594693][ T3595] usb 5-1: config 0 descriptor?? [ 185.637997][ T3595] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 185.647765][ T3595] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 185.851001][ T3595] usb 5-1: USB disconnect, device number 6 [ 185.859361][ T3595] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 185.869884][ T3595] kobil_sct 5-1:0.0: device disconnected [ 186.553278][ T6133] loop3: detected capacity change from 0 to 256 [ 186.557640][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.729610][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.744675][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.203676][ T6138] loop4: detected capacity change from 0 to 1024 [ 187.222837][ T6138] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 187.236669][ T27] audit: type=1326 audit(1719439554.883:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.0.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ae775ae9 code=0x0 [ 187.986997][ T6128] loop1: detected capacity change from 0 to 40427 [ 188.030163][ T6128] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 188.197133][ T6128] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 188.289247][ T6128] F2FS-fs (loop1): Found nat_bits in checkpoint [ 188.340718][ T6128] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 188.351179][ T6128] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.381287][ T6128] syz.1.732: attempt to access beyond end of device [ 188.381287][ T6128] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.415446][ T5952] syz-executor: attempt to access beyond end of device [ 188.415446][ T5952] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 189.096954][ T3562] Bluetooth: hci0: command 0x0406 tx timeout [ 189.382144][ T6161] loop3: detected capacity change from 0 to 256 [ 189.410371][ T6161] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 190.536617][ T3595] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 190.573398][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.582101][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.589572][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.826987][ T3595] usb 1-1: Using ep0 maxpacket: 8 [ 190.978056][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 190.989781][ T3595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 191.196973][ T3595] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=3d.e4 [ 191.206065][ T3595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.214156][ T3595] usb 1-1: Product: syz [ 191.218357][ T3595] usb 1-1: Manufacturer: syz [ 191.222958][ T3595] usb 1-1: SerialNumber: syz [ 191.229265][ T3595] usb 1-1: config 0 descriptor?? [ 191.277548][ T3595] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 191.286579][ T3595] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 191.531183][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 191.533953][ T4377] usb 1-1: USB disconnect, device number 8 [ 191.574917][ T4377] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 191.606230][ T6180] loop1: detected capacity change from 0 to 256 [ 191.624080][ T4377] kobil_sct 1-1:0.0: device disconnected [ 191.719568][ T6182] loop3: detected capacity change from 0 to 1024 [ 191.732801][ T6182] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 192.211072][ T6184] loop4: detected capacity change from 0 to 40427 [ 192.219564][ T6184] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 192.227820][ T6184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 192.239892][ T6184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.270322][ T6184] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 192.277469][ T6184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.300675][ T6184] syz.4.750: attempt to access beyond end of device [ 192.300675][ T6184] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.332694][ T5362] syz-executor: attempt to access beyond end of device [ 192.332694][ T5362] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 193.737114][ T3561] Bluetooth: hci0: command 0x0406 tx timeout [ 194.112663][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 194.158678][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.165430][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.207614][ T6219] loop0: detected capacity change from 0 to 256 [ 196.106057][ T6226] UBIFS error (pid: 6226): cannot open "./file0", error -22 [ 197.336987][ T3562] Bluetooth: hci0: command 0x0406 tx timeout [ 197.461749][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 198.624747][ T6253] loop1: detected capacity change from 0 to 256 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=2 req=640 state=1 status=1 (errno 9: Bad file descriptor)