last executing test programs: 1m7.382022467s ago: executing program 1 (id=154): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\xa3'}}, {@cache_fscache}]}}) 1m7.208387491s ago: executing program 1 (id=156): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x0, 0x0}, {0x6, 0x11, 0x0, 0x0}], 0x2}) 1m5.554370565s ago: executing program 1 (id=169): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x10, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1m5.3657489s ago: executing program 1 (id=171): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@attr2}, {@largeio}]}, 0x1, 0x979b, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x100, 0x121) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x40000, 0x0, 0x0, 0x1000}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x320c401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m4.159926969s ago: executing program 1 (id=179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc52f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x100, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, 'O'}, @global=@item_4={0x3, 0x1, 0x5, "091400"}]}}, 0x0}, 0x0) 1m3.060879068s ago: executing program 1 (id=185): unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 1m2.67405458s ago: executing program 32 (id=185): unshare(0x400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 1m0.092963129s ago: executing program 3 (id=205): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 59.011902157s ago: executing program 3 (id=209): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 58.753017638s ago: executing program 3 (id=210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20082800) 58.659379976s ago: executing program 3 (id=211): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20000, 0x0) 58.450188992s ago: executing program 3 (id=212): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000000140)='./file0\x00', 0x4000000, &(0x7f0000000580)={[{@noikeep}, {@usrquota}, {@sysvgroups}, {@pquota}, {@inode32}, {@discard}, {@nolazytime}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x97a9, &(0x7f0000009740)="$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") setuid(0xee01) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) 57.333776473s ago: executing program 3 (id=217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 56.832333054s ago: executing program 33 (id=217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) 4.06557471s ago: executing program 0 (id=631): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 2.847262989s ago: executing program 0 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 2.803930712s ago: executing program 4 (id=643): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x2b8bc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2.649994855s ago: executing program 0 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.418305854s ago: executing program 0 (id=654): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.046643774s ago: executing program 0 (id=649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416441805034d2f87e5940c05ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 1.764504287s ago: executing program 0 (id=652): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d56"]) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000100"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.485995529s ago: executing program 5 (id=656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8001}]}}]}, 0xa0}}, 0x0) 1.414792865s ago: executing program 5 (id=657): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/11, 0xb}], 0x1) 1.253997358s ago: executing program 4 (id=658): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bd", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000640)='|', 0x1}], 0x1}}], 0x2, 0x40000) 1.253616858s ago: executing program 5 (id=659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 1.151794777s ago: executing program 5 (id=660): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000002340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x150021, 0x0) 1.083242562s ago: executing program 4 (id=661): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000980)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x81, 0x0, @void}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}, 0x7061ab3a}], 0x1, 0x0, 0x0) 1.061265954s ago: executing program 2 (id=662): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd60f4000000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 929.613535ms ago: executing program 5 (id=663): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000040)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_continue}, {@errors_continue}, {}, {@uid}, {@quota}, {@uid}, {@usrquota}]}, 0x1, 0x614f, &(0x7f000000ccc0)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 929.281545ms ago: executing program 2 (id=664): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000020006600000008000300", @ANYRES32=r2, @ANYBLOB="080026006c09000008009f00060000000800b7"], 0x34}}, 0x0) 864.97614ms ago: executing program 4 (id=665): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x4}, 0x2) 845.847911ms ago: executing program 2 (id=666): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x63) 654.021977ms ago: executing program 4 (id=667): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 603.773251ms ago: executing program 2 (id=668): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 450.569924ms ago: executing program 4 (id=669): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x609c, &(0x7f0000006700)="$eJzs3UuPHFfZB/CnL9NzyRvbil5ZxmLhOBASQny3IdzisGABSCAhr7E1mUQGB5BtEIksPJEXiAWXjwCbbFjki4Qda8QHwJLNKhKEQjVzjl3d0zM9jme6uuf8flK76ulT1X3K/6np7qmqPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe+/cOznYi4+st0x5GI/4teRDdiua5PRD1zOS/fj4hjG0tFHI2I3mJEvf7GP4cjLkTER4ciHjy8s1rffW6X/bh45vbNT777rb//5g/3jv34zR99MNr+g/8//+Fv70Yc+f5rH35yd082HQAAAIpRVVXVSR/zj6fP9922OwUATEV+/a+SfL9arVar97T+fXe2+qMutG6qxrvbLCJivblO/Z7B4XgAmDPr8XHbXaBF8i9aPyKeabsTwEzrtN0B9sWDh3dWOynfTvP14MRme/475VD+651H13dsN51k9ByTaf183YtePLdNf5an1IdZkvPvjuZ/dbN9kJbb7/ynZbv8B5EuaipMzr83mv+Iofz/GBFzm393bP6lyvn3nyT/9d4c7//yBwAAAADg4Mt//z/S8vHfxafflF3Z6fjviSn1AQAAAAAAAAD22qcc/2/jePnR5gMZ/w8AAABmVv1ZvfanQ4/v60T87fCYZeuP+Fc6Ec+OLA8UJl0ss9J2PwAAAAAAAAAAAACgJP3Nc3ivdCIWIuLZlZWqqupb02j9pJ52/XlX+vZDydr+JQ8AAJs+OpSu5b+/tHlHJ6Keu5K+629hZWWlqpaWV6qVankxv58dLC5Vy43PtXla37c42MUb4v6gqh9sqbFe06TPy5PaRx+vfq5B1dtFx6aj7dQBKN3mq9EDr0gHTFUdjrbf5TAf7P8Hj/2f3Wj75xQAAADYf1VVVZ30dd7H0zH/btudAgCmYSm//o8eF1Cr1Wq1Wn3w6qZqvLvNIiLWm+vU7xkMxw8Ac2Y9Pm67C7RI/kXrR8SxtjsBzLRO2x1gXzx4eGe1k/LtNF8P0vju+VyQofzXOxvr5fXHTScZPcdkWj9f96IXz23Tn6NT6sMsyfl3R/O/utk+SMvtd/7Tsl3+9XYeaaE/bcv590bzH3Fw8u+Ozb9UOf/+E+Xfkz8AAAAAAMyw/Pf/I47/5k0GAAAAAAAAgLnz4OGd1Xzdaz7+/9kxy3Wac67/PDBy/p1d5+/634Mk598dzX/khJxeY/7+G4/z/9fDO6sf3P7nZ/J05vNf6A3q517odHv9dM5PtfBWXI8bsRZntizfH2o/u6V9Yaj93IT281vaB3X7cm4/Favxs7gRbz5qX5xwYtTShPZqQnvOv2f/L1LOv9+41fmvpPbOyLR2//3ulv2+OR33PJf/8p8Xt+5de20wcYl70Xu0bU319p3clz7tbOP/5JlB/OLW2s1Tv7p2+/bNs5EmQ/eeizTZYzn/hXTL+b/0wmZ7/r3f3F/vvz944vxnxb3ob5v/C435entfnnLf2pDzH6Rbzj+/Ao3f/+c5/+33/1da6A8AAAAAAAAAAAAAAADspKqqjUtEL0fEpXT9T1vXZgIAU/W776WZKgm1Wq1Wq9V7VfdnrD9DqvFebxaxNLzOpYj49bgHAwBm2X8j4h9td4LWyL9g+fv+6unn2u4MMFW33n3vJ9du3Fi7eavtngAAAAAAAAAAn1Ye//NEY/znjfOARsaNHhr/9Y04Mbfjf3YHvY2xztMGPR87j/99MnYe/7s/4fkWJrRPGrF4cUL70oT2sRd6NOT8n08Z5/yPpw0rafzXl1roT9ty/ifTWM85/y+MLNfMv/rzPOffHcr/9O13fn761rvvvXr9nWtvr7299tOzZy5dOH/xwvmLF0+/df3G2pnNf1vs8f7K+eexr50HWpacf85c/mXJ+X8+1fIvS87/xVTLvyw5//x+T/5lyfnnzz7yL0vO/+VUy78sOf8vplr+Zcn5v5Jq+Zcl5/+lVMu/LDn/V1Mt/7Lk/E+lWv5lyfmfTrX8y5Lzz0e45F+WnH8+s0H+Zcn5n0u1/MuS8z+favmXJed/IdXyL0vO/2Kq5V+WnP+lVMu/LDn/L6da/mXJ+X8l1fIvS87/tVTLvyw5/6+mWv5lyfl/LdXyL0vO/+upln9Zcv7fSLX8y5Lz/2aq5V+WnP/rqZZ/WR5//7+ZKc/8+68RM9CN/ZipqqqagW6YeYqZtn8zAQAAAAAAAAAAAACjpnE6cdvbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuN0aOs74D+Nw/++wE4pIQQjDk7DjBkIvvzv8SE0wcIDQNLU0DodCGOsY+Owb/q8+GJIqaS5O2QURqpPZF+qIUEEVIbZUIIZVKKYpUpPZd8woUVUKtlBeWmlQmgla0JFfNzvM8t7u3t3u27+zZmc8nin++29nd52Zn9+571ncHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhI9N/MpBlWf5/4491WXZ5/vc12Z78w9mdl3qFAAAAwIV6o/Hn316RPrFnCVdq2uaf3/Ov35ubm5vLPv/6mTf/bG4uXTCWZUOrs6xxWfQvv/j5XPM2wRPZ6MBg08eDPe5+qMflwz0uH+lx+aoel6/ucfloj8sX7IAF1hS/j2nc2KbGX9cVuzS7KhtpXLapw7WeGFg9OBh/l9Mw0LjO3MjB7HB2JJvOJhdcZ6DxX5a9sCG/r7uyeF+DTfe1Psuysz99dH9cw0DYx5uyljtraH7sXrsjG3v9p4/u//apV9/ZafbcDQtWmmWbN+brfDLL5n9dlQ1kq9M+iescbFrn+g7rHGpZ50Djevnf29d5donrjF/3aFjnS13WuT587qHrsyybzRbdpt0T2WC2tu1e0/4eLY6I/Dbyh/Jt2fA5HScblnCc5Nd55frW46T9mIz7f0PYJ8OLrKH54Xjt8VUL9vv5Hif5V12GYzW/7XvyOx0dbf7Vasuxmm/z6A2LHwMdH7sOx0A6lpuOgY29joHBVUONY2Bwfs0bW46BqQXXGcwGGvd15obux8DEqaMnJmYefuTmw0f3HZo+NH1sanLn9m07tm/bsWPi4OEj05PFn+e2S/vI2mwwHYMbw2tNPAbf27Zt8yE5943lex6MluR5kH/tn7oxX9Dlg9kix3i+zZObL/x5kL7vNz0PhpueBx1fUzs8D4aX8DzItzm7eWnfM4eb/u+0hpV6LVzXdAxcyu+H+X3e/77FXwvXh3U99f5z/X44tOAYiF/WQHju5Z9JP++N3hr2y8Lj4tr8gstWZadnpk9ueWjfqVMnp7IwLoormx6r9uNlbdPXlC04XgbP+XjZ8ze/vPHaDp9fF/bV6E3dH6t8m+3j3R+rxqt76/5clRX7s+WzW7MwltnF3p+dvpvl+zNliS77M9/myZsv/GfBlEuaXv9Ger3+DY0MF69/Q2lvjLS8/i18aIYaK8uyszcv7fVvJPx/sV//rirJ61++r+7f0v0YyLd5auJcj4Hhrq9/14c5ENbzvpAYRpty/5uNy2eLw7Tpsex53AwPj4TjZjjeY+txs23BdfJby+978+T5HTebr299rFp+bqngcZPvqz+f7H7c5Nu8OHXhrx1r4l+bXjtW9ToGRoZW5esdSQdB8Xo3tyYeA1uy/dnx7Eh2IF0nf5Tz+xrfurRjYFX4/2K/dlxTkmMg31fPbu1+DOTb/HDb8v7stDl8Jm3T9LNT++8XFsv81w7P3177blvuzJ+v86M/+kT6XKcMkW/z6vZzzRnd99NN4TOXddhP7c+fxY7pA9nF2U/XhHUe2dH9d1P5NlftXOLxtCfLspenXm78viv8fve7p3/0vZbf+3b6nfLLUy/fPXHvj89l/QAAnL83G3/Orip+1mz6F+ul/Ps/AAAA0Bdi7h8MM5H/AQAAoDJi7h8KM5H/AQAAoDJi7h8OM6lJ/n/w1l3PvfFYlt4NcC6Il8fdcM+Hiu1ix3s2fDw2Ny///Ie/NfLcVx5b2n0PZln2y7vf1XH7Bz8U11U4Edf5gdbPL3DNdUu6/wfum9+u+f0Tzu4qbj9+PUs9DGJX+YWJrY3bHXt4qjFfvDtrzHtnn3qiuP3i47j9mW3F9n8Z3rRkz8GBlutvDuvZFOZYeE+Ze/bM74d8xus9t/49/3Tlp+fvL15vYONbG1/ms39Q3G58j6hnriy2j1/3Yuv/x69+57l8+4du6Lz+xwY7r/9MuN1XwvzF7mL75n3+lab1/1FYf7y/eL0t3/xBx/U//45i++fDcfH1MNvXf8efvvuNTo9XvJ89txXXi/c/+d/bG9eLtxdvv339o49NteyP9tt/8fXidnZ/6WdDzdvHz8f7iR64rfX4HgiPb0uPPMuy7/xx1rKfsw8W1/uHtvXH2ztxW+f139S2zhMD1zWuP//1rGv5ur7211s7fr1xPXv+bl3L1/PMnWH/vT7xw/x2z9wbjsdw+f++VNxe+3uZPn9n6+tN3P7r64rnbby9ibb1P9O2/tnr8n3Xe/13vV6s//nbV7esf8/HwvF0VzF7rf/QX13Rcv1vfLt4PE5+efzY8ZnThw807dXm5/Hq0TVrL7v8LW+9IryWtn+89/ipB6dPjk2OTWbZWB++ZeBKr/+bYf5XMWaX/x4KP/5Zcdw9/fHi+9Z7f158/Ez4/APh8YzfH7/2FyMtx2v74z57ezEvdP3vD+tYqnd89T+uW9KGZz73wum//8NX238uiF/PibePNr6+Zzdc3bhs4MXi8vbXq17+/e2tz+ufDE825vfDfp0L78y88eri/tpvP743ydOfLJ6/8Se5eP2s7f1E1g21fh0Xuv6fhJ9jfnBN6+tfPD6+/1jbuzmvywbyJcyG14dstrg8bhX399Nnr+54f/F9eLLZd57LMhc18/DMxJHDx04/NHFqeubUxMzDj+w9evz0sVN7G+9duvcLva4///xe23h+H5jeuT1rPNuPF2OFXer1n7hv/4FbJm88MH1w3+mDp+47MX3y0P6Zmf3TB2Zu3Hfw4PSXe13/8IHdU1t3bbtl6/ihwwd237pr17Zd44ePHc+XUSyqh52TXxw/dnJv4yozu7fvmtqxY/vk+NHjB6Z33zI5OX661/Ub35vG82t/afzk9JF9pw4fnR6fOfzI9O6pXTt3bu357o9HTxycGZs4efrYxOmZ6ZMTxdcydqrx6fx7X6/rUw8zx8PrXZuB8NP5Z2/amd4fN/etxxe9qWKT1h9Ps9fCe0HF72+9Po65fyTMpCb5HwAAAOog5v7wxv/zF8j/AAAAUBkx968OM5H/AQAAoDJi7i+S/2g6/Xtd8v9y9f8f1/9v0P/X/8/0/xP9f/3/TP9f/78H/X/9/35ev/6//j+9la3/H3J/tibL/Ps/AAAAVFTM/WvDTOR/AAAAqIyY+y8LM5H/AQAAoDJi7r88zKQm+d/5//X/9f+79f/jtvr/mf5/Gfr/m/5T/38B/X/9/0z//7xd6v58v6+/hP3/Nfr/lE3Z+v8x978lzKQm+R8AAADqIOb+t4aZyP8AAABQGTH3XxFmIv8DAABAZcTcvy7MpCb5X/9f/1//3/n/9f/7pv/v/P8d6P/r/2f6/+dtkf58/kOh/n9/9v+d/5/SKVv/P+b+XwkzqUn+BwAAgDqIuf9tYSbyPwAAAFRGzP1XhpnI/wAAAFAZMfdfFWZSk/xfz/7/K1mW6f9n+v/6/23r1P/X/18J+v/6/93o/5ey/+/8//r/+v8sm7L1/2Puf3uYSU3yPwAAANRBzP1Xh5nI/wAAAFAZMfe/I8xE/gcAAIDKiLn/mjCTmuT/evb/nf9f/7+g/9+6Tv1//f+VoP+v/9+N/r/+fz+vX/9f/5/eytb/j7n/nWEmNcn/AAAAUAcx918bZiL/AwAAQGXE3P+uMBP5HwAAACoj5v71YSY1yf/6//r/+v/6//r/+v8rqb/6/4OLXqL/X9D/b7V8/f/Z+QXo//fN+vX/9f/prWz9/5j73x1mUpP8DwAAAHUQc/97wkzkfwAAAKiMmPuvCzOR/wEAAKAyYu4fCzOpSf7X/9f/1//X/9f/1/9fSf3V/1+c/n9B/7/V0vr/A8PzC3D+/+V0qdev/6//T29l6//H3L8hzKQm+R8AAADqIOb+jWEm8j8AAABURsz914eZyP8AAABQGTH3bwozqUn+1//X/9f/1//X/9f/X0n6//r/3dSj/9+8AP3/5XSp16//r/9Pb2Xr/8fcf0OYSU3yPwAAANRBzP03hpnI/wAAAFAZMfe/N8xE/gcAAIDKiLl/c5hJTfK//r/+v/5/H/f/h/T/M/3/0tP/1//vRv+/XP3/Yf1//X/9f5ZZ2fr/Mfe/L8ykJvkfAAAA6iDm/veHmcj/AAAAUBkx998UZiL/AwAAQGXE3D8eZlKT/K//r/+v/9/H/X/n/29Z/zL0/0eaP6//vzz0//X/u9H/L1f/3/n/9f/1/1luZev/x9x/c5hJTfI/AAAA1EHM/VvCTOR/AAAAqIyY+yfCTOR/AAAAqIyY+yfDTKqQ///tbM9N9P8vZv+/sY/1//X/9f/D5SXs/zv//wrQ/9f/70b/X/+/n9ev/6//T29l6//H3D8VZlKF/A8AAAA0xNy/NcxE/gcAAIDKiLl/W5iJ/A8AAACVEXP/9jCTmuT/Pun/b0kFqL7u/zv/v/6//n8t+v//E14U9f8b9P/1/7vR/9f/7+f1X4L+/3DzB/r/lM1gh8+Vrf8fc/+OMJOa5H8AAACog5j7d4aZyP8AAABQGTH33xJmIv8DAABAZcTcf2uYSU3yf5/0/yty/n/9f/1//f9a9P8D5/8v6P/r/3ej/6//38/rP7f+/2fav905/z+1ULb+f8z9u8JMapL/AQAAoA5i7v9AmIn8DwAAAJURc/9tYSbyPwAAAPSVTuchjGLu/2CYSU3yv/5/1fv/c6v1//X/9f+7r1//f2Xp/+v/d6P/r//fz+u/BOf/b6H/Tz8oW/8/5v7dYSY1yf8AAABQBzH3fyjMRP4HAACAyoi5//YwE/kfAAAAKiPm/j1hJjXJ//r/Ve//1+b8/43L9f/1//X/y0f/X/+/G/3//uz/hx9b9P9L1P/PjyH9f8qobP3/mPvvCDOpSf4HAACAOoi5/8NhJvI/AAAAVEbM/R8JM5H/AQAAoDJi7v9omElN8r/+v/5/Rfr/zv+v/6//X1L6/yvW/2+8FOr/Fxbt/6/R/+9mvj9/hfP/93n/3/n/Kauy9f9j7r8zzKQm+R8AAADqIOb+j4WZyP8AAABQGTH3/2qYifwPAAAAlRFz/11hJjXJ//r/+v/6//r/+v/6/ytJ/9/5/7tx/v+y9P8vTX++39ev/6//T29l6//H3P9rYSY1yf8AAABQBzH33x1mIv8DAABAZcTc//EwE/kfAAAA+syqRS+Juf/Xw0xqkv/7r/8/1pf9/8F0+/r/+v/6//r/+v/LSf9f/z/T/z9vl7o/3+/r1//X/6e3svX/Y+7/jTCTmuR/AAAAqIOY+z8RZiL/AwAAQGXE3P+bYSbyPwAAAFRGzP33hJnUJP8vd/+//frdOP+//n+m/6//r/+v/3+B+qn/P6L/v4D+v/5/P69f/1//n97K1v+Puf+3wkxqkv8BAACgDmLuvzfMRP4HAACAknrwnK8Rc/8nw0zkfwAAAKiMmPs/FWZSk/zff+f/77/+f377+v/6/5n+v/5/017V/18+/dT/d/7/hfT/9f/7ef36//r/9Fa2/n/M/feFmdQk/wMAAEAdxNz/6TAT+R8AAAAqI+b+3w4zkf8BAACgMmLu/0yYSU3yv/6/8//r/+v/6//r/68k/f+F/f/8NUz/v6D/r//fz+vX/9f/p7ey9f9j7v9smElN8j8AAADUQcz9vxNmIv8DAABAZcTc/7thJvI/AAAAVEbM/feHmdQk/+v/6//r/+v/6//r/68k/X/n/+9G/1//v5/Xr/+v/09vZev/x9z/uTCTmuR/AAAAqIOY+38vzET+BwAAgMqIuX9vmIn8DwAAAJURc/8DYSY1yf/6//r/+v/17f+vblun/r/+/0rQ/9f/70b/X/+/n9ev/6//T29l6//H3L8vzGRP690AAAAA/Svm/s+HmdTk3/8BAACgDmLu3x9mIv8DAABAZcTcfyDMpCb5X/9f/1//v779f+f/L+j/ryz9f/3/bvT/9f/7ef36//r/9Hax+//x+8Bi/f+Y+6ezrJb5HwAAAOog5v6DYSbyPwAAAFRGzP2HwkzkfwAAAKiMmPsfDDOpSf7X/9f/1/+vbf//pe+2rVP/X/9/Jej/6/93o/+v/9/P69f/1/+nt7Kd/z/m/sNhJjXJ/wAAAFAHMfd/IcxE/gcAAIDKiLn/i2Em8j8AAABURsz9R8JMapL/9f/1//X/z6v//39z/d//X9r5/9fM36/+v/7/+dD/1//vRv9f/7+f16//r/9Pb2Xr/8fcfzTMpCb5HwAAAOog5v5jYSbyPwAAAFRGzP3Hw0zkfwAAAKiMmPtPhJnUJP/r/59b/39gkW6g/n/n9Ve4/99Qi/5/E/1//f/zof+v/9/NRej/v9l8Ff3/Vpe6P9/v69f/1/+nt1L0/0fmP465//fDTGqS/wEAAKAOYu4/GWYi/wMAAPD/7N1Xs6V1lcfxPYduGmqKmrfA1VzPXHnpS/A1WMU7MGcwY1bMWRFzQswYMOecE+aIKCoG1Cqs7rPWavp0n2fv7t67z/P81+dz4Rqa9DDTTM2v4Dt/hpG7/0Fxi/0PAAAAw8jd/+C4pcn+P7P/P6b/9/6//l//r/8P+v/t0P/r/6d4/1//v+Tv1//r/1lvFv3/fX45d/9D4pYm+x8AAAA6yN3/0LjF/gcAAIBh5O5/WNxi/wMAAMAwcvc/PG5psv+9/6//1//r//X/+v9d0v/r/w+T/7tI/6//X+r36//1/6w3t/4/d/8j4pYm+x8AAAA6yN3/yLjF/gcAAIBh5O5/VNxi/wMAAMAwcvc/Om5psv/1//p//b/+X/9/zv7/bv3/duj/9f9TvP+v/1/y9+v/z7//P7buD8pw5tb/5+5/TNzSZP8DAABAB7n7Hxu32P8AAAAwjNz9j4tb7H8AAAAYRu7+a+OWFvv/mP5f/6//X2L/f0z/7/3/5dD/6/+n6P/1/0f3/VetViv9v/f/2bW59f+5+6+LW1rsfwAAAOghd//j4xb7HwAAABZgb6PfKnf/E+IW+x8AAACGkbv/iXFLk/2v/9f/6/8X2P97/1//vyD6//H7///R/+v/F9n/e/9f/8+lMLf+P3f/k+KWJvsfAAAAOsjd/+S4xf4HAACAYeTuf0rcYv8DAADAMHL3PzVuabL/9f/6f/2//l//r//fJf3/+P3/6lz9/InNvkf/r/9f8vfr//X/rLfz/v8B15+6m/b/ufuvj1ua7H8AAADoIHf/0+IW+x8AAACGkbv/6XGL/Q8AAADDyN3/jLilyf7X/+v/T/f/9/6X/l//r/8//eP6/+3Q/zft/zek/9f/L/n79f/6f9bbef+/pvc/+Mu5+58ZtzTZ/wAAANBB7v5nxS32PwAAAAwjd/+z4xb7HwAAAIaRu/85cUuT/a//1/97/1//r//X/++S/n+2/f/Bv/XOpP/fiP5f/39Y/3//Db5f/08Hc+v/c/c/N25psv8BAACgg9z9z4tb7H8AAAAYRu7+G+IW+x8AAACGkbv/+XFLk/3fpv8/kPPp//fp//X/q7P6/72W/f/JH9P/74b+f7b9/zT9/0b0//p/7//r/5k2t/4/d/8L4pYm+x8AAAA6yN3/wrjF/gcAAIBh5O5/Udxi/wMAAMAwcve/OG5psv/b9P8H6P/3XXT/f0L/P17/f57v/182Rv/v/f/d0f/r/6fo//X/S/5+/b/+n/Xm1v/n7n9J3NJk/wMAAMDw9la1+18at9j/AAAAMIzc/S+LW+x/AAAAGEbu/pfHLU32v/5f/+/9f/3/RfX/g7z/r//fHf2//n/Kpv3/Sv9ffy36//l8v/5f/896c+v/c/e/Im5psv8BAACgg9z9r4xb7H8AAAAYRu7+V8Ut9j8AAAAMI3f/q+OWJvtf/6//1//r//X/+v9d0v/r/6d4/1//v+Tv1//r/1lvbv1/7v7XxC1N9j8AAAB0kLv/tXGL/Q8AAADDyN1/Y9xi/wMAAMAwcve/Lm45uP/3LuVXXTr6f/2//l//r//X/++S/l//P2Xk/v/eExfe/19xyJ9P/7/h999yXP+/w/4//57S/7OJufX/uftvilv8838AAAAYRu7+18ct9j8AAAAMI3f/G+IW+x8AAACGkbv/jXFLk/1/WP9/13/v/3r9/2b0/+f+fv2//n/T/v+e20//fvp//f/50P/r/1cz7f+9/+/9/3W//1L7/6T/ZxNz6/9z978pbmmy/wEAAKCD3P1vjlvsfwAAABhG7v63xC32PwAAAAwjd/9b45Ym+3/77/9frf/X/+v/4+r/vf+v/9f/6/+n6f/1/0v+fv2//p/1ttP/X7baVv+fu/9tcUuT/Q8AAAAd5O5/e9xi/wMAAMAwcve/I26x/wEAAGAYufvfGbc02f/b7/+9/6//P8/+f69Z/3/jbfr/+PX6f/3/Nuj/9f8r/f8FO+p+funfr//X/7Pe3N7/z91/86mp12//AwAAQAc3n/rPK1bvilvsfwAAABhG7v5b4hb7HwAAAIaRu//dcUuT/a//1/8fef/v/f+i/4//uer/9f/nQf+v/1/p/y/YUffzS/9+/b/+n/Xm1v/n7n9P3NJk/wMAAEAHufvfG7fY/wAAADCM2P37//K7/Q8AAABDet+p/7xi9f64pcn+b9z/X32x/f+V9/mv9f/n/n79/1b6/5sP/tzT/+v/l0T/r/+fov/X/y/5++fT/8cPXKv/Z37m1v/n7v9A3NJk/wMAAEAHufs/GLfY/wAAADCM3P23xi32PwAAAAwjd/+H4pYm+79x/z/I+/8PvDO+QP8/bv/v/f+4i+r/79L/J/2//n+K/l//v+Tvn0//7/1/5mtu/X/u/g/HLU32PwAAAHSQu/8jcYv9DwAAAMPI3f/RuMX+BwAAgGHk7r8tbmmy//X/S+//vf+v/9f/z7L/9/5/0f/r/6fo//dO/V8i+v9lfr/+X//PenPr/3P3fyxuabL/AQAAoIPc/R+PW+x/AAAAGEbu/k/ELfY/AAAADCN3/yfjlib7X/+v/99V/3/yT6L/b9L/X6f/X+n/D6X/1/9P0f97/3/J36//1/+z3tz6/9z9n4pbmux/AAAA6CB3/6fjFvsfAAAAhpG7/zNxi/0PAAAAw8jd/9m44f+vOrpP2q7jh/x49Ob6/9Vq7z7xsf7f+//6f+//J/3/duj/9f9T9P/6/yV/v/5f/896c+v/c/d/Lm7xz/8BAABgGLn7Px+32P8AAAAwjNz9X4hb7H8AAAAYRu7+L8YtTfa//t/7//r/xfb/V+r/z/x+/f886f/1/1P0//r/JX+//l//z3pz6/9z938pbmmy/wEAAKCD3P1fjlvsfwAAABhG7v6vxC32PwAAAAwjd/9X45Ym+1//r//X/y+2//f+/4Hv1//Pk/5f/z9F/6//X/L36//1/6w3t/4/d//X4pYm+x8AAAA6yN3/9bjF/gcAAIBh5O7/Rtxi/wMAAMAwcvd/M25psv/1//p//b/+X/+v/98l/f94/f/Jvwf0//v0/7Po//Onif5f/88Mza3/z93/rbilyf4HAACADnL3fztusf8BAABg7g7+652Hyt3/nbjF/gcAAIBh5O7/btzSZP+P3P9P/Wb6/336f/3/Sv+v/98x/f94/b/3/0/bpP8/4/8DgP5/q476+/X/+n/Wm1v/n7v/e3FLk/0PAAAAHeTu/37cYv8DAADAMHL3/yBusf8BAABgGLn7fxi3NNn/I/f/U/T/+/T/+v+V/l//v2P6f/3/lA79/xn0/1t11N+v/9f/s94R9f/HV4f0/7n7fxS3NNn/AAAA0EHu/tvjFvsfAAAAhpG7/8dxi/0PAAAAw8jd/5O4ZZz9f82tE79S/7/1/v/UTyL9v/5/pf/X/+v/T9H/6/+n6P/1/0v+fv2//p/15vb+f+7+n8Yt4+x/AAAAaC93/8/iFvsfAAAAhpG7/+dxi/0PAAAAw8jd/4u4pcn+n2v/f/C//Qvq/y/o/f/8Bv2//n/H/f9lK/2//v8S0//r/6csp/8/ds4f1f/r//X/+n+mza3/z93/y7ilyf4HAACADnL3/ypusf8BAABgGLn7fx232P8AAAAwjNz9v4lbmuz/ufb/C37//4L6/4t7//90Pa3/P8r+f++sP/4M+3/v/+v/Lzn9v/5/ynL6/3PT/+v/7/d//3tN/rzT/+v/Odvc+v/c/b+NW5rsfwAAAOggd//v4hb7HwAAAIaRu/+OuMX+BwAAgGHk7v993NJk/+v/R+j/vf8/j/7/7D++/n93/f/JH9P/L4P+X/8/Rf+v/1/y93v/X//PenPr/3P33xm3NNn/AAAA0EHu/j/ELfY/AAAADCN3/x/jltj/lx/JVwEAAADblLv/rrilyT//1//r/4fs/0/07f/vaNL/e/9/OfT/+v8p+n/9/5K/X/+v/2e9ufX/ufv/FLc02f8AAADQQe7+P8ct9j8AAAAMI3f/X+IW+x8AAACGkbv/7rilyf7X/+v/z7//P15/3bPt/73/r//X/8/GuP3/5fp//f9F9/833LT/w/r/ZX6//l//z3pz6/9z9/81bmmy/wEAAKCD3P1/i1vsfwAAABhG7v6/xy32PwAAAAwjd/8/4pYm+1//r/8f8v1//b/+X/8/G+P2/97/1/97///i+vm9hX+//l//zybm1v/n7r8nbmmy/wEAAKCD3P3/jFvsfwAAABhG7v5/xS32PwAAAAwjd/+/45Ym+1//r//X/+v/9f/6/13S/+v/p+j/O/f/y/9+/b/+n/Xm1v/n7v9PAAAA//9AODfC") link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000006600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0), &(0x7f00000004c0)=ANY=[], 0x835, 0x1) llistxattr(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 333.924323ms ago: executing program 2 (id=670): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty, 0xfff}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000540)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 19.569689ms ago: executing program 2 (id=671): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 0s ago: executing program 5 (id=672): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010000000000000000000c000000280005801400f48004000200000000000800010000000000080001"], 0x3c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): 0 would solve the problem. [ 62.374479][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.393632][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.430555][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.497987][ T5794] team0: Port device team_slave_0 added [ 62.517552][ T5789] hsr_slave_0: entered promiscuous mode [ 62.523789][ T5789] hsr_slave_1: entered promiscuous mode [ 62.530811][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.538914][ T5789] Cannot create hsr debugfs directory [ 62.551193][ T5794] team0: Port device team_slave_1 added [ 62.613255][ T5782] hsr_slave_0: entered promiscuous mode [ 62.619696][ T5782] hsr_slave_1: entered promiscuous mode [ 62.626570][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.634135][ T5782] Cannot create hsr debugfs directory [ 62.656826][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.663822][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.690115][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.705446][ T5792] Bluetooth: hci1: command tx timeout [ 62.714463][ T5792] Bluetooth: hci0: command tx timeout [ 62.724228][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.731287][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.757390][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.784649][ T5792] Bluetooth: hci2: command tx timeout [ 62.874813][ T5792] Bluetooth: hci3: command tx timeout [ 62.943698][ T5794] hsr_slave_0: entered promiscuous mode [ 62.951177][ T5794] hsr_slave_1: entered promiscuous mode [ 62.959284][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.966910][ T5794] Cannot create hsr debugfs directory [ 63.094119][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.105997][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.115981][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.126716][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.226397][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.241339][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.256010][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.276711][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.373531][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.382683][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.408487][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.428321][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.440367][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.488567][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.512357][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.519732][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.550324][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.557465][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.580001][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.591709][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.602049][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.620133][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.679541][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.775708][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.822845][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.830048][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.851881][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.874549][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.881665][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.934088][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.963945][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.982446][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.989663][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.033417][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.040570][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.067615][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.099079][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.131731][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.138871][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.179705][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.187003][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.230042][ T5785] veth0_vlan: entered promiscuous mode [ 64.290660][ T5785] veth1_vlan: entered promiscuous mode [ 64.415464][ T5785] veth0_macvtap: entered promiscuous mode [ 64.441034][ T5785] veth1_macvtap: entered promiscuous mode [ 64.455243][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.526836][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.569294][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.601333][ T5789] veth0_vlan: entered promiscuous mode [ 64.619307][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.632566][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.642459][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.651716][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.709429][ T5789] veth1_vlan: entered promiscuous mode [ 64.751809][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.784886][ T5792] Bluetooth: hci0: command tx timeout [ 64.787524][ T50] Bluetooth: hci1: command tx timeout [ 64.799902][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.852579][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.861605][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.868691][ T5789] veth0_macvtap: entered promiscuous mode [ 64.874826][ T50] Bluetooth: hci2: command tx timeout [ 64.906788][ T5789] veth1_macvtap: entered promiscuous mode [ 64.945041][ T50] Bluetooth: hci3: command tx timeout [ 64.960691][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.972556][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.984278][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.001475][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.009333][ T5782] veth0_vlan: entered promiscuous mode [ 65.016930][ T5782] veth1_vlan: entered promiscuous mode [ 65.030399][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.033341][ T5794] veth0_vlan: entered promiscuous mode [ 65.052609][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.063594][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.080852][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.097644][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.108511][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.117311][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.127179][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.203454][ T5794] veth1_vlan: entered promiscuous mode [ 65.328094][ T5782] veth0_macvtap: entered promiscuous mode [ 65.374126][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.385534][ T5782] veth1_macvtap: entered promiscuous mode [ 65.393399][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.429520][ T5794] veth0_macvtap: entered promiscuous mode [ 65.485175][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.493041][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.499702][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.513588][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.543897][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.558897][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.572356][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.599272][ T5794] veth1_macvtap: entered promiscuous mode [ 65.652781][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.666773][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.681250][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.697530][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.717268][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.753698][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.775004][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.785297][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.821995][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.841325][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.860778][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.894184][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.910327][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.924280][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.938420][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952149][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.986651][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.000465][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013077][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.023632][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.033561][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.044442][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.056327][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.127357][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.172070][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.222764][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.232766][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.499698][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.539132][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.542236][ T5879] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.9'. [ 66.578894][ T5879] netlink: zone id is out of range [ 66.584079][ T5879] netlink: zone id is out of range [ 66.598365][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.610706][ T5879] netlink: del zone limit has 8 unknown bytes [ 66.621339][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.622475][ T5881] syz.0.10[5881]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.753556][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.774797][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.782662][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.788556][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.865877][ T50] Bluetooth: hci1: command tx timeout [ 66.866451][ T5792] Bluetooth: hci0: command tx timeout [ 66.944480][ T5792] Bluetooth: hci2: command tx timeout [ 67.024629][ T5792] Bluetooth: hci3: command tx timeout [ 67.227940][ T5881] loop0: detected capacity change from 0 to 32768 [ 67.882601][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.055161][ T5909] loop3: detected capacity change from 0 to 256 [ 68.182808][ T5909] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 68.431242][ T5917] loop2: detected capacity change from 0 to 512 [ 68.452231][ T5920] Zero length message leads to an empty skb [ 68.477742][ T5917] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.521962][ T5917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.610780][ T5917] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.25: bad orphan inode 131083 [ 68.645973][ T5917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.864007][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.964767][ T5792] Bluetooth: hci1: command tx timeout [ 68.970292][ T5792] Bluetooth: hci0: command tx timeout [ 69.016198][ T5931] loop3: detected capacity change from 0 to 64 [ 69.024686][ T5792] Bluetooth: hci2: command tx timeout [ 69.104823][ T5792] Bluetooth: hci3: command tx timeout [ 69.366293][ T5914] loop1: detected capacity change from 0 to 32768 [ 69.425628][ T5914] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.23 (5914) [ 69.444901][ T5925] loop0: detected capacity change from 0 to 40427 [ 69.474420][ T5925] F2FS-fs (loop0): Invalid segment/section count (24 != 1 * 1) [ 69.494448][ T5925] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.534119][ T5925] F2FS-fs (loop0): invalid crc value [ 69.541843][ T5914] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.574697][ T5914] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 69.611963][ T5914] BTRFS info (device loop1): using free space tree [ 69.631975][ T5925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.658567][ T5932] loop2: detected capacity change from 0 to 32768 [ 69.809098][ T5932] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.844612][ T5914] BTRFS info (device loop1): enabling ssd optimizations [ 69.851636][ T5914] BTRFS info (device loop1): auto enabling async discard [ 69.885681][ T5925] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.932952][ T5925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 70.123284][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 70.171425][ T5932] XFS (loop2): Ending clean mount [ 70.180584][ T5789] syz-executor: attempt to access beyond end of device [ 70.180584][ T5789] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.226112][ T5932] XFS (loop2): Quotacheck needed: Please wait. [ 70.256804][ T5789] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 70.287608][ T5934] loop3: detected capacity change from 0 to 40427 [ 70.314047][ T5934] F2FS-fs (loop3): invalid crc value [ 70.375622][ T5934] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.384187][ T5932] XFS (loop2): Quotacheck: Done. [ 70.628101][ T5934] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 70.749308][ T5932] XFS (loop2): User initiated shutdown received. [ 70.770794][ T5932] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 70.859577][ T5932] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 70.887324][ T5785] syz-executor: attempt to access beyond end of device [ 70.887324][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.944019][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 70.965222][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.241918][ T5980] capability: warning: `syz.1.39' uses deprecated v2 capabilities in a way that may be insecure [ 71.595508][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.602125][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.783180][ T5774] kernel write not supported for file /input/event2 (pid: 5774 comm: kworker/0:3) [ 72.982789][ T6047] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 72.989562][ T6047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.025637][ T6047] vhci_hcd vhci_hcd.0: Device attached [ 73.092758][ T6052] erspan0: entered promiscuous mode [ 73.101038][ T6048] usbip_core: unknown command [ 73.106699][ T6048] vhci_hcd: unknown pdu 0 [ 73.115090][ T6048] usbip_core: unknown command [ 73.121915][ T3475] vhci_hcd: stop threads [ 73.132649][ T3475] vhci_hcd: release socket [ 73.143353][ T3475] vhci_hcd: disconnect device [ 73.790915][ T6057] loop1: detected capacity change from 0 to 32768 [ 73.825972][ T6057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.65 (6057) [ 73.858260][ T6057] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 73.877336][ T6057] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 73.898270][ T6057] BTRFS info (device loop1): using free space tree [ 74.029394][ T6057] BTRFS info (device loop1): enabling ssd optimizations [ 74.084549][ T6057] BTRFS info (device loop1): auto enabling async discard [ 74.323590][ T5782] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 74.558097][ T6063] loop0: detected capacity change from 0 to 40427 [ 74.630391][ T6063] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 74.667224][ T6063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.690970][ T6096] loop3: detected capacity change from 0 to 128 [ 74.735550][ T6063] F2FS-fs (loop0): invalid crc value [ 74.743249][ T6096] ======================================================= [ 74.743249][ T6096] WARNING: The mand mount option has been deprecated and [ 74.743249][ T6096] and is ignored by this kernel. Remove the mand [ 74.743249][ T6096] option from the mount to silence this warning. [ 74.743249][ T6096] ======================================================= [ 75.112345][ T6063] F2FS-fs (loop0): Start checkpoint disabled! [ 75.162755][ T6063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 75.178718][ T6063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 75.191472][ T6096] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.219443][ T6096] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.252119][ T6096] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.275093][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.423743][ T6096] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 75.469406][ T8] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 75.489169][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.523977][ T8] usb 3-1: config 0 descriptor?? [ 75.541955][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.561102][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 75.598999][ T5795] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 75.697748][ T6118] loop6: detected capacity change from 0 to 524287999 [ 75.808637][ T5795] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 75.835225][ T5795] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 75.863252][ T5795] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 75.892730][ T5795] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 75.914136][ T5795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 75.933399][ T5795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 75.949290][ T8] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 75.953003][ T5795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 76.002743][ T5795] usb 2-1: string descriptor 0 read error: -22 [ 76.009932][ T5795] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 76.030894][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.052799][ T5795] usb 2-1: config 0 descriptor?? [ 76.067582][ T6111] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 76.079014][ T5795] hub 2-1:0.0: bad descriptor, ignoring hub [ 76.105486][ T5795] hub: probe of 2-1:0.0 failed with error -5 [ 76.145959][ T5795] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 76.151524][ T8] gspca_cpia1: usb_control_msg 01, error -32 [ 76.169397][ T8] gspca_cpia1: usb_control_msg 01, error -71 [ 76.175631][ T8] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 76.188669][ T8] usb 3-1: USB disconnect, device number 2 [ 76.256065][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.333167][ T28] usb 2-1: USB disconnect, device number 2 [ 76.416262][ T6128] loop3: detected capacity change from 0 to 4096 [ 76.474596][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 76.488525][ T5864] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 76.500545][ T5864] usb 1-1: config 179 has no interface number 0 [ 76.510931][ T5864] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 76.522621][ T5864] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 76.539174][ T5864] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.552072][ T5864] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 76.562930][ T5864] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.576528][ T5864] usb 1-1: config 179 interface 65 has no altsetting 0 [ 76.583522][ T5864] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 76.592954][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.626726][ T5864] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 76.905956][ T23] usb 1-1: USB disconnect, device number 2 [ 76.906052][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 76.920419][ T23] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 77.518450][ T6134] loop1: detected capacity change from 0 to 32768 [ 77.912613][ T6153] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 78.038273][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 78.091827][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 78.108596][ T6159] bond0: entered promiscuous mode [ 78.113661][ T6159] bond_slave_0: entered promiscuous mode [ 78.119930][ T6159] bond_slave_1: entered promiscuous mode [ 78.129817][ T6159] bond0: left promiscuous mode [ 78.134883][ T6159] bond_slave_0: left promiscuous mode [ 78.140495][ T6159] bond_slave_1: left promiscuous mode [ 79.027885][ T6170] loop2: detected capacity change from 0 to 32768 [ 79.047882][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.064118][ T6170] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.226797][ T6170] XFS (loop2): Ending clean mount [ 79.237787][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.247506][ T6170] XFS (loop2): Quotacheck needed: Please wait. [ 79.273899][ T8] usb 2-1: config 6 has an invalid interface number: 252 but max is 0 [ 79.287246][ T8] usb 2-1: config 6 has no interface number 0 [ 79.293511][ T8] usb 2-1: config 6 interface 252 has no altsetting 0 [ 79.307273][ T743] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x2443 dinode [ 79.309944][ T8] usb 2-1: New USB device found, idVendor=14aa, idProduct=0221, bcdDevice=76.22 [ 79.327486][ T743] XFS (loop2): Unmount and run xfs_repair [ 79.337537][ T743] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 79.348760][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.361397][ T743] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 79.364298][ T8] usb 2-1: Product: syz [ 79.377324][ T743] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.379752][ T8] usb 2-1: Manufacturer: syz [ 79.387589][ T743] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 79.391379][ T8] usb 2-1: SerialNumber: syz [ 79.407994][ T743] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 79.417455][ T743] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 79.432197][ T743] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 79.446537][ T743] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 79.458077][ T743] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 79.496411][ T6170] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 79.500172][ T6198] loop0: detected capacity change from 0 to 64 [ 79.608885][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.846107][ T8] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 80.045373][ T8] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 80.069849][ T8] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 80.072429][ T6207] netlink: 27 bytes leftover after parsing attributes in process `syz.0.117'. [ 80.090600][ T8] usb 2-1: media controller created [ 80.114827][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.157611][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 80.181013][ T8] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 80.334400][ T8] rc_core: IR keymap rc-dtt200u not found [ 80.343259][ T8] Registered IR keymap rc-empty [ 80.351188][ T8] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 80.370588][ T8] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 80.383405][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 80.419075][ T8] dvb-usb: schedule remote query interval to 300 msecs. [ 80.432274][ T8] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 80.479529][ T8] usb 2-1: USB disconnect, device number 3 [ 80.577188][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.591215][ T6223] sctp: [Deprecated]: syz.0.123 (pid 6223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.591215][ T6223] Use struct sctp_sack_info instead [ 80.595125][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 80.636855][ T8] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 80.653307][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.666067][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 80.702921][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.734692][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 80.743155][ T9] usb 3-1: Manufacturer: syz [ 80.773966][ T9] usb 3-1: config 0 descriptor?? [ 80.976539][ T6234] loop0: detected capacity change from 0 to 64 [ 81.154444][ T9] rc_core: IR keymap rc-hauppauge not found [ 81.160398][ T9] Registered IR keymap rc-empty [ 81.165890][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.205029][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.255559][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 81.296025][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 81.329979][ T6225] loop3: detected capacity change from 0 to 32768 [ 81.330015][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.378287][ T27] audit: type=1800 audit(1754337597.047:2): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.124" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 81.402632][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.449740][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.494868][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.524646][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.544439][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.570906][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.591035][ T6233] loop1: detected capacity change from 0 to 32768 [ 81.598656][ T6233] XFS: ikeep mount option is deprecated. [ 81.616040][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.638610][ T6233] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.656323][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.716714][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.729240][ T6233] XFS (loop1): Ending clean mount [ 81.734470][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 81.760026][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 81.769524][ T6233] XFS (loop1): Quotacheck needed: Please wait. [ 81.774558][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.807498][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.827952][ T23] usb 1-1: config 0 descriptor?? [ 81.829068][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 81.848580][ T787] cfg80211: failed to load regulatory.db [ 81.865049][ T6233] XFS (loop1): Quotacheck: Done. [ 81.916635][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 81.954443][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 81.984728][ T9] usb 3-1: USB disconnect, device number 3 [ 81.985481][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.048946][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 82.087128][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 82.138871][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 82.167462][ T23] usb 1-1: media controller created [ 82.238517][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.334125][ T23] az6027: usb out operation failed. (-71) [ 82.341443][ T23] az6027: usb out operation failed. (-71) [ 82.362775][ T23] stb0899_attach: Driver disabled by Kconfig [ 82.373674][ T23] az6027: no front-end attached [ 82.373674][ T23] [ 82.405420][ T23] az6027: usb out operation failed. (-71) [ 82.412037][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 82.421332][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 82.434095][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 82.444902][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 82.486611][ T23] usb 1-1: USB disconnect, device number 3 [ 82.544493][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 82.735887][ T6257] loop2: detected capacity change from 0 to 4096 [ 82.759444][ T6257] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 83.263147][ T6254] loop1: detected capacity change from 0 to 32768 [ 83.329662][ T27] audit: type=1800 audit(1754337598.997:3): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.130" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 83.551826][ T6278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.761473][ T6284] process 'syz.0.146' launched './file2' with NULL argv: empty string added [ 83.981559][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 84.190933][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 84.231039][ T6304] vlan2: entered allmulticast mode [ 84.490706][ T6310] loop3: detected capacity change from 0 to 1024 [ 84.654805][ T5774] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.855443][ T5774] usb 2-1: Using ep0 maxpacket: 8 [ 84.869935][ T5774] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 84.885910][ T5774] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 84.895563][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.903594][ T5774] usb 2-1: Product: syz [ 84.931623][ T5774] usb 2-1: Manufacturer: syz [ 84.943917][ T6302] loop2: detected capacity change from 0 to 40427 [ 84.944437][ T5774] usb 2-1: SerialNumber: syz [ 84.988845][ T5774] usb 2-1: config 0 descriptor?? [ 85.009299][ T6302] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.028403][ T5774] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 85.039479][ T5774] usb 2-1: setting power ON [ 85.045822][ T5774] dvb-usb: bulk message failed: -22 (2/0) [ 85.065852][ T5774] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 85.099403][ T5774] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 85.114723][ T5774] usb 2-1: media controller created [ 85.161817][ T6302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 85.181329][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.221801][ T6306] dvb-usb: bulk message failed: -22 (3/0) [ 85.221948][ T6328] input: syz1 as /devices/virtual/input/input10 [ 85.235096][ T6306] dvb-usb: bulk message failed: -22 (5/0) [ 85.241696][ T5774] usb 2-1: selecting invalid altsetting 6 [ 85.258325][ T5774] usb 2-1: digital interface selection failed (-22) [ 85.277949][ T5774] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 85.278294][ T6306] dvb-usb: bulk message failed: -22 (3/0) [ 85.298853][ T5774] usb 2-1: setting power OFF [ 85.313279][ T5774] dvb-usb: bulk message failed: -22 (2/0) [ 85.320181][ T5774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 85.333663][ T5774] (NULL device *): no alternate interface [ 85.373013][ T5794] syz-executor: attempt to access beyond end of device [ 85.373013][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 85.399944][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 85.403197][ T5774] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 85.472802][ T5774] usb 2-1: USB disconnect, device number 4 [ 85.742336][ T6335] loop0: detected capacity change from 0 to 2048 [ 85.784207][ T6335] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.910556][ T6337] loop2: detected capacity change from 0 to 512 [ 85.966454][ T6337] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 86.002876][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 86.025111][ T6337] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 86.049412][ T6337] EXT4-fs (loop2): 1 truncate cleaned up [ 86.056531][ T6337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.271146][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.502360][ T6354] loop2: detected capacity change from 0 to 2048 [ 86.698369][ T6355] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.714886][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.803738][ T6347] loop1: detected capacity change from 0 to 32768 [ 86.811385][ T6347] XFS: attr2 mount option is deprecated. [ 86.854517][ T6347] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 86.868348][ T6347] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.929082][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.958032][ T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.006866][ T6347] XFS (loop1): Ending clean mount [ 87.012707][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.058164][ T6347] XFS (loop1): Quotacheck needed: Please wait. [ 87.080286][ T23] usb 1-1: config 0 descriptor?? [ 87.175668][ T6347] XFS (loop1): Quotacheck: Done. [ 87.527815][ T23] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 87.606197][ T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input11 [ 87.740313][ T6369] loop3: detected capacity change from 0 to 40427 [ 87.763970][ T6369] F2FS-fs (loop3): invalid crc value [ 87.803767][ T6369] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.831721][ T23] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 87.880651][ T6381] loop2: detected capacity change from 0 to 512 [ 87.929556][ T5782] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.042802][ T6369] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 88.059964][ T3418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.103504][ T28] usb 1-1: USB disconnect, device number 4 [ 88.157372][ T6382] fido_id[6382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 88.177206][ T6369] syz.3.177: attempt to access beyond end of device [ 88.177206][ T6369] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 88.319794][ T5785] syz-executor: attempt to access beyond end of device [ 88.319794][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.378974][ T3418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.379099][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 88.411316][ T6386] loop2: detected capacity change from 0 to 256 [ 88.574266][ T3418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.762019][ T3418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.234497][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.454583][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 89.493602][ T23] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 89.525801][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 89.569547][ T23] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 89.590733][ T23] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 89.609809][ C1] sd 0:0:1:0: [sda] tag#3655 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 89.620305][ C1] sd 0:0:1:0: [sda] tag#3655 CDB: Read(10) 28 00 00 00 00 00 00 00 01 00 00 00 [ 89.640978][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 89.676171][ T23] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 89.694662][ T23] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 89.703703][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.714008][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.722344][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.729648][ T23] usb 3-1: Product: syz [ 89.733844][ T23] usb 3-1: Manufacturer: syz [ 89.742212][ T23] usb 3-1: SerialNumber: syz [ 89.747227][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.755383][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.762642][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.783597][ T23] usb 3-1: config 0 descriptor?? [ 89.790774][ T23] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 89.805045][ T23] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 89.959303][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 90.028118][ T23] usb 3-1: USB disconnect, device number 4 [ 90.034018][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 90.066899][ T23] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 90.258686][ T6424] kvm: kvm [6423]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000061) [ 90.502266][ T6435] loop3: detected capacity change from 0 to 512 [ 90.522088][ T6435] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 90.549500][ T6435] EXT4-fs (loop3): invalid journal inode [ 90.555723][ T6435] EXT4-fs (loop3): can't get journal size [ 90.590382][ T6435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 90.603817][ T6435] System zones: 1-12, 13-13 [ 90.632833][ T6435] EXT4-fs (loop3): 1 truncate cleaned up [ 90.640819][ T6435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.827160][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.084410][ T6452] loop3: detected capacity change from 0 to 512 [ 91.110236][ T6452] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.151478][ T6452] EXT4-fs (loop3): 1 truncate cleaned up [ 91.184882][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.255907][ T6452] fscrypt (loop3, inode 18): Unsupported encryption flags (0xc6) [ 91.416589][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.439278][ T6464] loop0: detected capacity change from 0 to 512 [ 91.459924][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 91.469857][ T6464] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.481997][ T6464] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.522335][ T6464] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.544460][ T6464] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.551287][ T6464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.602131][ T6464] EXT4-fs (loop0): 1 truncate cleaned up [ 91.612815][ T6464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.668111][ T3418] hsr_slave_0: left promiscuous mode [ 91.697985][ T3418] hsr_slave_1: left promiscuous mode [ 91.715006][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.728953][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.741281][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.749479][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.759694][ T3418] bridge_slave_1: left allmulticast mode [ 91.765673][ T3418] bridge_slave_1: left promiscuous mode [ 91.773209][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.789034][ T3418] bridge_slave_0: left allmulticast mode [ 91.796693][ T3418] bridge_slave_0: left promiscuous mode [ 91.802521][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.825351][ T50] Bluetooth: hci0: command tx timeout [ 91.853314][ T3418] veth1_macvtap: left promiscuous mode [ 91.859465][ T3418] veth0_macvtap: left promiscuous mode [ 91.867404][ T3418] veth1_vlan: left promiscuous mode [ 91.873011][ T3418] veth0_vlan: left promiscuous mode [ 91.892707][ T6464] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 91.935998][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.541985][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 92.544220][ T6483] loop3: detected capacity change from 0 to 1024 [ 92.643258][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 92.702147][ T3475] hfsplus: b-tree write err: -5, ino 4 [ 92.711916][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.796490][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.883268][ T6487] loop3: detected capacity change from 0 to 512 [ 92.967866][ T6487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.988649][ T6487] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.090759][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.113117][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.126378][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.143407][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.155118][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.172501][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.185776][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.203724][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.221458][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.234102][ T5785] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 93.519348][ T3418] bond0 (unregistering): Released all slaves [ 93.602419][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.206'. [ 93.617053][ T6481] netlink: 830 bytes leftover after parsing attributes in process `syz.0.208'. [ 93.735083][ T6493] loop0: detected capacity change from 0 to 64 [ 93.905105][ T50] Bluetooth: hci0: command tx timeout [ 93.950568][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.958470][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.966318][ T6409] bridge_slave_0: entered allmulticast mode [ 93.984210][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.006657][ T6409] bridge_slave_0: entered promiscuous mode [ 94.039724][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.069252][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.077577][ T6409] bridge_slave_1: entered allmulticast mode [ 94.085218][ T6409] bridge_slave_1: entered promiscuous mode [ 94.246866][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.313745][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.480869][ T6409] team0: Port device team_slave_0 added [ 94.510604][ T6409] team0: Port device team_slave_1 added [ 94.607675][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.627820][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.675403][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.757596][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.778837][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.819634][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.076544][ T3418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.123388][ T6530] loop2: detected capacity change from 0 to 1024 [ 95.172286][ T6409] hsr_slave_0: entered promiscuous mode [ 95.199892][ T6409] hsr_slave_1: entered promiscuous mode [ 95.222038][ T6409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.254531][ T6409] Cannot create hsr debugfs directory [ 95.309302][ T6530] hfsplus: xattr searching failed [ 95.430051][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.450412][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.468416][ T11] hfsplus: b-tree write err: -5, ino 3 [ 95.469080][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.500515][ T3418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.503084][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.544682][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.571754][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.738266][ T3418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.867545][ T3418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.984406][ T5792] Bluetooth: hci0: command tx timeout [ 96.165254][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.364633][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 96.382158][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.402421][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.420268][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 96.422457][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.442804][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.465219][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.483351][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.503168][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.513008][ T6409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.520590][ T9] usb 3-1: Manufacturer: syz [ 96.535430][ T9] usb 3-1: config 0 descriptor?? [ 96.590550][ T6409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.703514][ T6409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.719616][ T6409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.862548][ T6579] loop0: detected capacity change from 0 to 2048 [ 96.896029][ T6579] UDF-fs: warning (device loop0): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 96.915039][ T9] rc_core: IR keymap rc-hauppauge not found [ 96.923491][ T9] Registered IR keymap rc-empty [ 96.943573][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 96.975426][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.002687][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.015834][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 97.039050][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.047068][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 97.066787][ T6538] bridge_slave_0: entered allmulticast mode [ 97.078381][ T6538] bridge_slave_0: entered promiscuous mode [ 97.117375][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.172057][ T6590] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.176808][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.199021][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.207687][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.221265][ T6538] bridge_slave_1: entered allmulticast mode [ 97.228518][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.230650][ T6538] bridge_slave_1: entered promiscuous mode [ 97.275262][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.304524][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.344699][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.387025][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.424161][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.444477][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.453304][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.475867][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.504927][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.545671][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 97.577866][ T6538] team0: Port device team_slave_0 added [ 97.589381][ T6538] team0: Port device team_slave_1 added [ 97.596214][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 97.608459][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 97.649534][ T9] usb 3-1: USB disconnect, device number 5 [ 97.665395][ T5792] Bluetooth: hci1: command tx timeout [ 97.747426][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.760896][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.789310][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.803056][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.812044][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.852297][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.900517][ T3418] hsr_slave_0: left promiscuous mode [ 97.911184][ T3418] hsr_slave_1: left promiscuous mode [ 97.921470][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.929961][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.941752][ T3418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.959472][ T3418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.969281][ T3418] bridge_slave_1: left allmulticast mode [ 97.975061][ T3418] bridge_slave_1: left promiscuous mode [ 97.980849][ T3418] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.997705][ T3418] bridge_slave_0: left promiscuous mode [ 98.003502][ T3418] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.026545][ T3418] veth1_macvtap: left promiscuous mode [ 98.032119][ T3418] veth0_macvtap: left promiscuous mode [ 98.044531][ T3418] veth1_vlan: left promiscuous mode [ 98.049893][ T3418] veth0_vlan: left promiscuous mode [ 98.074407][ T5792] Bluetooth: hci0: command tx timeout [ 98.341393][ T6610] kernel profiling enabled (shift: 9) [ 98.878630][ T3418] team0 (unregistering): Port device team_slave_1 removed [ 98.932777][ T3418] team0 (unregistering): Port device team_slave_0 removed [ 98.952282][ T6614] loop0: detected capacity change from 0 to 32768 [ 99.019791][ T6614] ERROR: (device loop0): dtReadFirst: stbl[0] out of bound [ 99.019791][ T6614] [ 99.035026][ T3418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.036544][ T6614] ERROR: (device loop0): remounting filesystem as read-only [ 99.124210][ T3418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.618638][ T3418] bond0 (unregistering): Released all slaves [ 99.749677][ T5792] Bluetooth: hci1: command tx timeout [ 99.845961][ T6624] loop0: detected capacity change from 0 to 1024 [ 99.887953][ T6626] loop2: detected capacity change from 0 to 64 [ 99.920396][ T6230] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.950653][ T6538] hsr_slave_0: entered promiscuous mode [ 99.969907][ T6538] hsr_slave_1: entered promiscuous mode [ 100.019273][ T27] audit: type=1800 audit(1754337615.687:4): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.246" name="file0" dev="loop2" ino=1 res=0 errno=0 [ 100.203416][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.305360][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.350658][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.357890][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.417263][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.424467][ T743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.606231][ T6640] loop2: detected capacity change from 0 to 2048 [ 100.712955][ T6538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.733917][ T6640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.755632][ T6640] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.777570][ T6538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.831676][ T6538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.904111][ T6538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.975726][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.159273][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.289045][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.368241][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.397627][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.405574][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.481551][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.488741][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.824915][ T50] Bluetooth: hci1: command tx timeout [ 101.920871][ T6409] veth0_vlan: entered promiscuous mode [ 101.952560][ T6409] veth1_vlan: entered promiscuous mode [ 102.038934][ T6409] veth0_macvtap: entered promiscuous mode [ 102.068003][ T6409] veth1_macvtap: entered promiscuous mode [ 102.115935][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.131400][ T6672] loop0: detected capacity change from 0 to 32768 [ 102.138477][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.159643][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.170420][ T6672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.253 (6672) [ 102.197924][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.224073][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.232230][ T6672] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.244291][ T6672] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 102.260415][ T6672] BTRFS info (device loop0): force clearing of disk cache [ 102.276858][ T6672] BTRFS info (device loop0): enabling auto defrag [ 102.283787][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.300041][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.312460][ T6672] BTRFS info (device loop0): max_inline at 0 [ 102.325259][ T6672] BTRFS info (device loop0): enabling disk space caching [ 102.332338][ T6672] BTRFS info (device loop0): disk space caching is enabled [ 102.343215][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.360087][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.373208][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.396903][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.419898][ T6409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.433178][ T6409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.474417][ T6409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.483598][ T6409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.626176][ T6672] BTRFS info (device loop0): enabling ssd optimizations [ 102.686834][ T6672] BTRFS info (device loop0): rebuilding free space tree [ 102.795510][ T6672] BTRFS info (device loop0): disabling free space tree [ 102.820646][ T6672] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.832464][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.856209][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.863755][ T6672] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.978681][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.014280][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.296896][ T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 103.378482][ T6733] loop4: detected capacity change from 0 to 512 [ 103.412470][ T6733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.423919][ T6538] veth0_vlan: entered promiscuous mode [ 103.442304][ T5789] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.489376][ T6733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.511731][ T6538] veth1_vlan: entered promiscuous mode [ 103.582180][ T6733] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.750318][ T6538] veth0_macvtap: entered promiscuous mode [ 103.771995][ T6747] loop2: detected capacity change from 0 to 128 [ 103.792589][ T6538] veth1_macvtap: entered promiscuous mode [ 103.850629][ T6747] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.895542][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.904741][ T50] Bluetooth: hci1: command tx timeout [ 103.917581][ T6747] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.948952][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.988491][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.045193][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.092931][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.133560][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.172541][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.192266][ T5794] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.240936][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.244688][ T27] audit: type=1800 audit(1754337619.907:5): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 104.264358][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.334050][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.354446][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.372887][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.414508][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.444145][ T6409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.450244][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.587306][ T6538] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.615718][ T6538] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.633346][ T6538] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.654859][ T6538] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.704747][ T5865] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.897311][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.913308][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.942198][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.952509][ T5865] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 104.952992][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.962096][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.989855][ T6776] loop4: detected capacity change from 0 to 256 [ 104.998572][ T5865] usb 3-1: config 0 descriptor?? [ 105.034170][ T6776] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.074608][ T6776] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 105.098641][ T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.126254][ T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.162360][ T6776] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 105.315295][ T6776] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff) [ 105.323628][ T6776] exFAT-fs (loop4): Filesystem has been set read-only [ 105.453072][ T5865] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 105.605052][ T5865] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 105.696794][ T5865] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 105.780675][ T5865] usb 3-1: USB disconnect, device number 6 [ 105.816327][ T5865] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 105.884831][ T6798] loop5: detected capacity change from 0 to 512 [ 105.903487][ T6797] fido_id[6797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 105.935362][ T6798] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.992545][ T6798] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.018010][ T6798] EXT4-fs (loop5): 1 truncate cleaned up [ 106.035252][ T6798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.181231][ T6798] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.272: inode #1073372648: comm syz.5.272: iget: illegal inode # [ 106.268562][ T6798] EXT4-fs (loop5): Remounting filesystem read-only [ 106.297898][ T6798] EXT4-fs warning (device loop5): ext4_xattr_block_set:2202: inode #19: comm syz.5.272: dec ref error=-5 [ 106.488261][ T6538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.589636][ T6818] batman_adv: batadv0: Adding interface: gretap1 [ 106.606320][ T6818] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.638610][ T6818] batman_adv: batadv0: Interface activated: gretap1 [ 106.682050][ T6800] loop4: detected capacity change from 0 to 32768 [ 106.733812][ T6800] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.273 (6800) [ 106.755617][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.808680][ T6800] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 106.832073][ T6800] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 106.865593][ T6800] BTRFS info (device loop4): using free space tree [ 106.975133][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 107.025441][ T6800] BTRFS info (device loop4): enabling ssd optimizations [ 107.032491][ T6800] BTRFS info (device loop4): auto enabling async discard [ 107.044777][ T786] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 107.083668][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.141818][ T786] usb 1-1: config 0 descriptor?? [ 107.159404][ T6850] loop2: detected capacity change from 0 to 64 [ 107.169108][ T786] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 107.207291][ T6409] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 107.374651][ T5795] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.423223][ T786] usb 1-1: Detected FT232B [ 107.594431][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 107.601612][ T786] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 107.639832][ T786] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.648742][ T5795] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.665427][ T5795] usb 6-1: config 0 has no interface number 0 [ 107.675426][ T5795] usb 6-1: config 0 interface 184 has no altsetting 0 [ 107.700288][ T5795] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.724770][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.753205][ T5795] usb 6-1: Product: syz [ 107.763801][ T5795] usb 6-1: Manufacturer: syz [ 107.787866][ T5795] usb 6-1: SerialNumber: syz [ 107.810021][ T5795] usb 6-1: config 0 descriptor?? [ 107.833858][ T5795] smsc75xx v1.0.0 [ 107.846619][ T5865] usb 1-1: USB disconnect, device number 5 [ 107.862300][ T5795] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 107.888192][ T5865] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.898055][ T5795] smsc75xx: probe of 6-1:0.184 failed with error -22 [ 107.921183][ T5865] ftdi_sio 1-1:0.0: device disconnected [ 108.048948][ T5795] usb 6-1: USB disconnect, device number 2 [ 108.247985][ T6868] loop4: detected capacity change from 0 to 32768 [ 108.308937][ T27] audit: type=1326 audit(1754337623.977:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0c98eb69 code=0x7fc00000 [ 108.549105][ T6884] netlink: 864 bytes leftover after parsing attributes in process `syz.4.290'. [ 109.117980][ T6906] loop4: detected capacity change from 0 to 2048 [ 109.194110][ T6906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.212509][ T6906] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.244180][ T6879] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 109.251436][ T6910] Bluetooth: MGMT ver 1.22 [ 109.333984][ T27] audit: type=1800 audit(1754337624.957:7): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.297" name="file0" dev="loop4" ino=13 res=0 errno=0 [ 109.354617][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.378120][ T6409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.555844][ T6963] netlink: 56 bytes leftover after parsing attributes in process `syz.4.315'. [ 111.013983][ T6977] loop2: detected capacity change from 0 to 128 [ 111.164738][ T787] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.251533][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 111.345759][ T5792] Bluetooth: hci2: command 0x0401 tx timeout [ 111.351947][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 111.374412][ T787] usb 5-1: Using ep0 maxpacket: 32 [ 111.382728][ T787] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 111.394418][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.410129][ T787] usb 5-1: config 0 descriptor?? [ 111.566154][ T6999] raw_sendmsg: syz.5.328 forgot to set AF_INET. Fix it! [ 111.623128][ T787] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 111.651269][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.705360][ T787] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 111.712594][ T787] usb 5-1: media controller created [ 111.816185][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.826237][ T6972] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 111.905220][ T787] az6027: usb out operation failed. (-71) [ 111.934795][ T787] az6027: usb out operation failed. (-71) [ 111.940575][ T787] stb0899_attach: Driver disabled by Kconfig [ 111.963286][ T7013] mmap: syz.5.333 (7013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.977193][ T787] az6027: no front-end attached [ 111.977193][ T787] [ 111.995255][ T787] az6027: usb out operation failed. (-71) [ 112.015122][ T787] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 112.038603][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 112.087508][ T787] dvb-usb: schedule remote query interval to 400 msecs. [ 112.122906][ T787] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 112.171939][ T787] usb 5-1: USB disconnect, device number 2 [ 112.306454][ T787] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 112.353424][ T5865] kernel read not supported for file /dsp (pid: 5865 comm: kworker/1:4) [ 112.884411][ T787] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.923852][ T7039] loop0: detected capacity change from 0 to 4096 [ 113.006872][ T7039] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 113.088603][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 113.102925][ T787] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.161260][ T787] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 113.192223][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.225445][ T787] usb 6-1: Product: syz [ 113.229663][ T787] usb 6-1: Manufacturer: syz [ 113.254430][ T787] usb 6-1: SerialNumber: syz [ 113.261176][ T7039] syz.0.343 (7039) used greatest stack depth: 20392 bytes left [ 113.270765][ T787] usb 6-1: config 0 descriptor?? [ 113.289670][ T787] usb 6-1: bad CDC descriptors [ 113.301929][ T787] usb 6-1: unsupported MDLM descriptors [ 113.494536][ T787] usb 6-1: USB disconnect, device number 3 [ 113.954754][ T5795] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 114.035144][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 114.184649][ T27] audit: type=1326 audit(1754337629.847:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.206651][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.256320][ T5795] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 114.262333][ T7075] loop0: detected capacity change from 0 to 512 [ 114.275193][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.311361][ T5795] usb 3-1: Product: syz [ 114.321172][ T27] audit: type=1326 audit(1754337629.847:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.343907][ T5795] usb 3-1: Manufacturer: syz [ 114.373216][ T5795] usb 3-1: SerialNumber: syz [ 114.373229][ T27] audit: type=1326 audit(1754337629.857:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.373264][ T27] audit: type=1326 audit(1754337629.857:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.449579][ T5795] usb 3-1: config 0 descriptor?? [ 114.459081][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.481922][ T7083] loop4: detected capacity change from 0 to 2048 [ 114.504714][ T7075] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.532907][ T27] audit: type=1326 audit(1754337629.857:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.638623][ T7090] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.653727][ T27] audit: type=1326 audit(1754337629.857:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.763648][ T27] audit: type=1326 audit(1754337629.857:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.860572][ T27] audit: type=1326 audit(1754337629.867:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.913414][ T5795] airspy 3-1:0.0: Board ID: 00 [ 114.919796][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.939876][ T5795] airspy 3-1:0.0: Firmware version: [ 114.952178][ T27] audit: type=1326 audit(1754337629.867:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 114.981935][ T7097] netlink: 44 bytes leftover after parsing attributes in process `syz.5.358'. [ 115.003108][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.358'. [ 115.025518][ T27] audit: type=1326 audit(1754337629.867:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f598eb69 code=0x7ffc0000 [ 115.320560][ T5795] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 115.374764][ T5795] airspy 3-1:0.0: Registered as swradio24 [ 115.394429][ T5795] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 115.429926][ T5795] usb 3-1: USB disconnect, device number 7 [ 115.684667][ T28] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.805901][ T7099] loop4: detected capacity change from 0 to 32768 [ 115.884743][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 115.903685][ T28] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 115.927409][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.951338][ T28] usb 1-1: Product: syz [ 115.977117][ T28] usb 1-1: Manufacturer: syz [ 115.981997][ T28] usb 1-1: SerialNumber: syz [ 115.995443][ T28] usb 1-1: config 0 descriptor?? [ 116.003883][ T28] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 116.048342][ T7099] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 116.123997][ T7106] loop5: detected capacity change from 0 to 32768 [ 116.207511][ T7106] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.222114][ T28] gspca_sn9c2028: read1 error -32 [ 116.252580][ T28] gspca_sn9c2028: read1 error -32 [ 116.416136][ T7106] XFS (loop5): Ending clean mount [ 116.489002][ T6409] ocfs2: Unmounting device (7,4) on (node local) [ 116.493370][ T786] usb 1-1: USB disconnect, device number 6 [ 116.531984][ T7106] XFS (loop5): User initiated shutdown received. [ 116.584763][ T7106] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 116.657011][ T7106] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 116.723158][ T6538] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.991630][ T7117] loop2: detected capacity change from 0 to 32768 [ 117.210588][ T7117] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.356469][ T7156] netlink: 'syz.0.365': attribute type 3 has an invalid length. [ 117.403260][ T7117] XFS (loop2): Ending clean mount [ 117.608282][ T7117] syz.2.362 (7117) used greatest stack depth: 19912 bytes left [ 117.637334][ T5794] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.649267][ T7170] loop4: detected capacity change from 0 to 256 [ 117.697315][ T7170] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 117.709516][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.369'. [ 117.821374][ T7170] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344) [ 117.821374][ T7170] [ 117.846459][ T7170] exFAT-fs (loop4): Filesystem has been set read-only [ 118.450410][ T7189] input: syz1 as /devices/virtual/input/input15 [ 118.604232][ T7197] loop0: detected capacity change from 0 to 128 [ 118.616991][ T7197] EXT4-fs: Ignoring removed nobh option [ 118.685111][ T7197] EXT4-fs (loop0): Test dummy encryption mode enabled [ 118.752738][ T7197] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.888106][ T7197] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.112770][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.794017][ T7211] loop4: detected capacity change from 0 to 32768 [ 119.824593][ T7211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.381 (7211) [ 119.869198][ T7211] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.889914][ T7211] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 119.910766][ T7211] BTRFS info (device loop4): force clearing of disk cache [ 119.931024][ T7211] BTRFS info (device loop4): setting nodatacow, compression disabled [ 119.947456][ T7210] loop5: detected capacity change from 0 to 32768 [ 119.955062][ T7211] BTRFS info (device loop4): turning off barriers [ 119.962096][ T7211] BTRFS info (device loop4): enabling auto defrag [ 119.984646][ T7210] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.380 (7210) [ 119.991006][ T7211] BTRFS info (device loop4): turning on sync discard [ 120.050432][ T7211] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 120.070914][ T7210] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 120.093631][ T7211] BTRFS info (device loop4): trying to use backup root at mount time [ 120.107590][ T7210] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 120.124740][ T7211] BTRFS info (device loop4): enabling ssd optimizations [ 120.144717][ T7211] BTRFS info (device loop4): using spread ssd allocation scheme [ 120.152705][ T7210] BTRFS info (device loop5): using free space tree [ 120.162935][ T7211] BTRFS info (device loop4): using free space tree [ 120.251210][ T1316] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 120.365287][ T7211] BTRFS warning (device loop4): couldn't read tree root [ 120.372907][ T7211] BTRFS warning (device loop4): try to load backup roots slot 1 [ 120.404074][ T7210] BTRFS info (device loop5): enabling ssd optimizations [ 120.429447][ T7210] BTRFS info (device loop5): auto enabling async discard [ 120.431608][ T1316] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 120.440222][ T7218] loop0: detected capacity change from 0 to 32768 [ 120.471409][ T7252] loop2: detected capacity change from 0 to 128 [ 120.506743][ T7211] BTRFS warning (device loop4): couldn't read tree root [ 120.532645][ T7211] BTRFS warning (device loop4): try to load backup roots slot 2 [ 120.592908][ T3484] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 120.655078][ T7211] BTRFS warning (device loop4): couldn't read tree root [ 120.682266][ T7211] BTRFS warning (device loop4): try to load backup roots slot 3 [ 120.844713][ T7211] BTRFS info (device loop4): rebuilding free space tree [ 120.857794][ T6538] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 120.971716][ T7211] BTRFS info (device loop4): checking UUID tree [ 121.455081][ T6409] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.239795][ T7294] netlink: 'syz.4.390': attribute type 10 has an invalid length. [ 122.272253][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.281599][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.430702][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.437995][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.447347][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.454620][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.575267][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.582582][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.997142][ T7322] loop5: detected capacity change from 0 to 128 [ 123.036920][ T7322] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.128986][ T7322] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.268573][ T7295] loop2: detected capacity change from 0 to 32768 [ 123.299407][ T7295] XFS: noikeep mount option is deprecated. [ 123.392070][ T7295] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.537744][ T7346] loop5: detected capacity change from 0 to 22 [ 123.551002][ T7346] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 123.564956][ T7346] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 123.667720][ T7351] Bluetooth: MGMT ver 1.22 [ 123.811084][ T7295] XFS (loop2): Ending clean mount [ 123.862336][ T7295] XFS (loop2): Quotacheck needed: Please wait. [ 123.969241][ T7358] loop0: detected capacity change from 0 to 1024 [ 123.984455][ T7295] XFS (loop2): Quotacheck: Done. [ 123.986613][ T7358] hfsplus: unable to parse mount options [ 124.030175][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.266814][ T7367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'. [ 124.354535][ T7367] netlink: 3 bytes leftover after parsing attributes in process `syz.0.420'. [ 124.909750][ T27] audit: type=1326 audit(1754337640.577:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0c98eb69 code=0x7ffc0000 [ 124.982409][ T27] audit: type=1326 audit(1754337640.607:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0c98eb69 code=0x7ffc0000 [ 125.052369][ T27] audit: type=1326 audit(1754337640.607:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5d0c98eb69 code=0x7ffc0000 [ 125.081249][ T27] audit: type=1326 audit(1754337640.607:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0c98eb69 code=0x7ffc0000 [ 125.104440][ T27] audit: type=1326 audit(1754337640.607:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0c98eb69 code=0x7ffc0000 [ 125.161125][ T27] audit: type=1326 audit(1754337640.607:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5d0c98eb69 code=0x7ffc0000 [ 125.225319][ T27] audit: type=1326 audit(1754337640.627:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d0c92ad69 code=0x7ffc0000 [ 125.291248][ T7402] netlink: 104 bytes leftover after parsing attributes in process `syz.0.430'. [ 125.325187][ T27] audit: type=1326 audit(1754337640.627:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d0c92ad69 code=0x7ffc0000 [ 125.389162][ T27] audit: type=1326 audit(1754337640.627:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d0c92ad69 code=0x7ffc0000 [ 125.427177][ T50] Bluetooth: hci1: command 0x0401 tx timeout [ 125.474584][ T27] audit: type=1326 audit(1754337640.627:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7393 comm="syz.2.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5d0c92ad69 code=0x7ffc0000 [ 125.616718][ T7410] loop0: detected capacity change from 0 to 128 [ 125.674411][ T28] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 125.874416][ T28] usb 6-1: Using ep0 maxpacket: 32 [ 125.890070][ T28] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 125.900854][ T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.914347][ T28] usb 6-1: Product: syz [ 125.918547][ T28] usb 6-1: Manufacturer: syz [ 125.933789][ T28] usb 6-1: SerialNumber: syz [ 125.940945][ T28] usb 6-1: config 0 descriptor?? [ 125.955457][ T28] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 126.124429][ T5795] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.315195][ T5795] usb 1-1: Using ep0 maxpacket: 8 [ 126.327994][ T5795] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 126.349478][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.374409][ T5795] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.404588][ T5795] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.442822][ T5795] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.463999][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.698582][ T5795] usb 1-1: GET_CAPABILITIES returned 0 [ 126.714439][ T5795] usbtmc 1-1:16.0: can't read capabilities [ 126.766140][ T28] gspca_ov534_9: reg_w failed -71 [ 126.924962][ T7414] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 126.949337][ T5864] usb 1-1: USB disconnect, device number 7 [ 126.967134][ T7422] loop4: detected capacity change from 0 to 8192 [ 127.194574][ T28] gspca_ov534_9: Unknown sensor 0000 [ 127.194682][ T28] ov534_9: probe of 6-1:0.0 failed with error -22 [ 127.226186][ T28] usb 6-1: USB disconnect, device number 4 [ 127.414142][ T7430] loop2: detected capacity change from 0 to 2048 [ 127.444657][ T7430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18881, location=18881 [ 127.894731][ T7446] loop2: detected capacity change from 0 to 2048 [ 127.969809][ T7446] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 128.029427][ T7446] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 128.044369][ T7446] UDF-fs: Scanning with blocksize 512 failed [ 128.077019][ T7434] loop5: detected capacity change from 0 to 32768 [ 128.089695][ T7434] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.444 (7434) [ 128.128945][ T7446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.139173][ T7434] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.174715][ T7434] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 128.213557][ T7434] BTRFS info (device loop5): enabling ssd optimizations [ 128.251395][ T7434] BTRFS info (device loop5): force clearing of disk cache [ 128.273061][ T7434] BTRFS info (device loop5): turning off barriers [ 128.290398][ T7434] BTRFS info (device loop5): using spread ssd allocation scheme [ 128.300188][ T7434] BTRFS info (device loop5): force zlib compression, level 3 [ 128.324449][ T7434] BTRFS info (device loop5): using free space tree [ 128.502357][ T7434] BTRFS info (device loop5): rebuilding free space tree [ 128.685428][ T6538] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.832906][ T6230] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop5 scanned by udevd (6230) [ 129.324730][ T7495] nbd0: detected capacity change from 0 to 127 [ 129.359517][ T50] block nbd0: Receive control failed (result -104) [ 129.439615][ T7500] loop2: detected capacity change from 0 to 512 [ 129.476262][ T5795] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 129.544598][ T7500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.594258][ T7500] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.705374][ T5795] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.720632][ T5795] usb 6-1: config 6 has an invalid interface number: 158 but max is 0 [ 129.739497][ T5795] usb 6-1: config 6 has no interface number 0 [ 129.759807][ T5795] usb 6-1: config 6 interface 158 has no altsetting 0 [ 129.773415][ T5795] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 129.788522][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.825761][ T5795] usb 6-1: Product: syz [ 129.832742][ T5795] usb 6-1: Manufacturer: syz [ 129.841820][ T5795] usb 6-1: SerialNumber: syz [ 129.924433][ T787] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.114651][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 130.132663][ T787] usb 3-1: config 1 has an invalid interface number: 92 but max is 2 [ 130.155033][ T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.194698][ T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.206862][ T787] usb 3-1: config 1 has no interface number 0 [ 130.213039][ T787] usb 3-1: too many endpoints for config 1 interface 92 altsetting 1: 85, using maximum allowed: 30 [ 130.225787][ T787] usb 3-1: config 1 interface 92 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 130.239379][ T787] usb 3-1: config 1 interface 92 has no altsetting 0 [ 130.249884][ T787] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.264366][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.282598][ T787] usb 3-1: Product: syz [ 130.287196][ T787] usb 3-1: Manufacturer: syz [ 130.291816][ T787] usb 3-1: SerialNumber: syz [ 130.591387][ T787] usb 3-1: USB disconnect, device number 8 [ 130.870403][ T7523] loop4: detected capacity change from 0 to 8192 [ 130.987863][ T5795] rtsx_usb: probe of 6-1:6.158 failed with error -110 [ 131.020497][ T5795] usb 6-1: USB disconnect, device number 5 [ 131.168060][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.379574][ T27] kauditd_printk_skb: 2182 callbacks suppressed [ 132.379588][ T27] audit: type=1326 audit(1754337648.047:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.493225][ T7567] loop0: detected capacity change from 0 to 128 [ 132.501613][ T27] audit: type=1326 audit(1754337648.077:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.544125][ T27] audit: type=1326 audit(1754337648.087:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.593394][ T7567] syz.0.497: attempt to access beyond end of device [ 132.593394][ T7567] loop0: rw=0, sector=2065, nr_sectors = 6 limit=128 [ 132.609075][ T27] audit: type=1326 audit(1754337648.087:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.705086][ T27] audit: type=1326 audit(1754337648.087:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.732876][ T27] audit: type=1326 audit(1754337648.087:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.815410][ T27] audit: type=1326 audit(1754337648.087:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.898198][ T27] audit: type=1326 audit(1754337648.087:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.926619][ T27] audit: type=1326 audit(1754337648.097:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 132.953484][ T27] audit: type=1326 audit(1754337648.097:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc371b8eb69 code=0x7ffc0000 [ 133.028960][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045037][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.317275][ T7594] loop0: detected capacity change from 0 to 47 [ 133.371878][ T7595] loop5: detected capacity change from 0 to 2048 [ 133.409192][ T7595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.824566][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.034437][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 134.043080][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.054664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.074978][ T9] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 134.094463][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.116891][ T9] usb 1-1: config 0 descriptor?? [ 134.130237][ T7599] loop5: detected capacity change from 0 to 32768 [ 134.167646][ T7599] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.510 (7599) [ 134.208986][ T7609] loop2: detected capacity change from 0 to 1024 [ 134.249488][ T7599] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.272264][ T7609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.293662][ T7599] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 134.318708][ T7599] BTRFS info (device loop5): turning off barriers [ 134.325991][ T7599] BTRFS info (device loop5): setting nodatasum [ 134.332258][ T7599] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.346916][ T7599] BTRFS info (device loop5): use zstd compression, level 3 [ 134.354165][ T7599] BTRFS info (device loop5): using free space tree [ 134.465548][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.557674][ T9] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 134.590017][ T9] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 134.605073][ T9] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 134.623238][ T9] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 134.642156][ T9] holtek 0003:1241:5015.0004: unknown main item tag 0x0 [ 134.664204][ T6538] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 134.672597][ T9] holtek 0003:1241:5015.0004: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 134.714697][ T9] holtek 0003:1241:5015.0004: no inputs found [ 134.766848][ T9] usb 1-1: USB disconnect, device number 8 [ 134.861094][ T7631] fido_id[7631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 134.979597][ T5795] kernel write not supported for file /sg0 (pid: 5795 comm: kworker/1:3) [ 135.349632][ T7638] loop2: detected capacity change from 0 to 8192 [ 135.393847][ T7638] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.444420][ T7638] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 135.465328][ T7638] REISERFS (device loop2): using ordered data mode [ 135.472571][ T7638] reiserfs: using flush barriers [ 135.519849][ T7638] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.568857][ T7638] REISERFS (device loop2): checking transaction log (loop2) [ 135.611441][ T7638] REISERFS (device loop2): Using r5 hash to sort names [ 135.624438][ T5865] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 135.663301][ T7638] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 135.817228][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.838922][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.854447][ T5865] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 135.873780][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.896752][ T5865] usb 6-1: config 0 descriptor?? [ 136.064527][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.113502][ T7652] loop2: detected capacity change from 0 to 1024 [ 136.220926][ T7654] @: renamed from vlan0 (while UP) [ 136.294495][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 136.305825][ T28] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 136.315449][ T28] usb 1-1: config 1 has no interface number 0 [ 136.323550][ T28] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 136.333971][ T5865] apple 0003:05AC:0262.0005: unbalanced delimiter at end of report description [ 136.343435][ T28] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.354357][ T5865] apple 0003:05AC:0262.0005: parse failed [ 136.360194][ T5865] apple: probe of 0003:05AC:0262.0005 failed with error -22 [ 136.372921][ T28] usb 1-1: config 1 interface 105 has no altsetting 0 [ 136.385768][ T28] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 136.395223][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.403251][ T28] usb 1-1: Product: syz [ 136.407573][ T28] usb 1-1: Manufacturer: syz [ 136.412184][ T28] usb 1-1: SerialNumber: syz [ 136.420790][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.428625][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.546045][ T5865] usb 6-1: USB disconnect, device number 6 [ 136.608975][ T7661] loop2: detected capacity change from 0 to 512 [ 136.652073][ T7661] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.530: corrupted in-inode xattr: e_value size too large [ 136.682020][ T7661] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.530: couldn't read orphan inode 15 (err -117) [ 136.716874][ T7661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.848288][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.860080][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 136.873136][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.060298][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 137.289047][ T28] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 137.307669][ T7678] loop5: detected capacity change from 0 to 4096 [ 137.314999][ T28] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 137.354825][ T28] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 137.440773][ T28] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:42:dc:99:cd:0f [ 137.500688][ T7684] loop4: detected capacity change from 0 to 1024 [ 137.513581][ T28] usb 1-1: USB disconnect, device number 9 [ 137.532635][ T7684] EXT4-fs: Ignoring removed orlov option [ 137.543468][ T28] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 137.581961][ T7684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.658198][ T7684] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.4.540: corrupted in-inode xattr: bad e_name length [ 137.676318][ T28] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 137.696618][ T28] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 137.723024][ T28] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 137.739555][ T7691] EXT4-fs error (device loop4): ext4_xattr_ibody_get:653: inode #2: comm syz.4.540: corrupted in-inode xattr: bad e_name length [ 137.888024][ T6409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.259100][ T7708] loop4: detected capacity change from 0 to 2048 [ 138.344521][ T7708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.690543][ T7724] loop5: detected capacity change from 0 to 1024 [ 138.711557][ T6409] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.026098][ T7733] loop0: detected capacity change from 0 to 16 [ 139.098203][ T7733] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.161330][ T7733] erofs: (device loop0): erofs_read_inode: unsupported i_format 36 of nid 37 [ 139.769774][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 139.769789][ T27] audit: type=1800 audit(1754337655.427:2221): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.568" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 140.034439][ T5865] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.042807][ T7736] loop2: detected capacity change from 0 to 40427 [ 140.073862][ T7736] F2FS-fs (loop2): invalid crc value [ 140.107462][ T7736] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.242258][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 140.253328][ T5865] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.255930][ T7736] F2FS-fs (loop2): Start checkpoint disabled! [ 140.287782][ T5865] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 140.300646][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.324426][ T5865] usb 1-1: Product: syz [ 140.325689][ T7736] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 140.334704][ T5865] usb 1-1: Manufacturer: syz [ 140.355180][ T5865] usb 1-1: SerialNumber: syz [ 140.372898][ T5865] usb 1-1: config 0 descriptor?? [ 140.406458][ T5865] usb 1-1: bad CDC descriptors [ 140.411782][ T5865] usb 1-1: unsupported MDLM descriptors [ 140.474508][ T7746] loop4: detected capacity change from 0 to 40427 [ 140.493209][ T7746] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 140.505422][ T7746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.537069][ T7746] F2FS-fs (loop4): invalid crc value [ 140.544192][ T3484] kworker/u4:10: attempt to access beyond end of device [ 140.544192][ T3484] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 140.566957][ T7746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.586501][ T3484] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.593989][ T3484] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.611470][ T28] usb 1-1: USB disconnect, device number 10 [ 140.620715][ T3484] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.697944][ T7746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.715504][ T7746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 141.330075][ T7780] xt_recent: Unsupported userspace flags (000000de) [ 141.704451][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.892499][ T7800] loop4: detected capacity change from 0 to 65 [ 141.914734][ T28] usb 3-1: config 0 interface 0 altsetting 236 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 141.924544][ T7800] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 141.962438][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.995285][ T28] usb 3-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 142.023835][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.036183][ T28] usb 3-1: Product: syz [ 142.040398][ T28] usb 3-1: Manufacturer: syz [ 142.056284][ T28] usb 3-1: SerialNumber: syz [ 142.077570][ T28] r8152-cfgselector 3-1: config 0 descriptor?? [ 142.102021][ T28] r8152 3-1:0.0: Expected endpoints are not found [ 142.252459][ T7802] loop4: detected capacity change from 0 to 128 [ 142.293744][ T7802] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.336731][ T28] r8152-cfgselector 3-1: Unknown version 0x0000 [ 142.347375][ T7802] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.354748][ T28] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 142.497562][ T6409] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.982054][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 143.001528][ T7828] bridge: RTM_NEWNEIGH with invalid ether address [ 143.127769][ T7830] loop2: detected capacity change from 0 to 128 [ 143.182951][ T7830] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.234456][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 143.260667][ T7830] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.334686][ T7820] loop5: detected capacity change from 0 to 32768 [ 143.380257][ T7820] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 143.414562][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 143.433167][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.452938][ T7820] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 143.467175][ T5794] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.472384][ T9] usb 1-1: config 0 has no interface number 0 [ 143.503990][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 143.521553][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.568290][ T9] usb 1-1: Product: syz [ 143.580261][ T9] usb 1-1: Manufacturer: syz [ 143.592538][ T9] usb 1-1: SerialNumber: syz [ 143.612072][ T7837] netlink: 'syz.2.600': attribute type 11 has an invalid length. [ 143.613248][ T9] usb 1-1: config 0 descriptor?? [ 143.643423][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 143.661223][ T27] audit: type=1800 audit(1754337659.327:2222): pid=7835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.594" name="file1" dev="loop5" ino=17059 res=0 errno=0 [ 143.692922][ T7820] syz.5.594 (7820) used greatest stack depth: 18224 bytes left [ 143.776410][ T6538] ocfs2: Unmounting device (7,5) on (node local) [ 144.079244][ T7845] loop5: detected capacity change from 0 to 1024 [ 144.105553][ T7845] EXT4-fs: Ignoring removed nobh option [ 144.111168][ T7845] EXT4-fs: Ignoring removed bh option [ 144.126868][ T7846] loop4: detected capacity change from 0 to 2048 [ 144.141464][ T7845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.146681][ T7846] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 144.190580][ T7845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.259931][ T7846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.448103][ T6538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.459873][ T9] gspca_spca1528: reg_w err -71 [ 144.504465][ T9] spca1528: probe of 1-1:0.1 failed with error -71 [ 144.547551][ T9] usb 1-1: USB disconnect, device number 11 [ 144.803118][ T7863] tipc: Started in network mode [ 144.809621][ T7863] tipc: Node identity 2d6806f2b032df77002e0000004, cluster identity 4711 [ 145.058315][ T7854] loop2: detected capacity change from 0 to 32768 [ 145.094642][ T7854] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 145.335296][ T7854] XFS (loop2): Ending clean mount [ 145.395818][ T27] audit: type=1800 audit(1754337661.067:2223): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.607" name="file2" dev="loop2" ino=9287 res=0 errno=0 [ 145.564006][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 146.095329][ T7882] loop4: detected capacity change from 0 to 32768 [ 146.113711][ T7882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.614 (7882) [ 146.160980][ T7882] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.203410][ T7882] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 146.233704][ T7882] BTRFS info (device loop4): setting nodatacow, compression disabled [ 146.280370][ T7882] BTRFS info (device loop4): max_inline at 0 [ 146.302356][ T7882] BTRFS info (device loop4): enabling disk space caching [ 146.323512][ T7882] BTRFS info (device loop4): turning off barriers [ 146.364420][ T7882] BTRFS info (device loop4): turning on flush-on-commit [ 146.371437][ T7882] BTRFS info (device loop4): doing ref verification [ 146.423584][ T7882] BTRFS info (device loop4): force clearing of disk cache [ 146.437836][ T7901] loop5: detected capacity change from 0 to 8192 [ 146.455304][ T7882] BTRFS info (device loop4): enabling ssd optimizations [ 146.462444][ T7882] BTRFS info (device loop4): max_inline at 4096 [ 146.508704][ T7901] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.524429][ T7882] BTRFS info (device loop4): disk space caching is enabled [ 146.527755][ T7901] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 146.542556][ T7901] REISERFS (device loop5): using ordered data mode [ 146.595213][ T7901] reiserfs: using flush barriers [ 146.664972][ T7882] BTRFS info (device loop4): auto enabling async discard [ 146.673642][ T7901] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.692910][ T7901] REISERFS (device loop5): checking transaction log (loop5) [ 146.696738][ T7882] BTRFS info (device loop4): rebuilding free space tree [ 146.874602][ T7882] BTRFS info (device loop4): disabling free space tree [ 146.882742][ T7882] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.954460][ T7882] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.010960][ T7901] REISERFS (device loop5): Using tea hash to sort names [ 147.059271][ T7901] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 147.243691][ T7934] loop2: detected capacity change from 0 to 512 [ 147.270380][ T7934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.297892][ T6409] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.337447][ T7934] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 147.410572][ T7934] EXT4-fs (loop2): 1 truncate cleaned up [ 147.440983][ T7934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.717595][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.391122][ T7961] kvm: kvm [7960]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 149.024851][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.220253][ T786] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.223900][ T7982] sp0: Synchronizing with TNC [ 149.234394][ T786] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 149.254897][ T786] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.284086][ T786] usb 5-1: config 220 has no interface number 2 [ 149.295399][ T786] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.309313][ T786] usb 5-1: config 220 interface 0 has no altsetting 0 [ 149.316449][ T786] usb 5-1: config 220 interface 76 has no altsetting 0 [ 149.323499][ T786] usb 5-1: config 220 interface 1 has no altsetting 0 [ 149.335829][ T786] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.345708][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.375086][ T786] usb 5-1: Product: syz [ 149.381598][ T786] usb 5-1: Manufacturer: syz [ 149.404339][ T786] usb 5-1: SerialNumber: syz [ 149.589819][ T7995] mkiss: ax0: crc mode is auto. [ 149.643083][ T786] usb 5-1: selecting invalid altsetting 0 [ 149.685872][ T786] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 149.692594][ T786] usb 5-1: No valid video chain found. [ 149.751311][ T786] usb 5-1: selecting invalid altsetting 0 [ 149.768254][ T786] usbtest: probe of 5-1:220.1 failed with error -22 [ 149.804896][ T786] usb 5-1: USB disconnect, device number 3 [ 150.024882][ T787] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.216512][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.261415][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.292090][ T787] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 150.310872][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.335083][ T787] usb 1-1: config 0 descriptor?? [ 150.751059][ T787] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 150.764090][ T8026] loop2: detected capacity change from 0 to 128 [ 150.778066][ T787] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 150.807925][ T787] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 150.829501][ T787] cm6533_jd 0003:0D8C:0022.0006: item fetching failed at offset 4/5 [ 150.875335][ T787] cm6533_jd 0003:0D8C:0022.0006: parse failed [ 150.882728][ T787] cm6533_jd: probe of 0003:0D8C:0022.0006 failed with error -22 [ 150.964095][ T8028] warning: `syz.4.667' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.982511][ T787] usb 1-1: USB disconnect, device number 12 [ 151.349268][ T8022] loop5: detected capacity change from 0 to 32768 [ 151.397227][ T8022] find_entry called with index = 0 [ 151.403672][ T8022] read_mapping_page failed! [ 151.425023][ T8022] ERROR: (device loop5): txCommit: [ 151.425023][ T8022] [ 151.436185][ T8022] ERROR: (device loop5): diFree: numfree > numinos [ 151.436185][ T8022] [ 151.560905][ T110] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 151.570080][ T110] ------------[ cut here ]------------ [ 151.575728][ T110] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 151.614786][ T110] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 151.620922][ T110] CPU: 1 PID: 110 Comm: jfsCommit Not tainted 6.6.101-syzkaller #0 [ 151.628823][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.638887][ T110] RIP: 0010:txUnlock+0xc87/0xcb0 [ 151.643810][ T110] Code: 8f f9 60 07 0f 0b e8 d8 c3 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba a3 03 00 00 48 c7 c1 20 19 e4 8a e8 69 f9 60 07 <0f> 0b e8 b2 c3 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba [ 151.663417][ T110] RSP: 0018:ffffc900024cfd08 EFLAGS: 00010246 [ 151.669498][ T110] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 1882510a7bfc1300 [ 151.677481][ T110] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 151.685454][ T110] RBP: ffffc9000282a240 R08: ffffc900024cfa07 R09: 1ffff92000499f40 [ 151.693418][ T110] R10: dffffc0000000000 R11: fffff52000499f41 R12: ffff888077f07ba0 [ 151.701383][ T110] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802dabf494 [ 151.709346][ T110] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 151.718270][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.724855][ T110] CR2: 00007fc371d84198 CR3: 0000000018ec6000 CR4: 00000000003506e0 [ 151.732828][ T110] Call Trace: [ 151.736101][ T110] [ 151.739025][ T110] ? lockdep_hardirqs_on+0x98/0x150 [ 151.744222][ T110] jfs_lazycommit+0x570/0xa60 [ 151.748986][ T110] ? txFreelock+0x5a0/0x5a0 [ 151.753476][ T110] ? do_task_dead+0xd0/0xd0 [ 151.757964][ T110] ? __kthread_parkme+0x7a/0x1c0 [ 151.762898][ T110] kthread+0x2fa/0x390 [ 151.766950][ T110] ? txFreelock+0x5a0/0x5a0 [ 151.771437][ T110] ? kthread_blkcg+0xd0/0xd0 [ 151.776008][ T110] ret_from_fork+0x48/0x80 [ 151.780410][ T110] ? kthread_blkcg+0xd0/0xd0 [ 151.784984][ T110] ret_from_fork_asm+0x11/0x20 [ 151.789742][ T110] [ 151.792754][ T110] Modules linked in: [ 151.817303][ T3484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.833489][ T110] ---[ end trace 0000000000000000 ]--- [ 151.841031][ T110] RIP: 0010:txUnlock+0xc87/0xcb0 [ 151.842033][ T8032] loop4: detected capacity change from 0 to 32768 [ 151.846538][ T110] Code: 8f f9 60 07 0f 0b e8 d8 c3 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba a3 03 00 00 48 c7 c1 20 19 e4 8a e8 69 f9 60 07 <0f> 0b e8 b2 c3 84 fe 48 c7 c7 40 0c e4 8a 48 c7 c6 39 08 e4 8a ba [ 151.901565][ T111] blkno = 8ed2c, nblocks = 1 [ 151.907536][ T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 151.907536][ T111] [ 151.912308][ T3484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.918579][ T110] RSP: 0018:ffffc900024cfd08 EFLAGS: 00010246 [ 151.935553][ T111] ERROR: (device loop4): remounting filesystem as read-only [ 151.942884][ T111] JFS: metapage_get_blocks failed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 151.950786][ T111] ERROR: (device loop4): release_metapage: metapage_write_one() failed [ 151.950786][ T111] [ 152.014473][ T110] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 1882510a7bfc1300 [ 152.022496][ T110] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 152.036717][ T111] blkno = 8ed2c, nblocks = 1 [ 152.041360][ T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 152.041360][ T111] [ 152.046011][ T110] RBP: ffffc9000282a240 R08: ffffc900024cfa07 R09: 1ffff92000499f40 [ 152.084373][ T110] R10: dffffc0000000000 R11: fffff52000499f41 R12: ffff888077f07ba0 [ 152.108620][ T3484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.114579][ T110] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802dabf494 [ 152.156994][ T110] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 152.181153][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.215992][ T110] CR2: 00007f4e96b49000 CR3: 000000007d78d000 CR4: 00000000003506f0 [ 152.224038][ T110] Kernel panic - not syncing: Fatal exception [ 152.230324][ T110] Kernel Offset: disabled [ 152.234634][ T110] Rebooting in 86400 seconds..